last executing test programs: 42.286852545s ago: executing program 4 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 42.072571167s ago: executing program 4 (id=1297): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 41.748806207s ago: executing program 4 (id=1300): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd", 0x21) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007"], 0x30}}, 0x0) 41.559673478s ago: executing program 4 (id=1304): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000140)={[{@namecase}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@keep_last_dots}, {@errors_remount}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@namecase}]}, 0x2, 0x1531, &(0x7f0000001f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 41.130451502s ago: executing program 4 (id=1310): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x7, 0xbd}, 0x2) 40.614402343s ago: executing program 4 (id=1318): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14273216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4be, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) 40.407292385s ago: executing program 32 (id=1318): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14273216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4be, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0) 13.140024728s ago: executing program 5 (id=1527): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000380)={[{@gqnoenforce}, {@nodiscard}, {@pquota}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$eJzs3Qm4pnPh+P/nDGNfxlBJqalGtMiaJaqZwQyFZIl2ZElZChXatEhpo0R79i1bWULZWkn2FkoIlSyRFtsw/+uYM4zxJn37/v6+9X6/r+uc53nu577v83k+r3s5R3NdbTZ5o0mDwVyD6Y0bzNrZV02ZOuaK9W89fMuFjlrupDv3e/iK4yeMPE4ceZw0GAxGjbw9NH3Z2MHJp4wazP7A8oead+55huYfDJYfeTmyn8HK0x/mv3TGetNmadaBDj30bZ/pXw+04PCPGH5yyH57HToYDMbMtP3QYDC05yM+qLTNJk6Z/JDVg27DVqNHns/8Ncf0r/kvGAzmP23Ax8fM6w49AR9p+Gfu+fyzRq//BPzs/7g2mzhlnVn8h8/F2UaWrTx8js96Dhqb9Ti/eYnNVx2ZwgeOt8Fg+BL3sHPlP6LNJk5ed/Do1/nB4audt8+06dfNOQfTbxRzDwaDeUaur/M90S717zVx0goP3LNnvB5hn3Es70nHxbFvOuH+4Zv0YDBYeDAYu/aMe0FVVVX9ZzRx0gprwP1/rse6/5944mKndf+vqqr6z22diZNWGL7Xz3L/n++x7v87L3b+h6f/t/8JK0/f6v4n9kNUVVXVv9TkdfD+P+ax7v8rr3Hxut3/q6qq/nPbcL0H7v/zzXL/X+Sx7v+vP2G1xUfWm/F7w30z7XJopv894d6Zls820/J7Zlo+eqb9zLz+HDMtv2um5XMOvwfrjxsMxs7494JTH1o8dtzweyPL755p+YSH/p3O+DVnWj5xpuWTZ1o+aWSsw8unzLR8ykzrr/0YU11VVfV/pg1XmLzGYKZ/Zz+yeNEZ79P9/9zTr176iRpvVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV/Wd2/61nnDUYDIYGg8GowWDqYOT5zI+DadOmTRt+feI5l1zyhA30/0ZDZ181ZeqYK9a/9fAtFzpquZPu3O+hWfqP7T//E9S/07D/XMeMGwx23OSJHko9AXX+u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7j7bz3jrJFjYNRgMHUw8nzPGY+n7/u6N4ysuuqmJ91+wENbjp+w3cizs6+aMnW7J2DsT0BDw591zBXr33r4lgsdtdxJd+73X3D2/Od/gvp3esB/u6HBYOT8HjN8Lq8/ccONlxoMBgfcftKmKw0efG+V4fdWGzvbYLYHNl3qge9rjecd77n29McJw98WeXAfJz6w/3WmHTzb0CyDmKmXnn3d4W/d7M4VZ31c8tE/x6gZTw695tQ7pk2bNu1hC0ea61E2nrH/GZ9l1vN8ZOxLDY99mV13eMcyu+y+x9Lb7bDFtltvu/WOy62wyoorLb/cSqu+eJltttt+62Wnf3+UORv3wPc1Hs+czTfrnN06ceY5m/WzPdqcjXvsOXtgj1P3GNp4xpzN/i/O2RqPPWfjthv5QeMnjB5s/sDUDA0G49ccPdht+MVycw4G49caWXfR4XVXHztqMNj3oQ86/GzOB4/BoT2H19ls8kaTHhrZIz/hI67TD1tx/ISRx4kjj5OmD3Hc4KFDcezg5FNGDc/Fw6Z53rnnGZp/MFh+5OXIfgarjrx70Iz1ps3SrAMdeujbPtO/HmjB4Z0MP3nbsmdcOXwuzrL9/4v+R9f/R3itMvTgRA2NfI2sM91r4pR1HvpZD0zD8NzNNrJs5WGTWefsf7NHjHfc7IMxjzHeyetMWmF48SzzP2MTPL5uW+K8904/tiasPH2r+//HKDTe+R5jvOtMxPHO91jjPeZ9F50yfVf/a+Od5Vq37gPfJzyea93gsa91s9EOtr5w8Vmvda989CE+7DyeMUdzzrLSo13rdjtw+T2H9z/hsa916w6PffTDrnWjBoPxa8y41g1f+CaPHuw7/GL54RdTRg+OGn6xwgMv5h6cM/ziRW/ZafuthhesPWNOlh3e74SxQw+4n7fyTUtO+/y0aWuOjGXC2IePdeT4GDfz/Xzi2OmTOWPbGfsdXnXGfm98yvT3Jo/sd+K/sN8Z29J4b19w+ntTRvY7aZb9jn6M/c7Y9hHnw1JDD164HuV6M3mW683I3zgzftzDvuaY/jX/BYPB/KeR7yzr/tNrJp2/cz3GeCdOWmGN4fHNcv4+eDjS+XvRlCuG7xXzDwaDhQeDsWvPGPu/2NCjjXf2xx7vJBjv7I813suO3mG9/4XxDmYa78OOs802nH6srD1ynE35F47fGdvOeh0b/cC70y/7az+e69i4R1zHPjTbqFkme6Ye7Xe2rWD96c8Xfej33KuOP3LG3I+eZb//7He2mT7LEFzHxszy9/yota8dDNGc73nM6hcP7f/Ycz568PC/LWbM+YxtH2vOpzyeOX/6Y8/54/09eannTH9/9Czjn3nON/jU0z45Y87nmGW//2zOpzz2veORcz5hMJrmfNl7ps/bY11PH23OZ2w7Y86HP+JqY2cfrDV8zxqZ88mPZ84X/d85zueB9ac/3/rBRWceftJrZsz5rHP8z+Z88r865+MePM7HP/Des0cN5phjsNsWu+6683LTv894ufz073wtuuuq6fP8WPfSRzOase1jnRdrPh6jMY/LaOifGS02+6MZPXRqHbbTzk/+n16L1vxXjQZ8LbriyOnz9li/Fz3anM/Ylu6Di8y0/ax/h2643gO/d883y31wxiZ4Hzzz9HX3nrHLkc3um2WYM+6r9860fLaZlt8z0/LRM+1n5vXnmGn5XTMtH/4Ic8y0/gzWccN/844sn/rQ6mOHf3kaN7L87pmWT3ho2/FrzrR84kzLJ8+0fNJDh8b4KTMtnzLT+msP/sVm/Dfp7Wa9yNfjrf/+6y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9z9t55x1sgxMGowmDqY/nxo5HGw59AGt7x8+HEwGIxe+bhpGzzR432CGzr7qilTx1yx/q2Hb7nQUcuddOd+/wVnz3/+J6h/pwf8txsaDEbO7zHbDQaD9SduuPFSg8Fgg2nHrTxq8OB7iw6/t/rYUYPBvkMP28GcD64ztOfwOptN3mjSYDDXyBrjHvFDH3EePWzF8RNGHieOPE6afn0aN3joeB07OPmUUYPZH1j+UPPOPc/Q/IPB8iMvR/YzWHn6w/yXzlhv2izNOtChh77tM/3rgRYc/hHDT3bbdsozhudqlu3/zzTjWr3dqH+6aue/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL392/5t/R8t9Wou7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+6oam/7+7lrXOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vf3f/cf5fZ/1cHUk9Inf/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c/beecdbIMTBqMJg6mP58aM+Rx8HQCSc/b+QQGb375Ucc/ESP9wlu6Oyrpkwdc8X6tx6+5UJHLXfSnfv9F5w9//mfoP6dHvDfbmgwGDm/x2w3GAzWn7jhxksNBoODj7h891GDB99bdPi91ceOGgz2HXrYDuZ8cJ2hPYfX2WzyRpMGg7lG1hj3iB/6iPPoYSuOnzDyOHHkcdL069O4wUPH69jByaeMGsz+wPKHmnfueYbmHwyWH3k5sp/BytMf5r90xnrTZmnWgQ499G2f6V8PtODwjxh+std8V50wPFezbP9/phnX6u1G/dNVO//d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3P23nnHWyDEwajCYOpj+fNTI49CeN1z/gY2HH4dfL7T23lc90eN9ghs6+6opU8dcsf6th2+50FHLnXTnfv8FZ89//ieof6dh/7mOGTcY7LjJEz2UegLq/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9x9996xlkjT0c9tHTUnh0X2NDZV02ZOuaK9W89fMuFjlrupDv3e6IH9O/2KP4fyh+z+H84f8zi/5H8MYv/R/PHLP575Y9Z/D+WP2bx3zt/zOL/8fwxi/8n8scs/vvkj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvHfN3/M4r9f/pjF/3P5Yxb/z+ePWfz3zx+z+H8hf8zif0D+mMX/wPwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/L+ZP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP7fyh+z+H87f8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+38kfs/iflj9m8T89f8zif0b+mMX/u/ljFv/v5Y9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+J+XP2bxPz9/zOL/0/wxi/8F+WMW/5/lj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+V+SPWfyvzB+z+P86f8zi/5v8MYv/VfljFv/f5o9Z/K/OH7P4X5M/ZvG/Nn/M4v+7/DGL/3X5Yxb/6/PHLP435I9Z/H+fP2bx/0P+mMX/j/ljFv8b88cs/n/KH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/n/PHLP635Y9Z/G/PH7P4/yV/zOJ/R/6Yxf+v+WMW/7/lj1n8/54/ZvH/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P4T80fs/jflz9m8b8/f8ziPy1/TOI/2yB/zOI/lD9m8R+VP2bxny1/zOI/e/6YxX90/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/zH5Yxb/hfLHLP5j88cs/gvnj1n8F8kfs/g/KX/M4v/k/DGL/1Pyxyz+i+aPWfyfmj9m8V8sf8zi/7T8MYv/0/PHLP6L549Z/J+RP2bxf2b+mMV/XP6Yxf9Z+WMW/2fn/4hmH3k0+D8nf8xy/o/PH7P4L5E/ZvF/bv6YxX/J/DGL/1L5Yxb/5+WPWfyfnz9m8X9B/pjF/4X5Yxb/pfPHLP4vyh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4vzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/0vyxyz+q+WPWfxXzx+z+L80f8zi/7L8MYv/y/PHLP4T8scs/hPzxyz+k/LHLP5r5I9Z/NfMH7P4r5U/ZvGfnD9m8Z+i8p/tca9p8V9b5f/4s/ivkz9m8X9F/pjF/5X5Yxb/dfPHLP7r5Y9Z/NfPH7P4vyp/zOK/Qf6Yxf/V+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bxf03+mMV/0/wxi/9m+WMW/9fmj1n8X5c/ZvF/ff6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6YxX/z/DGL/xb5Yxb/LfPHLP5vyR+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/1vzxyz+2+WPWfzflj9m8X97/pjFf/v8MYv/DvljFv8d88cs/jvlj1n835E/ZvF/Z/6YxX/n/DGL/y75Yxb/XfPHLP7vyh+z+L87f8zi/578MYv/bvljFv/d88cs/nvkj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvHfM3/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4r9X/pjF/2P5Yxb/vfPHLP4fzx+z+H8if8ziv0/+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv9988cs/vvlj1n8P5c/ZvH/fP6YxX///DGL/xfyxyz+B+SPWfwPzB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/5v5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4v+t/DGL/7fzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOL/nfwxi/9p+WMW/9Pzxyz+Z+SPWfy/mz9m8f9e/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/3n5Yxb/8/PHLP4/zR+z+F+QP2bx/1n+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Rf6Yxf/K/DGL/6/zxyz+v8kfs/hflT9m8f9t/pjF/+r8MYv/NfljFv9r88cs/r/LH7P4X5c/ZvG/Pn/M4n9D/pjF//f5Yxb/P+SPWfz/mD9m8b8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4n9b/pjF//b8MYv/X/LHLP535I9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/1Pwxi/99+WMW//vzxyz+0/LHJP6zD/LHLP5D+WMW/1H5Yxb/2fLHLP6z549Z/Efnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxH5M/ZvFfKH/M4j82f8ziv3D+mMV/kfwxi/+T8scs/k/OH7P4PyV/zOK/aP6Yxf+p+WMW/8Xyxyz+T8sfs/g/PX/M4r94/pjF/xn5Yxb/Z+aPWfzH5Y9Z/J+VP2bxf3b+mMX/OfljFv/x+WMW/yXyxyz+z80fs/gvmT9m8V8qf8zi/7z8MYv/8/PHLP4vyB+z+L8wf8ziv3T+mMX/RfljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/xfljFv+V8scs/ivnj1n8V8kfs/ivmj9m8X9J/pjFf7X8MYv/6vljFv+X5o9Z/F+WP2bxf3n+mMV/Qv6YxX9i/pjFf1L+mMV/jfwxi/+a+WMW/7Xyxyz+k/PHLP5T8scs/mvnj1n818kfs/i/In/M4v/K/DGL/7r5Yxb/9fLHLP7r549Z/F+VP2bx3yB/zOL/6sEl+UMW/w07/zGL/0b5Yxb/jfPHLP6b5I9Z/F+TP2bx3zR/zOK/Wf6Yxf+1+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvHfPH/M4r9F/pjFf8v8MYv/W/LHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/W/DGL/3b5Yxb/t+WPWfzfnj9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/3fkj1n835k/ZvHfOX/M4r9L/pjFf9f8MYv/u/LHLP7vzh+z+L8nf8ziv1v+mMV/9/wxi/8e+WMW//fmj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n898wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/jvlT9m8f9Y/pjFf+/8MYv/x/PHLP6fyB+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/3/wxi/9++WMW/8/lj1n8P58/ZvHfP3/M4v+F/DGL/wH5Yxb/A/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8f9m/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/h/K3/M4v/t/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4fyd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+aPWfy/lz9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9e/pjF//z8MYv/T/PHLP4X5I9Z/H+WP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5E/ZvG/Mn/M4v/r/DGL/2/yxyz+V+U/3LTZZllg8f9t/pjF/+r8MYv/NfljFv9r88cs/r/LH7P4X5c/ZvG/Pn/M4n9D/pjF//f5Yxb/P+SPWfz/mD9m8b8xf8zi/6f8MYv/TfljFv+b88cs/rfkj1n8b80fs/j/OX/M4n9b/pjF//b8MYv/X/LHLP535I9Z/P+aP2bx/1v+mMX/7/ljFv9/5I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/1Pwxi/99+WMW//vzxyz+0/LHJP6jB/ljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4j8kfs/gvlD9m8R+bP2bxXzh/zOK/SP6Yxf9J+WMW/yfnj1n8n5I/ZvFfNH/M4v/U/DGL/2L5Yxb/p+WPWfyfnj9m8V88f8zi/4z8MYv/M/PHLP7j8scs/s/KH7P4Pzt/zOL/nPwxi//4/DGL/xL5Yxb/5+aPWfyXzB+z+C+VP2bxf17+mMX/+fljFv8X5I9Z/F+YP2bxXzp/zOL/ovwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOL/4vwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+L8kf8ziv1r+mMV/9fwxi/9L88cs/i/LH7P4vzx/zOI/IX/M4j8xf8ziPyl/zOK/Rv6YxX/N/DGL/1r5Yxb/yfljFv8p+WMW/7Xzxyz+6+SPWfxfkT9m8X9l/pjFf938MYv/evljFv/188cs/q/KH7P4b5A/ZvF/df6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/F+TP2bx3zR/zOK/Wf6Yxf+1+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvHfPH/M4r9F/pjFf8v8MYv/W/LHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/W/DGL/3b5Yxb/t+WPWfzfnj9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/3fkj1n835k/ZvHfOX/M4r9L/pjFf9f8MYv/u/LHLP7vzh+z+L8nf8ziv1v+mMV/9/wxi/8e+WMW//fmj1n835c/ZvF/f/6Yxf8D+WMW/w/mj1n898wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/jvlT9m8f9Y/pjFf+/8MYv/x/PHLP6fyB+z+O+TP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/3/wxi/9++WMW/8/lj1n8P58/ZvHfP3/M4v+F/DGL/wH5Yxb/A/PHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8f9m/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/h/K3/M4v/t/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4fyd/zOJ/Wv6Yxf/0/DGL/xn5Yxb/7+aPWfy/lz9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9e/pjF//z8MYv/T/PHLP4X5I9Z/H+WP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X5E/ZvG/Mn/M4v/r/DGL/2/yxyz+V+WPWfx/mz9m8b86f8zif03+mMX/2vwxi//v8scs/tflj1n8r88fs/jfkD9m8f99/pjF/w/5Yxb/P+aPWfxvzB+z+P8pf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+f84fs/jflj9m8b89f8zi/5f8MYv/HfljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv8788cs/nflj1n8784fs/jfkz9m8b83f8ziPzV/zOJ/X/6Yxf/+/DGL/7T8MYn/HIP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/Mfkj1n8F8ofs/iPzR+z+C+cP2bxXyR/zOL/pPwxi/+T88cs/k/JH7P4L5o/ZvF/av6YxX+x/DGL/9Pyxyz+T88fs/gvnj9m8X9G/pjF/5n5Yxb/cfljFv9n5Y9Z/J+dP2bxf07+mMV/fP6YxX+J/DGL/3Pzxyz+S+aPWfyXyh+z+D8vf8zi//z8MYv/C/LHLP4vzB+z+C+dP2bxf1H+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxf3H+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxfkj9m8V8tf8ziv3r+mMX/pfljFv+X5Y9Z/F+eP2bxn5A/ZvGfmD9m8Z+UP2bxXyN/zOK/Zv6YxX+t/DGL/+T8MYv/lPwxi//a+WMW/3Xyxyz+r8gfs/i/Mn/M4r9u/pjFf738MYv/+vljFv9X5Y9Z/DfIH7P4vzp/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6vyR+z+G+aP2bx3yx/zOL/2vwxi//r8scs/q/PH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4b54/ZvHfIn/M4r9l/pjF/y35Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvF/a/6YxX+7/DGL/9vyxyz+b88fs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/878scs/u/MH7P475w/ZvHfJX/M4r9r/pjF/135Yxb/d+ePWfzfkz9m8d8tf8ziv3v+mMV/j/wxi/9788cs/u/LH7P4vz9/zOL/gfwxi/8H88cs/nvmj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n898ofs/h/LH/M4r93/pjF/+P5Yxb/T+SPWfz3yR+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+H82f8ziv2/+mMV/v/wxi//n8scs/p/PH7P4758/ZvH/Qv6Yxf+A/DGL/4H5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/h/M3/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8v5U/ZvH/dv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/L+TP2bxPy1/zOJ/ev6Yxf+M/DGL/3fzxyz+38sfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvE/L3/M4n9+/pjF/6f5Yxb/C/LHLP4/yx+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/IH7P4X5k/ZvH/df6Yxf83+WMW/6vyxyz+v80fs/hfnT9m8b8mf8zif23+mMX/d/ljFv/r8scs/tfnj1n8b8gfs/j/XuU/+nGvafH/g8r/8Wfx/2P+mMX/xvwxi/+f8scs/jflj1n8b84fs/jfkj9m8b81f8zi/+f8MYv/bfljFv/b88cs/n/JH7P435E/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/lPzxyz+9+WPWfzvzx+z+E/LH5P4zznIH7P4D+WPWfxH5Y9Z/GfLH7P4z54/ZvEfnT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX9M/pjFf6H8MYv/2Pwxi//C+WMW/0Xyxyz+T8ofs/g/OX/M4v+U/DGL/6L5Yxb/p+aPWfwXyx+z+D8tf8zi//T8MYv/4vljFv9n5I9Z/J+ZP2bxH5c/ZvF/Vv6Yxf/Z+WMW/+fkj1n8x+ePWfyXyB+z+D83f8ziv2T+mMV/qfwxi//z8scs/s/PH7P4vyB/zOL/wvwxhf/4wZxL548p/AeDOV+UP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/F+cP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/l+SPWfxXyx+z+K+eP2bxf2n+mMX/ZfljFv+X549Z/Cfkj1n8J+aPWfwn5Y9Z/NfIH7P4r5k/ZvFfK3/M4j85f8ziPyV/zOK/dv6YxX+d/DGL/yvyxyz+r8wfs/ivmz9m8V8vf8ziv37+mMX/VfljFv8N8scs/q/OH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/a/LHLP6b5o9Z/DfLH7P4vzZ/zOL/uvwxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/pvnj1n8t8gfs/hvmT9m8X9L/pjFf6v8MYv/1vljFv9t8scs/tvmj1n835o/ZvHfLn/M4v+2/DGL/9vzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/jvwxi/8788cs/jvnj1n8d8kfs/jvmj9m8X9X/pjF/935Yxb/9+SPWfx3yx+z+O+eP2bx3yN/zOL/3vwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+e+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/73yxyz+H8sfs/jvnT9m8f94/pjF/xP5Yxb/ffLHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+O+bP2bx3y9/zOL/ufwxi//n88cs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+38wfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/2/lj1n8v50/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/v5I9Z/E/LH7P4n54/ZvE/I3/M4v/d/DGL//fyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z8sfs/ifnz9m8f9p/pjF/4L8MYv/z/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8r8scs/lfmj1n8f50/ZvH/Tf6Yxf+q/DGL/2/zxyz+V+ePWfyvyR+z+F+bP2bx/13+mMX/uvwxi//1+WMW/xvyxyz+v88fs/j/IX/M4v/H/DGL/435Yxb/P+WPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf/P+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfyn5o9Z/O/LH7P4358/ZvGflj8m8Z9rkD9m8R/KH7P4j8ofs/jPlj9m8Z89f8ziPzp/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/mPwxi/9C+WMW/7H5Yxb/hfPHLP6L5I9Z/J+UP2bxf3L+mMX/KfljFv9F88cs/k/NH7P4L5Y/ZvF/Wv6Yxf/p+WMW/8Xzxyz+z8gfs/g/M3/M4j8uf8zi/6z8MYv/s/PHLP7PyR+z+I/PH7P4L5E/ZvF/bv6YxX/J/DGL/1L5Yxb/5+WPWfyfnz9m8X9B/pjF/4X5Yxb/pfPHLP4vyh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4vzh+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/0vyxyz+q+WPWfxXzx+z+L80f8zi/7L8MYv/y/PHLP4T8scs/hPzxyz+k/LHLP5r5I9Z/NfMH7P4r5U/ZvGfnD9m8Z+SP2bxXzt/zOK/Tv6Yxf8V+WMW/1fmj1n8180fs/ivlz9m8V8/f8zi/6r8MYv/BvljFv9X549Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/zX5Yxb/TfPHLP6b5Y9Z/F+bP2bxf13+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv/N88cs/lvkj1n8t8wfs/i/JX/M4r9V/pjFf+v8MYv/NvljFv9t88cs/m/NH7P4b5c/ZvF/W/6Yxf/t+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bxf0f+mMX/nfljFv+d88cs/rvkj1n8d80fs/i/K3/M4v/u/DGL/3vyxyz+u+WPWfx3zx+z+O+RP2bxf2/+mMX/ffljFv/3549Z/D+QP2bx/2D+mMV/z/wxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/9e+WMW/4/lj1n8984fs/h/PH/M4v+J/DGL/z75Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfz3zR+z+O+XP2bx/1z+mMX/8/ljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2/mj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/+38scs/t/OH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/d/LHLP6n5Y9Z/E/PH7P4n5E/ZvH/bv6Yxf97+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/uflj1n8z38c/lcs8P9yYP83s/j/tPMfs/hfkD9m8f9Z/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif0X+mMX/yvwxi/+v88cs/r/JH7P4X5U/ZvH/bf6Yxf/q/DGL/zX5Yxb/a/PHLP6/yx+z+F+XP2bxvz5/zOJ/Q/6Yxf/3+WMW/z/kj1n8/5g/ZvG/MX/M4v+n/DGL/035Yxb/m/PHLP635I9Z/G/NH7P4/zl/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/9T8MYv/ffljFv/788cs/tPyxyT+cw/yxyz+Q/ljFv9R+WMW/9nyxyz+s+ePWfxH549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8R+TP2bxXyh/zOI/Nn/M4r9w/pjFf5H8MYv/k/LHLP5Pzh+z+D8lf8ziv2j+mMX/qfljFv/F8scs/k/LH7P4Pz1/zOK/eP6Yxf8Z+WMW/2fmj1n8x+WPWfyflT9m8X92/pjF/zn5Yxb/8fljFv8l8scs/s/NH7P4L5k/ZvFfKn/M4v+8/DGL//Pzxyz+L8gfs/i/MH/M4r90/pjF/0X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/8X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/Sf6YxX+1/DGL/+r5Yxb/l+aPWfxflj9m8X95/pjFf0L+mMV/Yv6YxX9S/pjFf438MYv/mvljFv+18scs/pPzxyz+U/LHLP5r549Z/NfJH7P4vyJ/zOL/yvwxi/+6+WMW//Xyxyz+6+ePWfxflT9m8d8gf8zi/+r8MYv/hvljFv+N8scs/hvnj1n8N8kfs/i/Jn/M4r9p/pjFf7P8MYv/a/PHLP6vyx+z+L8+f8zi/4b8MYv/G/PHLP5vyh+z+L85f8ziv3n+mMV/i/wxi/+W+WMW/7fkj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/rfljFv/t8scs/m/LH7P4vz1/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP7vyB+z+L8zf8ziv3P+mMV/l/wxi/+u+WMW/3flj1n8350/ZvF/T/6YxX+3/DGL/+75Yxb/PfLHLP