last executing test programs: 1m49.732749531s ago: executing program 4 (id=93): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m49.535689502s ago: executing program 4 (id=98): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0xc862, 0x60}) 1m49.151564605s ago: executing program 4 (id=103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 1m48.912835746s ago: executing program 4 (id=104): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m48.06934869s ago: executing program 4 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c"], 0x44}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="ea0e04"], 0x78) 1m46.544273488s ago: executing program 4 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000800)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x8000) 1m46.15663947s ago: executing program 32 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000800)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x8000) 1m19.981021749s ago: executing program 5 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f5}]}) 1m19.59070043s ago: executing program 5 (id=292): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1}, &(0x7f00000001c0)=0x8) 1m19.354325092s ago: executing program 5 (id=295): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 1m18.972803533s ago: executing program 5 (id=297): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file1\x00', 0x2800802, &(0x7f0000000480)=ANY=[], 0x1, 0xf58, &(0x7f0000005580)="$eJzs3U9sHFcZAPA36/+xG6/bQtOWxqGlpA3gpE4O5ZZKEUhVVfXCvVWatBFuCaQcWjVKyimVOBRV5VDEoai9IYUDEq2QUIWExJ8euMIBVXABoSBFioRIlRjZfm+9fvFk12N7du39/aTPb2fe7HzfeB1n3nj2bQAGVmP567Fj+4oQ3vno7RPfvHDzV0vrZltbHFj+WsSlZghhpG25yPb3aVxx4+rrJ5fam1kbwvzSs4ZTf3j6Suu5kyGEi+FA+Dg0w+yh5rVLQ0+d/uDdTw6eP/vki9ty8AAAMGAu/3Hhr4/+8w9fnbl+ef/xMNZan87Pm3F5Mp73HynC9cUVy+sbsb99PFCsMy4YzbYbitHIthvKthuObSNbzvONZPsZKdlutEO+obZ17evzOgEAAGAnSePaZigac2uWG425uZVx/5JPp0eLuZfPLJw+16NCAQAAgMquXVi+6VbsiBjvgxo2FZ8t3zfS+zqEaIt431PP6xBCCCGEEP0Vs2O9r2FrY3G611cgAAAAgEGT5h1ozQ+Wu5jPLLA5rb01u8t/5YnG+s+HLdDp52+7f97q/vcn/8byv/+G3zgAAFS3W88m03Gl8+jJNyeWl/N5BIey5230/L+R7Wd4g3WWzSu4U+YbLKsz/772q7L6N/o69kpZ/fl8mP2qrP58ns5+VVb/WM11VFVW//gO+R1UVuNEzXVUVVb/nprrqKqs/sma66iqrP6pmuuoqqz+O2quo6qy+vfWXEdVZfXvlNtqy+pv1lxHVWX1z9RcR1Vl9d9Zcx1VldV/V811VFVW/90119ErD8Q2fR/2Z/2t8fM6Y7qdMsYDAACAQfc/8/+JLYzZPqhBCLHpGOqDGoQQQggh6opGH9RQS1zo9QUIAAAAoOfS+wLSu94Xo9Q/1Oq/vrhe/3CH54/ctn+o9T7gsuePdei/1X87bgEAAAC7za8vnb73rWL1ff6bnQ9vPLZp/qWNzmOUz0e40fybnfdss/l3yrxlAAAADJbiGx/fPHTivVdmrl/ef7xt9HszjnfTPKDD8drAh3E53RcwlS0XaQx9fG2eRsl2+fWBO8r298wmDxQAAAAGWBq/N0PRmGsbdzdDozE3tzoe3xdGitNnFk4dicvp81l+Pz0eQlg49VjNdQMAAADdWx3vFxNhnfF/+hzffWG0mHv5zMLpcyvLU631I4326wLTq+uXrxc81trf2vXzJeuPxuX0+Z0vTk8sr587+Z2F57f42AEAAGBQnHv1tW8/t7Bw6nseeFDy4MKGnnUghM/iFIv9ULwHFR/0+jcTAACw1T74x9t/+v7Rqd+svP9/df679P7/A3G5Gef2+3PcIN0nkN4HcMv79Z9dm2e6bLuza7drZtsNxRjL6h5v20/7pHvpeTNl+Zpr9zNakm8yyzfVnm+deQqGs+1Tvr3Z+nx+wrTddLY+n4dxOMtRZPkfzLb/cQAAAIBVh1956ezhc6++9rUzLz33wqkXTr189Mj81+cfn58/Nn94+b7+w+139wMAAAA70epNv72uBAAAAAAAAAAAAAAAAAAAAAZXHR8n1utjBAAAgEH3nwshhItCCCGEEEKIeiJ+AvUW7rPo+TEJMQjxty3/t1t3LC7mnzQPAAAAsL1uXH39ZHt7i4vFluZr7a250tyMeVP7u4d/+vBSpM2uPLH2esmeLa2GQVf3z//t8w/3OP86Bjz/+29sbf7x9KDr33+NtTs4Xi3vl3/0r0fa89833GX+/PifqZb/YJb/YOgu/+J7Wf5nq+V/JMu/p8v8txz/2Wr5H43596V6Huo2/9rXfyy26Tgmusx/KDv+50O3+bPjb3aZMPOVmB8ABlGj1wVsk3SWkM6jJ+NyOt40ssnvftjo+X8j2886I6ZK0n7TedA9cTmdL01leZON1j/Z2t/KmdsdFevM7ZS7Ssrq36rXcbuV1T9Scx1VldU/WnMdVZXVP1ZzHVWV1T9ecx1VldXf7Ti018rq3ynXlcvqn6y5jqrK6p+quY6qyurf6P/jvVJW/96a66iqrP7p2zynn/5vK6u/4mW12pXVP1NzHVWV1X9n2BknEWX131VzHVWV1X93zXX0yv2xLRsPp/HndOxLy81seWyd72Xb8mK0bccBAAAAlPu3+f+E6J8Y6YMaxMaj0Qc1iF0bE31Qw06IpabXNQxqfPcvva+h5ihWHvS8DiG2NxYXe1+D2PLwJ/nBtr3vZgagX/n9P9i8/oPN6z/YvP7cTrqHv8iWk6EO/cMd+kc69I9m/fnP61iH/ruy/eZvRLi7Q//nOvTv7dB/T4f+fR367+3Qf1+H/vs79AMAADAYPh9b40MAAADYvc7//MMf/vLgs1dnrl/efzyM3jLv/JG4PBb/tn4pLufz3icj8W/+P4jLP4vtb2P792x7958AAADA9kufE+Pv/wAAALB7pc8pNf4HAACA3Wsmtsb/AAAAsHvdGVvjfwAAANjFivH1V8c2XRd4MLbdzusHAPS/L8T2gdjuj+1sbL8Y23Qe8FBsv1RTfQDA1vnJt958/K1idb7/o1n/jbg+tbe4uHKloGisncl/IrZ7Yvtwl/XknwfQbf5kb5d5tiv/9CbzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7R2P567Fj+4oQ3vno7RPT50+8sLRutrXFgeWvRVxqhhBGWs9LvavLv4gb3rj6+sml9mZsF2NbhPlQhKLVH56+0so0GUK4GA6Ej0MzzB5qXrs09NTpD9795OD5s0++uI3fAgAAANj1/h8AAP//9pZLFA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 1m18.535447156s ago: executing program 5 (id=300): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000001c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) 1m17.512370141s ago: executing program 5 (id=309): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000680)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000900)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 1m17.241958453s ago: executing program 33 (id=309): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000680)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000900)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 54.727987371s ago: executing program 0 (id=472): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000240)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x10}}], 0x10, 0x5}, 0x0) 54.522557082s ago: executing program 0 (id=475): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x8fa3, 0x9, 0xe, 0xbd, 0x8404, 0xc00}) 52.757575592s ago: executing program 0 (id=490): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x199, &(0x7f0000000380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0x4655, 0x0) getdents(r0, 0x0, 0x58) 52.388543394s ago: executing program 0 (id=494): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file1\x00', 0x2800802, &(0x7f0000000480)=ANY=[], 0x1, 0xf58, &(0x7f0000005580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 51.628941668s ago: executing program 0 (id=500): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x400, &(0x7f00000000c0)={[{@flushoncommit}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") rename(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000040)='./bus\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x11, 0x8, 0xfffd) 50.371403564s ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 49.968492927s ago: executing program 34 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 7.926016618s ago: executing program 2 (id=821): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) 5.969009749s ago: executing program 2 (id=835): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r0, r2, 0x0, 0x0, 0x0}, 0x30) 5.874519799s ago: executing program 1 (id=836): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0xffffff39) 5.63773648s ago: executing program 2 (id=838): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.481142861s ago: executing program 1 (id=839): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x100) 5.317038203s ago: executing program 1 (id=842): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 4.492327947s ago: executing program 1 (id=844): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000200)={[{@fmask={'fmask', 0x3d, 0x9}}, {@discard}, {@gid={'gid', 0x3d, r2}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@dmask={'dmask', 0x3d, 0x4000000b}}, {@dmask={'dmask', 0x3d, 0x8}}, {@dmask={'dmask', 0x3d, 0x4}}, {@uid={'uid', 0x3d, r1}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@discard}]}, 0x3, 0x1511, &(0x7f0000000580)="$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") utime(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)) 4.484884997s ago: executing program 6 (id=853): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 3.993148829s ago: executing program 1 (id=847): munlockall() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.438330552s ago: executing program 2 (id=849): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r0, 0x7, 0x0) getdents(r0, 0x0, 0x22) 3.025982894s ago: executing program 6 (id=851): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)={0x5, 0x0, [{0xdddd1000, 0x43, &(0x7f0000001b80)=""/67}, {0xd000, 0x6c, &(0x7f0000000340)=""/108}, {0xeeee0000, 0xdd, &(0x7f00000003c0)=""/221}, {0xd000, 0x64, &(0x7f0000001500)=""/100}, {0xd000, 0x61, &(0x7f0000001980)=""/97}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) 2.993353385s ago: executing program 2 (id=852): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) finit_module(r0, 0x0, 0x1) 2.874445575s ago: executing program 6 (id=854): syz_mount_image$ocfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x2a00403, &(0x7f00000003c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6", @ANYRES16=0x0, @ANYRESDEC=0x0], 0x8, 0x446f, &(0x7f0000004500)="$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") capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 2.367222638s ago: executing program 2 (id=855): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x40, &(0x7f0000000180)={[{@pqnoenforce}, {@noquota}, {@attr2}, {@grpquota}, {@ikeep}, {@prjquota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$eJzs3QW4ZXXBsP0zw9CNhYEMjUU3BqEggoCElBLSkgJKGIAIAqKApKAIKFIiSIl0d3d3d3d81zAzOo43PD7v+3wvPt73fV1n9t5rr73O2v/fWuuczTrsveIiyy40MDDJwPBGXv69Q1/+5NFbvrzQTsdef8RLix6++NEjJo81/GLI0BGXU424nHpgYGDQiOUMGj5t8JATTxo8MM7AwOBRlzvBuOMPmmBgYK0RNxcYcTn38IsJrxk531ujxSs6bDUG7Tr8a/g3HRgYGHfYlWcGZl5h1OWMWK9Z/umJSltxwUUX+bvV39yGjd+QEddH/Rpr+NeElw0MTHjpAG8fg97bZ/T2959k7wtWWvk9Xo//Fa244KKLjeY/bF8cY8S0uYft46Pvg8ZG386Hzn3HyGPQIDxw/i9pxQUXWWLgnY/zA6u+edDmb7193Bw83sDA4PEHBgZPMDAweMKBgcETDQwMnvi9dqn/u97Tja+qqqrekxZcaPaFhr3eG+33gXFG/l5Lvxeu8sZSdwwMDIw5fJ7Bc418LVhVVVVVVVVV/54tuNDsC8Pr/0ne7fX/Cae+OmOv/6uqqqqqqqr+97TYggvNPux1/Giv/yd/t9f/2z3w4oYj/vZ/7uGPevO9fRJVVVVVVVVV9a4t89W3X/+PP9rr/6Hv9vr/4fl3eXDEfCP/u8Eboyxy0Ch/T/DaKNPHGGX+V0eZPmSU6aPOP9bAwOAhI6a//vfJg8cbdt8/zz94kmHrPWL6K6NMn+Xv/3/zkGlHmT7rKNOnH2X6bCPWddj0GUaZPuco88/4r4xtVVVVVVVVVVVVVVVVVVXV/6vefOLUM//+nu8fHxjl/dv/9j7uI/4uYNBxZ1999Xu2ov8eDfrnv4fY7r1ep//bhjmPc9TQgYGNl3+vV6Xeg97rz2uo97b83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cO5z//9v7/09x+Foj/5/5uQ/dfcqJRn3s+qNcH+f/6Vq/Z/2nnv8fWH/QwMAI30mGuS654DLLzTgwMDDRlLsfOsfA3+6bZ9h98082xog3SBj+NgjTDeEFbzfiU9G3GzHriGUc9/byF3vrkDEGjbYSozTpyYcdtt6KL80x+uX07/w8Bo+88oFLtlp45HtZDB5tpnfaTkcuf+RzGd15xLrPOGzdZ95io01n3nzrbT6z/kZrrLv2umtvPO/cc88z59xzzTvbzOusv+Haswz/953GbOjb/07zr4zZ5KOP2RMLjjpmoz+3dxqzoe8+Zm8vcey9Vttg5JiNvmr/1ZhN8+5jNnT9Ed9oyNAxB1Z/e2wGDQwMmXbMga2G3Zh17IGBIdONmHfyYfN+drLBAwN7/P2JDrs29t+2wUHbDZtnxUWWXejvH7v/zx+//w6fZz/W8IshI4ZkyFQjLqce/m0mGfj7pjh4yIknDR723P9hmCcYd/xBEwwMrDXi5gIjLucdce+VI+d7h89ZH21F336blV2Hf/3NY9xhV45ZeuKbRl3OOxD8T/R/9PP/n7zmGfS3gRo04mvEPMO9Flx0sb9/r7eHYYGR7wkz7GfLMJP/i4+x/y/7p/UdOs7bb3L7Tuv7Lu+LO/z5w/Y1/WPnDf2fel9cPnYs8fa/Q/+VY8fAux87xvj71b9PXfuKKUY/diz+zqv4D/vFyDEae7SZ3unYMeP+C2779rHp3Y8dS6w/4oOG/n7sGDwwMGSakceOYQeS6ccc2GPYjdmG3ZhhzIEjht2Y/e0b4w6cPezGTGtusuFag95+254Ry51l2HIXmGzQ20/+6pkXPHqMvd96a9oR6zLLaAfWEdvH0FF/Pi442fBhG/lYWu7dWwy/b/oRy531v7HckY+l5c6z2fD7Zhix3NlGW+4Y77LckY8duT8Mm/Xt/WHGQf/wh5+w/y4y2v47aORhfZSHjPwaa/jXhJeN/Gwo2F/+W8cd2n8neZf1fZfPtcLtbdi0HZa84tT/qc+1ovUd593X950+h/sd13eDcbda6n9gfQeNsr7/sJ1tOt/wbWXGEdvZnP+N7XfkY0c/jo359r3DGWb8V45jC/zTcWz7MQaPtvKj9E6/A60F8w+/PvnfljbvkWNMPHLsxxxtuf/V70AzvvtxbJL1R3vcIgcPDKIxf/jxw9Yb+78Y8zEH/vF39ZFjPvKx7zbmM/zzmA/6pzGf593H/F/9vXPGaYbfP8a7jPngnTdfcuSYj/XfHPMZ/rtjvsDAGDTmexwwfNze7Xj6TmM+8rH/OOZDBr40MDAw7Ygxn/5f2c5n+Z/ZzseD+Ydff+Bvky6Z4ozdRjnGDPrvjPn0/90xH/q37Xzat++bevDAWGMNbLXGFltsNuvwf0fenG34v3wsevr+4eP8bj9L38lo5GPfbb+Y9l8xGvo/Y/SRIf88/8gXHSNvL3/2MZP+nx6Lpv3vGQ1aZICPRadcNHzc3u33onca85GPpZ+DQ0d5/Oiv697l/SjxOQ2btt/++9w+cpEjHtb7Uf7r/cNmO/K/8a0/+kG+/lPrv/+7y99d/u7yd5e/uHc4//+39/9/eJJlHxvxInnMPedbd833en3f4/6jz/+P8P2H8/9rrjvfnsNeCo64713Pzw6f59/y/Ozcwy8mvGbkfKOfH+QVfefzszPsNdMyA/9vzs/+HzVyX/0XXsd3/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe4fz/yP/RnnogW/cv92IE6Fj7rvPmm+81+v7Hvcfff5/hO8/nP9/Y8199h088Lf73vX8//B5HOf/lzpw75MG/o3P/4/cVzv/X/9F+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uHc4/7/AyL8DmGu1dXYd+fcAG8/6hR3f6/V9j/tPPf/f5/976/jvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yFzfi/P/AaB/ruHTbBQbn//939w7+X8sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/G/ljFv9v5o9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjF/1v5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/t/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/d/LHLP6b5Y9Z/DfPH7P4b5E/ZvH/bv6Yxf97+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx/37+mMX/B/ljFv8fju6/4ub/b9fr3zSL/4/a/zGL/7b5Yxb/7fLHLP7b549Z/H+cP2bx3yF/zOL/k/wxi/+O+WMW/53yxyz+P80fs/jvnD9m8d8lf8ziv2v+mMX/Z/ljFv/d8scs/j/PH7P4/yJ/zOK/e/6YxX+P/DGL/575Yxb/X+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+WPWfwPyB+z+B+YP2bx/3X+mMX/N/ljFv+D8scs/r/NH7P4H5w/ZvE/JH/M4n9o/pjF/3f5Yxb/3+ePWfwPyx+z+P8hf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfz/mD9m8T8mf8zi/6f8MYv/sfljFv/j8scs/n/OH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv+/5I9Z/E/JH7P4/zV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+A8ayB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n8P5Q/ZvGfPH/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4j9F/pjF/+P5Yxb/KfPHLP5D88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+n8gfs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4v/F/DGL/5fyxyz+i+SPWfwXzR+z+H85f8ziv1j+mMX/K/ljFv/F88cs/kvkj1n8v5o/ZvFfMn/M4r9U/pjFf+n8MYv/1/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/1/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvH/Rv6Yxf+b+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/1b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/7fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/nfwxi/9m+WMW/83zxyz+W+SPWfy/mz9m8f9e/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8t80fs/hvlz9m8d8+f8zi/+P8MYv/DvljFv+f5I9Z/HfMH7P475Q/ZvH/af6YxX/n/DGL/y75Yxb/XfPHLP4/yx+z+O+WP2bx/3n+mMX/F/ljFv/d88cs/nvkj1n898wfs/j/Mn/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/j/Kn/M4n9A/pjF/8D8MYv/r/PHLP6/yR+z+B+UP2bx/23+mMX/4Pwxi/8h+WMW/0Pzxyz+v8sfs/j/Pn/M4n9Y/pjF/w/5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4v/H/DGL/zH5Yxb/P+WPWfyPzR+z+B+XP2bx/3P+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+P8lf8zif0r+mMX/r/ljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjE/+2r+f9zFv9B+WMW/8H5Yxb/MfLHLP5D8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+k+ePWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfynyB+z+H88f8ziP2X+mMV/aP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/xP5Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfy/mD9m8f9S/pjFf5H8MYv/ovljFv8v549Z/BfLH7P4fyV/zOK/eP6YxX+J/DGL/1fzxyz+S+aPWfyXyh+z+C+dP2bx/1r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+38gfs/h/M3/M4r9q/pjFf7X8MYv/6vljFv818scs/t/KH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v50/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5M/ZvHfLH/M4r95/pjFf4v8MYv/d/PHLP7fyx+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/7b5Yxb/7fLHLP7b549Z/H+cP2bx3yF/zOL/k/wxi/+O+WMW/53yxyz+P80fs/jvnD9m8d8lf8ziv2v+mMX/Z/ljFv/d8scs/j/PH7P4/yJ/zOK/e/6YxX+P/DGL/575Yxb/X+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+WPWfwPyB+z+B+YP2bx/3X+mMX/N/ljFv+D8scs/r/NH7P4H5w/ZvE/JH/M4n9o/pjF/3f5Yxb/3+ePWfwPyx+z+P8hf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfz/mD9m8T8mf8zi/6f8MYv/sfljFv/j8scs/n/OH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv+/5I9Z/E/JH7P4/zV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I8xkD9m8R+UP2bxH5w/ZvEfI3/M4j8kf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOI/ef6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6YxX+K/DGL/8fzxyz+U+aPWfyH5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfwXyB+z+C+YP2bxXyh/zOK/cP6Yxf+L+WMW/y/lj1n8F8kfs/gvmj9m8f9y/pjFf7H8MYv/V/LHLP6L549Z/JfIH7P4fzV/zOK/ZP6YxX+p/DGL/9L5Yxb/r/3d/9W3hveerN6/Wxb/Zdr/MYv/svljFv/l8scs/svnj1n8v54/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/t/IH7P4fzN/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP7fyh+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/L+dP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/L+TP2bx3yx/zOK/ef6YxX+L/DGL/3fzxyz+38sfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi//388cs/j/IH7P4/zB/zOL/o/wxi/+2+WMW/+3yxyz+2+ePWfx/nD9m8d8hf8zi/5P8MYv/jvljFv+d8scs/j/NH7P475w/ZvHfJX/M4r9r/pjF/2f5Yxb/3fLHLP4/zx+z+P8if8ziv3v+mMV/j/wxi/+e+WMW/1/mj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/1/lj1n8D8gfs/gfmD9m8f91/pjF/zf5Yxb/g/LHLP6/zR+z+B+cP2bxPyR/zOJ/aP6Yxf93+WMW/9/nj1n8D8sfs/j/IX/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8/5g/ZvE/Jn/M4v+n/DGL/7H5Yxb/4/LHLP5/zh+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/v+SPWfxPyR+z+P81f8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yes/uO++90W/yet/v9FFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP5DBvLHLP6D8scs/oPzxyz+Y+SPWfyH5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW//flj1n8358/ZvH/QP6Yxf+D+WMW/w/lj1n8J88fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPkT9m8f94/pjFf8r8MYv/0Pwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/AvljFv8F88cs/gvlj1n8F84fs/h/MX/M4v+l/DGL/yL5Yxb/RfPHLP5fzh+z+C+WP2bx/0r+mMV/8fwxi/8S+WMW/6/mj1n8l8wfs/gvlT9m8V86f8zi/7X8MYv/MvljFv9l88cs/svlj1n8l88fs/h/PX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8v5E/ZvH/Zv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/L+VP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4fzt/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4fyd/zOK/Wf6YxX/z/DGL/xb5Yxb/7+aPWfy/lz9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/23zxyz+2+WPWfy3zx+z+P84f8ziv0P+mMX/J/ljFv8d88cs/jvlj1n8f5o/ZvHfOX/M4r9L/pjFf9f8MYv/z/LHLP675Y9Z/H+eP2bx/0X+mMV/9/wxi/8e+WMW/z3zxyz+v8wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+v8ofs/gfkD9m8T8wf8zi/+v8MYv/b/LHLP4H5Y9Z/H+bP2bxPzh/zOJ/SP6Yxf/Q/DGL/+/yxyz+v88fs/gflj9m8f9D/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/j/MX/M4n9M/pjF/0/5Yxb/Y/PHLP7H5Y9Z/P+cP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP5/yR+z+J+SP2bx/2v+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8R9zIH/M4j8of8ziPzh/zOI/Rv6YxX9I/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+E+WP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+mMV/8vwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/8U+WMW/4/nj1n8p8wfs/gPzR+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8X88cs/l/KH7P4L5I/ZvFfNH/M4v/l/DGL/2L5Yxb/r+SPWfwXzx+z+C+RP2bx/2r+mMV/yfwxi/9S+WMW/6Xzxyz+X8sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/G/ljFv9v5o9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjF/1v5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/t/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/d/LHLP6b5Y9Z/DfPH7P4b5E/ZvH/bv6Yxf97+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx3zZ/zOK/Xf6YxX/7/DGL/4/zxyz+O+SPWfx/kj9m8d8xf8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PHLP6H5I9Z/A/NH7P4/y5/zOL/+/wxi/9h+WMW/z/kj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8f88cs/sfkj1n8/5Q/ZvE/Nn/M4n9c/pjF/8/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v+X/DGL/yn5Yxb/v+aPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/7EG8scs/oPyxyz+g/PHLP5j5I9Z/Ifkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi//Q/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+H8xf8zi/6X8MYv/IvljFv9F88cs/l/OH7P4L5Y/ZvH/Sv6YxX/x/DGL/xL5Yxb/r+aPWfyXzB+z+C+VP2bxXzp/zOL/tfwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfy/kT9m8f9m/pjFf9X8MYv/avljFv/V88cs/mvkj1n8v5U/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/h/O3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjFf/P8MYv/FvljFv/v5o9Z/L+XP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zh/zOK/Q/6Yxf8n+WMW/x3zxyz+O+WPWfx/mj9m8d85f8ziv0v+mMV/1/wxi//P8scs/rvlj1n8f54/ZvH/Rf6YxX/3/DGL/x75Yxb/PfPHLP6/zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP6/yh+z+B+QP2bxPzB/zOL/6/wxi/9v8scs/gflj1n8f5s/ZvE/OH/M4n9I/pjF/9D8MYv/7/LHLP6/zx+z+B+WP2bx/0P+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+P8xf8zif0z+mMX/T/ljFv9j88cs/sflj1n8/5w/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/JH7P4n5I/ZvH/a/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH3sgf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+A/NH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/In/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/xfzxyz+X8ofs/gvkj9m8V80f8zi/+X8MYv/YvljFv+v5I9Z/BfPH7P4L5E/ZvH/av6YxX/J/DGL/1L5Yxb/pfPHLP5fyx+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/9fzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf8b+WMW/2/mj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/W/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/+388cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/938scs/pvlj1n8N88fs/hvkT9m8f9u/pjF/3v5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvHfNn/M4r9d/pjFf/v8MYv/j/PHLP475I9Z/H+SP2bx3zF/zOK/U/6Yxf+n+WMW/53zxyz+u+SPWfx3zR+z+P8sf8ziv1v+mMX/5/ljFv9f5I9Z/HfPH7P475E/ZvHfM3/M4v/L/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4v+r/DGL/wH5Yxb/A/PHLP6/zh+z+P8mf8zif1D+mMX/t/ljFv+D88cs/ofkj1n8D80fs/j/Ln/M4v/7/DGL/2H5Yxb/P+SPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/x/zxyz+x+SPWfz/lD9m8T82f8zif1z+mMX/z/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/5f8MYv/KfljFv+/5o9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/cQbyxyz+g/LHLP6D88cs/mPkj1n8h+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/9D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fzF/zOL/pfwxi/8i+WMW/0Xzxyz+X84fs/gvlj9m8f9K/pjFf/H8MYv/EvljFv+v5o9Z/JfMH7P4L5U/ZvFfOn/M4v+1/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/L+RP2bx/2b+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfy/lT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H87f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+H8nf8ziv1n+mMV/8/wxi/8W+WMW/+/mj1n8v5c/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv9t88cs/tvlj1n8t88fs/j/OH/M4r9D/pjF/yf5Yxb/HfPHLP475Y9Z/H+aP2bx3zl/zOK/S/6YxX/X/DGL/8/yxyz+u+WPWfx/nj9m8f9F/pjFf/f8MYv/HvljFv8988cs/r/MH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/r/KH7P4H5A/ZvE/MH/M4v/r/DGL/2/yxyz+B+WPWfx/mz9m8T84f8zif0j+mMX/0Pwxi//v8scs/r/PH7P4H5Y/ZvH/Q/6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4/zF/zOJ/TP6Yxf9P+WMW/2Pzxyz+x+WPWfz/nD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+f8kfs/ifkj9m8f9r/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfdyB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4D80fs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+H8if8zi/8n8MYv/p/LHLP6fzh+z+H8mf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/F/PHLP5fyh+z+C+SP2bxXzR/zOL/5fwxi/9i+WMW/6/8K/6D/39cr3/TLP6Lt/9jFv8l8scs/l/NH7P4L5k/ZvFfKn/M4r90/pjF/2v5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvH/ev6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4fyN/zOL/zfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H8rf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/3b+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/07+mMV/s/wxi//m+WMW/y3yxyz+380fs/h/L3/M4r9l/pjFf6v8sf9Q/7epR/XfOn/sP9T/7Ub13yZ/zOL//fwxi/8P8scs/j/MH7P4/yh/zOK/bf6YxX+7/DGL//b5Yxb/H+ePWfx3yB+z+P8kf8ziv2P+mMV/p/wxi/9P88cs/jvnj1n8d8kfs/jvmj9m8f9Z/pjFf7f8MYv/z/PHLP6/yB+z+O+eP2bx3yN/zOK/Z/6Yxf+X+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf9X7+rv3TIs/geold85i/+B+WMW/1/nj1n8f5M/ZvE/KH/M4v/b/DGL/8H5Yxb/Q/LHLP6H5o9Z/H+XP2bx/33+mMX/sPwxi/8f8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/j/ljFv9j8scs/n/KH7P4H5s/ZvE/Ln/M4v/n/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvH/S/6Yxf+U/DGL/1/zxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxif94A/ljFv9B+WMW/8H5Yxb/MfLHLP5D8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+k+ePWfw/nD9m8f9I/pjF/6P5Yxb/j+WPWfynyB+z+H88f8ziP2X+mMV/aP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/xP5Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfy/mD9m8f9S/pjFf5H8MYv/ovljFv8v549Z/BfLH7P4fyV/zOK/eP6YxX+J/DGL/1fzxyz+S+aPWfyXyh+z+C+dP2bx/1r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+38gfs/h/M3/M4r9q/pjFf7X8MYv/6vljFv818scs/t/KH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v50/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5M/ZvHfLH/M4r95/pjFf4v8MYv/d/PHLP7fyx+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/7b5Yxb/7fLHLP7b549Z/H+cP2bx3yF/zOL/k/wxi/+O+WMW/53yxyz+P80fs/jvnD9m8d8lf8ziv2v+mMX/Z/ljFv/d8scs/j/PH7P4/yJ/zOK/e/6YxX+P/DGL/575Yxb/X+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+WPWfwPyB+z+B+YP2bx/3X+mMX/N/ljFv+D8scs/r/NH7P4H5w/ZvE/JH/M4n9o/pjF/3f5Yxb/3+ePWfwPyx+z+P8hf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfz/mD9m8T8mf8zi/6f8MYv/sfljFv/j8scs/n/OH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv+/5I9Z/E/JH7P4/zV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I8/kD9m8R+UP2bxH5w/ZvEfI3/M4j8kf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOI/ef6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6YxX+K/DGL/8fzxyz+U+aPWfyH5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfwXyB+z+C+YP2bxXyh/zOK/cP6Yxf+L+WMW/y/lj1n8F8kfs/gvmj9m8f9y/pjFf7H8MYv/V/LHLP6L549Z/JfIH7P4fzV/zOK/ZP6YxX+p/DGL/9L5Yxb/r+WPWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf/r+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOL/jfwxi/8388cs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/638MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMX/2/ljFv8N8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/O/ljFv/N8scs/pvnj1n8t8gfs/h/N3/M4v+9/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4b5s/ZvHfLn/M4r99/pjF/8f5Yxb/HfLHLP4/yR+z+O+YP2bx3yl/zOL/0/wxi//O+WMW/13yxyz+u+aPWfx/lj9m8d8tf8zi//P8MYv/L/LHLP67549Z/PfIH7P475k/ZvH/Zf6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvH/Vf6Yxf+A/DGL/4H5Yxb/X+ePWfx/kz9m8T8of8zi/9v8MYv/wfljFv9D8scs/ofmj1n8f5c/ZvH/ff6Yxf+w/DGL/x/yxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+P+WMW/2Pyxyz+f8ofs/gfmz9m8T8uf8zi/+f8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f9L/pjF/5T8MYv/X/PHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGJ/wQD+WMW/0H5Yxb/wfljFv8x8scs/kPyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/rt5/ME61+I+n9+cs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+H8ofs/hPnj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8if8zi//H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f9i/pjF/0v5Yxb/RfLHLP6L5o9Z/L+cP2bxXyx/zOL/lfwxi//i+WMW/yXyxyz+X80fs/gvmT9m8V8qf8ziv3T+mMX/a/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f96/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/h/I3/M4v/N/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4fyt/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/dv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Tv6YxX+z/DGL/+b5Yxb/LfLHLP7fzR+z+H8vf8ziv2X+mMV/q/wxi//W+WMW/23yxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+2+aPWfy3yx+z+G+fP2bx/3H+mMV/h/wxi/9P8scs/jvmj1n8d8ofs/j/NH/M4r9z/pjFf5f8MYv/rvljFv+f5Y9Z/HfLH7P4/zx/zOL/i/wxi//u+WMW/z3yxyz+e+aPWfx/mT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfx/lT9m8T8gf8zif2D+mMX/1/ljFv/f5I9Z/A/KH7P4/zZ/zOJ/cP6Yxf+Q/DGL/6H5Yxb/3+WPWfx/nz9m8T8sf8zi/4f8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8f9j/pjF/5j8MYv/n/LHLP7H5o9Z/I/LH7P4/zl/zOJ/fP7Y3/3HHfhP9j8hf8yy/5+YP2bxPyl/zOJ/cv6Yxf8v+WMW/1Pyxyz+f80fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J/7X/q/+f/vev2bZvE/r/0fs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGJ/4QD+WMW/0H5Yxb/wfljFv8x8scs/kPyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX9o/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/L+YP2bx/1L+mMV/kfwxi/+i+WMW/y/nj1n8F8sfs/h/JX/M4r94/pjFf4n8MYv/V/PHLP5L5o9Z/JfKH7P4L50/ZvH/Wv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP7fyB+z+H8zf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+38ofs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfy/nT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfy/kz9m8d8sf8ziv3n+mMV/i/wxi/9388cs/t/LH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/tvljFv/t8scs/tvnj1n8f5w/ZvHfIX/M4v+T/DGL/475Yxb/nfLHLP4/zR+z+O+cP2bx3yV/zOK/a/6Yxf9n+WMW/93yxyz+P88fs/j/In/M4r97/pjFf4/8MYv/nvljFv9f5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv9f5Y9Z/A/IH7P4H5g/ZvH/df6Yxf83+WMW/4Pyxyz+v80fs/gfnD/2n+g/aGBgu4HR/A/JH/tP9Kf9/9D8MYv/7/LHLP6/zx+z+B+WP2bx/0P+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+P8xf8zif0z+mMX/T/ljFv9j88cs/sflj1n8/5w/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/JH7P4n5I/ZvH/a/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxn2ggf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+A/NH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/In/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/xfzxyz+X8ofs/gvkj9m8V80f8zi/+X8MYv/YvljFv+v5I9Z/BfPH7P4L5E/ZvH/av6YxX/J/DGL/1L5Yxb/pfPHLP5fyx+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/9fzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf8b+WMW/2/mj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/W/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/+388cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/938scs/pvlj1n8N88fs/hvkT9m8f9u/pjF/3v5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvHfNn/M4r9d/pjFf/v8MYv/j/PHLP475I9Z/H+SP2bx3zF/zOK/U/6Yxf+n+WMW/53zxyz+u+SPWfx3zR+z+P8sf8ziv1v+mMX/5/ljFv9f5I9Z/HfPH7P475E/ZvHfM3/M4v/L/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4v+r/DGL/wH5Yxb/A/PHLP6/zh+z+P8mf8zif1D+mMX/t/ljFv+D88cs/ofkj1n8D80fs/j/Ln/M4v/7/DGL/2H5Yxb/P+SPWfwPzx+z+B+RPzaa//H/qf5H5o9Z9v+j8scs/kfnj1n8/5g/ZvE/Jn/M4v+n/DGL/7H5Yxb/4/LHLP5/zh+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/v+SPWfxPyR+z+P81f8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/hPPJA/ZvEflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/j/f+zcfbjXdX3H8S/wAckb0LlaaBiBKJoKgopk3qClHoGj3VhKgpLizQRlSoGulOzG2spZrnJtpXmTOlNLZ801HOWc00WzotpmY2zmWCtclhO3SnYdOIc4p3fn8nz57usV78fjD875/U7vX8rzunrxO1ynHfQPZem/o/6hLP130j+Upf8I/UNZ+o/UP5Sl/876h7L030X/UJb+v6F/KEv/XfUPZen/m/qHsvR/sf6hLP1fon8oS//f0j+Upf9L9Q9l6T9K/1CW/rvpH8rSf3f9Q1n6v0z/UJb+o/UPZem/h/6hLP1frn8oS/8x+oey9H+F/qEs/cfqH8rSf5z+oSz999Q/lKX/eP1DWfrvpX8oS/+99Q9l6T9B/1CW/vvoH8rSf1/9Q1n6v1L/UJb+++kfytJ/f/1DWfofoH8oS/+J+oey9J+kfyhL/wP1D2XpP1n/0Lbef9imT0dO0T+0rffvNvIg/UNZ+h+sfyhL/0P0D2XpP1X/UJb+h+ofytJ/mv6hLP1fpX8oS//D9A9l6f9q/UNZ+h+ufyhL/yP0D2Xpf6T+oSz9j9I/lKX/dP1DWfofrX8oS/9j9A9l6f8a/UNZ+r9W/1CW/sfqH8rS/zj9Q1n6H69/KEv/Dv1DWfqfoH8oS/8Z+oey9J+pfyhL/1n6h7L079Q/lKX/ifqHsvQ/Sf9Qlv6v0z+Upf/r9Q9l6f8G/UNZ+r9R/1CW/ifrH8rS/036h7L0f7P+oSz9T9E/lKX/qfqHsvSfrX8oS/+36B/K0v80/UNZ+s/RP5Sl/1z9Q1n6n65/KEv/M/QPZek/T/9Qlv5v1T+Upf+Z+oey9D9L/1CW/vP1D2Xpf7b+oSz9z9E/lKX/ufqHsvQ/T/9Qlv6/rX8oS//z9Q9l6b9A/1CW/gv1D2Xpf4H+oSz9L9Q/lKX/Iv1DWfr/jv6hLP0v0j+Upf/F+oey9F+sfyhL/7fpH8rS/+36h7L0X6J/KEv/pfqHsvS/RP9Qlv6X6h/K0v939Q9l6f8O/UNZ+r9T/1CW/pfpH8rS/3L9Q1n6L9M/lKX/u/QPZel/hf6hLP3frX8oS//36B/K0v+9+oey9H+f/qEs/a/UP5Sl//v1D2Xp/wH9Q1n6/57+oSz9f1//UJb+H9Q/lKX/h/QPZel/lf6hLP3/QP9Qlv5X6x/K0v/D+oey9P+I/qEs/a/RP5Sl/x/qH8rS/6P6h7L0/5j+oSz9P65/KEv/a/UPZen/R/qHsvT/hP6hLP3/WP9Qlv5/on8oS/9P6h/K0v9T+oey9L9O/1CW/tfrH8rS/9P6h7L0v0H/UJb+N+ofytL/Jv1DWfrfrH8oS//P6B/K0v8W/UNZ+t+qfyhL/9v0D2Xp/6f6h7L0v13/UJb+n9U/lKX/HfqHsvS/U/9Qlv536R/K0v9z+oey9P+8/qEs/e/WP5Sl/z36h7L0/zP9Q1n636t/KEv/L+gfytL/i/qHsvT/c/1DWfrfp38oS/+/0D+Upf+X9A9l6f+X+oey9F+ufyhL//v1D2Xp/1f6h7L0X6F/KEv/L+sfytL/K/qHsvR/QP9Qlv5/rX8oS/8H9Q9l6f83+oey9H9I/1CW/n+rfyhL/4f1D2Xp/4j+oSz9/07/UJb+X9U/lKX/Sv1DWfp/Tf9Qlv5/r38oS/9H9Q9l6f91/UNZ+n9D/1CW/t/UP5Sl/yr9Q1n6f0v/UJb+39Y/lKX/d/QPZen/D/qHsvT/R/1DWfr/k/6hLP0f0z+Upf939Q9l6f/P+oey9F+tfyhL/3/RP5Sl/xr9Q1n6/6v+oSz9/03/UJb+j+sfytL/e/qHsvR/Qv9Qlv7/rn8oS/+1+oey9P8P/UNZ+n9f/1CW/v+pfyhL/x/oH8rS/4f6h7L0X6d/KEv/J/UPZen/X/qHsvT/kf6hLP2f0j+Upf+P9Q9l6f8T/UNZ+j+tfyhL///WP5Sl/zP6h7L0X69/KEv/Z/UPZen/P/qHsvT/X/1DWfr/VP9Qlv4/0z+Upf/P9Q9l6f+c/qEs/TfoH0rSf+dK/1CW/oP0D2XpP1j/UJb+Q/QPZelf9A9l6T9U/1CW/sP0D2Xpv53+oSz9h+sfytL/RfqHsvTfXv9Qlv476B/K0n9H/UNZ+u+kfyhL/xH6h7L0H6l/aJvrDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUVUfn9HVDBvV6asiWD0avnL/x40HrTzn35pu/sEvPx+4vzwhecvCWDzZs2LBh8NPVV7sfbldVVdd/287dj4f3Pe56/cunXzth06My5oZn9719ybNHv++uVbeuP+6WGbcP3fjs0OqMs89bMH/S4Koq44ZWS7seHDioqspeQ6urux5M7nqw99Dq1q4HUzY+eFG1ouvBAWdeuOCsricm1P49A4Bfdx2dy6ohvRa76vWngS33//Lp9yzr+djPS/a8Wqm69/++u3d9e5+v9fgV+9/z+uUVffd/wP+CAMAvGdj+PzCm52M/L/lL7/9nXfCxVdHXfvX+97x+GWv/AaB5wff/e2103+/79/n+f/TngM33559+zXZd+3/L+pMXdz9Vns/3/3/x+mVc3/0f3Ov7/4OqquzZ8/3/7aqqjN/K3w4ASKGj813r+nv/3//+l9363Azacv93uWPFyV37v3r7u17S/dTQAe7/nv29/z+2zz8rAPD8dHR+ekOf9/8D2P9qr+AlN+//MUsffnHX/n999ffGbPG1gez/+L77P3HxwkUTL77k0v3PWzjvnPnnzL9g2tSphx489ZBpkydu/I7Apl+38jcFALZxW/f+v9q+z82gqnpi8/0Hl49+uGv/J3/i+HO7nxo+wP3fq9/3/2O8/weAXsYOroYNq5bOW7z4ogM3/drzcPKmXzf9x4L9H8Df/4/r+SG6np8ZHFRVL91833nx+wd37f+N43Zb3v3UsAHu/9797v9RvX9WEQB4frby/f9ZfW567f/IIbdN69r/E8bvc2X3UwP9+/8J/e7/9d7/A0AdHZ3V/+ub6K79v2LHn19X77rs4+f/AKB5bez/k6PfPbbeddnX/gNA89rY//lH7nRvvevySvsPAM1rY/8f6rhmTr3rsp/9B4DmtbH/M88f/Ui967K//QeA5rWx/2MuPXNJvetygP0HgOa1sf+3n7JuTb3rMtH+A0Dz2tj/04avfqredZlk/wGgeW3s/3f2PensetflQPsPAM1rY/+/dNgBj9W7LpPtPwA0r439nzTq+pn1rssU+w8AzWtj/z9y4RE31bsuB9l/AGheG/s/atbnptS7LgfbfwBoXhv7/7bTvnZVvetyiP0HgOa1sf/PXXbUqHrXZar9B4DmtbH/Kx7aY3a963Ko/QeA5rWx/zOeuHplvesyzf4DQPPa2P+9n35yUb3r8ir7DwDNa2P/P/vtM9bWuy6H2X8AaF4b+z/i+udG1rsur7b/ANC8Nvb/vVcsurbedTnc/gNA89rY/+9fM2J8vetyhP0HgOa1sf9v/fyyu+tdlyPtPwA0r439/8bjU2bUuy5H2X8AaF4b+3/ql5d/t951mW7/AaB5bez/wY8+MK/edTna/gNA89rY//t/POuZetflGPsPAM1rY/9f9p5v7lHvurzG/gNA89rY/49/Zs4H6l2X19p/AGheG/v/0y+OO6jedTnW/gNA89rY/0UfvePGetflOPsPAM1rY/879/vJmnrX5Xj7DwDNa2P/HxzxziX1rkuH/QeA5rWx/7e9fMgj9a7LCfYfAJrXxv6PPfxDc+pdlxn2HwCa18b+L5ux6731rstM+w8AzWtj/3c475Nj612XWfYfAJrXxv6fs/Tx6+pdl077DwDNa2P/fzh74fB61+VE+w8AzWtj/3fffu6oetflJPsPAM1rY/+vnvDoVfWuy+vsPwA0r439/9m0O6fUuy6vt/8A0Lw29n/J7mNuqndd3mD/AaB5bez/txbeP7PedXmj/QeA5rWx/3NPnPRYvetysv0HgOa1sf+T53aeXe+6vMn+A0Dz2tj/+96x4ql61+XN9h8AmtfG/l/54KfurnddTrH/ANC8NvZ/x7U7j693XU61/wDQvDb2/4xnLri23nWZbf8BoHlt7P8PVq0ZWe+6vMX+A0Dz2tj/jhsuW1vvupxm/wGgeW3s/1eW/WhRvesyx/4DQPPa2P87P3zVynrXZa79B4DmtbH/4++pZte7LqfbfwBo3sWXXHr+vAUL5l/kE5/4xCebP3mh/5cJAABo2i/+0P9C/5MAAAAAAAAAAAAAAAAAAABAXm3834m90P+OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAIL8rVcYoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4CgAA///tatps") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 1.99545117s ago: executing program 7 (id=867): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.711294381s ago: executing program 3 (id=858): sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="280225bd7000fbdbdf257b00000000000300c8beb75219b11585681d92d92dd2b772dc7463a15a45", @ANYRES32], 0x78}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080002000500000008000700e000000208000800ac1434002c010100"], 0x158}}, 0x0) 1.458519713s ago: executing program 3 (id=859): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 1.372151593s ago: executing program 3 (id=860): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x483, &(0x7f0000000580)="$eJzs201vG0Ucx/HfbGJ34xZwn9yCKmEJiaIiSuy0pE8ghZa0SH2gbYJAKEEhcYLVxInitGoqaCtx6BEoEgiJAxx6QagKElzgwAFuvAMu3HrggjlxAqHdzHrXjtuk+CFx8v1IiSe7/92dnZmdnc2OBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApJdf6evOmNXOBQAAaKWzFy90Z7n/AwCwoQzw/A8AALCRGDn6REY/floyZ/y/F7mn84XLVwdP9NferMv4W3b48d6Pm8n2HDj4Qu+h4PPB2zfa4zp3caAvfXx6amY2VyzmxtKDhfzo9FhuxXuod/tq+/wCSE9dujw2Pl5MZ/f3VKy+mry3aXMqebQ3dezpIHbwRH//xUhMZ+x/H32J+43w43J0S0alj++as5Ic1V8Wy7SdZuvyT2KffxKDJ/r9E5nMjxTmvJUmKAinskziQRm1oC7qskPy8mXijXlmi8lRUUY7UyVzTlJHUA7P+v8YXn4HTkOy8dC8fA5JSqsN6mwN2yRHB2V0+3BSr3llFtR/p/T+amcOTdcpR3dltPelkjnv9wfe9eR1m6dfT79aGJ+OxBpjr6h2vz+00hrvm1w5Outf8SVzYbUzg5bzBktDMjowcMUfV8gflz52tPfkqYHoCGPXMvvxYvfb9EruybHI0MGs0hgCAAAAAAAAWO9c42hYRp9/6/p/p+07IGwQxtHzMvrrVMl/NR6dl9ARmd9R1u7vfpqb/y73+PTM/Gx+4t25musTbt87xbnZkdHaq9XlXXwV/w5fbh5DnWLG0SEZ3fh3ITxu0nhp2w2EB7pzLMyba6rW+u3m0cX5LME7hCP9u6Lpmll+iPdjSXtc+iegMYxx1Cej8R9227kfCS3pg2zcdzL688s9Ns6Je0HBZZr0f7vj+clctxf7s4y++ieI9aeZabON3R7GZrxYR0YfnamM3WJjd4SxWS/2pIx+Ga4duzOM7fFiP5DRzB/pIDbhxT5pY1Nh7P7R6cmxphXwGuf1/9dltO3FtAnq0paX7WY7yrF33gv7+5vVO7pPn19v/5+MLLtp2+E9r70O7/bbnt9endrt9ZaMvvl+j41bbCtxu36r/ztsr2/IaOLXytiEjd0WxmZWXLBtwqv/t2WULSyUy8bWv62ByP0/Uv9PVLeOJtX/1siypD3upsacOiQV569dGpmczM2SIEGCRDmx2j0TWsG7/38mozfP/1Ye79j7vx1Wh+O/v6+H9/8j1Ttq0v1/W2TZETsaiXVK7tzUTCwlucX5a8/lp0YmchO5Qk82c7j78IHeTCwejO3CVN1FtS7F7LPalQ+/Lj+fVY7/ao//E9U7alL9b48sS1SMV+o+ddj6/11Gb/20UH6OftD4P3jOeuapxc/y9dmk+t8RWZa0x32kMacOAAAAAAAAAAAAAAAAAG0tZhzdlpE71GmC70atZP7fki9MNWn+VyqybKxF31eou1ABoA04cvSFjPaqZG54C7ZIZ6KfWNf+CwAA//8n8SDK") statfs(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') 1.259421614s ago: executing program 7 (id=861): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0x6, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 1.136206044s ago: executing program 6 (id=862): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b2, &(0x7f0000001340)={{@local}, @local, 0x9}) 1.075263455s ago: executing program 1 (id=863): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 1.037662395s ago: executing program 7 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eaff40850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 995.496485ms ago: executing program 3 (id=865): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x1, 0x66b, &(0x7f0000000f80)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 835.518216ms ago: executing program 7 (id=866): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x5) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 610.779077ms ago: executing program 3 (id=868): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 518.909328ms ago: executing program 7 (id=869): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) setxattr$security_ima(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[]) 321.685689ms ago: executing program 7 (id=870): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 321.454958ms ago: executing program 6 (id=871): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 726.57µs ago: executing program 6 (id=872): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x7) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 0s ago: executing program 3 (id=882): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b2, &(0x7f0000001340)={{@local}, @local, 0x9}) kernel console output (not intermixed with test programs): p0): 1 truncate cleaned up [ 100.176306][ T4643] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.183768][ T4811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.208489][ T4806] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.233147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.280563][ T4811] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.285733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.300607][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.308932][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.326587][ T4806] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.181: Invalid inode table block 1633771873 in block_group 0 [ 100.340575][ T4811] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.354824][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 100.403411][ T4806] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 100.420582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.460641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.472108][ T4806] EXT4-fs error (device loop0): add_dirent_to_buf:2216: inode #2: comm syz.0.181: mark_inode_dirty error [ 100.511698][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.518958][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.532325][ T4806] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.181: Invalid inode table block 1633771873 in block_group 0 [ 100.570129][ T4806] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 100.578693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.600512][ T4806] EXT4-fs error (device loop0): ext4_add_nondir:2855: inode #18: comm syz.0.181: mark_inode_dirty error [ 100.627747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.638992][ T4806] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.181: Invalid inode table block 1633771873 in block_group 0 [ 100.651755][ T4800] loop3: detected capacity change from 0 to 32768 [ 100.660917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.673446][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 100.682257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.700759][ T4806] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 100.727669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.737208][ T4806] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #18: comm syz.0.181: mark_inode_dirty error [ 100.807946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.813227][ T4800] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 100.825000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.855506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.882061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.906220][ T4806] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 100.918010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.949762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.984956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.009938][ T4643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.019520][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 101.157634][ T4826] loop1: detected capacity change from 0 to 4096 [ 101.193481][ T4261] ocfs2: Unmounting device (7,3) on (node local) [ 101.205066][ T4826] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 101.295762][ T4832] loop0: detected capacity change from 0 to 2048 [ 101.371999][ T4836] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.436962][ T4826] ntfs3: loop1: failed to convert "c46c" to ascii [ 101.540144][ T4836] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 101.580027][ T4836] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 101.670507][ T4836] Remounting filesystem read-only [ 101.708154][ T4250] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 101.739972][ T4250] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 101.754318][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.763258][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.802578][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.833073][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.841211][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.858943][ T4250] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 101.890266][ T4643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.907498][ T4250] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 101.928258][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.937980][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 101.948328][ T4250] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 102.468394][ T4861] loop2: detected capacity change from 0 to 4096 [ 102.494766][ T4861] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 102.586409][ T4861] ntfs3: loop2: failed to convert "c46c" to cp775 [ 102.671502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.701711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.818722][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.833846][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.881078][ T4879] loop3: detected capacity change from 0 to 512 [ 102.900317][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.942887][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.969691][ T4879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.981620][ T4643] device veth0_vlan entered promiscuous mode [ 103.013300][ T4879] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.033420][ T4880] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 103.044241][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 103.070049][ T4886] netem: change failed [ 103.147883][ T4643] device veth1_vlan entered promiscuous mode [ 103.164776][ T4879] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:337: inode #15: comm syz.3.195: verity file corrupted; can't find descriptor [ 103.276062][ T4643] device veth0_macvtap entered promiscuous mode [ 103.290070][ T4879] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 103.321231][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.344313][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.371469][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.401088][ T4643] device veth1_macvtap entered promiscuous mode [ 103.401253][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 103.456052][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.480838][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.531952][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.554309][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.582517][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.602387][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.613934][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.625023][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.638324][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.652880][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.678952][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.701105][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.730254][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.751615][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.762250][ T4898] loop0: detected capacity change from 0 to 4096 [ 103.772958][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.791827][ T4898] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 103.797874][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.837156][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.848471][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.855558][ T4898] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 103.860798][ T4643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.879312][ T4643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.891640][ T4643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.908118][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.941247][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.979168][ T4643] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.997062][ T4643] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.021018][ T4643] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.052756][ T4643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.108985][ T4250] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 104.172426][ T4891] loop2: detected capacity change from 0 to 32768 [ 104.173628][ T4250] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 104.230116][ T4891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.197 (4891) [ 104.352477][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.374284][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.443497][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.466165][ T4891] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.504434][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.512651][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.531166][ T4912] nbd: socks must be embedded in a SOCK_ITEM attr [ 104.552828][ T4891] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 104.594800][ T4891] BTRFS info (device loop2): using free space tree [ 104.618917][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.698773][ T4909] loop1: detected capacity change from 0 to 4096 [ 104.741731][ T4909] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 104.941466][ T4909] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.023442][ T4936] loop3: detected capacity change from 0 to 1764 [ 105.083060][ T4891] BTRFS info (device loop2): enabling ssd optimizations [ 105.115190][ T4909] ntfs3: loop1: ino=5, "/" directory corrupted [ 105.312813][ T4247] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 105.337842][ T4247] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 105.729195][ T4248] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.359637][ T4944] loop5: detected capacity change from 0 to 32768 [ 106.511271][ T4944] XFS (loop5): Mounting V5 Filesystem [ 106.703904][ T4944] XFS (loop5): Ending clean mount [ 106.770119][ T4944] XFS (loop5): Quotacheck needed: Please wait. [ 106.870214][ T4944] XFS (loop5): Quotacheck: Done. [ 107.045987][ T4977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.063355][ T4944] XFS (loop5): User initiated shutdown received. [ 107.087198][ T4944] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:486). Shutting down filesystem. [ 107.163493][ T4944] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 107.236291][ T4977] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 107.258382][ T4643] XFS (loop5): Unmounting Filesystem [ 107.266523][ T4977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.329064][ T4977] usb 2-1: config 0 descriptor?? [ 107.429761][ T4974] loop0: detected capacity change from 0 to 32768 [ 107.532535][ T4974] JBD2: Ignoring recovery information on journal [ 107.750931][ T4974] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.810763][ T4977] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 107.830887][ T4974] (syz.0.217,4974,1):ocfs2_reflink_ioctl:4426 ERROR: status = -14 [ 107.944861][ T4250] ocfs2: Unmounting device (7,0) on (node local) [ 107.973858][ T4977] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 107.986227][ T4998] loop2: detected capacity change from 0 to 32768 [ 107.993604][ T4977] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 108.013399][ T5013] loop3: detected capacity change from 0 to 32768 [ 108.020610][ T4998] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.222 (4998) [ 108.033798][ T4977] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 108.063266][ T4977] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 108.080865][ T5013] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.226 (5013) [ 108.103001][ T4998] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 108.116185][ T4977] playstation: probe of 0003:054C:0DF2.0001 failed with error -71 [ 108.134142][ T4998] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 108.166397][ T4977] usb 2-1: USB disconnect, device number 2 [ 108.174372][ T4998] BTRFS info (device loop2): enabling disk space caching [ 108.211880][ T4998] BTRFS info (device loop2): force clearing of disk cache [ 108.233442][ T5013] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.249830][ T4998] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.260055][ T5013] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 108.281078][ T4998] BTRFS info (device loop2): use zstd compression, level 3 [ 108.298629][ T4998] BTRFS info (device loop2): disk space caching is enabled [ 108.310970][ T5013] BTRFS info (device loop3): using free space tree [ 108.590772][ T4998] BTRFS info (device loop2): enabling ssd optimizations [ 108.629043][ T4998] BTRFS info (device loop2): rebuilding free space tree [ 108.744574][ T5013] BTRFS info (device loop3): enabling ssd optimizations [ 108.855429][ T4998] BTRFS info (device loop2): disabling free space tree [ 108.862602][ T4998] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.899237][ T4998] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 109.066512][ T4261] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.667753][ T4248] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 110.474827][ T5075] loop0: detected capacity change from 0 to 32768 [ 110.624442][ T5075] XFS (loop0): Mounting V5 Filesystem [ 110.697737][ T5097] loop3: detected capacity change from 0 to 32768 [ 110.827266][ T5075] XFS (loop0): Ending clean mount [ 111.132384][ T5125] loop2: detected capacity change from 0 to 2048 [ 111.198554][ T4250] XFS (loop0): Unmounting Filesystem [ 111.326923][ T5125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.340277][ T5105] loop5: detected capacity change from 0 to 32768 [ 111.374763][ T5105] XFS (loop5): Mounting V5 Filesystem [ 111.427623][ T5095] loop1: detected capacity change from 0 to 40427 [ 111.437520][ T5095] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 111.532133][ T5095] F2FS-fs (loop1): invalid crc value [ 111.569406][ T5105] XFS (loop5): Ending clean mount [ 111.607606][ T5105] XFS (loop5): Quotacheck needed: Please wait. [ 111.617090][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 111.646199][ T5095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.733451][ T5105] XFS (loop5): Quotacheck: Done. [ 111.840232][ T5150] loop2: detected capacity change from 0 to 512 [ 111.863068][ T5095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.898451][ T5150] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 111.935665][ T5150] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.947215][ T4247] syz-executor: attempt to access beyond end of device [ 111.947215][ T4247] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.001744][ T5150] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 112.019722][ T4643] XFS (loop5): Unmounting Filesystem [ 112.052850][ T5150] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 112.108972][ T5150] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.241: Failed to acquire dquot type 1 [ 112.164523][ T5150] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.241: bg 0: block 40: padding at end of block bitmap is not set [ 112.214387][ T5150] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 112.268066][ T5150] EXT4-fs (loop2): 1 truncate cleaned up [ 112.294516][ T5150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.410277][ T5161] program syz.3.245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.434107][ T5082] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.628487][ T5082] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 112.650682][ T5082] usb 1-1: config 0 has no interface number 0 [ 112.670786][ T5082] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 112.689979][ T5082] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 112.750709][ T5082] usb 1-1: config 0 interface 255 has no altsetting 0 [ 112.794183][ T5082] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 112.803306][ T5082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.829057][ T5082] usb 1-1: config 0 descriptor?? [ 112.840540][ T5082] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 112.925965][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 113.092088][ T4977] usb 1-1: USB disconnect, device number 4 [ 113.980344][ T5199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.256'. [ 114.261029][ T5206] loop0: detected capacity change from 0 to 1024 [ 114.414085][ T5206] process 'syz.0.259' launched './file1' with NULL argv: empty string added [ 114.458869][ T5188] loop5: detected capacity change from 0 to 40427 [ 114.514387][ T5188] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 114.548169][ T5188] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 114.608046][ T5188] F2FS-fs (loop5): invalid crc value [ 114.613643][ T5215] loop1: detected capacity change from 0 to 512 [ 114.653041][ T5215] EXT4-fs: Ignoring removed i_version option [ 114.683177][ T5215] EXT4-fs: Ignoring removed nobh option [ 114.703174][ T5215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.713630][ T5188] F2FS-fs (loop5): Found nat_bits in checkpoint [ 114.754793][ T4262] Bluetooth: hci4: command 0x0405 tx timeout [ 114.790382][ T5222] loop3: detected capacity change from 0 to 256 [ 114.798063][ T5222] exfat: Unknown parameter 'zero_size_dir' [ 114.820480][ T5215] EXT4-fs (loop1): 1 truncate cleaned up [ 114.839430][ T5222] CUSE: info not properly terminated [ 114.841003][ T5215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.864048][ T5188] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 114.871126][ T5188] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.105463][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 115.302320][ T5238] loop2: detected capacity change from 0 to 1024 [ 115.467508][ T4965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.664158][ T4965] usb 2-1: Using ep0 maxpacket: 16 [ 115.672278][ T4965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 115.704760][ T4965] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 115.724260][ T4965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.742729][ T4965] usb 2-1: Product: syz [ 115.756028][ T4965] usb 2-1: Manufacturer: syz [ 115.773186][ T4965] usb 2-1: SerialNumber: syz [ 115.816922][ T4965] usb 2-1: config 0 descriptor?? [ 115.837642][ T4965] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 115.870196][ T5248] loop2: detected capacity change from 0 to 512 [ 115.877917][ T4965] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 115.927273][ T5248] EXT4-fs: Ignoring removed i_version option [ 115.933376][ T5248] EXT4-fs: Ignoring removed nobh option [ 115.952439][ T5248] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.986241][ T5249] relay: one or more items not logged [item size (56) > sub-buffer size (1)] [ 116.005745][ T5248] EXT4-fs (loop2): 1 truncate cleaned up [ 116.023132][ T5248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.267884][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 116.445092][ T4965] em28xx 2-1:0.0: chip ID is em28178 [ 116.760526][ T4965] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 116.782404][ T4965] em28xx 2-1:0.0: board has no eeprom [ 116.878075][ T5251] loop0: detected capacity change from 0 to 40427 [ 116.889631][ T4965] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 116.921920][ T4965] em28xx 2-1:0.0: dvb set to bulk mode. [ 116.923109][ T5251] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 116.947169][ T4977] em28xx 2-1:0.0: Binding DVB extension [ 116.954381][ T5251] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.970419][ T4965] usb 2-1: USB disconnect, device number 3 [ 117.037311][ T4965] em28xx 2-1:0.0: Disconnecting em28xx [ 117.066548][ T5251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.183595][ T4977] em28xx 2-1:0.0: Registering input extension [ 117.263845][ T5251] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 117.294173][ T5251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.394212][ T4967] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.404336][ T4977] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 117.410877][ T4977] Registered IR keymap rc-empty [ 117.436929][ T4977] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 117.462347][ T4977] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 117.500639][ T4977] em28xx 2-1:0.0: Input extension successfully initialized [ 117.508489][ T4965] em28xx 2-1:0.0: Closing input extension [ 117.555787][ T4250] syz-executor: attempt to access beyond end of device [ 117.555787][ T4250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 117.594086][ T4967] usb 4-1: Using ep0 maxpacket: 32 [ 117.603039][ T4967] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 117.654074][ T4967] usb 4-1: config 0 has no interface number 0 [ 117.702225][ T4967] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 117.728276][ T4965] em28xx 2-1:0.0: Freeing device [ 117.746163][ T4967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.767419][ T4967] usb 4-1: Product: syz [ 117.771648][ T4967] usb 4-1: Manufacturer: syz [ 117.781292][ T4967] usb 4-1: SerialNumber: syz [ 117.822977][ T4967] usb 4-1: config 0 descriptor?? [ 117.846269][ T4967] smsc95xx v2.0.0 [ 118.172208][ T5310] loop1: detected capacity change from 0 to 512 [ 118.223739][ T5310] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 118.245993][ T5310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 118.281087][ T5310] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 118.335358][ T5310] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 118.377497][ T5315] loop5: detected capacity change from 0 to 4096 [ 118.385521][ T5310] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.296: Failed to acquire dquot type 1 [ 118.404360][ T5315] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.416207][ T5310] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.296: bg 0: block 40: padding at end of block bitmap is not set [ 118.433761][ T5310] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 118.455361][ T4379] udevd[4379]: incorrect nilfs2 checksum on /dev/loop5 [ 118.465421][ T5310] EXT4-fs (loop1): 1 truncate cleaned up [ 118.471332][ T5310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.479296][ T5315] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 118.585443][ T5317] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.616448][ T5318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.648262][ T4967] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 118.683883][ T4967] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 118.695788][ T4967] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 118.742074][ T4967] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 118.754656][ T4967] usb 4-1: USB disconnect, device number 3 [ 119.102632][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 119.117579][ T5326] tipc: Started in network mode [ 119.122516][ T5326] tipc: Node identity :, cluster identity 4711 [ 119.151099][ T5326] tipc: Enabling of bearer rejected, failed to enable media [ 119.588382][ T5320] loop2: detected capacity change from 0 to 32768 [ 119.783858][ T33] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.854297][ T51] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.871970][ T51] Bluetooth: hci4: Frame reassembly failed (-84) [ 119.956910][ T33] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.084283][ T33] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.197672][ T33] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.265236][ T5347] loop3: detected capacity change from 0 to 4096 [ 120.297865][ T5347] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 120.400641][ T5347] ntfs3: loop3: failed to convert "c46c" to macturkish [ 120.462165][ T4259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.474105][ T4259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.505569][ T4259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.516029][ T4259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.524847][ T4259] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 120.532181][ T4259] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.044118][ T4973] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.244365][ T4973] usb 4-1: Using ep0 maxpacket: 16 [ 121.256145][ T4973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.287843][ T4973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.323126][ T4973] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.350848][ T4973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.381890][ T5352] chnl_net:caif_netlink_parms(): no params data found [ 121.396389][ T4973] usb 4-1: config 0 descriptor?? [ 121.426792][ T5355] loop0: detected capacity change from 0 to 40427 [ 121.445363][ T5355] F2FS-fs (loop0): invalid crc value [ 121.488025][ T5355] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.604616][ T5355] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 121.628359][ T5355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 121.817585][ T4973] HID 045e:07da: Invalid code 65791 type 1 [ 121.836933][ T4973] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input9 [ 121.864964][ T4973] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 121.877728][ T4262] Bluetooth: hci4: command 0x1003 tx timeout [ 121.884260][ T4253] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 122.062019][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.094236][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.121600][ T5352] device bridge_slave_0 entered promiscuous mode [ 122.332832][ T4965] usb 4-1: USB disconnect, device number 4 [ 122.358924][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.387322][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.416969][ T5352] device bridge_slave_1 entered promiscuous mode [ 122.533708][ T5391] Illegal XDP return value 4291555328 on prog (id 23) dev N/A, expect packet loss! [ 122.683715][ T4253] Bluetooth: hci5: command 0x0409 tx timeout [ 122.753504][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.788799][ T5396] program syz.0.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.806468][ T5386] loop2: detected capacity change from 0 to 40427 [ 122.816960][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.838540][ T5386] F2FS-fs (loop2): invalid crc value [ 122.916406][ T5386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.965214][ T5352] team0: Port device team_slave_0 added [ 123.085201][ T33] device hsr_slave_0 left promiscuous mode [ 123.108265][ T33] device hsr_slave_1 left promiscuous mode [ 123.127442][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.144142][ T5386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.173068][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.224607][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.232117][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.258299][ T33] device bridge_slave_1 left promiscuous mode [ 123.279530][ T5388] loop1: detected capacity change from 0 to 32768 [ 123.280888][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.310388][ T5411] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 123.336841][ T33] device bridge_slave_0 left promiscuous mode [ 123.343470][ T5411] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 123.345052][ T4248] syz-executor: attempt to access beyond end of device [ 123.345052][ T4248] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.375810][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.415020][ T5411] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 123.454250][ T5411] overlayfs: conflicting lowerdir path [ 123.483795][ T33] device veth1_macvtap left promiscuous mode [ 123.500552][ T33] device veth0_macvtap left promiscuous mode [ 123.510540][ T33] device veth1_vlan left promiscuous mode [ 123.524516][ T33] device veth0_vlan left promiscuous mode [ 124.722119][ T33] team0 (unregistering): Port device team_slave_1 removed [ 124.764378][ T4253] Bluetooth: hci5: command 0x041b tx timeout [ 124.806838][ T33] team0 (unregistering): Port device team_slave_0 removed [ 124.853331][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.902339][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.388216][ T33] bond0 (unregistering): Released all slaves [ 125.470338][ T5352] team0: Port device team_slave_1 added [ 125.478211][ T5403] netlink: 340 bytes leftover after parsing attributes in process `syz.3.321'. [ 125.612038][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.654184][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.775915][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.849203][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.869857][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.983716][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.211924][ T5352] device hsr_slave_0 entered promiscuous mode [ 126.245552][ T5352] device hsr_slave_1 entered promiscuous mode [ 126.257094][ T5352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.276766][ T5352] Cannot create hsr debugfs directory [ 126.354462][ T5086] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 126.554054][ T5086] usb 3-1: Using ep0 maxpacket: 16 [ 126.561092][ T5086] usb 3-1: config 0 has no interfaces? [ 126.590544][ T5086] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.634146][ T5086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.672937][ T5086] usb 3-1: Product: syz [ 126.693224][ T5086] usb 3-1: Manufacturer: syz [ 126.709889][ T5086] usb 3-1: SerialNumber: syz [ 126.725798][ T5086] usb 3-1: config 0 descriptor?? [ 126.746314][ T5465] loop3: detected capacity change from 0 to 512 [ 126.830879][ T5465] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 126.839687][ T4253] Bluetooth: hci5: command 0x040f tx timeout [ 126.872305][ T5465] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 126.935030][ T5352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.943589][ T5465] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.945974][ T5352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.962032][ T5352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 126.971122][ T5465] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 126.978857][ T5084] usb 3-1: USB disconnect, device number 3 [ 126.983246][ T5465] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 126.998700][ T5465] EXT4-fs (loop3): 1 truncate cleaned up [ 127.004746][ T5465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 127.016102][ T5352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.104958][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 127.357298][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.420319][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.432821][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.452026][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.471323][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.490849][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.503028][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.510264][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.542574][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.595251][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.636323][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.659700][ T5481] mmap: syz.1.344 (5481): VmData 37462016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 127.680453][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.687673][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.727050][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.785934][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.796250][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.840108][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.882264][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.920306][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.923324][ T5456] loop0: detected capacity change from 0 to 40427 [ 127.974683][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.983248][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.993753][ T5489] loop2: detected capacity change from 0 to 64 [ 128.057365][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.080734][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.100151][ T5456] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.129782][ T5497] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 128.133631][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.174271][ T5497] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 128.191444][ T5352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 128.223068][ T5497] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 128.264776][ T5497] overlayfs: conflicting lowerdir path [ 128.359876][ T5456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.571270][ T4250] syz-executor: attempt to access beyond end of device [ 128.571270][ T4250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.877533][ T5474] loop3: detected capacity change from 0 to 40427 [ 128.914161][ T4253] Bluetooth: hci5: command 0x0419 tx timeout [ 128.932269][ T5474] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 128.951335][ T5474] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 129.013741][ T5474] F2FS-fs (loop3): invalid crc value [ 129.069132][ T5474] F2FS-fs (loop3): Found nat_bits in checkpoint [ 129.096602][ T5523] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.353'. [ 129.153471][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.171601][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.209058][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.285886][ T5474] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 129.297121][ T5474] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.636519][ T5537] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 129.667282][ T4300] Bluetooth: hci4: Frame reassembly failed (-84) [ 130.000960][ T5550] loop1: detected capacity change from 0 to 64 [ 130.055434][ T5550] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 130.321056][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.337522][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.422944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.440385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.493845][ T5352] device veth0_vlan entered promiscuous mode [ 130.509263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.520159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.549587][ T5352] device veth1_vlan entered promiscuous mode [ 130.611138][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.638219][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.658651][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.678962][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.743677][ T5352] device veth0_macvtap entered promiscuous mode [ 130.761446][ T5352] device veth1_macvtap entered promiscuous mode [ 130.802871][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.824196][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.844149][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.878461][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.908882][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.940386][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.960638][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.981495][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.000761][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.023138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.041574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.069414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.099143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.126182][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.146799][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.166994][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.187746][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.210287][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.231220][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.266322][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.294090][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.313443][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.342644][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.361935][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.390915][ T5352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.413716][ T5558] loop1: detected capacity change from 0 to 40427 [ 131.415659][ T5352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.449525][ T5352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.459645][ T5352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.496855][ T5558] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.634751][ T4262] Bluetooth: hci4: command 0x1003 tx timeout [ 131.642903][ T4253] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 131.721857][ T5558] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.730233][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.758647][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.773587][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.773655][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.787360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.858654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.084584][ T4247] syz-executor: attempt to access beyond end of device [ 132.084584][ T4247] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.234925][ T5603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.310'. [ 132.491080][ T5611] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.584189][ T5611] F2FS-fs (loop13): Unable to read 1th superblock [ 132.590893][ T5611] I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.622368][ T5611] F2FS-fs (loop13): Unable to read 2th superblock [ 132.651477][ T5618] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.679400][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.685952][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.704436][ T5618] F2FS-fs (loop13): Unable to read 1th superblock [ 132.754538][ T5618] I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 132.780742][ T5618] F2FS-fs (loop13): Unable to read 2th superblock [ 132.807264][ T5082] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.034699][ T5082] usb 3-1: Using ep0 maxpacket: 16 [ 133.042082][ T5082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.081753][ T5082] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.120893][ T5636] loop0: detected capacity change from 0 to 512 [ 133.128618][ T5082] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.158042][ T5082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.179451][ T5636] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 133.195492][ T5082] usb 3-1: config 0 descriptor?? [ 133.228063][ T5636] EXT4-fs (loop0): invalid journal inode [ 133.252851][ T5636] EXT4-fs (loop0): can't get journal size [ 133.281229][ T5636] EXT4-fs (loop0): 1 truncate cleaned up [ 133.312777][ T5636] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.472245][ T4250] EXT4-fs (loop0): unmounting filesystem. [ 133.636631][ T5082] HID 045e:07da: Invalid code 65791 type 1 [ 133.675043][ T5082] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input10 [ 133.708940][ T5082] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 134.151907][ T4296] usb 3-1: USB disconnect, device number 4 [ 134.888151][ T5690] loop2: detected capacity change from 0 to 1024 [ 135.478398][ T5700] loop2: detected capacity change from 0 to 4096 [ 135.504152][ T5700] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 135.634369][ T5700] ntfs3: loop2: failed to convert "c46c" to iso8859-14 [ 135.647517][ T5676] loop3: detected capacity change from 0 to 32768 [ 136.019652][ T5718] loop0: detected capacity change from 0 to 16 [ 136.050805][ T5714] loop2: detected capacity change from 0 to 2048 [ 136.097209][ T5718] erofs: (device loop0): mounted with root inode @ nid 36. [ 136.100265][ T5714] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.139777][ T5718] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 136.167619][ T5714] NILFS (loop2): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 136.180038][ T5718] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 136.203638][ T5718] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 136.366727][ T4965] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 136.567595][ T4965] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.585177][ T4965] usb 7-1: config 0 has no interface number 0 [ 136.601696][ T4965] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.634115][ T4965] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.643933][ T4965] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 136.683679][ T5737] loop2: detected capacity change from 0 to 512 [ 136.692534][ T4965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.707407][ T5737] EXT4-fs: Ignoring removed nobh option [ 136.740443][ T4965] usb 7-1: config 0 descriptor?? [ 136.756556][ T5737] EXT4-fs: Mount option(s) incompatible with ext2 [ 136.884293][ T4977] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.917233][ T5740] loop3: detected capacity change from 0 to 4096 [ 136.949705][ T5740] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 137.070857][ T5740] ntfs3: loop3: failed to convert "c46c" to cp862 [ 137.078413][ T4977] usb 2-1: Using ep0 maxpacket: 16 [ 137.093857][ T4977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.109034][ T5746] loop2: detected capacity change from 0 to 512 [ 137.123032][ T5746] EXT4-fs: Ignoring removed bh option [ 137.129693][ T4977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.183061][ T4965] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 137.194565][ T4977] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.195171][ T5746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 137.204075][ T4965] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 137.227665][ T4977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.236618][ T4965] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 137.245186][ T4965] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 137.252573][ T4965] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 137.261199][ T4977] usb 2-1: config 0 descriptor?? [ 137.268036][ T4965] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 137.278886][ T4965] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 137.289727][ T4965] prodikeys 0003:041E:2801.0004: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 137.304159][ T4965] hid_prodikeys: hid-prodikeys: failed to find output report [ 137.304159][ T4965] [ 137.318013][ T5746] System zones: 1-12 [ 137.380495][ T5746] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.414: corrupted in-inode xattr [ 137.416123][ T5746] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.414: couldn't read orphan inode 15 (err -117) [ 137.447733][ T5746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.458686][ T4965] usb 7-1: USB disconnect, device number 2 [ 137.512463][ T27] audit: type=1800 audit(1731865940.267:16): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.414" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 137.676999][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 137.697453][ T4977] HID 045e:07da: Invalid code 65791 type 1 [ 137.719960][ T4977] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input11 [ 137.813357][ T4977] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 137.879611][ T5769] loop2: detected capacity change from 0 to 64 [ 138.176150][ T4977] usb 2-1: USB disconnect, device number 4 [ 138.903297][ T5797] loop6: detected capacity change from 0 to 2048 [ 139.723426][ T5826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.440'. [ 139.840377][ T5829] netlink: 24 bytes leftover after parsing attributes in process `syz.6.441'. [ 139.938105][ T5833] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 139.973530][ T5836] program syz.2.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.994215][ T5833] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.442'. [ 140.344218][ T4296] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 140.536127][ T4296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.554057][ T4296] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.594026][ T4296] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.621736][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.654994][ T4296] usb 7-1: config 0 descriptor?? [ 140.692040][ T5856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.126970][ T4296] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.155758][ T4296] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.163278][ T4296] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.211451][ T4296] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.229135][ T4296] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.266910][ T4296] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 141.284220][ T5844] loop2: detected capacity change from 0 to 32768 [ 141.335240][ T4296] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 141.347456][ T5844] JBD2: Ignoring recovery information on journal [ 141.356817][ T4296] usb 7-1: USB disconnect, device number 3 [ 141.509341][ T5844] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 141.559985][ T5882] netlink: 'syz.1.456': attribute type 18 has an invalid length. [ 141.616894][ T5882] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.626264][ T5882] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.637496][ T5882] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.646288][ T5882] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.687161][ T5882] Zero length message leads to an empty skb [ 142.096975][ T4248] ocfs2: Unmounting device (7,2) on (node local) [ 142.393012][ T5912] netlink: 32 bytes leftover after parsing attributes in process `syz.6.468'. [ 142.931604][ T5084] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 143.062025][ T5939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.476'. [ 143.144060][ T5082] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.167227][ T5084] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.204008][ T5084] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.236662][ T5084] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.266480][ T5084] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.294066][ T5084] usb 7-1: SerialNumber: syz [ 143.344317][ T5082] usb 1-1: Using ep0 maxpacket: 32 [ 143.351987][ T5082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 143.401433][ T5082] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 143.411312][ T5082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.419558][ T5082] usb 1-1: Product: syz [ 143.424064][ T5082] usb 1-1: Manufacturer: syz [ 143.434586][ T5082] usb 1-1: SerialNumber: syz [ 143.445945][ T5082] usb 1-1: config 0 descriptor?? [ 143.475680][ T5082] hub 1-1:0.0: bad descriptor, ignoring hub [ 143.481689][ T5082] hub: probe of 1-1:0.0 failed with error -5 [ 143.506236][ T5082] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 143.530028][ T5084] usb 7-1: 0:2 : does not exist [ 143.540027][ T5082] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 143.620285][ T5084] usb 7-1: USB disconnect, device number 4 [ 143.736625][ T5082] usbtouchscreen: probe of 1-1:0.0 failed with error -8 [ 143.785075][ T5082] usb 1-1: USB disconnect, device number 5 [ 143.855578][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.430125][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.488'. [ 144.482403][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.651734][ T5978] loop0: detected capacity change from 0 to 8 [ 144.835260][ T5980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.951038][ T5985] loop6: detected capacity change from 0 to 256 [ 145.017516][ T5985] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 145.263860][ T5992] loop0: detected capacity change from 0 to 4096 [ 145.333091][ T5992] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.387676][ T5992] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 145.400936][ T4253] Bluetooth: hci5: command 0x0405 tx timeout [ 145.446835][ T4341] udevd[4341]: incorrect nilfs2 checksum on /dev/loop0 [ 145.451436][ T6002] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.479863][ T5962] loop3: detected capacity change from 0 to 32768 [ 145.824141][ T4973] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 146.014055][ T4973] usb 7-1: Using ep0 maxpacket: 16 [ 146.026695][ T4973] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.074102][ T4973] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.118134][ T4973] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 146.153057][ T4973] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 166 [ 146.216055][ T4973] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 146.245665][ T6020] capability: warning: `syz.2.504' uses 32-bit capabilities (legacy support in use) [ 146.260808][ T4973] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.302172][ T4973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.312800][ T6020] tipc: Started in network mode [ 146.332553][ T4973] usb 7-1: SerialNumber: syz [ 146.350148][ T6020] tipc: Node identity ac1414aa, cluster identity 4711 [ 146.353550][ T6004] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 146.386056][ T6020] tipc: Enabling of bearer rejected, failed to enable media [ 146.405478][ T4973] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 146.421942][ T4973] cdc_acm: probe of 7-1:1.0 failed with error -12 [ 146.651832][ T4973] usb 7-1: USB disconnect, device number 5 [ 146.914679][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.929748][ T5998] loop1: detected capacity change from 0 to 40427 [ 146.962163][ T5998] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 147.012812][ T5998] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 147.056929][ T5998] F2FS-fs (loop1): invalid crc value [ 147.072213][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.118399][ T5998] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.194888][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.344446][ T5998] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 147.351656][ T5998] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.426093][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.629857][ T4247] syz-executor: attempt to access beyond end of device [ 147.629857][ T4247] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 147.839036][ T33] tipc: Left network mode [ 148.089481][ T6059] device veth0 entered promiscuous mode [ 148.256485][ T6059] device veth0 left promiscuous mode [ 148.302320][ T6064] loop2: detected capacity change from 0 to 512 [ 148.333544][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.379337][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.403367][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.423045][ T4253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.425880][ T6064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.516: inode #1: comm syz.2.516: iget: illegal inode # [ 148.446518][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.456872][ T4253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.610187][ T6064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.516: error while reading EA inode 1 err=-117 [ 148.644192][ T6064] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 148.708464][ T6064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.516: inode #1: comm syz.2.516: iget: illegal inode # [ 148.770518][ T6064] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.516: error while reading EA inode 1 err=-117 [ 148.801138][ T6064] EXT4-fs (loop2): 1 orphan inode deleted [ 148.832218][ T6064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.931214][ T6064] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.516: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 149.089661][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 149.296258][ T5084] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 149.484617][ T5084] usb 2-1: Using ep0 maxpacket: 32 [ 149.496499][ T5084] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.505497][ T5084] usb 2-1: config 0 has no interface number 0 [ 149.535761][ T5084] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.540716][ T6097] loop6: detected capacity change from 0 to 2048 [ 149.556479][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.565235][ T5084] usb 2-1: Product: syz [ 149.585364][ T5084] usb 2-1: Manufacturer: syz [ 149.590116][ T6097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.590272][ T5084] usb 2-1: SerialNumber: syz [ 149.626602][ T5084] usb 2-1: config 0 descriptor?? [ 149.657495][ T5084] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.834675][ T6100] loop2: detected capacity change from 0 to 47 [ 149.886403][ T5084] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 149.922585][ T5084] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 149.975662][ T6100] MINIX-fs: deleted inode referenced: 9 [ 150.086110][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.190356][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.232064][ T6112] loop3: detected capacity change from 0 to 24 [ 150.443535][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 150.452928][ T5086] usb 2-1: USB disconnect, device number 5 [ 150.470818][ T5086] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 150.488876][ T5086] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 150.514371][ T4259] Bluetooth: hci1: command 0x0409 tx timeout [ 150.554571][ T5086] quatech2 2-1:0.51: device disconnected [ 151.006901][ T6136] autofs4:pid:6136:autofs_fill_super: could not open pipe file descriptor [ 151.170207][ T6062] chnl_net:caif_netlink_parms(): no params data found [ 151.239051][ T33] device hsr_slave_0 left promiscuous mode [ 151.258455][ T33] device hsr_slave_1 left promiscuous mode [ 151.315366][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.323212][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.360622][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.390838][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.411833][ T33] device bridge_slave_1 left promiscuous mode [ 151.434262][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.465866][ T33] device bridge_slave_0 left promiscuous mode [ 151.472304][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.550620][ T33] device veth1_macvtap left promiscuous mode [ 151.557359][ T33] device veth0_macvtap left promiscuous mode [ 151.563718][ T33] device veth1_vlan left promiscuous mode [ 151.570631][ T33] device veth0_vlan left promiscuous mode [ 151.728535][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.832305][ T6141] loop2: detected capacity change from 0 to 40427 [ 151.891163][ T6141] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.956288][ T6141] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.057828][ T4248] syz-executor: attempt to access beyond end of device [ 152.057828][ T4248] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.533694][ T33] team0 (unregistering): Port device team_slave_1 removed [ 152.585783][ T33] team0 (unregistering): Port device team_slave_0 removed [ 152.594576][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 152.638534][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.690797][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.771423][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.995661][ T4973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.204920][ T33] bond0 (unregistering): Released all slaves [ 153.640219][ T6172] loop6: detected capacity change from 0 to 1024 [ 153.694717][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.701952][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.752505][ T6172] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 153.779024][ T6062] device bridge_slave_0 entered promiscuous mode [ 153.846400][ T6172] EXT4-fs (loop6): orphan cleanup on readonly fs [ 153.853583][ T6172] EXT4-fs error (device loop6): ext4_free_blocks:6210: comm syz.6.548: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.873585][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.882171][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.884787][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.890721][ T6062] device bridge_slave_1 entered promiscuous mode [ 153.922116][ T6172] EXT4-fs (loop6): Remounting filesystem read-only [ 153.929967][ T6172] EXT4-fs (loop6): 1 truncate cleaned up [ 153.967093][ T6172] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 154.017053][ T6062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.057495][ T6062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.204854][ T5352] EXT4-fs (loop6): unmounting filesystem. [ 154.280817][ T6062] team0: Port device team_slave_0 added [ 154.361103][ T6062] team0: Port device team_slave_1 added [ 154.497146][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.564451][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.647882][ T6062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.674603][ T4259] Bluetooth: hci1: command 0x040f tx timeout [ 154.724067][ T4973] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 154.726295][ T6208] loop1: detected capacity change from 0 to 512 [ 