7vzR+z+L8vf8zi//78MYv/B/LHLP4fzB+z+O+ZP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx3yt/zOL/sfwxi//e+WMW/4/nj1n8P5E/ZvHfJ3/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/775Yxb//fLHLP6fyx+z+H8+f8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/zfwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bx/1b+mMX/2/ljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9O/pjF/7T8MYv/6fljFv8z8scs/t/NH7P4fy9/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/vPwxi//5+WMW/5/mj1n8L8gfs/j/LH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b8if8zif2X+mMX/1/ljFv/f5I9Z/K/KH7P4/zZ/7OH+o5/o4fz7PYr/1fljlvP/mvwxi/+1+WMW/9/lj1n8r8sfs/hfnz9m8b8hf8zi//v8MYv/H/LHLP5/zB+z+N+YP2bx/1P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfz/nD9m8b8tf8zif3v+mMX/L/ljFv878scs/n/NH7P4/y1/zOL/9/wxi/8/8scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMV/av6Yxf++/DGL//35Yxb/afljEv95BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/7Yf7//XA++lf8j++/3f6B55ssfs/jPnz9m8V8gf8ziv2D+mMV/TP6YxX+h/DGL/9j8MYv/wvljFv9F8scs/k/KH7P4Pzl/zOL/lPwxi/+i+WMW/6fmj1n8F8sfs/g/LX/M4v/0/DGL/+L5Yxb/Z+SPWfyfmT9m8R+XP2bxf1b+mMX/2fljFv/n5I9Z/Mfnj1n8l8gfs/g/N3/M4r9k/pjFf6n8MYv/8/LHLP7Pzx+z+L8gf8zi/8L8MYv/0vljFv8X5Y9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv8X549Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/yX5Yxb/1fLHLP6r549Z/F+aP2bxf1n+mMX/5fljFv8J+WMW/4n5Yxb/SfljFv818scs/mvmj1n818ofs/hPzh+z+E/JH7P4r50/ZvFfJ3/M4v+K/DGL/yvzxyz+6+aPWfzXyx+z+K+fP2bxf1X+mMV/g/wxi/+r88cs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/5r8MYv/pvljFv/N8scs/q/NH7P4vy5/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi//m+WMW/y3yxyz+W+aPWfzfkj9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/7fmj1n8t8sfs/i/LX/M4v/2/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P4vyN/zOL/zvwxi//O+WMW/13yxyz+u+aPWfzflT9m8X93/pjF/z35Yxb/3fLHLP67549Z/PfIH7P4vzd/zOL/vvwxi//788cs/h/IH7P4fzB/zOK/Z/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6YxX+v/DGL/8fyxyz+e+ePWfw/nj9m8f9E/pjFf5/8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP775o9Z/PfLH7P4fy5/zOL/+fwxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/zfzxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf9b+WMW/2/nj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/O/ljFv/T8scs/qfnj1n8z8gfs/h/N3/M4v+9/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW//Pyxyz+5+ePWfx/mj9m8b8gf8zi/7P8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/ivwxi/+V+WMW/1/nj1n8f5M/ZvG/Kn/M4v/b/DGL/9X5Yxb/a/LHLP7X5o9Z/H+XP2bxvy5/zOJ/ff6Yxf+G/DGL/+/zxyz+f8gfs/j/MX/M4n9j/pjF/0/5Yxb/m/LHLP43549Z/G/JH7P435o/ZvH/c/6Yxf+2/DGL/+35Yxb/v+SPWfzvyB+z+P81f8zi/7f8MYv/3/PHLP7/yB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/qfljFv/78scs/vfnj1n8p+WPSfznHeSPWfyH8scs/qPyxyz+s+WPWfxnzx+z+I/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziPyZ/zOK/UP6YxX9s/pjFf+H8MYv/IvljFv8n5Y9Z/J+cP2bxf0r+mMV/0fwxi/9T88cs/ovlj1n8n5Y/ZvF/ev6YxX/x/DGL/zPyxyz+z8wfs/iPyx+z+D8rf8zi/+z8MYv/c/LHLP7j88cs/kvkj1n8n5s/ZvFfMn/M4r9U/pjF/3n5Yxb/5+ePWfxfkD9m8X9h/pjFf+n8MYv/i/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/i/PHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v+S/DGL/2r5Yxb/1fPHLP4vzR+z+L8sf8zi//L8MYv/hPwxi//E/DGL/6T8MYv/GvljFv8188cs/mvlj1n8J+ePWfyn5I9Z/NfOH7P4r5M/ZvF/Rf6Yxf+V+WMW/3Xzxyz+6+WPWfzXzx+z+L8qf8ziv0H+mMX/1fljFv8N88cs/hvlj1n8N84fs/hvkj9m8X9N/pjFf9P8MYv/ZvljFv/X5o9Z/F+XP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMV/8/wxi/8W+WMW/y3zxyz+b8kfs/hvlT9m8d86f8ziv03+mMV/2/wxi/9b88cs/tvlj1n835Y/ZvF/e/6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/N+RP2bxf2f+mMV/5/wxi/8u+WMW/13zxyz+78ofs/i/O3/M4v+e/DGL/275Yxb/3fPHLP575I9Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx3zN/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOK/V/6Yxf9j+WMW/73zxyz+H88fs/h/In/M4r9P/pjF/5P5Yxb/T+WPWfw/nT9m8f9M/pjF/7P5Yxb/ffPHLP775Y9Z/D+XP2bx/3z+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf+b+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOL/rfwxi/+388cs/iflj1n8T84fs/ifkj9m8T81f8zi/538MYv/afljFv/T88cs/mfkj1n8v5s/ZvH/Xv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/95+WMW//Pzxyz+P80fs/hfkD9m8f9Z/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif0X+mMX/yvwxi/+v88cs/r/JH7P4X5U/ZvH/bf6Yxf/q/DGL/zX5Yxb/a/PHLP6/yx+z+F+XP2bxvz5/zOJ/Q/6Yxf/3+WMW/z/kj1n8/5g/ZvG/MX/M4v+n/DGL/035Yxb/m/PHLP635I9Z/G/NH7P4/zl/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/9T8MYv/ffljFv/788cs/tPyxyT+8w3yxyz+Q/ljFv9R+WMW/9nyxyz+s+ePWfxH549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8R+TP2bxXyh/zOI/Nn/M4r9w/pjFf5H8MYv/k/LHLP5Pzh+z+D8lf8ziv2j+mMX/qfljFv/F8scs/k/LH7P4Pz1/zOK/eP6Yxf8Z+WMW/2fmj1n8x+WPWfyflT9m8X92/pjF/zn5Yxb/8fljFv8l8scs/s/NH7P4L5k/ZvFfKn/M4v+8/DGL//Pzxyz+L8gfs/i/MH/M4r90/pjF/0X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/8X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/Sf6YxX+1/DGL/+r5Yxb/l+aPWfxflj9m8X95/pjFf0L+mMV/Yv6YxX9S/pjFf438MYv/mvljFv+18scs/pPzxyz+U/LHLP5r549Z/NfJH7P4vyJ/zOL/yvwxi/+6+WMW//Xyxyz+6+ePWfxflT9m8d8gf8zi/+r8MYv/hvljFv+N8scs/hvnj1n8N8kfs/i/Jn/M4r9p/pjFf7P8MYv/a/PHLP6vyx+z+L8+f8zi/4b8MYv/G/PHLP5vyh+z+L85f8ziv3n+mMV/i/wxi/+W+WMW/7fkj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/rfljFv/t8scs/m/LH7P4vz1/zOK/ff6YxX+H/DGL/475Yxb/nfLHHvTf5oT/av935I9Zzv935o9Z/HfOH7P475I/ZvHfNX/M4v+u/DGL/7vzxyz+78kfs/jvlj9m8d89f8ziv0f+mMX/vfljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8988cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/nvlj1n8P5Y/ZvHfO3/M4v/x/DGL/yfyxyz+++SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8d83f8ziv1/+mMX/c/ljFv/P549Z/PfPH7P4fyF/zOJ/QP6Yxf/A/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n+E0n+Of7qGxf9Ipf8/z+J/VP6Yxf/o/DGL/zH5Yxb/b+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/7fyxyz+384fs/iflD9m8T85f8zif0r+mMX/1Pwxi/938scs/qflj1n8T88fs/ifkT9m8f9u/pjF/3v5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+WPWfzPzx+z+P80f8zif0H+mMX/Z/ljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/8V+WMW/yvzxyz+v84fs/j/Jn/M4n9V/pjF/7f5Yxb/q/PHLP7X5I9Z/K/NH7P4/y5/zOJ/Xf6Yxf/6/DGL/w35Yxb/3+ePWfz/kD9m8f9j/pjF/8b8MYv/n/LHLP435Y9Z/G/OH7P435I/ZvG/NX/M4v/n/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP5T88cs/vflj1n8788fs/hPyx+T+M8/eAz/D/7/MKz/q1n8hzr/MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/iPyR+z+C+UP2bxH5s/ZvFfOH/M4r9I/pjF/0n5Yxb/J+ePWfyfkj9m8V80f8zi/9T8MYv/YvljFv+n5Y9Z/J+eP2bxXzx/zOL/jPwxi/8z88cs/uPyxyz+z8ofs/g/O3/M4v+c/DGL//j8MYv/EvljFv/n5o9Z/JfMH7P4L5U/ZvF/Xv6Yxf/5+WMW/xfkj1n8X5g/ZvFfOn/M4v+i/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v/i/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vyR/zOK/Wv6YxX/1/DGL/0vzxyz+L8sfs/i/PH/M4j8hf8ziPzF/zOI/KX/M4r9G/pjFf838MYv/WvljFv/J+WMW/yn5Yxb/tfPHLP7r5I9Z/F+RP2bxf2X+mMV/3fwxi/96+WMW//Xzxyz+r8ofs/hvkD9m8X91/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8X5M/ZvHfNH/M4r9Z/pjF/7X5Yxb/1+WPWfxfnz9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8d88f8ziv0X+mMV/y/wxi/9b8scs/lvlj1n8t84fs/hvkz9m8d82f8zi/9b8MYv/dvljFv+35Y9Z/N+eP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/d+SPWfzfmT9m8d85f8ziv0v+mMV/1/wxi/+78scs/u/OH7P4vyd/zOK/W/6YxX/3/DGL/x75Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfz3zB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+O+VP2bx/1j+mMV/7/wxi//H88cs/p/IH7P475M/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6YxX/f/DGL/375Yxb/z+WPWfw/nz9m8d8/f8zi/4X8MYv/AfljFv8D88cs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/2b+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+H8rf8zi/+38MYv/SfljFv+T88cs/qfkj1n8T80fs/h/J3/M4n9a/pjF//T8MYv/GfljFv/v5o9Z/L+XP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif17+mMX//Pwxi/9P88cs/hfkj1n8f5Y/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfkT9m8b8yf8zi/+v8MYv/b/LHLP5X5Y9Z/H+bP2bxvzp/zOJ/Tf6Yxf/a/DGL/+/yxyz+1+WPWfyvzx+z+N+QP2bx/33+mMX/D/ljFv8/5o9Z/G/MH7P4/yl/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP5/zh+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOI/NX/M4n9f/pjF//78MYv/tPwxif8Cg/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8x+SPWfwXyh+z+I/NH7P4L5w/ZvFfJH/M4v+k/DGL/5Pzxyz+T8kfs/gvmj9m8X9q/pjFf7H8MYv/0/LHLP5Pzx+z+C+eP2bxf0b+mMX/mfljFv9x+WMW/2flj1n8n50/ZvF/Tv6YxX98/pjFf4n8MYv/c/PHLP5L5o9Z/JfKH7P4Py9/zOL//Pwxi/8L8scs/i/MH7P4L50/ZvF/Uf6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvF/cf6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/F+SP2bxXy1/zOK/ev6Yxf+l+WMW/5flj1n8X54/ZvGfkD9m8Z+YP2bxn5Q/ZvFfI3/M4r+myH+uf2Fdi/9aIv9/JYv/5Pwxi/+U/DGL/9r5Yxb/dfLHLP6vyB+z+L8yf8ziv27+mMV/vfwxi//6+WMW/1flj1n8N8gfs/i/On/M4r9h/pjFf6P8MYv/xvljFv9N8scs/q/JH7P4b5o/ZvHfLH/M4v/a/DGL/+vyxyz+r88fs/i/IX/M4v/G/DGL/5vyxyz+b84fs/hvnj9m8d8if8ziv2X+mMX/LfljFv+t8scs/lvnj1n8t8kfs/hvmz9m8X9r/pjFf7v8MYv/2/LHLP5vzx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/zvyxyz+78wfs/jvnD9m8d8lf8ziv2v+mMX/XfljFv93549Z/N+TP2bx3y1/zOK/e/6YxX+P/DGL/3vzxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+e+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfz3yh+z+H8sf8ziv3f+mMX/4/ljFv9P5I9Z/PfJH7P4fzJ/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOK/b/6YxX+//DGL/+fyxyz+n88fs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+H8zf8zif2z+mMX/uPwxi//x+WMW/xN0/o/v01r8T9T5P74s/t/KH7P4fzt/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP7fyR+z+J+WP2bxPz1/zOJ/Rv6Yxf+7+WMW/+/lj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5c/ZvE/P3/M4v/T/DGL/wX5Yxb/n+WPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5I9Z/K/MH7P4/zp/zOL/m/wxi/9V+WMW/9/mj1n8r84fs/hfkz9m8b82f8zi/7v8MYv/dfljFv/r88cs/jfkj1n8f58/ZvH/Q/6Yxf+P+WMW/xvzxyz+f8ofs/jflD9m8b85f8zif0v+mMX/1vwxi/+f88cs/rflj1n8b88fs/j/JX/M4n9H/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/hPzR+z+N+XP2bxvz9/zOI/LX9M4r/gIH/M4j+UP2bxH5U/ZvGfLX/M4j97/g9rtpFHi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/mPyxyz+C+WPWfzH5o9Z/BfOH7P4L5I/ZvF/Uv6Yxf/J+WMW/6fkj1n8F80fs/g/NX/M4r9Y/pjF/2n5Yxb/p+ePWfwXzx+z+D8jf8zi/8z8MYv/uPwxi/+z8scs/s/OH7P4Pyd/zOI/Pn/M4r9E/pjF/7n5Yxb/JfPHLP5L5Y9Z/J+XP2bxf37+mMX/BfljFv8X5o9Z/JfOH7P4vyh/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vzh/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vyR+z+K+WP2bxXz1/zOL/0vwxi//L8scs/i/PH7P4T8gfs/hPzB+z+E/KH7P4r5E/ZvFfM3/M4r9W/pjFf3L+mMV/Sv6YxX/t/DGL/zr5Yxb/V+SPWfxfmT9m8V83f8ziv17+mMV//fwxi/+r8scs/hvkj1n8X50/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv/X5I9Z/DfNH7P4b5Y/ZvF/bf6Yxf91+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n8N88fs/hvkT9m8d8yf8zi/5b8MYv/VvljFv+t88cs/tvkj1n8t80fs/i/NX/M4r9d/pjF/235Yxb/t+ePWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf8d+WMW/3fmj1n8d84fs/jvkj9m8d81f8zi/678MYv/u/PHLP7vyR+z+O+WP2bx3z1/zOK/R/6Yxf+9+WMW//flj1n835///8cePSAAQihQAPxG3Gzbtm3btu3dbNu2bdu2bdt1gXeC3swVJmr5H+g/avkf5D9q+d/Tf9Tyv5f/qOV/b/9Ry/8+/qOW/339Ry3/+/mPWv739x+1/B/gP2r5P9B/1PJ/kP+o5f9g/1HL/yH+o5b/Q/1HLf+H+Y9a/g/3H7X8H+E/avk/0n/U8n+U/6jl/2j/Ucv/Mf6jlv9j/Uct/8f5j1r+j/cftfyf4D9q+T/Rf9Tyf5L/qOX/ZP9Ry/8p/qOW/1P9Ry3/p/mPWv5P9x+1/J/hP2r5P9N/1PJ/lv+o5f9s/1HL/zn+o5b/c/1HLf/n+Y9a/s/3H7X8X+A/avm/0H/U8n+R/6jl/2L/Ucv/Jf6jlv9L/Uct/5f5j1r+L/cftfxf4T9q+b/Sf9Tyf5X/qOX/av9Ry/81/qOW/2v9Ry3/1/mPWv6v9x+1/N/gP2r5v9F/1PJ/k/+o5f9m/1HL/y3+o5b/W/1HLf+3+Y9a/m/3H7X83+E/avm/03/U8n+X/6jl/27/Ucv/Pf6jlv97/Uct//f5j1r+7/cftfw/4D9q+X/Qf9Ty/5D/qOX/Yf9Ry/8j/qOW/0f9Ry3/j/mPWv4f9x+1/D/hP2r5f9J/1PL/lP+o5f9p/1HL/zP+o5b/Z/1HLf/P+Y9a/p/3H7X8v+A/avl/0X/U8v+S/6jl/2X/Ucv/K/6jlv9X/Uct/6/5j1r+X/cftfy/4T9q+X/Tf9Ty/5b/qOX/bf9Ry/87/qOW/3f9Ry3/7/mPWv7f9x+1/H/gP2r5/9B/1PL/kf+o5f9j/1HL/yf+o5b/T/1HLf+f+Y9a/j/3H7X8f+E/avn/0n/U8v+V/6jl/2v/Ucv/N/6jlv9v/Uct/9/5j1r+v/cftfz/4D9q+f/Rf9Ty/5P/qOX/Z/9Ry/8v/qOW/1/9Ry3/v/mPWv5/9x+1/P/hPyr5H/A3/1HL/9/9Ry3///Aftfz/03/U8v8v/1HL/7/9Ry3///Eftfz/13/U8v8//1HL///9Ry3/g/mPWv4H9x+1/A/hP2r5H9J/1PI/lP+o5X9o/1HL/wD/Ucv/MP6jlv9h/Uct/8P5j1r+h/cftfyP4D9q+R/Rf9TyP5L/qOV/ZP9Ry/8o/qOW/1H9Ry3/o/mPWv5H9x+1/I/hP2r5H9N/1PI/lv+o5X9s/1HL/zj+o5b/cf1HLf/j+Y9a/sf3H7X8T+A/avmf0H/U8j+R/6jlf2L/Ucv/JP6jlv9J/Uct/5P5j1r+J/cftfxP4T9q+Z/Sf9TyP5X/qOV/av9Ry/80/qOW/2n9Ry3/0/mPWv6n9x+1/M/gP2r5n9F/1PI/k/+o5X9m/1HL/yz+o5b/Wf1HLf+z+Y9a/mf3H7X8z+E/avmf03/U8j+X/6jlf27/Ucv/PP6jlv95/Uct//P5j1r+5/cftfwv4D9q+V/Qf9Tyv5D/qOV/Yf9Ry/8i/qOW/0X9Ry3/i/mPWv4X9x+1/C/hP2r5X9J/1PK/lP+o5X9p/1HL/zL+o5b/Zf1HLf/L+Y9a/pf3H7X8r+A/avlf0X/U8r+S/6jlf2X/Ucv/Kv6jlv9V/Uct/6v5j1r+V/cftfyv4T9q+V/Tf9Tyv5b/qOV/bf9Ry/86/qOW/3X9Ry3/6/mPWv7X9x+1/G/gP2r539B/1PK/kf+o5X9j/1HL/yb+o5b/Tf1HLf+b+Y9a/jf3H7X8b+E/avnf0n/U8r+V/6jlf2v/Ucv/Nv6jlv9t/Uct/9v5j1r+t/cftfzv4D9q+d/Rf9Tyv5P/qOV/Z/9Ry/8u/qOW/139Ry3/u/mPWv539x+1/O/hP2r5H+g/avkf5D/6y/0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJ/t2G1tnWfhx/O62jrE//2TEBZehySYXCokw2z1kvCBsMrbVQTeexwBHt3Zjo91m12FXwD28mEQID5JMskSJsmUoYSY0EgPBCiIadFETDT4AohBF40QIuiUu1pz2tLTHrvFc9boW5fN50XPu++x3b2vy3X0vMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD479XQuPDI+Jphp8YPPfjg4Za+1zlHV9584Lc9Fw68lj9eNsIlxw096O3t7Z3z3Owd5cNTiqIo/Ww7y8eTKsel6++s/0Jn/1FY0PPSkuNTft545MCa0x+p6z56f23f2dripnUbWls+Nq4owsW1RWfpoK6mKMLi2uK+0kF96WBJbfFI6WB238GpxbdLB+ev3dzaXDqxNPp7Bv8rGhp3FuOHFVsM+9NgaP87679158DrKJccuNqEotz/FV3ff6viswEn6H/g+mFhZf9V/waBE6qu/xcWDLyOcsl/uf9PfmrVKyN9duL+B64fPq5/SGeE5/9hjVY+91c8/88Y4ZKD+6tquo6X+r/0tmdnlk9N+Hee/9+9fri4sv9xw57/S8/xiwae/08pinDJGL8d8J7S0LjryGj3/9H7nzC9YlMztP8z2jfvL/X/+JLvPVE+VVtl/4tGuf+PW1rxawWq09D45d6K+38V/RcfGeGSg/2//cSvHy71/9jvHzhzyGfV9H9JZf+zOtq2zNq6veu8DW1N61vWt2yqmz1/zrz6unkXzJ3V90jQ/3WM3xV4bxjb/b+YXLGpKYqWwf013QeeLvU/98EH55RPTaqy/8Wj3v9nuP/DiD40rpg4sehs6uhor+v/OnBY3/+1/4eN0H8Vf/8/65zyD6stv9YUxbTB/V1n3r2i1P87h57dXT41scr+l4za/4LBnxeIMMb7f3PFZlj/Bw+91Pf8v+zeg2eUT1X79/+lo/b/qvs/jEVDY8X/8PMfVup/V3FZZKehwX//g3Ry9P/YOzf0xK3DJ/QP6eTo/3efO3pu3Dos0z+kk6P/CRsfeD5uHS7VP6STo//lU+eviFuHy/QP6eTof+2r5/45bh0a9Q/p5Oj/nC/t7oxbh+X6h3Ry9P9Q+5xtceuwQv+QTo7+f3raQ6/FrcPl+od0cvR/7Ng9N8atwxX6h3Ry9N+95+wfxK3DlfqHdHL0f/m6hSFuHa7SP6STo//p0/74eNw6XK1/SCdH//P+9PfT4tbhGv1DOjn6v+PzK/bFrcO1+od0cvQ//vpXXoxbh5X6h3Ry9L/07G0L49bhOv1DOjn6b/5Jc2/cOqzSP6STo/9ZX//Rhrh1uF7/kE6O/g8vf3RP3DrcoH9IJ0f/e+qKKXHrcKP+IZ0c/X/tu6cfiluHT+of0snR/2+eenJ+3Dqs1j+kk6P/5z5w+zfi1uEm/UM6Ofq/d82LZ8WtQ5P+IZ0c/T+89/kvxq3DGv1DOjn6f+ONtv+LW4e1+od0cvQ/edKpr8etQ7P+IZ0c/S+89SvtcevQon9IJ0f/bbu7fxi3Duv0D+nk6P/Dx6etiluH9fqHdHL0v3Lu3vfHrcPN+od0cvT/vmUX7opbhw36h3Ry9H9Rz0cviluHjfqHdHL03/HMZ78atw636B/SydH/3pmvLY5bh1b9Qzo5+n959dIfx61Dm/4hnRz9v/XodZvi1mGT/iGdHP0/+bO3j8Wtw2b9Qzo5+v//Cxb9NW4dtugf0snR/+Ilb66NW4dP6R/SydH/xu5/vBy3Du36h3Ry9D/z8NXL4tZhq/4hnRz9f+e8uv1x69Chf0gnR/93XrmvPm4dtukf0snR//6Dd90dtw636h/SydH/m7+YMT1uHT6tf0gnR//3Tzl0bdw6dOof0snR/y831T4Ttw7b9Q/p5Oj/b/um7ohbhy79Qzo5+n/69Z4/xK3DbfqHdHL0v3rCrybGrcPt+od0cvQ/tWvLfXHrcIf+IZ0c/c+/p+n8uHX4jP4hnRz9b/3LC9+MW4cd+od0tm7vuqWptbWl3RtvvPFm8M3J/pMJSO3d6E/2rwQAAAAAAAAAAAAAADiRHP+c6GT/HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUTvBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF8BAAD//+8S49Y=") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x0, 0x2000, 0x3, 0x8}) 7.102152043s ago: executing program 3 (id=1548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.81373547s ago: executing program 3 (id=1551): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0000000150000000000000000000000686d6163287368613235362d6176783229000000"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 6.518187177s ago: executing program 3 (id=1554): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffea5, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) 6.517701817s ago: executing program 5 (id=1556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="9a6f2e", &(0x7f0000000140), 0x2}, 0x20) 6.261049062s ago: executing program 3 (id=1558): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x2) 5.942901321s ago: executing program 3 (id=1561): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.296876457s ago: executing program 0 (id=1582): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 3.032760832s ago: executing program 0 (id=1584): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 2.749612669s ago: executing program 0 (id=1587): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x5, &(0x7f0000000280)=[{0xfffa, 0x3, 0x6e, 0x10000}, {0x4, 0x0, 0x6, 0x100}, {0x0, 0x4, 0x7, 0x2}, {0x2, 0x8, 0x0, 0xfffffffa}, {0x1ca, 0x4, 0x0, 0x600000}]}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.543148621s ago: executing program 0 (id=1589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.362127941s ago: executing program 0 (id=1591): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a006da800000000130000001c140000000000e29a"], 0x24}}, 0x0) 2.298167985s ago: executing program 1 (id=1592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) 2.109422627s ago: executing program 0 (id=1593): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x48d1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x4446, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) 1.952891335s ago: executing program 2 (id=1594): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff070007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 1.913125438s ago: executing program 1 (id=1595): semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) 1.54699157s ago: executing program 1 (id=1596): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="cdf2cb96cff46337101c6c6c4fea83067f4d403d845d9b2047b5393c9dea8ad9062a623bfa2920e97bc7574831f052e7ce47f63bfa2f492244277bba5cc9d961da8b51b0a7af162f55bef67c654203a7d7d7391b5456957b724754a831baa12bc683d3333d10921e3455ade178160a30e3b14734163995267df16d2ed7cbc16145c6eb3e1424db0086b07e452e297b63a6e37619815d6056889cbc347b9e23144eba11e027f097b8ef49769f6ca210afb70c7709d068ee52084982b8617179c985d09adb8257886b041c9e90575c5c88d259406de953323bb8ed"], 0x1, 0x17d, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.53406242s ago: executing program 2 (id=1597): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x5, 0x0, [{0x10000, 0x3f, &(0x7f0000000300)=""/63}, {0x8010002, 0x15, &(0x7f0000000780)=""/21}, {0xdddd0000, 0x9a, &(0x7f00000008c0)=""/154}, {0x0, 0x0, 0x0}, {0x4, 0x0, 0x0}]}) 1.130071044s ago: executing program 2 (id=1598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 956.794204ms ago: executing program 5 (id=1599): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90) sendto$inet6(r0, &(0x7f0000000280)="ba", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) 940.881995ms ago: executing program 1 (id=1600): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) 769.291805ms ago: executing program 2 (id=1601): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x0, 0x409, 0x0}) 629.146384ms ago: executing program 5 (id=1602): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x2, &(0x7f00000000c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 628.898154ms ago: executing program 1 (id=1603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) gettimeofday(0x0, &(0x7f0000000040)) 549.204398ms ago: executing program 2 (id=1604): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 483.213312ms ago: executing program 3 (id=1605): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) getdents(r0, 0x0, 0x0) 307.680503ms ago: executing program 5 (id=1606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 307.405673ms ago: executing program 2 (id=1607): mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x2010002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x11b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 292.002613ms ago: executing program 1 (id=1608): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 0s ago: executing program 5 (id=1609): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1c8, &(0x7f0000000280)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCmD4G7XVrmBnOnPTU1Vomy8zA2MDAUHFLe92aU35gMbnUHiM3ycXsDMwMoalHFhVXVmUn5uSknmBgZahgZGJgOH2CgeW6/TWVZglOhz/yHA5Jmg46TEd8PLKYocazsWUqnD3zQR7kCYZHK5g31nnmNdYVpk7NS8tLqsqqyprHwLRxZmNnY+PKiXVRaX6rGFtSXDY1dTIyOWxRE9jMbKg+yUZ7wrv2VQ+THFh7OKCmMl8yXlgkdWpF1cwJX5RmMxp+Z7jDw7xCQkPDSeKKhEWDCcOROtsGV4YKTqh6xiQ1NrG2LWfmhDDzs7ktUGhJPsEUepRj6UwJiwNCVSd/TmVnYEh0m7HtqQPbGZ7Dx3nWFPQJGh2XYHBaKPhfhqHiVnJCQ0OZxlqmpbYLvhRp/JXwWm3slMHgbs+0DBagLA0gciWUJwvWk5C8wkNHU9MoJTmhYZNCQpJbgaEyw9Y9nKsFGhiQok2FgYFhOyMsbiHgGjx+RsEoGAWjYBSMglEwCkbBKBgFo2AUjAQACAAA//9yQoXa") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000300)=ANY=[@ANYBLOB="70000000000901030000000000000000050000050900010073797a30000000f20b00048008000140000000093c0002000c00028005000100110000002c000180"], 0x70}, 0x1, 0x0, 0x0, 0x4040800}, 0x40080) kernel console output (not intermixed with test programs): loop2): ext4_validate_block_bitmap:438: comm syz.2.565: bg 0: block 131: padding at end of block bitmap is not set [ 115.224391][ T5753] EXT4-fs (loop2): Remounting filesystem read-only [ 115.231135][ T5753] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 115.251389][ T5753] EXT4-fs (loop2): Remounting filesystem read-only [ 115.272482][ T5753] EXT4-fs (loop2): 1 truncate cleaned up [ 115.275551][ T127] apple 0003:05AC:029F.0010: unknown main item tag 0x2 [ 115.287010][ T5753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.307077][ T127] apple 0003:05AC:029F.0010: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.0-1/input0 [ 115.389037][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 115.423744][ T954] hid-led 0003:04D8:F372.0011: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 115.508736][ T4340] usb 1-1: USB disconnect, device number 9 [ 115.541518][ T954] hid-led 0003:04D8:F372.0011: Greynut Luxafor initialized [ 115.547749][ T5763] fido_id[5763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 115.623907][ T4332] usb 2-1: USB disconnect, device number 8 [ 115.643501][ T954] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 115.656778][ T127] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.666192][ T954] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 115.705818][ T954] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 115.739275][ T954] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 115.759929][ T954] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 115.785507][ T5767] fido_id[5767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 115.791993][ T954] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 115.875364][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.875431][ T22] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 115.893864][ T127] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 115.901171][ T22] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 115.914302][ T22] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 115.919378][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 115.923592][ T22] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 115.942105][ T22] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 115.944387][ T127] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 115.969126][ T22] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 115.978674][ T127] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 115.988884][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.990949][ T22] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 116.009958][ T954] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 116.019569][ T22] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 116.022422][ T127] usb 4-1: config 0 descriptor?? [ 116.035014][ T22] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 116.050383][ T22] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 116.064034][ T22] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 116.284357][ T127] hdpvr 4-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ wÒΖŠÒ¥ g/ƒNÐ `žxè$«·¯=å"Ü— [ 116.315291][ T127] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 116.335781][ T5788] loop4: detected capacity change from 0 to 1024 [ 116.419568][ T5788] EXT4-fs: Ignoring removed i_version option [ 116.425611][ T5788] EXT4-fs: Ignoring removed bh option [ 116.435912][ T5788] EXT4-fs: inline encryption not supported [ 116.556066][ T5788] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.577: lblock 2 mapped to illegal pblock 2 (length 1) [ 116.644281][ T26] audit: type=1400 audit(1770069165.614:13): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5802 comm="syz.1.582" [ 116.671821][ T5788] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 116.699157][ T5788] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.577: lblock 0 mapped to illegal pblock 48 (length 1) [ 116.762804][ T127] hdpvr 4-1:0.0: Could not setup controls [ 116.770056][ T5788] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 116.783356][ T127] hdpvr 4-1:0.0: registering videodev failed [ 116.796827][ T5788] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.577: Failed to acquire dquot type 0 [ 116.821049][ T127] hdpvr: probe of 4-1:0.0 failed with error -71 [ 116.832273][ T5788] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 116.844685][ T127] usb 4-1: USB disconnect, device number 7 [ 116.870985][ T5788] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.577: mark_inode_dirty error [ 116.904446][ T5788] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 116.926633][ T5788] EXT4-fs (loop4): 1 orphan inode deleted [ 116.932731][ T5788] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 116.944901][ T4297] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 116.985363][ T5809] loop1: detected capacity change from 0 to 2048 [ 117.016259][ T4297] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 117.027990][ T5809] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 117.073230][ T4297] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 117.086965][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.147019][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.168274][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.185995][ T4297] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm kworker/u4:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.195026][ T5800] loop0: detected capacity change from 0 to 32768 [ 117.228160][ T5809] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 117.236780][ T4297] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 117.263904][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.284126][ T4297] EXT4-fs error (device loop4): ext4_write_dquot:6815: comm kworker/u4:5: Failed to commit dquot type 0 [ 117.307816][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.347662][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.395388][ T5800] XFS (loop0): Mounting V5 Filesystem [ 117.411510][ T4297] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 117.424349][ T5809] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 117.471929][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 117.496611][ T4279] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 117.513571][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.519301][ T5800] XFS (loop0): Ending clean mount [ 117.529517][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.541468][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.563658][ T4279] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 117.583931][ T5800] XFS (loop0): Quotacheck needed: Please wait. [ 117.597843][ T4279] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 117.601798][ T5809] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 117.669085][ T5800] XFS (loop0): Quotacheck: Done. [ 117.678783][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.697129][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.730344][ T5827] program syz.3.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.759900][ T5830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.593'. [ 117.779191][ T5809] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 117.825059][ T5809] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 117.875573][ T4272] XFS (loop0): Unmounting Filesystem [ 118.466891][ T5846] loop2: detected capacity change from 0 to 256 [ 118.549518][ T5846] FAT-fs (loop2): Directory bread(block 64) failed [ 118.578224][ T5846] FAT-fs (loop2): Directory bread(block 65) failed [ 118.615410][ T5846] FAT-fs (loop2): Directory bread(block 66) failed [ 118.653246][ T5846] FAT-fs (loop2): Directory bread(block 67) failed [ 118.686259][ T5846] FAT-fs (loop2): Directory bread(block 68) failed [ 118.717222][ T5846] FAT-fs (loop2): Directory bread(block 69) failed [ 118.733621][ T5846] FAT-fs (loop2): Directory bread(block 70) failed [ 118.757265][ T5832] loop4: detected capacity change from 0 to 32768 [ 118.757515][ T5846] FAT-fs (loop2): Directory bread(block 71) failed [ 118.833602][ T5846] FAT-fs (loop2): Directory bread(block 72) failed [ 118.850920][ T5846] FAT-fs (loop2): Directory bread(block 73) failed [ 118.862535][ T5832] XFS (loop4): Mounting V5 Filesystem [ 119.083526][ T5832] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 119.142422][ T5872] loop2: detected capacity change from 0 to 512 [ 119.166646][ T5872] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 119.167923][ T5832] XFS (loop4): Starting recovery (logdev: internal) [ 119.191339][ T5835] loop3: detected capacity change from 0 to 32768 [ 119.242067][ T26] audit: type=1326 audit(1770069168.214:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 119.311000][ T5832] XFS (loop4): Ending recovery (logdev: internal) [ 119.335557][ T5832] XFS (loop4): Quotacheck needed: Please wait. [ 119.352498][ T26] audit: type=1326 audit(1770069168.254:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 119.390331][ T5835] XFS (loop3): Mounting V5 Filesystem [ 119.460404][ T5832] XFS (loop4): Quotacheck: Done. [ 119.535177][ T26] audit: type=1326 audit(1770069168.254:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 119.630696][ T5835] XFS (loop3): Ending clean mount [ 119.666350][ T5888] loop2: detected capacity change from 0 to 1024 [ 119.706881][ T4279] XFS (loop4): Unmounting Filesystem [ 119.783189][ T5888] hfsplus: bad catalog entry type [ 119.830652][ T4267] XFS (loop3): Unmounting Filesystem [ 120.000660][ T5892] loop1: detected capacity change from 0 to 4096 [ 120.006332][ T4297] hfsplus: b-tree write err: -5, ino 4 [ 120.143409][ T5892] ntfs3: loop1: ino=3, Correct links count -> 2. [ 120.319894][ T5892] ntfs3: loop1: ino=5, "/" directory corrupted [ 120.514363][ T5890] loop0: detected capacity change from 0 to 32768 [ 120.583618][ T5890] XFS: ikeep mount option is deprecated. [ 120.719943][ T5890] XFS (loop0): Mounting V5 Filesystem [ 120.864739][ T5890] XFS (loop0): Ending clean mount [ 120.928136][ T5912] loop4: detected capacity change from 0 to 2048 [ 120.996838][ T5912] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.030639][ T5890] syz.0.611 (5890) used greatest stack depth: 19280 bytes left [ 121.048885][ T26] audit: type=1800 audit(1770069170.024:17): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.618" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 121.087425][ T4272] XFS (loop0): Unmounting Filesystem [ 121.245889][ T26] audit: type=1326 audit(1770069170.214:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431a39aeb9 code=0x7ffc0000 [ 121.291641][ T5896] loop3: detected capacity change from 0 to 32768 [ 121.331323][ T26] audit: type=1326 audit(1770069170.214:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431a39aeb9 code=0x7ffc0000 [ 121.402815][ T5896] JBD2: Ignoring recovery information on journal [ 121.504851][ T26] audit: type=1326 audit(1770069170.284:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.4.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431a39aeb9 code=0x7ffc0000 [ 121.582603][ T5896] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 121.798568][ T4267] ocfs2: Unmounting device (7,3) on (node local) [ 122.095535][ T5934] program syz.0.626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.206828][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.368866][ T22] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 122.391619][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 122.406799][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 122.413687][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.458688][ T14] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 122.476323][ T5946] loop2: detected capacity change from 0 to 8192 [ 122.478065][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.520085][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 122.520100][ T26] audit: type=1800 audit(1770069171.494:101): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.632" name="file2" dev="loop2" ino=1048701 res=0 errno=0 [ 122.548913][ T14] usb 4-1: config 0 descriptor?? [ 122.565901][ T5946] syz.2.632: attempt to access beyond end of device [ 122.565901][ T5946] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 122.579952][ T14] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 122.590662][ T22] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 122.604804][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.615325][ T22] usb 2-1: config 0 descriptor?? [ 122.630541][ T5946] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 122.645996][ T22] cp210x 2-1:0.0: cp210x converter detected [ 122.652862][ T5946] FAT-fs (loop2): Filesystem has been set read-only [ 122.877555][ T5944] loop0: detected capacity change from 0 to 32768 [ 122.944815][ T5944] (syz.0.631,5944,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.989979][ T5944] (syz.0.631,5944,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.049750][ T22] usb 2-1: cp210x converter now attached to ttyUSB0 [ 123.111249][ T5944] JBD2: Ignoring recovery information on journal [ 123.175675][ T14] gspca_vc032x: reg_r err -71 [ 123.180767][ T14] vc032x: probe of 4-1:0.0 failed with error -71 [ 123.246767][ T22] usb 2-1: USB disconnect, device number 9 [ 123.249332][ T14] usb 4-1: USB disconnect, device number 8 [ 123.275117][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.297690][ T22] cp210x 2-1:0.0: device disconnected [ 123.339251][ T5944] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 123.524140][ T5950] loop4: detected capacity change from 0 to 40427 [ 123.562948][ T5950] F2FS-fs (loop4): invalid crc value [ 123.608119][ T5950] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.673922][ T5950] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.763149][ T4279] syz-executor: attempt to access beyond end of device [ 123.763149][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.907684][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 123.953176][ T5970] loop3: detected capacity change from 0 to 1024 [ 124.206157][ T5975] [U] `† [ 124.209901][ T5975] [U] [ 124.212624][ T5975] [U] [ 124.215334][ T5975] [U] [ 124.291616][ T5975] [U] [ 124.294375][ T5975] [U] [ 124.297082][ T5975] [U] [ 124.299790][ T5975] [U] [ 124.322699][ T5975] [U] [ 124.325450][ T5975] [U] [ 124.328184][ T5975] [U] [ 124.330903][ T5975] [U] [ 124.377871][ T5975] [U] [ 124.380615][ T5975] [U] [ 124.383329][ T5975] [U] [ 124.386051][ T5975] [U] [ 124.407471][ T5975] [U] [ 124.410219][ T5975] [U] [ 124.412938][ T5975] [U] [ 124.415821][ T5975] [U] [ 124.436633][ T5975] [U] [ 124.439390][ T5975] [U] [ 124.442115][ T5975] [U] [ 124.444824][ T5975] [U] [ 124.495376][ T5975] [U] [ 124.498214][ T5975] [U] [ 124.500925][ T5975] [U] [ 124.503637][ T5975] [U] [ 124.534187][ T5975] [U] [ 124.536945][ T5975] [U] [ 124.539658][ T5975] [U] [ 124.542359][ T5975] [U] [ 124.587633][ T5975] [U] [ 124.590379][ T5975] [U] [ 124.593083][ T5975] [U] [ 124.595788][ T5975] [U] [ 124.619683][ T5975] [U] [ 124.622434][ T5975] [U] [ 124.625155][ T5975] [U] [ 124.627862][ T5975] [U] [ 124.675130][ T5975] [U] [ 124.677891][ T5975] [U] [ 124.680623][ T5975] [U] [ 124.683333][ T5975] [U] [ 124.749953][ T5975] [U] [ 124.752719][ T5975] [U] [ 124.755446][ T5975] [U] [ 124.756619][ T5991] loop0: detected capacity change from 0 to 4096 [ 124.758134][ T5975] [U] [ 124.765860][ T5975] [U] [ 124.770115][ T5975] [U] [ 124.772827][ T5975] [U] [ 124.775543][ T5975] [U] [ 124.793567][ T5975] [U] [ 124.796322][ T5975] [U] [ 124.799124][ T5975] [U] [ 124.801833][ T5975] [U] [ 124.819487][ T5995] netlink: 5 bytes leftover after parsing attributes in process `syz.4.652'. [ 124.835874][ T5998] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.897235][ T5975] [U] [ 124.899991][ T5975] [U] [ 124.902700][ T5975] [U] [ 124.905466][ T5975] [U] [ 124.914272][ T5975] [U] [ 124.917024][ T5975] [U] [ 124.919740][ T5975] [U] [ 124.922451][ T5975] [U] [ 124.928720][ T5975] [U] [ 124.931473][ T5975] [U] [ 124.934189][ T5975] [U] [ 124.936917][ T5975] [U] [ 124.975637][ T5975] [U] [ 