154.755612][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.793991][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.818869][ T6211] loop3: detected capacity change from 0 to 256 [ 154.850449][ T6208] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 154.875062][ T6208] System zones: 0-2, 18-18, 34-35 [ 154.884930][ T6062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.910791][ T6211] FAT-fs (loop3): Directory bread(block 64) failed [ 154.924230][ T6211] FAT-fs (loop3): Directory bread(block 65) failed [ 154.924891][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.932627][ T4973] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.939508][ T6211] FAT-fs (loop3): Directory bread(block 66) failed [ 154.950515][ T4973] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.966987][ T4973] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.976808][ T6211] FAT-fs (loop3): Directory bread(block 67) failed [ 154.993629][ T4973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.006953][ T6211] FAT-fs (loop3): Directory bread(block 68) failed [ 155.013591][ T6208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 155.030298][ T6211] FAT-fs (loop3): Directory bread(block 69) failed [ 155.047064][ T6200] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 155.064493][ T6211] FAT-fs (loop3): Directory bread(block 70) failed [ 155.076390][ T6208] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.097917][ T6211] FAT-fs (loop3): Directory bread(block 71) failed [ 155.118256][ T6211] FAT-fs (loop3): Directory bread(block 72) failed [ 155.119758][ T6062] device hsr_slave_0 entered promiscuous mode [ 155.153034][ T6062] device hsr_slave_1 entered promiscuous mode [ 155.158403][ T6211] FAT-fs (loop3): Directory bread(block 73) failed [ 155.341686][ T6211] syz.3.562: attempt to access beyond end of device [ 155.341686][ T6211] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 155.405841][ T6211] syz.3.562: attempt to access beyond end of device [ 155.405841][ T6211] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 155.449320][ T27] audit: type=1800 audit(1731865958.207:17): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.562" name="file0" dev="loop3" ino=1048606 res=0 errno=0 [ 155.503122][ T4973] usb 7-1: USB disconnect, device number 6 [ 155.640889][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 155.818718][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.843568][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.873880][ T6216] loop2: detected capacity change from 0 to 32768 [ 155.891107][ T6216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.563 (6216) [ 155.936153][ T6216] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.941992][ T6062] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 155.961218][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.969829][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.991416][ T6216] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 156.000972][ T6216] BTRFS info (device loop2): setting nodatacow, compression disabled [ 156.012656][ T6062] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 156.023072][ T6216] BTRFS info (device loop2): max_inline at 0 [ 156.035322][ T4973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.044862][ T4969] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.048586][ T6062] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 156.074451][ T6216] BTRFS info (device loop2): enabling disk space caching [ 156.093923][ T6062] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 156.120914][ T6216] BTRFS info (device loop2): turning off barriers [ 156.154661][ T6216] BTRFS info (device loop2): turning on flush-on-commit [ 156.161690][ T6216] BTRFS info (device loop2): doing ref verification [ 156.224159][ T6216] BTRFS info (device loop2): force clearing of disk cache [ 156.247665][ T6216] BTRFS info (device loop2): enabling ssd optimizations [ 156.258075][ T4969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.294116][ T4969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.314055][ T6216] BTRFS info (device loop2): max_inline at 4096 [ 156.320411][ T6216] BTRFS info (device loop2): disk space caching is enabled [ 156.339480][ T4969] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 156.368998][ T4969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.400069][ T4969] usb 2-1: config 0 descriptor?? [ 156.440585][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.457677][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.485672][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.535271][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.562335][ T6216] BTRFS info (device loop2): rebuilding free space tree [ 156.648793][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.654466][ T6216] BTRFS info (device loop2): disabling free space tree [ 156.672077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.684080][ T6216] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.702247][ T6216] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.736712][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.743879][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.754777][ T4259] Bluetooth: hci1: command 0x0419 tx timeout [ 156.777866][ T6246] net_ratelimit: 4 callbacks suppressed [ 156.777886][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.800584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.848811][ T4969] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 156.865401][ T4969] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 156.891031][ T4969] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0007/input/input13 [ 156.915334][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.929027][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.991677][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.996820][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.998869][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.020136][ T5088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.029149][ T4969] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 157.053005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.082165][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.093706][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.115641][ T4969] usb 2-1: USB disconnect, device number 6 [ 157.183691][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.186727][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.281653][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.322045][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.340529][ T6244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.342140][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.394285][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.425679][ T4248] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.429775][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.499495][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.563684][ T6062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.611336][ T6062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.702097][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.572'. [ 157.753207][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.772832][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.035092][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.141718][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 158.395555][ T6288] device ip6gretap0 entered promiscuous mode [ 158.473245][ T6288] device ip6gretap0 left promiscuous mode [ 158.500528][ T6290] loop2: detected capacity change from 0 to 2048 [ 158.522999][ T6290] EXT4-fs: Ignoring removed oldalloc option [ 158.600332][ T6290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.678006][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.723186][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.736312][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.764372][ T4321] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 158.821766][ T4321] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 158.859704][ T4321] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.859704][ T4321] [ 158.928133][ T4321] EXT4-fs (loop2): Total free blocks count 0 [ 158.942535][ T4321] EXT4-fs (loop2): Free/Dirty block details [ 158.954437][ T4321] EXT4-fs (loop2): free_blocks=2415919104 [ 158.960276][ T4321] EXT4-fs (loop2): dirty_blocks=16 [ 158.984411][ T4321] EXT4-fs (loop2): Block reservation details [ 159.034171][ T4321] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 159.043435][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 159.074588][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.088136][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.129580][ T6274] loop3: detected capacity change from 0 to 32768 [ 159.341938][ T6274] XFS (loop3): Mounting V5 Filesystem [ 159.400695][ T6277] loop1: detected capacity change from 0 to 32768 [ 159.512159][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 159.541297][ T6274] XFS (loop3): Ending clean mount [ 159.578220][ T6277] XFS (loop1): Mounting V5 Filesystem [ 159.615590][ T6274] XFS (loop3): Quotacheck needed: Please wait. [ 159.681686][ T6277] XFS (loop1): Ending clean mount [ 159.804313][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.817857][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.864195][ T6274] XFS (loop3): Quotacheck: Done. [ 159.924452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.973186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.005901][ T6062] device veth0_vlan entered promiscuous mode [ 160.016084][ T6277] syz.1.574 (6277) used greatest stack depth: 18944 bytes left [ 160.035577][ T4247] XFS (loop1): Unmounting Filesystem [ 160.041725][ T4261] XFS (loop3): Unmounting Filesystem [ 160.084817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.093431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.123609][ T6062] device veth1_vlan entered promiscuous mode [ 160.163538][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.253799][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.276072][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.316167][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.330123][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.361137][ T6062] device veth0_macvtap entered promiscuous mode [ 160.388223][ T6352] loop2: detected capacity change from 0 to 2048 [ 160.415383][ T6062] device veth1_macvtap entered promiscuous mode [ 160.484906][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.501364][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.503354][ T6352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.512206][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.531452][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.541708][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.554146][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.564530][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.576190][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.588017][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.598605][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.609280][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.620393][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.640380][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.658359][ T6352] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 160.673917][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.689188][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.699437][ T6352] EXT4-fs (loop2): Remounting filesystem read-only [ 160.715707][ T6062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.745480][ T6062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.781509][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.793557][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 160.806641][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.871245][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.881936][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.915154][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.933568][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.955007][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.979023][ T6062] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.019625][ T6062] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.039120][ T6062] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.063115][ T6062] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.256526][ T4964] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 161.402059][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.430710][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.479514][ T4964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.505261][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.510927][ T4964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.534713][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.543771][ T4964] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.579306][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.605426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.613229][ T4964] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 161.653433][ T4964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.688377][ T4964] usb 7-1: config 0 descriptor?? [ 161.908165][ T6368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.946455][ T6368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.999823][ T4964] usbhid 7-1:0.0: can't add hid device: -71 [ 162.006734][ T4964] usbhid: probe of 7-1:0.0 failed with error -71 [ 162.044699][ T4964] usb 7-1: USB disconnect, device number 7 [ 162.117009][ T4969] net_ratelimit: 2 callbacks suppressed [ 162.117037][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.284568][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.325223][ T6365] loop2: detected capacity change from 0 to 32768 [ 162.491039][ T6367] loop3: detected capacity change from 0 to 40427 [ 162.523236][ T6367] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 162.541829][ T6367] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 162.564748][ T6367] F2FS-fs (loop3): invalid crc value [ 162.585626][ T6367] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.606064][ T6392] loop1: detected capacity change from 0 to 256 [ 162.634094][ T4964] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 162.817323][ T6367] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 162.835383][ T4964] usb 7-1: Using ep0 maxpacket: 8 [ 162.840968][ T6367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.850494][ T4964] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.874345][ T4964] usb 7-1: config 0 has no interface number 0 [ 162.880526][ T4964] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.926908][ T4964] usb 7-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.960982][ T4964] usb 7-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.991186][ T4964] usb 7-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.010038][ T4964] usb 7-1: config 0 interface 1 has no altsetting 0 [ 163.017163][ T4964] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 163.048200][ T4964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.093083][ T4964] usb 7-1: config 0 descriptor?? [ 163.322842][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.352404][ T4295] usb 7-1: USB disconnect, device number 8 [ 163.741682][ T6423] netlink: 'syz.2.602': attribute type 16 has an invalid length. [ 163.764201][ T6423] netlink: 48 bytes leftover after parsing attributes in process `syz.2.602'. [ 163.794718][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.354665][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.476260][ T27] audit: type=1326 audit(1731865967.237:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 164.503729][ T6443] loop3: detected capacity change from 0 to 256 [ 164.580977][ T27] audit: type=1326 audit(1731865967.267:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 164.673886][ T27] audit: type=1326 audit(1731865967.267:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 164.769447][ T27] audit: type=1326 audit(1731865967.267:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 164.884255][ T27] audit: type=1326 audit(1731865967.277:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 164.960123][ T27] audit: type=1326 audit(1731865967.307:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 165.043558][ T27] audit: type=1326 audit(1731865967.307:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 165.144879][ T27] audit: type=1326 audit(1731865967.327:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073597e719 code=0x7ffc0000 [ 165.168148][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.400232][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.675648][ T6464] loop6: detected capacity change from 0 to 128 [ 165.920307][ T6467] loop7: detected capacity change from 0 to 4096 [ 166.086810][ T6464] EXT4-fs (loop6): Test dummy encryption mode enabled [ 166.201024][ T6464] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 166.255045][ T6464] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.313258][ T6450] loop3: detected capacity change from 0 to 32768 [ 166.437948][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.491501][ T5352] EXT4-fs (loop6): unmounting filesystem. [ 166.651642][ T6450] XFS (loop3): Mounting V5 Filesystem [ 166.801574][ T6450] XFS (loop3): Ending clean mount [ 167.151829][ T4261] XFS (loop3): Unmounting Filesystem [ 167.484519][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.675466][ T6487] loop1: detected capacity change from 0 to 32768 [ 168.154644][ T6534] loop2: detected capacity change from 0 to 256 [ 168.195296][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.268122][ T6534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 168.401666][ T6540] loop7: detected capacity change from 0 to 2048 [ 168.443299][ T6540] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.514834][ T5086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.568921][ T6544] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.569303][ T6540] syz.7.637: attempt to access beyond end of device [ 168.569303][ T6540] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 168.609489][ T6546] loop3: detected capacity change from 0 to 256 [ 168.812480][ T6540] syz.7.637: attempt to access beyond end of device [ 168.812480][ T6540] loop7: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 168.894234][ T6540] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=3) [ 168.930206][ T6540] NILFS (loop7): error -5 reading inode: ino=12 [ 169.367683][ T6573] netlink: 'syz.2.649': attribute type 8 has an invalid length. [ 169.387818][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 169.554295][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.614889][ T6581] loop7: detected capacity change from 0 to 164 [ 169.795260][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.127152][ T6593] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 170.260852][ T4321] Bluetooth: hci4: Frame reassembly failed (-84) [ 170.316321][ T6557] loop1: detected capacity change from 0 to 32768 [ 170.340044][ T6557] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.642 (6557) [ 170.388201][ T6557] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.439724][ T6557] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 170.457766][ T6557] BTRFS info (device loop1): using free space tree [ 170.501509][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 170.604350][ T4296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.824607][ T6557] BTRFS info (device loop1): enabling ssd optimizations [ 170.986974][ T6634] mmap: syz.2.664 (6634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.234523][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.286062][ T4247] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.655547][ T5094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.694448][ T4969] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.904472][ T4969] usb 4-1: Using ep0 maxpacket: 16 [ 171.915056][ T4969] usb 4-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 171.961056][ T4969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.994342][ T4969] usb 4-1: Product: syz [ 172.010305][ T4969] usb 4-1: Manufacturer: syz [ 172.037019][ T4969] usb 4-1: SerialNumber: syz [ 172.052759][ T4969] usb 4-1: config 0 descriptor?? [ 172.073178][ T4969] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 172.194424][ T4262] Bluetooth: hci4: command 0x1003 tx timeout [ 172.194827][ T4259] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 172.365462][ T4969] usb 4-1: USB disconnect, device number 5 [ 172.435198][ T6672] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 172.565169][ T6677] loop7: detected capacity change from 0 to 256 [ 172.685043][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.784490][ T5091] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 172.984201][ T5091] usb 7-1: Using ep0 maxpacket: 32 [ 172.991488][ T5091] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 173.051493][ T5091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.101827][ T5091] usb 7-1: config 0 descriptor?? [ 173.110393][ T5091] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 173.230201][ T6660] loop1: detected capacity change from 0 to 32768 [ 173.242573][ T6699] loop2: detected capacity change from 0 to 512 [ 173.278109][ T6699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.285938][ T6698] loop7: detected capacity change from 0 to 1024 [ 173.326727][ T6660] JBD2: Ignoring recovery information on journal [ 173.358674][ T6698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.428282][ T6660] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 173.503598][ T6699] EXT4-fs (loop2): 1 orphan inode deleted [ 173.515119][ T6699] EXT4-fs (loop2): 1 truncate cleaned up [ 173.524118][ T6699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.566580][ T6698] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 173.724861][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.827380][ T4247] ocfs2: Unmounting device (7,1) on (node local) [ 173.841526][ T6693] loop3: detected capacity change from 0 to 40427 [ 173.848756][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 173.901143][ T6693] F2FS-fs (loop3): invalid crc value [ 173.923334][ T5091] gspca_vc032x: reg_w err -71 [ 173.928362][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 173.933683][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 173.951348][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 173.969186][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 173.975026][ T6693] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.994107][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.000142][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.014072][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.024390][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.040738][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.055518][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.066297][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.075131][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.081770][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.088813][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.098720][ T6693] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.108063][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.114720][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.120110][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.126154][ T5091] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.131481][ T5091] gspca_vc032x: Unknown sensor... [ 174.148060][ T5091] vc032x: probe of 7-1:0.0 failed with error -22 [ 174.176971][ T5091] usb 7-1: USB disconnect, device number 9 [ 174.210258][ T6062] EXT4-fs (loop7): unmounting filesystem. [ 174.275729][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.334841][ T6718] loop2: detected capacity change from 0 to 128 [ 174.354902][ T4261] syz-executor: attempt to access beyond end of device [ 174.354902][ T4261] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.413774][ T6718] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 174.516542][ T6718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.754885][ T5091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.973781][ T6743] loop2: detected capacity change from 0 to 256 [ 175.010619][ T6743] exfat: Deprecated parameter 'utf8' [ 175.062232][ T6743] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 175.581737][ T6766] loop1: detected capacity change from 0 to 16 [ 175.617646][ T6766] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.661501][ T6767] loop3: detected capacity change from 0 to 256 [ 175.692749][ T6767] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 175.730278][ T6766] overlayfs: failed to get redirect (-117) [ 175.794898][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.889065][ T5091] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.953448][ T6774] loop1: detected capacity change from 0 to 256 [ 176.023449][ T4379] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.094195][ T5091] usb 3-1: Using ep0 maxpacket: 16 [ 176.109875][ T5091] usb 3-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 176.144296][ T5091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.162839][ T5091] usb 3-1: Product: syz [ 176.171502][ T5091] usb 3-1: Manufacturer: syz [ 176.181587][ T5091] usb 3-1: SerialNumber: syz [ 176.218766][ T5091] usb 3-1: config 0 descriptor?? [ 176.248840][ T5091] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 176.467223][ T5091] usb 3-1: USB disconnect, device number 5 [ 176.480968][ T6786] loop1: detected capacity change from 0 to 2048 [ 176.503794][ T6788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.538413][ T6760] loop6: detected capacity change from 0 to 40427 [ 176.550270][ T6788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.558898][ T6786] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002e018, mo2=0002] [ 176.575803][ T6760] F2FS-fs (loop6): invalid crc value [ 176.587600][ T6786] System zones: 0-4 [ 176.592528][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.598788][ T6788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.604633][ T6786] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.619923][ T6788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.661531][ T6786] fs-verity: sha512 using implementation "sha512-avx2" [ 176.665850][ T6760] F2FS-fs (loop6): Found nat_bits in checkpoint [ 176.688099][ T6787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.751965][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 176.765876][ T6760] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 176.919507][ T5352] syz-executor: attempt to access beyond end of device [ 176.919507][ T5352] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.063451][ T6805] loop3: detected capacity change from 0 to 8 [ 177.318210][ T6810] loop1: detected capacity change from 0 to 8 [ 177.413152][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 177.414910][ T6813] loop3: detected capacity change from 0 to 512 [ 177.450110][ T6813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.517480][ T6813] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 177.542489][ T6813] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.717: invalid indirect mapped block 1 (level 1) [ 177.563771][ T6813] EXT4-fs (loop3): 1 truncate cleaned up [ 177.570536][ T6813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.640489][ T6821] loop6: detected capacity change from 0 to 2048 [ 177.683040][ T6821] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 177.700501][ T6819] loop2: detected capacity change from 0 to 4096 [ 177.713385][ T6821] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 177.761349][ T6825] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.789742][ T6821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.864460][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 177.875720][ T5091] net_ratelimit: 4 callbacks suppressed [ 177.875745][ T5091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.207477][ T6840] netlink: 'syz.1.728': attribute type 19 has an invalid length. [ 178.287318][ T6849] loop7: detected capacity change from 0 to 256 [ 178.314426][ T6849] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.344220][ T6849] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 178.402814][ T6849] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.484024][ T5082] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 178.503097][ T6856] random: crng reseeded on system resumption [ 178.703319][ T6861] device hsr0 entered promiscuous mode [ 178.709035][ T5082] usb 7-1: Using ep0 maxpacket: 32 [ 178.716479][ T5082] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 178.748128][ T5082] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 178.789637][ T5082] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 178.825291][ T5082] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 178.854239][ T5082] usb 7-1: config 0 interface 0 has no altsetting 0 [ 178.872648][ T6861] device hsr0 left promiscuous mode [ 178.897210][ T5082] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 178.922448][ T5082] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 178.947231][ T5082] usb 7-1: Product: syz [ 178.953740][ T5082] usb 7-1: Manufacturer: syz [ 178.966600][ T5082] usb 7-1: SerialNumber: syz [ 178.982102][ T5094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.014741][ T5082] usb 7-1: config 0 descriptor?? [ 179.036727][ T5082] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 179.126840][ T5082] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 179.325922][ T5082] usb 7-1: USB disconnect, device number 10 [ 179.341579][ T5082] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 179.403306][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.686259][ T6890] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.696932][ T5094] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.709317][ T6891] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 179.709317][ T6891] The task syz.1.746 (6891) triggered the difference, watch for misbehavior. [ 179.896676][ T5094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.917077][ T5094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.939595][ T5094] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 179.949216][ T5094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.960145][ T5094] usb 4-1: config 0 descriptor?? [ 180.044635][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.313544][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 180.354326][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.371392][ T6906] bridge0: port 3(macvlan2) entered blocking state [ 180.387785][ T5094] logitech-djreceiver 0003:046D:C534.0008: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input0 [ 180.411093][ T6906] bridge0: port 3(macvlan2) entered disabled state [ 180.583603][ T4297] usb 4-1: USB disconnect, device number 6 [ 180.899538][ T6918] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 181.090002][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.126976][ T6904] loop6: detected capacity change from 0 to 32768 [ 181.142655][ T6904] XFS: noikeep mount option is deprecated. [ 181.206363][ T6922] loop1: detected capacity change from 0 to 128 [ 181.217018][ T6928] loop3: detected capacity change from 0 to 4096 [ 181.251934][ T6904] XFS (loop6): Mounting V5 Filesystem [ 181.316845][ T6936] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.463414][ T6904] XFS (loop6): Ending clean mount [ 181.468939][ T4247] sysv_free_block: flc_count > flc_size [ 181.469337][ T4247] sysv_free_block: flc_count > flc_size [ 181.495798][ T4247] sysv_free_block: flc_count > flc_size [ 181.501407][ T4247] sysv_free_block: flc_count > flc_size [ 181.530328][ T6904] XFS (loop6): Quotacheck needed: Please wait. [ 181.573019][ T4247] sysv_free_block: flc_count > flc_size [ 181.607368][ T4247] sysv_free_block: flc_count > flc_size [ 181.630927][ T6904] XFS (loop6): Quotacheck: Done. [ 181.654712][ T4247] sysv_free_block: flc_count > flc_size [ 181.660371][ T4247] sysv_free_block: flc_count > flc_size [ 181.700061][ T4247] sysv_free_block: flc_count > flc_size [ 181.706329][ T4247] sysv_free_block: flc_count > flc_size [ 181.731724][ T4247] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 181.914730][ T5352] XFS (loop6): Unmounting Filesystem [ 182.120290][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.830721][ T6981] random: crng reseeded on system resumption [ 183.154673][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.394335][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.002214][ T7010] loop3: detected capacity change from 0 to 16 [ 184.032387][ T7010] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 184.204711][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.358931][ T6992] loop7: detected capacity change from 0 to 32768 [ 184.370642][ T6991] loop2: detected capacity change from 0 to 32768 [ 184.393079][ T6992] XFS: ikeep mount option is deprecated. [ 184.403175][ T6991] XFS: ikeep mount option is deprecated. [ 184.418614][ T6992] XFS: ikeep mount option is deprecated. [ 184.492565][ T6991] XFS (loop2): Mounting V5 Filesystem [ 184.542502][ T6998] loop1: detected capacity change from 0 to 32768 [ 184.597627][ T6992] XFS (loop7): Mounting V5 Filesystem [ 184.770478][ T6991] XFS (loop2): Ending clean mount [ 184.789356][ T6991] XFS (loop2): Quotacheck needed: Please wait. [ 184.843529][ T6992] XFS (loop7): Ending clean mount [ 184.905204][ T6991] XFS (loop2): Quotacheck: Done. [ 185.040616][ T6062] XFS (loop7): Unmounting Filesystem [ 185.188745][ T4248] XFS (loop2): Unmounting Filesystem [ 185.235227][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.479186][ T7024] loop3: detected capacity change from 0 to 32768 [ 185.569317][ T7024] XFS (loop3): Mounting V5 Filesystem [ 185.625018][ T7024] XFS (loop3): Ending clean mount [ 185.723701][ T4261] XFS (loop3): Unmounting Filesystem [ 186.143579][ T7073] loop6: detected capacity change from 0 to 512 [ 186.202244][ T7073] EXT4-fs: Ignoring removed nobh option [ 186.231563][ T7073] EXT4-fs: Mount option(s) incompatible with ext2 [ 186.284761][ T4297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.446174][ T4964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.657684][ T7082] loop7: detected capacity change from 0 to 1024 [ 186.684858][ T7082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.804959][ T7082] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 187.070483][ T6062] EXT4-fs (loop7): unmounting filesystem. [ 187.299887][ T7065] loop1: detected capacity change from 0 to 32768 [ 187.343441][ T7108] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.346171][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.354785][ T7065] XFS: attr2 mount option is deprecated. [ 187.418840][ T7065] XFS: ikeep mount option is deprecated. [ 187.444150][ T7065] XFS: noikeep mount option is deprecated. [ 187.611783][ T7065] XFS (loop1): Mounting V5 Filesystem [ 187.678211][ T7093] loop3: detected capacity change from 0 to 32768 [ 187.791301][ T7065] XFS (loop1): Ending clean mount [ 187.815750][ T7065] XFS (loop1): Quotacheck needed: Please wait. [ 187.974843][ T7065] XFS (loop1): Quotacheck: Done. [ 188.067432][ T7065] syz.1.796 (7065) used greatest stack depth: 18736 bytes left [ 188.161489][ T4247] XFS (loop1): Unmounting Filesystem [ 188.356528][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.961965][ T7144] loop1: detected capacity change from 0 to 512 [ 188.996748][ T4975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.105845][ T7144] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.141610][ T7144] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.405850][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.474515][ T4969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.495535][ T7167] loop3: detected capacity change from 0 to 256 [ 189.517488][ T4247] EXT4-fs (loop1): unmounting filesystem. [ 189.662069][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.824'. [ 189.754207][ T4238] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.944874][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 189.952642][ T4238] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 189.981308][ T4238] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 190.012946][ T4238] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 190.054180][ T4238] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 190.088947][ T4238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.130961][ T4238] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 190.168794][ T4238] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 190.191588][ T4238] usb 3-1: Product: syz [ 190.199617][ T7191] netlink: 'syz.6.829': attribute type 1 has an invalid length. [ 190.208298][ T4238] usb 3-1: Manufacturer: syz [ 190.223232][ T4238] usb 3-1: SerialNumber: syz [ 190.239092][ T4238] usb 3-1: config 0 descriptor?? [ 190.265105][ T4238] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 190.315406][ T4238] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 190.435596][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.493282][ T4238] usb 3-1: USB disconnect, device number 6 [ 190.500154][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 190.501312][ T7196] loop6: detected capacity change from 0 to 128 [ 190.540779][ T4238] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 190.691546][ T5352] sysv_free_block: flc_count > flc_size [ 190.730544][ T5352] sysv_free_block: flc_count > flc_size [ 190.766628][ T5352] sysv_free_block: flc_count > flc_size [ 190.772416][ T5352] sysv_free_block: flc_count > flc_size [ 190.791127][ T5352] sysv_free_block: flc_count > flc_size [ 190.802614][ T5352] sysv_free_block: flc_count > flc_size [ 190.809952][ T5352] sysv_free_block: flc_count > flc_size [ 190.820497][ T5352] sysv_free_block: flc_count > flc_size [ 190.829109][ T5352] sysv_free_block: flc_count > flc_size [ 190.841000][ T5352] sysv_free_block: flc_count > flc_size [ 190.848918][ T5352] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 191.044652][ T7204] loop6: detected capacity change from 0 to 4096 [ 191.144654][ T7208] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.167343][ T7186] loop7: detected capacity change from 0 to 32768 [ 191.185095][ T7186] XFS: attr2 mount option is deprecated. [ 191.190826][ T7186] XFS: ikeep mount option is deprecated. [ 191.213699][ T7186] XFS: noikeep mount option is deprecated. [ 191.359332][ T7186] XFS (loop7): Mounting V5 Filesystem [ 191.493565][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.578433][ T7186] XFS (loop7): Ending clean mount [ 191.606189][ T7186] XFS (loop7): Quotacheck needed: Please wait. [ 191.768534][ T7186] XFS (loop7): Quotacheck: Done. [ 191.930459][ T7205] loop3: detected capacity change from 0 to 32768 [ 191.965934][ T4969] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 191.980774][ T6062] XFS (loop7): Unmounting Filesystem [ 191.991086][ T7205] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.833 (7205) [ 192.049974][ T7205] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 192.110941][ T7205] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 192.162592][ T7205] BTRFS info (device loop3): enabling auto defrag [ 192.174721][ T4969] usb 3-1: Using ep0 maxpacket: 32 [ 192.183255][ T7205] BTRFS info (device loop3): doing ref verification [ 192.186540][ T4969] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 192.200939][ T7205] BTRFS info (device loop3): max_inline at 0 [ 192.229825][ T7205] BTRFS info (device loop3): force clearing of disk cache [ 192.240940][ T4969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.249641][ T7205] BTRFS info (device loop3): turning on sync discard [ 192.267168][ T7205] BTRFS info (device loop3): disabling free space tree [ 192.277546][ T4969] usb 3-1: config 0 descriptor?? [ 192.319843][ T4969] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 192.515015][ T4295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.523206][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.546951][ T7205] BTRFS info (device loop3): enabling ssd optimizations [ 192.578706][ T7205] BTRFS info (device loop3): rebuilding free space tree [ 192.684592][ T7205] BTRFS info (device loop3): disabling free space tree [ 192.701332][ T7205] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 192.712766][ T7205] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.879415][ T7269] loop1: detected capacity change from 0 to 256 [ 192.943190][ T7272] loop7: detected capacity change from 0 to 128 [ 193.007896][ T7269] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 193.058120][ T4261] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.150966][ T4969] gspca_vc032x: reg_w err -71 [ 193.156465][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.177160][ T6062] sysv_free_block: flc_count > flc_size [ 193.183056][ T6062] sysv_free_block: flc_count > flc_size [ 193.185981][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.189901][ T6062] sysv_free_block: flc_count > flc_size [ 193.215883][ T6062] sysv_free_block: flc_count > flc_size [ 193.222251][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.236871][ T6062] sysv_free_block: flc_count > flc_size [ 193.242501][ T6062] sysv_free_block: flc_count > flc_size [ 193.248172][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.253508][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.284024][ T6062] sysv_free_block: flc_count > flc_size [ 193.288807][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.289601][ T6062] sysv_free_block: flc_count > flc_size [ 193.289612][ T6062] sysv_free_block: flc_count > flc_size [ 193.289622][ T6062] sysv_free_block: flc_count > flc_size [ 193.290235][ T6062] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 193.324142][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.339767][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.360362][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.379511][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.404288][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.409747][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.432953][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.450268][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.493760][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.524448][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.550150][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.567307][ T5094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.573376][ T4969] gspca_vc032x: I2c Bus Busy Wait 00 [ 193.613117][ T4969] gspca_vc032x: Unknown sensor... [ 193.623214][ T4969] vc032x: probe of 3-1:0.0 failed with error -22 [ 193.663546][ T4969] usb 3-1: USB disconnect, device number 7 [ 193.957333][ T7288] loop2: detected capacity change from 0 to 256 [ 194.001952][ T7288] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.039775][ T7288] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 194.106075][ T7288] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 194.126791][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.133230][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.322412][ T7295] loop3: detected capacity change from 0 to 2048 [ 194.372036][ T7295] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 194.432175][ T7293] loop7: detected capacity change from 0 to 4096 [ 194.439901][ T5094] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 194.441366][ T7295] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 194.473237][ T7301] loop2: detected capacity change from 0 to 2048 [ 194.502058][ T7295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.573201][ T7307] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.595258][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.640066][ T5094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.672696][ T7301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.704252][ T7301] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.713470][ T5094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.764699][ T27] audit: type=1800 audit(1731865997.527:26): pid=7301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.852" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 194.781717][ T5094] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 194.837321][ T5094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.853058][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 194.894320][ T5094] usb 2-1: config 0 descriptor?? [ 195.345868][ T5094] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 195.352730][ T5094] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 195.380328][ T5094] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 195.408889][ T5094] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 195.437249][ T5094] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 195.481839][ T5094] sony 0003:1345:3008.0009: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 195.522011][ T5094] sony 0003:1345:3008.0009: failed to claim input [ 195.601577][ T5094] usb 2-1: USB disconnect, device number 7 [ 195.655405][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.688906][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.716954][ T7305] loop6: detected capacity change from 0 to 32768 [ 195.790066][ T7305] JBD2: Ignoring recovery information on journal [ 195.913779][ T7335] loop3: detected capacity change from 0 to 128 [ 195.950799][ T7305] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 195.961109][ T7335] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 196.045637][ T7335] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.166467][ T5352] ocfs2: Unmounting device (7,6) on (node local) [ 196.202691][ T4262] Bluetooth: hci2: command 0x0406 tx timeout [ 196.204244][ T4253] Bluetooth: hci3: command 0x0406 tx timeout [ 196.457062][ T7346] loop3: detected capacity change from 0 to 164 [ 196.675130][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.762199][ T7314] loop2: detected capacity change from 0 to 32768 [ 196.806990][ T7314] XFS: attr2 mount option is deprecated. [ 196.812748][ T7314] XFS: ikeep mount option is deprecated. [ 196.848397][ T7314] XFS: noikeep mount option is deprecated. [ 196.972385][ T7364] loop7: detected capacity change from 0 to 512 [ 196.988722][ T7364] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 197.021155][ T7314] XFS (loop2): Mounting V5 Filesystem [ 197.050096][ T7364] EXT4-fs (loop7): 1 orphan inode deleted [ 197.060836][ T7364] EXT4-fs (loop7): 1 truncate cleaned up [ 197.112741][ T7364] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 197.226357][ T7314] XFS (loop2): Ending clean mount [ 197.278568][ T7314] XFS (loop2): Quotacheck needed: Please wait. [ 197.327837][ T7364] ------------[ cut here ]------------ [ 197.333348][ T7364] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 197.347062][ T7364] WARNING: CPU: 1 PID: 7364 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 197.357047][ T7364] Modules linked in: [ 197.360990][ T7364] CPU: 1 PID: 7364 Comm: syz.7.870 Not tainted 6.1.118-syzkaller #0 [ 197.369000][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 197.379096][ T7364] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 197.384892][ T7364] Code: 8b 16 48 c7 c0 20 11 da 90 48 39 c2 74 46 f6 05 d5 3d de 03 01 75 3d c6 05 cc 3d de 03 01 48 c7 c7 60 22 0c 8b e8 0e 2e ab f6 <0f> 0b eb 26 e8 b5 45 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 197.404621][ T7364] RSP: 0018:ffffc90010ebf410 EFLAGS: 00010046 [ 197.410724][ T7364] RAX: 69d7f39f483be900 RBX: ffffffff90c5c920 RCX: 0000000000040000 [ 197.418730][ T7364] RDX: ffffc90015c00000 RSI: 0000000000005a6b RDI: 0000000000005a6c [ 197.426752][ T7364] RBP: ffffc90010ebf510 R08: ffffffff8152a88e R09: ffffed10171e4f1c [ 197.434756][ T7364] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 197.442761][ T7364] R13: 1ffff920021d7e90 R14: ffff888058ecd2c8 R15: ffffffff974c4f41 [ 197.450772][ T7364] FS: 00007f8a32b856c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 197.459742][ T7364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.466368][ T7364] CR2: 0000001b2dc09ff8 CR3: 00000000628c6000 CR4: 00000000003506e0 [ 197.474380][ T7364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.482386][ T7364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 197.490403][ T7364] Call Trace: [ 197.493711][ T7364] [ 197.496668][ T7364] ? __warn+0x15a/0x520 [ 197.500860][ T7364] ? look_up_lock_class+0xc2/0x140 [ 197.506023][ T7364] ? report_bug+0x2af/0x500 [ 197.506491][ T7314] XFS (loop2): Quotacheck: Done. [ 197.510554][ T7364] ? look_up_lock_class+0xc2/0x140 [ 197.510591][ T7364] ? handle_bug+0x3d/0x70 [ 197.525006][ T7364] ? exc_invalid_op+0x16/0x40 [ 197.529714][ T7364] ? asm_exc_invalid_op+0x16/0x20 [ 197.534784][ T7364] ? __warn_printk+0x28e/0x350 [ 197.539587][ T7364] ? look_up_lock_class+0xc2/0x140 [ 197.544740][ T7364] register_lock_class+0x100/0x990 [ 197.549920][ T7364] ? is_dynamic_key+0x260/0x260 [ 197.554815][ T7364] ? mark_lock+0x9a/0x340 [ 197.559251][ T7364] __lock_acquire+0xd3/0x1f80 [ 197.563980][ T7364] lock_acquire+0x1f8/0x5a0 [ 197.568557][ T7364] ? ext4_move_extents+0x3a0/0xe10 [ 197.573704][ T7364] ? read_lock_is_recursive+0x10/0x10 [ 197.579119][ T7364] ? __might_sleep+0xb0/0xb0 [ 197.583750][ T7364] ? rwsem_write_trylock+0x166/0x210 [ 197.589083][ T7364] ? inode_owner_or_capable+0x210/0x210 [ 197.594674][ T7364] ? clear_nonspinnable+0x60/0x60 [ 197.599920][ T7364] down_write_nested+0x39/0x60 [ 197.604723][ T7364] ? ext4_move_extents+0x3a0/0xe10 [ 197.609886][ T7364] ext4_move_extents+0x3a0/0xe10 [ 197.614882][ T7364] ? rcu_read_lock_any_held+0xb3/0x160 [ 197.620417][ T7364] ? ext4_double_up_write_data_sem+0x30/0x30 [ 197.626446][ T7364] ext4_ioctl+0x3a8d/0x5f60 [ 197.630993][ T7364] ? kasan_set_track+0x4b/0x70 [ 197.635806][ T7364] ? security_file_ioctl+0x6d/0xa0 [ 197.640954][ T7364] ? __se_sys_ioctl+0x47/0x160 [ 197.645744][ T7364] ? do_syscall_64+0x3b/0xb0 [ 197.650373][ T7364] ? ext4_fileattr_set+0x1770/0x1770 [ 197.655714][ T7364] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 197.660596][ T7364] ? __x64_compat_sys_ioctl+0x80/0x80 [ 197.665999][ T7364] ? __lock_acquire+0x1f80/0x1f80 [ 197.671074][ T7364] ? lockdep_hardirqs_on+0x94/0x130 [ 197.676314][ T7364] ? __kmem_cache_free+0x25c/0x3c0 [ 197.681465][ T7364] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 197.687145][ T7364] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 197.692816][ T7364] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 197.698507][ T7364] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 197.704010][ T7364] ? __fget_files+0x28/0x4a0 [ 197.708639][ T7364] ? __fget_files+0x28/0x4a0 [ 197.713261][ T7364] ? __fget_files+0x435/0x4a0 [ 197.717974][ T7364] ? __fget_files+0x28/0x4a0 [ 197.722619][ T7364] ? bpf_lsm_file_ioctl+0x5/0x10 [ 197.727596][ T7364] ? security_file_ioctl+0x7d/0xa0 [ 197.732739][ T7364] ? ext4_fileattr_set+0x1770/0x1770 [ 197.738085][ T7364] __se_sys_ioctl+0xf1/0x160 [ 197.742714][ T7364] do_syscall_64+0x3b/0xb0 [ 197.747163][ T7364] ? clear_bhb_loop+0x45/0xa0 [ 197.751896][ T7364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.757840][ T7364] RIP: 0033:0x7f8a31d7e719 [ 197.762299][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.781934][ T7364] RSP: 002b:00007f8a32b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.790413][ T7364] RAX: ffffffffffffffda RBX: 00007f8a31f35f80 RCX: 00007f8a31d7e719 [ 197.798421][ T7364] RDX: 0000000020000000 RSI: 00000000c028660f RDI: 0000000000000004 [ 197.806424][ T7364] RBP: 00007f8a31df175e R08: 0000000000000000 R09: 0000000000000000 [ 197.814442][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.822439][ T7364] R13: 0000000000000000 R14: 00007f8a31f35f80 R15: 00007ffc4d0fbd78 [ 197.830451][ T7364] [ 197.833502][ T7364] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 197.840821][ T7364] CPU: 1 PID: 7364 Comm: syz.7.870 Not tainted 6.1.118-syzkaller #0 [ 197.848840][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 197.858944][ T7364] Call Trace: [ 197.862244][ T7364] [ 197.865205][ T7364] dump_stack_lvl+0x1e3/0x2cb [ 197.869933][ T7364] ? nf_tcp_handle_invalid+0x642/0x642 [ 197.875432][ T7364] ? panic+0x764/0x764 [ 197.879546][ T7364] ? vscnprintf+0x59/0x80 [ 197.883919][ T7364] panic+0x318/0x764 [ 197.887872][ T7364] ? __warn+0x169/0x520 [ 197.892063][ T7364] ? memcpy_page_flushcache+0xfc/0xfc [ 197.897505][ T7364] __warn+0x348/0x520 [ 197.901529][ T7364] ? look_up_lock_class+0xc2/0x140 [ 197.906687][ T7364] report_bug+0x2af/0x500 [ 197.911048][ T7364] ? look_up_lock_class+0xc2/0x140 [ 197.916198][ T7364] handle_bug+0x3d/0x70 [ 197.920388][ T7364] exc_invalid_op+0x16/0x40 [ 197.924928][ T7364] asm_exc_invalid_op+0x16/0x20 [ 197.929822][ T7364] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 197.935589][ T7364] Code: 8b 16 48 c7 c0 20 11 da 90 48 39 c2 74 46 f6 05 d5 3d de 03 01 75 3d c6 05 cc 3d de 03 01 48 c7 c7 60 22 0c 8b e8 0e 2e ab f6 <0f> 0b eb 26 e8 b5 45 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 197.955229][ T7364] RSP: 0018:ffffc90010ebf410 EFLAGS: 00010046 [ 197.961332][ T7364] RAX: 69d7f39f483be900 RBX: ffffffff90c5c920 RCX: 0000000000040000 [ 197.969341][ T7364] RDX: ffffc90015c00000 RSI: 0000000000005a6b RDI: 0000000000005a6c [ 197.977345][ T7364] RBP: ffffc90010ebf510 R08: ffffffff8152a88e R09: ffffed10171e4f1c [ 197.985361][ T7364] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 197.993368][ T7364] R13: 1ffff920021d7e90 R14: ffff888058ecd2c8 R15: ffffffff974c4f41 [ 198.001377][ T7364] ? __warn_printk+0x28e/0x350 [ 198.006191][ T7364] register_lock_class+0x100/0x990 [ 198.011354][ T7364] ? is_dynamic_key+0x260/0x260 [ 198.016259][ T7364] ? mark_lock+0x9a/0x340 [ 198.020635][ T7364] __lock_acquire+0xd3/0x1f80 [ 198.025362][ T7364] lock_acquire+0x1f8/0x5a0 [ 198.029907][ T7364] ? ext4_move_extents+0x3a0/0xe10 [ 198.035056][ T7364] ? read_lock_is_recursive+0x10/0x10 [ 198.040470][ T7364] ? __might_sleep+0xb0/0xb0 [ 198.045089][ T7364] ? rwsem_write_trylock+0x166/0x210 [ 198.050420][ T7364] ? inode_owner_or_capable+0x210/0x210 [ 198.056009][ T7364] ? clear_nonspinnable+0x60/0x60 [ 198.061069][ T7364] down_write_nested+0x39/0x60 [ 198.065884][ T7364] ? ext4_move_extents+0x3a0/0xe10 [ 198.071027][ T7364] ext4_move_extents+0x3a0/0xe10 [ 198.076008][ T7364] ? rcu_read_lock_any_held+0xb3/0x160 [ 198.081503][ T7364] ? ext4_double_up_write_data_sem+0x30/0x30 [ 198.087617][ T7364] ext4_ioctl+0x3a8d/0x5f60 [ 198.092162][ T7364] ? kasan_set_track+0x4b/0x70 [ 198.097010][ T7364] ? security_file_ioctl+0x6d/0xa0 [ 198.102160][ T7364] ? __se_sys_ioctl+0x47/0x160 [ 198.106954][ T7364] ? do_syscall_64+0x3b/0xb0 [ 198.111583][ T7364] ? ext4_fileattr_set+0x1770/0x1770 [ 198.116928][ T7364] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 198.121812][ T7364] ? __x64_compat_sys_ioctl+0x80/0x80 [ 198.127222][ T7364] ? __lock_acquire+0x1f80/0x1f80 [ 198.132289][ T7364] ? lockdep_hardirqs_on+0x94/0x130 [ 198.137528][ T7364] ? __kmem_cache_free+0x25c/0x3c0 [ 198.142680][ T7364] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 198.148440][ T7364] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 198.154111][ T7364] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 198.159807][ T7364] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 198.165342][ T7364] ? __fget_files+0x28/0x4a0 [ 198.169956][ T7364] ? __fget_files+0x28/0x4a0 [ 198.174555][ T7364] ? __fget_files+0x435/0x4a0 [ 198.179259][ T7364] ? __fget_files+0x28/0x4a0 [ 198.183894][ T7364] ? bpf_lsm_file_ioctl+0x5/0x10 [ 198.188949][ T7364] ? security_file_ioctl+0x7d/0xa0 [ 198.194165][ T7364] ? ext4_fileattr_set+0x1770/0x1770 [ 198.199496][ T7364] __se_sys_ioctl+0xf1/0x160 [ 198.204114][ T7364] do_syscall_64+0x3b/0xb0 [ 198.208723][ T7364] ? clear_bhb_loop+0x45/0xa0 [ 198.213438][ T7364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.219381][ T7364] RIP: 0033:0x7f8a31d7e719 [ 198.223836][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.243486][ T7364] RSP: 002b:00007f8a32b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.251946][ T7364] RAX: ffffffffffffffda RBX: 00007f8a31f35f80 RCX: 00007f8a31d7e719 [ 198.259954][ T7364] RDX: 0000000020000000 RSI: 00000000c028660f RDI: 0000000000000004 [ 198.268067][ T7364] RBP: 00007f8a31df175e R08: 0000000000000000 R09: 0000000000000000 [ 198.276051][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.284046][ T7364] R13: 0000000000000000 R14: 00007f8a31f35f80 R15: 00007ffc4d0fbd78 [ 198.292239][ T7364] [ 198.295424][ T7364] Kernel Offset: disabled [ 198.299760][ T7364] Rebooting in 86400 seconds..