124.978398][ T5975] [U] [ 124.981107][ T5975] [U] [ 124.983814][ T5975] [U] [ 125.045516][ T5975] [U] [ 125.048275][ T5975] [U] [ 125.050992][ T5975] [U] [ 125.053703][ T5975] [U] [ 125.066737][ T954] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.092535][ T5975] [U] [ 125.269003][ T954] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.303758][ T954] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.335341][ T954] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.354306][ T6015] loop4: detected capacity change from 0 to 2048 [ 125.371104][ T954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.379564][ T954] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 125.389042][ T954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.418612][ T954] usb 3-1: config 0 descriptor?? [ 125.430410][ T6019] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.571205][ T6019] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 125.621656][ T6019] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 125.652954][ T6019] Remounting filesystem read-only [ 125.661254][ T6023] netlink: 48 bytes leftover after parsing attributes in process `syz.3.664'. [ 125.779906][ T4279] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 125.870217][ T954] magicmouse 0003:05AC:0265.0012: collection stack underflow [ 125.887508][ T954] magicmouse 0003:05AC:0265.0012: item 0 4 0 12 parsing failed [ 125.902175][ T954] magicmouse 0003:05AC:0265.0012: magicmouse hid parse failed [ 125.913065][ T954] magicmouse: probe of 0003:05AC:0265.0012 failed with error -22 [ 125.950208][ T6033] loop3: detected capacity change from 0 to 256 [ 126.025776][ T6033] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d93, chksum : 0x4501cc6b, utbl_chksum : 0xe619d30d) [ 126.089163][ T954] usb 3-1: USB disconnect, device number 6 [ 126.255825][ T6039] loop0: detected capacity change from 0 to 1024 [ 126.277736][ T6039] EXT4-fs: Ignoring removed nobh option [ 126.291732][ T6039] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.357641][ T6044] loop3: detected capacity change from 0 to 1024 [ 126.412276][ T6039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.650258][ T4350] hfsplus: b-tree write err: -5, ino 4 [ 126.659323][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 126.794227][ T6053] loop1: detected capacity change from 0 to 8192 [ 126.900364][ T6059] loop0: detected capacity change from 0 to 2048 [ 126.988790][ T6060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.046498][ T6060] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 127.101985][ T6060] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 127.129577][ T6060] Remounting filesystem read-only [ 127.236168][ T4272] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 127.865984][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 127.897378][ T6093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 128.141701][ T6103] netlink: 182 bytes leftover after parsing attributes in process `syz.3.699'. [ 128.205523][ T6110] loop0: detected capacity change from 0 to 64 [ 128.265350][ T6104] sctp: [Deprecated]: syz.2.698 (pid 6104) Use of int in max_burst socket option deprecated. [ 128.265350][ T6104] Use struct sctp_assoc_value instead [ 129.006074][ T6127] loop3: detected capacity change from 0 to 512 [ 129.085812][ T6119] loop0: detected capacity change from 0 to 32768 [ 129.149743][ T6129] loop2: detected capacity change from 0 to 4096 [ 129.151288][ T6121] loop4: detected capacity change from 0 to 40427 [ 129.169278][ T6119] XFS (loop0): Mounting V5 Filesystem [ 129.190590][ T6121] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 129.199666][ T6121] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 129.218434][ T6121] F2FS-fs (loop4): invalid crc value [ 129.232548][ T6137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.271205][ T6121] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.330483][ T6119] XFS (loop0): Ending clean mount [ 129.330669][ T6121] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 129.345942][ T6121] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.408624][ T6119] XFS (loop0): Quotacheck needed: Please wait. [ 129.420000][ T6142] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 129.482031][ T6119] XFS (loop0): Quotacheck: Done. [ 129.516801][ T6142] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 129.605329][ T6142] Remounting filesystem read-only [ 129.636872][ T6142] NILFS (loop2): error -5 truncating bmap (ino=12) [ 129.730170][ T6147] mkiss: ax0: crc mode is auto. [ 129.770512][ T4272] XFS (loop0): Unmounting Filesystem [ 129.823623][ T4274] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 129.940077][ T9] hfsplus: b-tree write err: -5, ino 4 [ 130.378250][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 130.578887][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.615783][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.651328][ T14] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 130.663433][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.692677][ T14] usb 2-1: config 0 descriptor?? [ 130.718758][ T6175] EXT4-fs: Ignoring removed oldalloc option [ 130.873842][ T6175] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 130.927927][ T6175] System zones: 0-7 [ 130.946644][ T6175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.024396][ T6175] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.726: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 131.112576][ T14] ntrig 0003:1B96:0012.0013: unknown main item tag 0x1 [ 131.117444][ T6170] set_capacity_and_notify: 2 callbacks suppressed [ 131.117460][ T6170] loop4: detected capacity change from 0 to 32768 [ 131.132561][ T14] ntrig 0003:1B96:0012.0013: unknown main item tag 0x4 [ 131.159310][ T14] ntrig 0003:1B96:0012.0013: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0 [ 131.176472][ T6189] loop0: detected capacity change from 0 to 4096 [ 131.176560][ T6175] EXT4-fs (loop2): Remounting filesystem read-only [ 131.197632][ T6189] ntfs3: loop0: ino=3, Correct links count -> 2. [ 131.259485][ T6170] XFS (loop4): Mounting V5 Filesystem [ 131.270299][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 131.339826][ T14] usb 2-1: USB disconnect, device number 10 [ 131.358423][ T6170] XFS (loop4): Ending clean mount [ 131.521676][ T4279] XFS (loop4): Unmounting Filesystem [ 131.732326][ T6205] fido_id[6205]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 132.300894][ T6225] loop0: detected capacity change from 0 to 512 [ 132.330009][ T6225] EXT4-fs: Ignoring removed nobh option [ 132.360906][ T6225] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.387487][ T6225] EXT4-fs: inline encryption not supported [ 132.403738][ T6225] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.430136][ T6225] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.446821][ T6225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.488109][ T6225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 132.511945][ T6225] System zones: 1-12 [ 132.548075][ T6225] EXT4-fs (loop0): 1 truncate cleaned up [ 132.553788][ T6225] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.685325][ T6241] loop2: detected capacity change from 0 to 64 [ 132.695158][ T26] audit: type=1800 audit(1770069181.664:102): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.743" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 132.808441][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.814779][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.838988][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 133.038742][ T6243] loop1: detected capacity change from 0 to 4096 [ 133.072977][ T6243] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 133.366775][ T127] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.556844][ T127] usb 4-1: Using ep0 maxpacket: 32 [ 133.563812][ T127] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 133.580685][ T127] usb 4-1: config 0 has no interface number 0 [ 133.599241][ T127] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 133.624009][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.642528][ T127] usb 4-1: Product: syz [ 133.671871][ T127] usb 4-1: Manufacturer: syz [ 133.676530][ T127] usb 4-1: SerialNumber: syz [ 133.707354][ T127] usb 4-1: config 0 descriptor?? [ 133.742057][ T127] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 133.821091][ T6284] loop4: detected capacity change from 0 to 512 [ 133.842532][ T6284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.862217][ T6284] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.767: inode has both inline data and extents flags [ 133.883887][ T6284] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.767: couldn't read orphan inode 15 (err -117) [ 133.903160][ T6284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.944823][ T127] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 134.024238][ T127] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.028119][ T6284] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #2: comm syz.4.767: invalid size [ 134.150381][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 134.350403][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.364270][ T127] usb 4-1: USB disconnect, device number 9 [ 134.392648][ T127] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.459856][ T127] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.498688][ T127] quatech2 4-1:0.51: device disconnected [ 134.743964][ T6307] loop0: detected capacity change from 0 to 512 [ 134.788972][ T6307] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.777: inode #1: comm syz.0.777: iget: illegal inode # [ 134.875159][ T6307] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.777: error while reading EA inode 1 err=-117 [ 134.896794][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.969283][ T26] audit: type=1326 audit(1770069183.944:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.783" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee8479aeb9 code=0x0 [ 134.992380][ T6307] EXT4-fs (loop0): 1 orphan inode deleted [ 135.002177][ T6307] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.088673][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.111989][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.133612][ T22] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 135.152877][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.182388][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 135.187620][ T22] usb 3-1: config 0 descriptor?? [ 135.604457][ T22] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 135.635829][ T22] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 135.648917][ T22] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 135.666468][ T22] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 135.679789][ T22] hid-steam 0003:28DE:1142.0014: unknown main item tag 0x0 [ 135.698475][ T22] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 135.762851][ T6334] loop3: detected capacity change from 0 to 1764 [ 135.805649][ T22] usb 3-1: USB disconnect, device number 7 [ 135.847199][ T4421] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.962122][ T6335] fido_id[6335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.120351][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 136.364853][ T6352] loop4: detected capacity change from 0 to 2048 [ 136.431570][ T6352] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 136.472954][ T6352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.601919][ T6360] ALSA: seq fatal error: cannot create timer (-22) [ 136.603054][ T6359] binder: 6357:6359 ioctl c018620c 200000000000 returned -22 [ 136.787077][ T4310] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 136.818230][ T6365] loop3: detected capacity change from 0 to 256 [ 136.848001][ T6365] exfat: Deprecated parameter 'namecase' [ 136.853783][ T6365] exfat: Deprecated parameter 'utf8' [ 136.933411][ T6365] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 136.989312][ T4310] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.020933][ T4310] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.070111][ T4310] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 137.095637][ T4310] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 137.144298][ T4310] usb 3-1: Product: syz [ 137.171958][ T4310] usb 3-1: Manufacturer: syz [ 137.195004][ T4310] hub 3-1:4.0: USB hub found [ 137.391434][ T4310] hub 3-1:4.0: 2 ports detected [ 137.404982][ T6379] loop3: detected capacity change from 0 to 2048 [ 137.540431][ T6383] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.583103][ T6379] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 137.591940][ T4310] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 137.606804][ T4310] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 137.630884][ T6379] Remounting filesystem read-only [ 137.678081][ T4310] usb 3-1: USB disconnect, device number 8 [ 137.846902][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 138.017019][ T6392] netlink: 128 bytes leftover after parsing attributes in process `syz.0.815'. [ 138.036768][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 138.043679][ T22] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 138.073240][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.095086][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.815'. [ 138.112120][ T22] usb 2-1: config 0 descriptor?? [ 138.132560][ T22] gspca_main: sq930x-2.14.0 probing 041e:403c [ 138.286399][ T6382] loop4: detected capacity change from 0 to 32768 [ 138.294879][ T6394] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 138.364760][ T6394] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 138.422740][ T6394] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.668522][ T6389] loop3: detected capacity change from 0 to 32768 [ 138.776945][ T22] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 138.783158][ T22] sq930x: probe of 2-1:0.0 failed with error -71 [ 138.826910][ T22] usb 2-1: USB disconnect, device number 11 [ 138.943179][ T6402] mkiss: ax0: crc mode is auto. [ 139.178945][ T6407] loop2: detected capacity change from 0 to 4096 [ 139.203453][ T6407] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 139.444563][ T6415] loop1: detected capacity change from 0 to 128 [ 139.507804][ T6415] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 139.556207][ T6415] hpfs: filesystem error: improperly stopped [ 139.616799][ T6415] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.665821][ T6415] hpfs: You really don't want any checks? You are crazy... [ 139.693337][ T6415] hpfs: hpfs_map_sector(): read error [ 139.706012][ T6415] hpfs: code page support is disabled [ 139.733023][ T6415] hpfs: hpfs_map_4sectors(): unaligned read [ 139.794274][ T6415] hpfs: hpfs_map_4sectors(): unaligned read [ 139.826279][ T6415] hpfs: filesystem error: unable to find root dir [ 139.851173][ T6424] loop4: detected capacity change from 0 to 16 [ 139.927233][ T6424] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.971368][ T6424] syz.4.831: attempt to access beyond end of device [ 139.971368][ T6424] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 140.036606][ T6424] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 140.133998][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 140.176911][ T6431] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 140.184898][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.833'. [ 140.294657][ T6433] mkiss: ax0: crc mode is auto. [ 140.483468][ T6435] loop4: detected capacity change from 0 to 8192 [ 140.535227][ T6439] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 140.564045][ T26] audit: type=1800 audit(1770069189.534:104): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.834" name="file2" dev="loop4" ino=1048709 res=0 errno=0 [ 140.609320][ T6435] syz.4.834: attempt to access beyond end of device [ 140.609320][ T6435] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 140.635559][ T6441] Bluetooth: MGMT ver 1.22 [ 140.664004][ T6435] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 140.700154][ T6435] FAT-fs (loop4): Filesystem has been set read-only [ 140.962541][ T6445] loop0: detected capacity change from 0 to 2048 [ 141.090654][ T6445] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 141.269362][ T6461] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.276014][ T6445] syz.0.839: attempt to access beyond end of device [ 141.276014][ T6445] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 141.427030][ T6464] mkiss: ax0: crc mode is auto. [ 141.667315][ T6471] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 141.706843][ T14] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 141.782955][ T6449] loop3: detected capacity change from 0 to 32768 [ 141.910444][ T6449] XFS (loop3): Mounting V5 Filesystem [ 141.916256][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.940752][ T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.950664][ T14] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.960510][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.971765][ T14] usb 2-1: config 0 descriptor?? [ 142.020473][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 142.095780][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 142.109293][ T6449] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 142.152034][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 142.186074][ T6465] dvb-usb: bulk message failed: -22 (2/0) [ 142.210634][ T6449] XFS (loop3): Starting recovery (logdev: internal) [ 142.218002][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 142.225091][ T14] usb 2-1: media controller created [ 142.248722][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.298888][ T6449] XFS (loop3): Ending recovery (logdev: internal) [ 142.312014][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 142.328424][ T6449] XFS (loop3): Quotacheck needed: Please wait. [ 142.338711][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 142.353345][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 142.384533][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 142.399516][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 142.449759][ T14] usb 2-1: USB disconnect, device number 12 [ 142.506594][ T6449] XFS (loop3): Quotacheck: Done. [ 142.547441][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 142.675655][ T4267] XFS (loop3): Unmounting Filesystem [ 142.693736][ T6500] loop0: detected capacity change from 0 to 16 [ 142.814246][ T6500] erofs: (device loop0): mounted with root inode @ nid 36. [ 142.887467][ T6500] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 143.205674][ T6510] loop0: detected capacity change from 0 to 2048 [ 143.241829][ T6510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.294941][ T6512] loop4: detected capacity change from 0 to 2048 [ 143.335616][ T6512] EXT4-fs: Ignoring removed oldalloc option [ 143.397615][ T6512] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 143.423454][ T4332] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 143.425833][ T6512] System zones: 0-7 [ 143.454321][ T6512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.534600][ T6523] loop3: detected capacity change from 0 to 64 [ 143.563138][ T6512] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.868: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 143.611282][ T6512] EXT4-fs (loop4): Remounting filesystem read-only [ 143.656923][ T4332] usb 2-1: Using ep0 maxpacket: 8 [ 143.665932][ T4332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 143.702702][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.734604][ T4332] usb 2-1: Product: syz [ 143.747759][ T4332] usb 2-1: Manufacturer: syz [ 143.776767][ T4332] usb 2-1: SerialNumber: syz [ 143.800427][ T4332] usb 2-1: config 0 descriptor?? [ 143.824102][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 144.024924][ T4332] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.447855][ T4332] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 144.477380][ T4332] usb 2-1: USB disconnect, device number 13 [ 145.053046][ T6573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.059988][ T6573] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 145.066960][ T4332] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 145.080187][ T6573] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 145.090242][ T6573] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 145.110910][ T6573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.118598][ T6573] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 145.125313][ T6573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 145.140278][ T6573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.151547][ T6573] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 145.167138][ T6573] comedi comedi3: 8255: I/O port conflict (0xffffffff80000101,4) [ 145.185208][ T6573] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 145.192066][ T6573] comedi comedi3: 8255: I/O port conflict (0x1a449,4) [ 145.206934][ T6573] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 145.213568][ T6573] comedi comedi3: 8255: I/O port conflict (0x41020003,4) [ 145.237696][ T6573] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 145.247441][ T6573] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 145.255147][ T6573] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 145.262813][ T6573] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 145.274370][ T4332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.293331][ T4332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.320308][ T4332] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 145.339526][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.378270][ T4332] usb 5-1: config 0 descriptor?? [ 145.797869][ T4332] lenovo 0003:17EF:6047.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 145.995839][ T22] usb 5-1: USB disconnect, device number 7 [ 146.056405][ T6601] fido_id[6601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 146.562796][ T6600] loop3: detected capacity change from 0 to 40427 [ 146.592351][ T6600] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 146.640549][ T6600] F2FS-fs (loop3): invalid crc value [ 146.694289][ T6600] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.898013][ T6600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.045317][ T6630] loop4: detected capacity change from 0 to 2048 [ 147.091917][ T26] audit: type=1400 audit(1770069196.064:105): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="://&P" pid=6633 comm="syz.1.921" [ 147.115725][ T6636] loop0: detected capacity change from 0 to 128 [ 147.151661][ T6637] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.202612][ T6636] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 147.328611][ T4272] sysv_free_block: flc_count > flc_size [ 147.334751][ T4272] sysv_free_block: flc_count > flc_size [ 147.343392][ T4272] sysv_free_block: flc_count > flc_size [ 147.358028][ T4272] sysv_free_block: flc_count > flc_size [ 147.363627][ T4272] sysv_free_block: flc_count > flc_size [ 147.382830][ T4272] sysv_free_block: flc_count > flc_size [ 147.392264][ T4272] sysv_free_block: flc_count > flc_size [ 147.407031][ T4272] sysv_free_block: flc_count > flc_size [ 147.412628][ T4272] sysv_free_block: flc_count > flc_size [ 147.426791][ T4272] sysv_free_block: flc_count > flc_size [ 147.439747][ T4272] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 147.630228][ T6645] loop0: detected capacity change from 0 to 256 [ 147.695755][ T6645] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 147.834458][ T6655] loop3: detected capacity change from 0 to 256 [ 147.899945][ T6645] exFAT-fs (loop0): hint_cluster is invalid (17) [ 147.911806][ T6658] loop4: detected capacity change from 0 to 512 [ 148.024874][ T6658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.106848][ T6658] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.305743][ T6658] EXT4-fs error (device loop4): __ext4_new_inode:1285: comm syz.4.931: failed to insert inode 16: doubly allocated? [ 148.543909][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 148.812147][ T6667] loop2: detected capacity change from 0 to 32768 [ 149.255692][ T6694] loop3: detected capacity change from 0 to 128 [ 149.335040][ T6694] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 149.403155][ T6700] loop1: detected capacity change from 0 to 512 [ 149.428879][ T6694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.447821][ T6700] EXT4-fs: Ignoring removed bh option [ 149.460968][ T6700] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.503768][ T6700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.625940][ T6700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.667037][ T6700] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.842452][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 150.473741][ T6734] tipc: Started in network mode [ 150.479172][ T6734] tipc: Node identity 9a5c3ad31696, cluster identity 4711 [ 150.487428][ T6734] tipc: Enabled bearer , priority 15 [ 150.981728][ T6754] loop3: detected capacity change from 0 to 2048 [ 151.082282][ T6754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.152128][ T6754] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 151.259858][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 151.277923][ T6768] loop1: detected capacity change from 0 to 4096 [ 151.362401][ T6773] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.517059][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'. [ 151.526627][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.982'. [ 151.657309][ T4310] tipc: Node number set to 2362063571 [ 152.183602][ T6807] loop1: detected capacity change from 0 to 256 [ 152.216971][ T4310] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.258647][ T6807] FAT-fs (loop1): Directory bread(block 64) failed [ 152.276368][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.999'. [ 152.285711][ T6807] FAT-fs (loop1): Directory bread(block 65) failed [ 152.287044][ T6811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.295945][ T6807] FAT-fs (loop1): Directory bread(block 66) failed [ 152.334671][ T6807] FAT-fs (loop1): Directory bread(block 67) failed [ 152.342394][ T6807] FAT-fs (loop1): Directory bread(block 68) failed [ 152.364733][ T6807] FAT-fs (loop1): Directory bread(block 69) failed [ 152.371931][ T6807] FAT-fs (loop1): Directory bread(block 70) failed [ 152.394215][ T6807] FAT-fs (loop1): Directory bread(block 71) failed [ 152.401006][ T6807] FAT-fs (loop1): Directory bread(block 72) failed [ 152.408093][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 152.408157][ T6807] FAT-fs (loop1): Directory bread(block 73) failed [ 152.421936][ T4310] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.447451][ T4310] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.483211][ T4310] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 152.503685][ T4310] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 152.523910][ T4310] usb 5-1: Product: syz [ 152.534019][ T4310] usb 5-1: Manufacturer: syz [ 152.554102][ T4310] hub 5-1:4.0: USB hub found [ 152.757634][ T4310] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 152.968286][ T6814] loop2: detected capacity change from 0 to 32768 [ 153.018902][ T6814] XFS (loop2): Invalid device [./file1], error=-15 [ 153.051032][ T6830] loop3: detected capacity change from 0 to 64 [ 153.086980][ T4310] usb 5-1: USB disconnect, device number 8 [ 153.166814][ T4348] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 153.367051][ T4348] usb 2-1: Using ep0 maxpacket: 32 [ 153.374258][ T4348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 153.386051][ T4348] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.399032][ T4348] usb 2-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 153.408217][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.418523][ T4348] usb 2-1: config 0 descriptor?? [ 153.526857][ T4310] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.716910][ T4310] usb 4-1: Using ep0 maxpacket: 32 [ 153.733558][ T4310] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 153.745922][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.756816][ T4310] usb 4-1: Product: syz [ 153.761052][ T4310] usb 4-1: Manufacturer: syz [ 153.765673][ T4310] usb 4-1: SerialNumber: syz [ 153.773701][ T4310] usb 4-1: config 0 descriptor?? [ 153.781604][ T4310] dw2102: su3000_identify_state [ 153.786496][ T4310] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 153.795549][ T4310] dw2102: su3000_power_ctrl: 1, initialized 0 [ 153.802964][ T4310] dvb-usb: bulk message failed: -22 (2/0) [ 153.811192][ T4310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.821653][ T4310] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 153.831009][ T4310] usb 4-1: media controller created [ 153.836337][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 153.837781][ T4348] logitech 0003:046D:C20A.0016: unknown main item tag 0x0 [ 153.842693][ T4310] dw2102: i2c transfer failed. [ 153.856518][ T4348] logitech 0003:046D:C20A.0016: unknown main item tag 0x0 [ 153.858549][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 153.865778][ T4348] logitech 0003:046D:C20A.0016: unknown main item tag 0x0 [ 153.871230][ T4310] dw2102: i2c transfer failed. [ 153.882072][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 153.882538][ T4348] logitech 0003:046D:C20A.0016: unknown main item tag 0x0 [ 153.887943][ T4310] dw2102: i2c transfer failed. [ 153.895477][ T4348] logitech 0003:046D:C20A.0016: unknown main item tag 0x0 [ 153.900173][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 153.913334][ T4310] dw2102: i2c transfer failed. [ 153.918289][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 153.924142][ T4348] logitech 0003:046D:C20A.0016: unknown main item tag 0x0 [ 153.924218][ T4310] dw2102: i2c transfer failed. [ 153.932421][ T4348] logitech 0003:046D:C20A.0016: unknown main item tag 0x0 [ 153.936533][ T4310] dvb-usb: bulk message failed: -22 (6/0) [ 153.949672][ T4310] dw2102: i2c transfer failed. [ 153.954644][ T4310] dvb-usb: MAC address: 02:02:02:02:02:02 [ 153.954920][ T4348] logitech 0003:046D:C20A.0016: hidraw0: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.1-1/input0 [ 153.974999][ T4310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.981178][ T4348] logitech 0003:046D:C20A.0016: no inputs found [ 153.989324][ T6834] dvb-usb: bulk message failed: -22 (4/0) [ 154.006875][ T6834] dw2102: i2c transfer failed. [ 154.025759][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 154.032999][ T4310] dw2102: command 0x0e transfer failed. [ 154.040229][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 154.046342][ T4310] dw2102: command 0x0e transfer failed. [ 154.101171][ T4348] usb 2-1: USB disconnect, device number 14 [ 154.156889][ T954] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.346821][ T954] usb 5-1: Using ep0 maxpacket: 32 [ 154.354597][ T954] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 154.362988][ T954] usb 5-1: config 0 has no interface number 0 [ 154.369317][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 154.375554][ T4310] dw2102: command 0x0e transfer failed. [ 154.381351][ T4310] dvb-usb: bulk message failed: -22 (3/0) [ 154.387678][ T4310] dw2102: command 0x0e transfer failed. [ 154.393584][ T4310] dvb-usb: bulk message failed: -22 (1/0) [ 154.399706][ T4310] dw2102: command 0x51 transfer failed. [ 154.406092][ T954] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 154.415686][ T954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.424137][ T954] usb 5-1: Product: syz [ 154.428593][ T954] usb 5-1: Manufacturer: syz [ 154.433214][ T954] usb 5-1: SerialNumber: syz [ 154.441749][ T954] usb 5-1: config 0 descriptor?? [ 154.449777][ T954] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 154.474350][ T4310] DVB: Unable to find symbol ds3000_attach() [ 154.480574][ T4310] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 154.586831][ T4310] rc_core: IR keymap rc-su3000 not found [ 154.592654][ T4310] Registered IR keymap rc-empty [ 154.617265][ T4310] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 154.639025][ T4310] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input10 [ 154.653584][ T4310] dvb-usb: schedule remote query interval to 150 msecs. [ 154.661845][ T4310] dw2102: su3000_power_ctrl: 0, initialized 1 [ 154.668529][ T954] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 154.681010][ T4310] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 154.691483][ T954] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 154.718474][ T4310] usb 4-1: USB disconnect, device number 10 [ 154.779138][ T4310] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 155.102840][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 155.114208][ T4310] usb 5-1: USB disconnect, device number 9 [ 155.123804][ T4310] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 155.142423][ T4310] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 155.154107][ T4310] quatech2 5-1:0.51: device disconnected [ 155.976758][ T127] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.043998][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 156.177083][ T127] usb 2-1: Using ep0 maxpacket: 8 [ 156.189024][ T127] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 156.209269][ T127] usb 2-1: config 2 has no interface number 0 [ 156.219469][ T127] usb 2-1: config 2 interface 31 has no altsetting 0 [ 156.242229][ T127] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 156.256720][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.264778][ T127] usb 2-1: Product: syz [ 156.275618][ T127] usb 2-1: Manufacturer: syz [ 156.280437][ T127] usb 2-1: SerialNumber: syz [ 156.318905][ T4348] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 156.327483][ T4348] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 156.339264][ T4348] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x3 [ 156.352217][ T4348] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.376873][ T4332] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 156.450451][ T6884] loop3: detected capacity change from 0 to 512 [ 156.476966][ T4310] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.519948][ T6882] fido_id[6882]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.545852][ T6884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 156.564424][ T6884] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.602336][ T4332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.623933][ T4332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.633935][ T26] audit: type=1800 audit(1770069205.594:106): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1031" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 156.665672][ T4332] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 156.683389][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.691851][ T4310] usb 3-1: Using ep0 maxpacket: 32 [ 156.703996][ T4310] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 156.712916][ T4310] usb 3-1: config 0 has no interface number 0 [ 156.729420][ T4332] usb 5-1: config 0 descriptor?? [ 156.742607][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 156.755091][ T4310] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 156.767784][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.775870][ T4310] usb 3-1: Product: syz [ 156.780341][ T4310] usb 3-1: Manufacturer: syz [ 156.786178][ T4310] usb 3-1: SerialNumber: syz [ 156.796634][ T4310] usb 3-1: config 0 descriptor?? [ 156.826508][ T4310] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 156.914574][ T127] ch9200: probe of 2-1:2.31 failed with error -22 [ 156.924998][ T127] usb 2-1: USB disconnect, device number 15 [ 157.047566][ T4310] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 157.071634][ T4310] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 157.156494][ T4332] wacom 0003:056A:00C6.0018: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.4-1/input0 [ 157.350436][ T127] usb 5-1: USB disconnect, device number 10 [ 157.355823][ T6900] [U] ¦Þ„#=ÃÄØC [ 157.461659][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 157.470987][ T4310] usb 3-1: USB disconnect, device number 9 [ 157.491150][ T4310] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 157.524887][ T4310] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 157.544545][ T4310] quatech2 3-1:0.51: device disconnected [ 157.963753][ T6921] option changes via remount are deprecated (pid=6920 comm=syz.1.1046) [ 158.167549][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 158.326223][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 158.516806][ T4332] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.626734][ T6953] capability: warning: `syz.4.1062' uses 32-bit capabilities (legacy support in use) [ 158.711279][ T4332] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.735647][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.773947][ T4332] usb 4-1: Product: syz [ 158.781946][ T4332] usb 4-1: Manufacturer: syz [ 158.792056][ T4332] usb 4-1: SerialNumber: syz [ 158.814965][ T4332] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 158.882263][ T4332] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.974863][ T6965] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1068'. [ 158.999781][ T6967] loop2: detected capacity change from 0 to 2048 [ 159.025032][ T6967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.056825][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.266934][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 159.283893][ T127] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 159.303094][ T127] usb 5-1: config 0 has no interface number 0 [ 159.312807][ T127] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 159.328234][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.336461][ T127] usb 5-1: Product: syz [ 159.345274][ T127] usb 5-1: Manufacturer: syz [ 159.366585][ T127] usb 5-1: SerialNumber: syz [ 159.396882][ T127] usb 5-1: config 0 descriptor?? [ 159.406171][ T127] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 159.420655][ T127] dvb-usb: bulk message failed: -22 (2/0) [ 159.449075][ T127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.464134][ T127] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 159.474036][ T127] usb 5-1: media controller created [ 159.509389][ T4310] usb 4-1: USB disconnect, device number 11 [ 159.525068][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.575016][ T127] cxusb: set interface failed [ 159.585709][ T127] dvb-usb: bulk message failed: -22 (1/0) [ 159.607974][ T6959] cxusb: i2c rd: len=8192 is too big! [ 159.607974][ T6959] [ 159.646237][ T6980] loop1: detected capacity change from 0 to 8192 [ 159.669909][ T127] DVB: Unable to find symbol lgdt330x_attach() [ 159.683783][ T127] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 159.712139][ T26] audit: type=1800 audit(1770069208.684:107): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1074" name="bus" dev="loop1" ino=1048732 res=0 errno=0 [ 159.732949][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.897030][ T127] rc_core: IR keymap rc-dvico-portable not found [ 159.916813][ T127] Registered IR keymap rc-empty [ 159.922398][ T127] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 159.928852][ T4332] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 159.951658][ T4332] ath9k_htc: Failed to initialize the device [ 159.969801][ T127] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input15 [ 159.975819][ T4310] usb 4-1: ath9k_htc: USB layer deinitialized [ 160.031985][ T6988] bridge0: port 3(veth1_to_bridge) entered blocking state [ 160.041347][ T127] dvb-usb: schedule remote query interval to 100 msecs. [ 160.067715][ T6988] bridge0: port 3(veth1_to_bridge) entered disabled state [ 160.077529][ T127] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 160.117928][ T127] usb 5-1: USB disconnect, device number 11 [ 160.130651][ T6988] device veth1_to_bridge entered promiscuous mode [ 160.192940][ T6988] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 160.213614][ T127] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 160.221372][ T6988] bridge0: port 3(veth1_to_bridge) entered blocking state [ 160.230854][ T6988] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 160.576263][ T7008] loop4: detected capacity change from 0 to 128 [ 160.609525][ T7008] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 160.710832][ T7008] hpfs: filesystem error: improperly stopped [ 160.724144][ T7008] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 160.754786][ T7008] hpfs: You really don't want any checks? You are crazy... [ 160.786987][ T7008] hpfs: hpfs_map_sector(): read error [ 160.799975][ T7008] hpfs: code page support is disabled [ 160.816442][ T7012] loop2: detected capacity change from 0 to 4096 [ 160.833056][ T7008] hpfs: hpfs_map_4sectors(): unaligned read [ 160.842252][ T7008] hpfs: hpfs_map_4sectors(): unaligned read [ 160.881056][ T7008] hpfs: filesystem error: unable to find root dir [ 160.898865][ T7012] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 161.020595][ T7012] ntfs3: loop2: Failed to load $Extend. [ 161.126627][ T7012] overlayfs: upper fs does not support tmpfile. [ 161.160327][ T7012] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 161.912044][ T7030] loop0: detected capacity change from 0 to 32768 [ 162.013943][ T7030] XFS (loop0): Mounting V5 Filesystem [ 162.185376][ T7030] XFS (loop0): Ending clean mount [ 162.225684][ T7030] XFS (loop0): Quotacheck needed: Please wait. [ 162.322056][ T7030] XFS (loop0): Quotacheck: Done. [ 162.586972][ T4272] XFS (loop0): Unmounting Filesystem [ 163.442482][ T7113] loop2: detected capacity change from 0 to 128 [ 163.523881][ T7113] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.537174][ T7113] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.621125][ T7122] tmpfs: Bad value for 'mpol' [ 163.626287][ T7119] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.682506][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 164.422206][ T7148] loop3: detected capacity change from 0 to 2048 [ 164.515014][ T7148] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.546741][ T127] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.736851][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 164.743799][ T127] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 164.794321][ T127] usb 3-1: config 0 has no interface number 0 [ 164.818195][ T127] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.843152][ T127] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.863953][ T127] usb 3-1: config 0 interface 8 has no altsetting 0 [ 164.883246][ T127] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 164.902726][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.941658][ T127] usb 3-1: config 0 descriptor?? [ 165.406299][ T127] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 165.433285][ T127] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 165.461157][ T127] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 165.517289][ T127] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 165.524586][ T127] uclogic 0003:5543:0522.0019: unknown main item tag 0x0 [ 165.587393][ T127] uclogic 0003:5543:0522.0019: No inputs registered, leaving [ 165.606040][ T127] uclogic 0003:5543:0522.0019: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input8 [ 165.663177][ T127] usb 3-1: USB disconnect, device number 10 [ 165.878677][ T7191] fido_id[7191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 166.292322][ T7211] loop2: detected capacity change from 0 to 1024 [ 166.326751][ T4332] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 166.339164][ T7211] syz.2.1164: attempt to access beyond end of device [ 166.339164][ T7211] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 166.386148][ T7190] loop0: detected capacity change from 0 to 32768 [ 166.429624][ T7190] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 166.474050][ T7190] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 166.520560][ T4332] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.539293][ T4332] usb 2-1: config 0 has no interface number 0 [ 166.549355][ T4332] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 166.611893][ T4332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.655280][ T4332] usb 2-1: config 0 descriptor?? [ 166.683814][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 166.684409][ T7219] loop2: detected capacity change from 0 to 4096 [ 166.699707][ T4332] usb 2-1: selecting invalid altsetting 1 [ 166.725508][ T7219] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 166.735045][ T4332] dvb_ttusb_budget: ttusb_init_controller: error [ 166.756525][ T4332] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 166.766368][ T7219] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 166.816894][ T7219] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 166.865717][ T7219] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 166.917100][ T7219] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 166.957599][ T7219] ntfs: volume version 3.1. [ 166.978258][ T7219] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 167.000660][ T7219] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 167.002723][ T4332] DVB: Unable to find symbol cx22700_attach() [ 167.024963][ T7219] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 167.041708][ T7219] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 167.070053][ T7219] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 167.263075][ T7228] cifs: Bad value for 'cache' [ 167.269003][ T4332] DVB: Unable to find symbol tda10046_attach() [ 167.286418][ T4332] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 167.351047][ T4332] usb 2-1: USB disconnect, device number 16 [ 167.564764][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1175'. [ 167.597760][ T7238] loop2: detected capacity change from 0 to 256 [ 167.709751][ T7238] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 167.957158][ T7246] CUSE: unknown device info "ÿ" [ 167.962174][ T7246] CUSE: unknown device info "" [ 167.998369][ T7246] CUSE: DEVNAME unspecified [ 168.035076][ T7248] device hsr0 entered promiscuous mode [ 168.066303][ T7248] device macsec1 entered promiscuous mode [ 168.328455][ T7232] loop0: detected capacity change from 0 to 32768 [ 169.042432][ T7278] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1194'. [ 169.076355][ T7254] loop4: detected capacity change from 0 to 32768 [ 169.456613][ T7292] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 169.487854][ T7293] netlink: 'syz.0.1201': attribute type 3 has an invalid length. [ 169.503348][ T7288] loop4: detected capacity change from 0 to 4096 [ 169.703438][ T7274] loop1: detected capacity change from 0 to 32768 [ 169.758942][ T7274] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1191 (7274) [ 169.925960][ T7274] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 169.973975][ T7274] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 170.002956][ T7274] BTRFS info (device loop1): using free space tree [ 170.348234][ T7274] BTRFS info (device loop1): enabling ssd optimizations [ 170.619544][ T4266] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 170.690267][ T7332] binder: 7331:7332 ioctl 40046205 0 returned -22 [ 170.734649][ T7332] binder: 7331:7332 ioctl c0306201 200000000300 returned -11 [ 171.060399][ T7315] loop4: detected capacity change from 0 to 32768 [ 171.063235][ T7303] loop0: detected capacity change from 0 to 40427 [ 171.103922][ T7315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1208 (7315) [ 171.136952][ T7303] F2FS-fs (loop0): invalid crc value [ 171.142314][ T7303] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 171.179953][ T7347] loop3: detected capacity change from 0 to 512 [ 171.194413][ T7347] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.205279][ T7303] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.253269][ T7347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.272978][ T7315] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.316897][ T7315] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 171.330054][ T7303] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 171.340018][ T7347] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 171.347454][ T7315] BTRFS info (device loop4): setting nodatacow, compression disabled [ 171.369075][ T7303] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.395487][ T7315] BTRFS info (device loop4): force clearing of disk cache [ 171.429607][ T7315] BTRFS info (device loop4): enabling ssd optimizations [ 171.430649][ T7347] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 171.447027][ T7315] BTRFS info (device loop4): using spread ssd allocation scheme [ 171.465382][ T7315] BTRFS info (device loop4): turning off barriers [ 171.476783][ T7315] BTRFS info (device loop4): disabling free space tree [ 171.483720][ T7315] BTRFS info (device loop4): not using ssd optimizations [ 171.594796][ T7362] tmpfs: Too few inodes for current use [ 171.596424][ T7347] EXT4-fs (loop3): orphan cleanup on readonly fs [ 171.602430][ T7315] BTRFS info (device loop4): not using spread ssd allocation scheme [ 171.688482][ T7347] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1216: Invalid block bitmap block 0 in block_group 0 [ 171.814308][ T7347] EXT4-fs (loop3): Remounting filesystem read-only [ 171.838284][ T7347] __quota_error: 6 callbacks suppressed [ 171.838300][ T7347] Quota error (device loop3): write_blk: dquota write failed [ 171.903850][ T7378] loop2: detected capacity change from 0 to 1024 [ 171.921241][ T7347] Quota error (device loop3): write_blk: dquota write failed [ 171.935634][ T7378] hfsplus: bad catalog entry type [ 171.941522][ T7347] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 171.966910][ T7347] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1216: Failed to acquire dquot type 1 [ 172.006941][ T7347] EXT4-fs (loop3): Remounting filesystem read-only [ 172.013788][ T7347] Quota error (device loop3): write_blk: dquota write failed [ 172.018601][ T7384] tipc: Invalid UDP bearer configuration [ 172.021216][ T7384] tipc: Enabling of bearer rejected, failed to enable media [ 172.049398][ T7347] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 172.080229][ T7315] BTRFS info (device loop4): rebuilding free space tree [ 172.116814][ T7347] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1216: Failed to acquire dquot type 1 [ 172.129338][ T7347] EXT4-fs (loop3): Remounting filesystem read-only [ 172.140310][ T7347] Quota error (device loop3): write_blk: dquota write failed [ 172.148613][ T7347] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 172.159071][ T7347] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1216: Failed to acquire dquot type 1 [ 172.171452][ T7347] EXT4-fs (loop3): Remounting filesystem read-only [ 172.179993][ T7347] EXT4-fs (loop3): 1 orphan inode deleted [ 172.206282][ T7347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.333103][ T7315] BTRFS info (device loop4): disabling free space tree [ 172.362684][ T7315] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.382742][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 172.393601][ T7315] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.575497][ T7403] loop0: detected capacity change from 0 to 64 [ 172.584662][ T7402] usb usb5: usbfs: process 7402 (syz.2.1230) did not claim interface 0 before use [ 172.831218][ T4279] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.832879][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'. [ 173.119737][ T4421] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4421) [ 173.291263][ T7420] usb usb7: usbfs: process 7420 (syz.4.1233) did not claim interface 6 before use [ 173.354151][ T4310] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 173.434105][ T7424] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 173.546876][ T4310] usb 2-1: Using ep0 maxpacket: 32 [ 173.557264][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.596777][ T4310] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 173.619231][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.643348][ T4310] usb 2-1: config 0 descriptor?? [ 173.704283][ T7430] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 173.751981][ T7432] loop4: detected capacity change from 0 to 512 [ 173.763974][ T7411] loop0: detected capacity change from 0 to 32768 [ 173.832756][ T7411] (syz.0.1234,7411,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.914534][ T7411] (syz.0.1234,7411,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 173.919742][ T7432] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.960831][ T7411] JBD2: Ignoring recovery information on journal [ 173.989521][ T7432] ext4 filesystem being mounted at /250/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.003216][ T7411] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.012256][ T7432] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #4: comm syz.4.1244: corrupted inode contents [ 174.031253][ T7432] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #4: comm syz.4.1244: mark_inode_dirty error [ 174.075743][ T7432] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #4: comm syz.4.1244: corrupted inode contents [ 174.103001][ T4310] corsair-psu 0003:1B1C:1C0B.001A: unbalanced delimiter at end of report description [ 174.119814][ T7432] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.1244: mark_inode_dirty error [ 174.134776][ T4310] corsair-psu: probe of 0003:1B1C:1C0B.001A failed with error -22 [ 174.175107][ T7432] Quota error (device loop4): write_blk: dquota write failed [ 174.196443][ T26] audit: type=1800 audit(1770069223.164:108): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1234" name="file1" dev="loop0" ino=16978 res=0 errno=0 [ 174.217251][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.241442][ T7432] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 174.302021][ T4310] usb 2-1: USB disconnect, device number 17 [ 174.320112][ T7442] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #4: comm syz.4.1244: corrupted inode contents [ 174.330887][ T7446] [U] ùÿ [ 174.393049][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 174.411201][ T7432] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1244: Failed to acquire dquot type 1 [ 174.449022][ T7442] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #4: comm syz.4.1244: mark_inode_dirty error [ 174.568276][ T7442] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #4: comm syz.4.1244: corrupted inode contents [ 174.594890][ T7442] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.1244: mark_inode_dirty error [ 174.623540][ T7442] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1244: Failed to acquire dquot type 1 [ 174.688755][ T7454] loop3: detected capacity change from 0 to 4096 [ 174.805164][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 174.833413][ T7454] ntfs3: loop3: ino=1f, "file2" attr_set_size [ 175.669566][ T7491] loop4: detected capacity change from 0 to 1024 [ 175.798470][ T4297] hfsplus: b-tree write err: -5, ino 4 [ 175.937647][ T7501] loop3: detected capacity change from 0 to 16 [ 175.958735][ T7501] erofs: (device loop3): mounted with root inode @ nid 36. [ 175.995422][ T7507] loop1: detected capacity change from 0 to 512 [ 176.016960][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 176.084876][ T7507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.174948][ T7507] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.263656][ T7507] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.275728][ T7520] loop4: detected capacity change from 0 to 1024 [ 176.449995][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 176.463581][ T7525] loop0: detected capacity change from 0 to 1024 [ 176.514618][ T7528] binder: 7527:7528 ioctl 40046205 0 returned -22 [ 176.834867][ T7539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1290'. [ 177.141610][ T7547] tipc: Started in network mode [ 177.163375][ T7547] tipc: Node identity ac1414aa, cluster identity 4711 [ 177.189314][ T7547] tipc: Enabled bearer , priority 10 [ 177.538724][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 177.538738][ T26] audit: type=1326 audit(1770069226.514:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd57d9aeb9 code=0x7ffc0000 [ 177.567131][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.673934][ T26] audit: type=1326 audit(1770069226.564:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd57d9aeb9 code=0x7ffc0000 [ 177.744616][ T7569] loop4: detected capacity change from 0 to 256 [ 177.761362][ T26] audit: type=1326 audit(1770069226.564:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd57d9aeb9 code=0x7ffc0000 [ 177.783711][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.792094][ T7569] exfat: Deprecated parameter 'namecase' [ 177.816854][ T7569] exfat: Deprecated parameter 'namecase' [ 177.841304][ T7569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 177.866795][ T26] audit: type=1326 audit(1770069226.564:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fcd57d9aeb9 code=0x7ffc0000 [ 177.925788][ T7575] netlink: 'syz.2.1308': attribute type 3 has an invalid length. [ 177.966718][ T26] audit: type=1326 audit(1770069226.564:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd57d9aeb9 code=0x7ffc0000 [ 178.261894][ T7583] loop1: detected capacity change from 0 to 512 [ 178.288269][ T7583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.305225][ T7583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.327106][ T4340] tipc: Node number set to 2886997162 [ 178.356238][ T7583] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1313: invalid indirect mapped block 4294967295 (level 1) [ 178.430358][ T7583] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1313: invalid indirect mapped block 4294967295 (level 1) [ 178.460431][ T7583] EXT4-fs (loop1): 2 truncates cleaned up [ 178.469338][ T7592] loop3: detected capacity change from 0 to 512 [ 178.475745][ T7583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.501004][ T7592] EXT4-fs: Ignoring removed bh option [ 178.541001][ T7592] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.578177][ T7592] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 178.625210][ T7592] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 178.694619][ T7592] EXT4-fs (loop3): orphan cleanup on readonly fs [ 178.732796][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 178.807794][ T7592] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 178.827890][ T7592] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 178.838978][ T4350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.865338][ T7592] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1317: Failed to acquire dquot type 1 [ 178.880486][ T7597] loop2: detected capacity change from 0 to 128 [ 178.914025][ T7592] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1317: Invalid block bitmap block 0 in block_group 0 [ 178.961064][ T7592] Quota error (device loop3): write_blk: dquota write failed [ 178.987651][ T7592] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 179.017380][ T7592] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1317: Failed to acquire dquot type 1 [ 179.041338][ T7592] Quota error (device loop3): write_blk: dquota write failed [ 179.054358][ T4350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.066940][ T7592] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1317: Failed to acquire dquot type 1 [ 179.097635][ T7592] EXT4-fs (loop3): 1 orphan inode deleted [ 179.104156][ T7592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.250328][ T4350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.285999][ T7603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.307678][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 179.314378][ T7603] EXT4-fs (loop1): Test dummy encryption mode enabled [ 179.376269][ T7603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.415529][ T7603] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.435806][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.450085][ T4350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.462199][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.471198][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.482150][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.489878][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 179.507577][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.660779][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 179.832658][ T7613] set_capacity_and_notify: 1 callbacks suppressed [ 179.832675][ T7613] loop2: detected capacity change from 0 to 4096 [ 179.933248][ T7613] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 179.961870][ T7613] ntfs3: loop2: Failed to load $Extend. [ 180.032901][ T7613] ntfs3: loop2: ino=1b, "file0" directory corrupted [ 180.444951][ T7635] binder: 7634:7635 ioctl c0306201 2000000003c0 returned -22 [ 180.545816][ T7607] chnl_net:caif_netlink_parms(): no params data found [ 180.591033][ T7633] loop0: detected capacity change from 0 to 4096 [ 180.785188][ T7607] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.797669][ T7650] loop3: detected capacity change from 0 to 256 [ 180.864059][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.888029][ T7607] device bridge_slave_0 entered promiscuous mode [ 180.925547][ T7650] FAT-fs (loop3): Directory bread(block 64) failed [ 180.946813][ T7650] FAT-fs (loop3): Directory bread(block 65) failed [ 180.953631][ T7650] FAT-fs (loop3): Directory bread(block 66) failed [ 181.016167][ T7650] FAT-fs (loop3): Directory bread(block 67) failed [ 181.030137][ T7607] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.068726][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.085955][ T7650] FAT-fs (loop3): Directory bread(block 68) failed [ 181.097753][ T7607] device bridge_slave_1 entered promiscuous mode [ 181.128772][ T7650] FAT-fs (loop3): Directory bread(block 69) failed [ 181.135923][ T7650] FAT-fs (loop3): Directory bread(block 70) failed [ 181.207148][ T7650] FAT-fs (loop3): Directory bread(block 71) failed [ 181.236822][ T7650] FAT-fs (loop3): Directory bread(block 72) failed [ 181.258470][ T7650] FAT-fs (loop3): Directory bread(block 73) failed [ 181.290652][ T7607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.528734][ T7607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.607035][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 181.759904][ T7607] team0: Port device team_slave_0 added [ 181.881914][ T7607] team0: Port device team_slave_1 added [ 181.967427][ T7679] loop0: detected capacity change from 0 to 4096 [ 181.985390][ T7679] ntfs: volume version 3.1. [ 182.041214][ T7684] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 182.183927][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.201995][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.213488][ T7688] loop1: detected capacity change from 0 to 64 [ 182.363261][ T7607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.426616][ T7607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.460778][ T7607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.578252][ T7607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.621326][ T7677] loop2: detected capacity change from 0 to 32768 [ 183.081987][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 183.290246][ T7607] device hsr_slave_0 entered promiscuous mode [ 183.327267][ T7607] device hsr_slave_1 entered promiscuous mode [ 183.344749][ T7607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.363908][ T7607] Cannot create hsr debugfs directory [ 183.383839][ T7714] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 183.686825][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 183.804575][ T4350] device hsr_slave_0 left promiscuous mode [ 183.834745][ T7705] loop2: detected capacity change from 0 to 32768 [ 183.847076][ T4350] device hsr_slave_1 left promiscuous mode [ 183.871801][ T7705] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1360 (7705) [ 183.895240][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.910811][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.926934][ T7705] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.942240][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.967966][ T7705] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 183.984878][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.025554][ T4350] device bridge_slave_1 left promiscuous mode [ 184.034125][ T7705] BTRFS info (device loop2): force clearing of disk cache [ 184.053039][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.066881][ T7705] BTRFS info (device loop2): enabling auto defrag [ 184.097368][ T7705] BTRFS info (device loop2): enabling ssd optimizations [ 184.118913][ T7705] BTRFS info (device loop2): setting nodatacow, compression disabled [ 184.153701][ T4350] device bridge_slave_0 left promiscuous mode [ 184.175475][ T7705] BTRFS info (device loop2): enabling disk space caching [ 184.176867][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.182798][ T7705] BTRFS info (device loop2): disk space caching is enabled [ 184.339399][ T7743] loop1: detected capacity change from 0 to 16 [ 184.377165][ T7743] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.448657][ T4350] device veth1_macvtap left promiscuous mode [ 184.457382][ T4350] device veth0_macvtap left promiscuous mode [ 184.463544][ T4350] device veth1_vlan left promiscuous mode [ 184.487352][ T7756] loop3: detected capacity change from 0 to 4096 [ 184.542494][ T7756] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 184.550314][ T4350] device veth0_vlan left promiscuous mode [ 184.558234][ T7756] ntfs3: loop3: Failed to load $Extend. [ 184.701188][ T7705] BTRFS info (device loop2): rebuilding free space tree [ 184.826995][ T7705] BTRFS info (device loop2): disabling free space tree [ 184.836913][ T7705] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.868923][ T7705] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.915996][ T7705] BTRFS info (device loop2): checking UUID tree [ 185.166968][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.768453][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 186.095899][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 186.096156][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 186.102297][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 186.108004][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 186.264361][ T7795] loop3: detected capacity change from 0 to 32768 [ 186.336813][ T7795] XFS (loop3): Mounting V5 Filesystem [ 186.447385][ T7795] XFS (loop3): Ending clean mount [ 186.483258][ T7795] XFS (loop3): Quotacheck needed: Please wait. [ 186.620628][ T7795] XFS (loop3): Quotacheck: Done. [ 186.672556][ T4267] XFS (loop3): Unmounting Filesystem [ 186.879316][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 186.956849][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 187.014752][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.065818][ T7818] loop3: detected capacity change from 0 to 64 [ 187.131611][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.503471][ T7820] loop3: detected capacity change from 0 to 32768 [ 187.535121][ T7820] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 187.726403][ T4985] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 187.768505][ T4350] bond0 (unregistering): Released all slaves [ 187.850201][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 188.016905][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 188.296357][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'. [ 188.594113][ T7607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 188.681198][ T7607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 188.726086][ T7607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.773121][ T7607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.842993][ T7827] loop3: detected capacity change from 0 to 32768 [ 189.043457][ T7827] XFS (loop3): Mounting V5 Filesystem [ 189.145361][ T7827] XFS (loop3): Ending clean mount [ 189.180095][ T7837] loop0: detected capacity change from 0 to 32768 [ 189.214883][ T7837] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 189.297792][ T7607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.322676][ T4267] XFS (loop3): Unmounting Filesystem [ 189.330155][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.359382][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.405348][ T7838] loop2: detected capacity change from 0 to 40427 [ 189.427208][ T7607] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.479904][ T7838] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 189.516551][ T7838] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 189.526744][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.557731][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.579790][ T4421] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 189.583889][ T7838] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 189.608336][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.615506][ T7626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.668912][ T7838] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 189.689852][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.720267][ T7838] F2FS-fs (loop2): invalid crc value [ 189.727800][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.773065][ T7838] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.785106][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.792272][ T7626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.840481][ T7841] loop1: detected capacity change from 0 to 32768 [ 189.867047][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.922531][ T7841] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1404 (7841) [ 189.942707][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.974938][ T7838] F2FS-fs (loop2): Start checkpoint disabled! [ 189.986097][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.007096][ T7841] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 190.048017][ T7841] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 190.049814][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.088474][ T7841] BTRFS info (device loop1): turning off barriers [ 190.112079][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.128294][ T7841] BTRFS info (device loop1): enabling ssd optimizations [ 190.138626][ T7838] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 190.145698][ T7838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 190.169879][ T7841] BTRFS info (device loop1): using spread ssd allocation scheme [ 190.188993][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.227691][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.256698][ T7841] BTRFS info (device loop1): enabling auto defrag [ 190.263180][ T7841] BTRFS info (device loop1): not using ssd optimizations [ 190.281756][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.329965][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.363844][ T7841] BTRFS info (device loop1): not using spread ssd allocation scheme [ 190.373374][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.409597][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.437614][ T7841] BTRFS info (device loop1): ignoring data csums [ 190.444050][ T7841] BTRFS info (device loop1): force zlib compression, level 3 [ 190.453130][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.516332][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.537418][ T7841] BTRFS info (device loop1): enabling ssd optimizations [ 190.544429][ T7841] BTRFS info (device loop1): using spread ssd allocation scheme [ 190.605213][ T4297] kworker/u4:5: attempt to access beyond end of device [ 190.605213][ T4297] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 190.616705][ T7841] BTRFS info (device loop1): using free space tree [ 191.073536][ T7870] loop0: detected capacity change from 0 to 32768 [ 191.176243][ T4266] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 191.417047][ T4985] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (4985) [ 191.538822][ T7920] loop3: detected capacity change from 0 to 256 [ 191.660903][ T7920] FAT-fs (loop3): Directory bread(block 64) failed [ 191.696780][ T7920] FAT-fs (loop3): Directory bread(block 65) failed [ 191.752888][ T7920] FAT-fs (loop3): Directory bread(block 66) failed [ 191.825607][ T7920] FAT-fs (loop3): Directory bread(block 67) failed [ 191.868926][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.897082][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.918134][ T7920] FAT-fs (loop3): Directory bread(block 68) failed [ 191.924723][ T7920] FAT-fs (loop3): Directory bread(block 69) failed [ 191.936082][ T7607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.951671][ T7920] FAT-fs (loop3): Directory bread(block 70) failed [ 191.958675][ T7920] FAT-fs (loop3): Directory bread(block 71) failed [ 191.965296][ T7920] FAT-fs (loop3): Directory bread(block 72) failed [ 191.975788][ T7920] FAT-fs (loop3): Directory bread(block 73) failed [ 192.320328][ T7946] loop0: detected capacity change from 0 to 1024 [ 192.556788][ T9] hfsplus: b-tree write err: -5, ino 4 [ 193.373901][ T7986] loop1: detected capacity change from 0 to 64 [ 193.396489][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.416231][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.495399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.512997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.547998][ T7988] loop2: detected capacity change from 0 to 2048 [ 193.578618][ T7607] device veth0_vlan entered promiscuous mode [ 193.587423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.624375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.644375][ T7988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.667956][ T7990] loop3: detected capacity change from 0 to 2048 [ 193.682326][ T7607] device veth1_vlan entered promiscuous mode [ 193.752359][ T7997] loop0: detected capacity change from 0 to 512 [ 193.774698][ T7990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.782608][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 193.805398][ T7997] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.857460][ T7997] EXT4-fs: inline encryption not supported [ 193.867499][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 193.898056][ T7997] EXT4-fs (loop0): Test dummy encryption mode enabled [ 193.910760][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.946735][ T7997] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.980245][ T7990] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 193.983877][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.016160][ T7999] loop1: detected capacity change from 0 to 512 [ 194.059687][ T7997] EXT4-fs (loop0): 1 truncate cleaned up [ 194.080078][ T7997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.091437][ T7999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.097754][ T7607] device veth0_macvtap entered promiscuous mode [ 194.137293][ T7607] device veth1_macvtap entered promiscuous mode [ 194.152706][ T7999] ext4 filesystem being mounted at /293/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.182526][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.193420][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.203788][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.214666][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.224809][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.236217][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.251839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.263100][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.264119][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.278837][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.288477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 194.294804][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.307050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.325571][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.327216][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.338845][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 194.339131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.339376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.339615][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 194.339844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.619108][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.623146][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 194.634015][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 194.642986][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.707133][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.737265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.746502][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.900088][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.949656][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.006686][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.024191][ T8022] loop1: detected capacity change from 0 to 512 [ 195.051483][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.063580][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.088675][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.114143][ T7607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.188753][ T7607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.197890][ T8022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.223566][ T8022] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.257179][ T7607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.305124][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.330889][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.426294][ T7607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.482158][ T7607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.526107][ T7607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.552247][ T7607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.663714][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 196.003019][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.085691][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.146762][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.166003][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.181895][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.230646][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.649944][ T8065] loop0: detected capacity change from 0 to 256 [ 196.740618][ T8065] exfat: Deprecated parameter 'utf8' [ 196.799795][ T8065] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 197.324147][ T8080] device hsr0 entered promiscuous mode [ 197.375109][ T8080] device macsec1 entered promiscuous mode [ 197.577009][ T8085] loop5: detected capacity change from 0 to 512 [ 197.624589][ T8085] EXT4-fs: Ignoring removed i_version option [ 197.757961][ T8085] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 197.812865][ T8073] loop3: detected capacity change from 0 to 32768 [ 197.959947][ T8073] (syz.3.1460,8073,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.015038][ T8073] (syz.3.1460,8073,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.219430][ T8073] JBD2: Ignoring recovery information on journal [ 198.403610][ T8073] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 198.474225][ T7607] EXT4-fs (loop5): unmounting filesystem. [ 198.654370][ T4267] ocfs2: Unmounting device (7,3) on (node local) [ 199.256765][ C0] net_ratelimit: 8011 callbacks suppressed [ 199.256783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 199.275114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.287498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.299940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 199.312359][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.324872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.337510][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 199.350014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.362650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.375101][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 199.619122][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'. [ 199.667543][ T8131] loop5: detected capacity change from 0 to 512 [ 199.816892][ T8131] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 200.037490][ T8131] EXT4-fs (loop5): 1 truncate cleaned up [ 200.043501][ T8131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 200.127006][ T8131] EXT4-fs warning (device loop5): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 200.453723][ T7607] EXT4-fs (loop5): unmounting filesystem. [ 200.685135][ T8149] device hsr0 entered promiscuous mode [ 200.723510][ T8149] device macsec1 entered promiscuous mode [ 203.155695][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 203.815296][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 203.815312][ T26] audit: type=1326 audit(1770069252.784:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 203.936094][ T26] audit: type=1326 audit(1770069252.784:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 204.024807][ T26] audit: type=1326 audit(1770069252.874:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 204.116720][ T26] audit: type=1326 audit(1770069252.874:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 204.225296][ T26] audit: type=1326 audit(1770069252.894:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb50b75b78e code=0x7ffc0000 [ 204.275908][ C0] net_ratelimit: 6392 callbacks suppressed [ 204.275927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.295235][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.308060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.321538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 204.334537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.343505][ T26] audit: type=1326 audit(1770069253.094:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb50b79aeb9 code=0x7ffc0000 [ 204.346971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.381749][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.394181][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 204.406841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.419086][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.717300][ T8239] ptrace attach of "./syz-executor exec"[4267] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 205.705432][ T8259] sp0: Synchronizing with TNC [ 205.935232][ T8258] [U] è [ 206.798985][ T8250] loop3: detected capacity change from 0 to 40427 [ 206.961421][ T8250] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 206.976726][ T8250] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 207.059080][ T8250] F2FS-fs (loop3): invalid crc value [ 207.269969][ T8250] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.450201][ T8272] loop5: detected capacity change from 0 to 32768 [ 207.486044][ T8250] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 207.517073][ T8250] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 207.683664][ T8272] XFS (loop5): Mounting V5 Filesystem [ 208.031548][ T8283] loop1: detected capacity change from 0 to 32768 [ 208.101394][ T8307] loop2: detected capacity change from 0 to 512 [ 208.273636][ T8307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.332058][ T8283] XFS (loop1): Mounting V5 Filesystem [ 208.448890][ T8307] EXT4-fs (loop2): 1 truncate cleaned up [ 208.465361][ T8307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.737250][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 208.956914][ T8323] device hsr0 entered promiscuous mode [ 208.992681][ T8323] device macsec1 entered promiscuous mode [ 209.265662][ T8328] loop3: detected capacity change from 0 to 512 [ 209.277032][ C0] net_ratelimit: 7994 callbacks suppressed [ 209.277052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.295292][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.307801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.320649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 209.333740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.346010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.349361][ T8283] XFS (loop1): Ending clean mount [ 209.358459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.376605][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 209.389241][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.401802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.445856][ T8283] XFS (loop1): Quotacheck needed: Please wait. [ 209.513634][ T8328] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.714891][ T8328] EXT4-fs (loop3): 1 truncate cleaned up [ 209.727527][ T8328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.871206][ T8335] loop0: detected capacity change from 0 to 256 [ 209.979038][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 210.063752][ T8283] XFS (loop1): Quotacheck: Done. [ 210.213830][ T4266] XFS (loop1): Unmounting Filesystem [ 211.269185][ T8335] FAT-fs (loop0): Directory bread(block 64) failed [ 211.276600][ T8335] FAT-fs (loop0): Directory bread(block 65) failed [ 211.299152][ T8335] FAT-fs (loop0): Directory bread(block 66) failed [ 211.328585][ T8335] FAT-fs (loop0): Directory bread(block 67) failed [ 211.336368][ T8335] FAT-fs (loop0): Directory bread(block 68) failed [ 211.362680][ T8335] FAT-fs (loop0): Directory bread(block 69) failed [ 211.381343][ T8335] FAT-fs (loop0): Directory bread(block 70) failed [ 211.399369][ T8335] FAT-fs (loop0): Directory bread(block 71) failed [ 211.452993][ T8335] FAT-fs (loop0): Directory bread(block 72) failed [ 211.475111][ T8335] FAT-fs (loop0): Directory bread(block 73) failed [ 211.681324][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.843081][ T8360] program syz.0.1545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.259317][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 212.295165][ T8272] XFS (loop5): Ending clean mount [ 212.374363][ T8272] XFS (loop5): Quotacheck needed: Please wait. [ 212.390791][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 212.610234][ T8272] XFS (loop5): Quotacheck: Done. [ 212.732802][ T7607] XFS (loop5): Unmounting Filesystem [ 212.782784][ T8379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1554'. [ 213.426132][ T8398] device hsr0 entered promiscuous mode [ 213.464451][ T8398] device macsec1 entered promiscuous mode [ 214.286747][ C0] net_ratelimit: 9594 callbacks suppressed [ 214.286765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.304965][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.317353][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.329950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 214.342487][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.354850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.367306][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.379774][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 214.392211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.404505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.456046][ T8442] loop0: detected capacity change from 0 to 512 [ 216.201959][ T8456] loop0: detected capacity change from 0 to 128 [ 216.875348][ T8466] loop2: detected capacity change from 0 to 256 [ 217.780887][ T8486] loop1: detected capacity change from 0 to 8 [ 218.322024][ T8473] loop0: detected capacity change from 0 to 32768 [ 219.116894][ T8473] ------------[ cut here ]------------ [ 219.123077][ T8473] kernel BUG at fs/buffer.c:2666! [ 219.194013][ T8527] loop5: detected capacity change from 0 to 8 [ 219.200507][ T8473] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 219.206621][ T8473] CPU: 0 PID: 8473 Comm: syz.0.1593 Not tainted syzkaller #0 [ 219.214009][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.224075][ T8473] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 219.229476][ T8473] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 e5 09 e2 ff e9 b3 fe ff ff e8 fb 1e 91 ff 0f 0b e8 f4 1e 91 ff <0f> 0b e8 ed 1e 91 ff 0f 0b e8 e6 1e 91 ff 0f 0b e8 df 1e 91 ff 0f [ 219.249105][ T8473] RSP: 0018:ffffc90003366ee8 EFLAGS: 00010287 [ 219.255197][ T8473] RAX: ffffffff81f1537c RBX: 0000000000000000 RCX: 0000000000080000 [ 219.263189][ T8473] RDX: ffffc90005799000 RSI: 000000000000bfd7 RDI: 000000000000bfd8 [ 219.271181][ T8473] RBP: 0000000000000001 R08: ffff88805524382f R09: 1ffff1100aa48705 [ 219.279171][ T8473] R10: dffffc0000000000 R11: ffffed100aa48706 R12: 1ffff1100aa48705 [ 219.287150][ T8473] R13: 0000000000000000 R14: ffff888055243828 R15: dffffc0000000000 [ 219.295120][ T8473] FS: 00007fe81bd1c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 219.304048][ T8473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.310625][ T8473] CR2: 00007fb5cf9f7000 CR3: 0000000065711000 CR4: 00000000003506f0 [ 219.318629][ T8473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.326598][ T8473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.334586][ T8473] Call Trace: [ 219.337871][ T8473] [ 219.340799][ T8473] ? do_raw_spin_unlock+0x11d/0x230 [ 219.345998][ T8473] ocfs2_write_block+0x39e/0x6b0 [ 219.350932][ T8473] ? blockcheck_u64_get+0x60/0x60 [ 219.355983][ T8473] ? jbd2_mark_journal_empty+0x410/0x410 [ 219.361617][ T8473] ? ocfs2_compute_meta_ecc+0x79/0xe0 [ 219.366986][ T8473] ocfs2_journal_toggle_dirty+0x214/0x350 [ 219.372705][ T8473] ? ocfs2_journal_shutdown+0xc20/0xc20 [ 219.378260][ T8473] ? jbd2_journal_wipe+0x3f3/0x5f0 [ 219.383460][ T8473] ocfs2_journal_wipe+0xd5/0x280 [ 219.388392][ T8473] ? ocfs2_commit_thread+0xca0/0xca0 [ 219.393671][ T8473] ? _atomic_dec_and_lock+0x8f/0x110 [ 219.398959][ T8473] ? iput+0x3c0/0x980 [ 219.402942][ T8473] ocfs2_mount_volume+0xaca/0x1590 [ 219.408064][ T8473] ? ocfs2_is_hard_readonly+0x60/0x60 [ 219.413439][ T8473] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 219.419424][ T8473] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 219.425668][ T8473] ? __debugfs_create_file+0x476/0x510 [ 219.431135][ T8473] ? __lock_acquire+0x7d10/0x7d10 [ 219.436161][ T8473] ? __lock_acquire+0x7d10/0x7d10 [ 219.441188][ T8473] ? up_write+0x1bb/0x420 [ 219.445523][ T8473] ? do_raw_spin_unlock+0x11d/0x230 [ 219.450718][ T8473] ? __debugfs_create_file+0x476/0x510 [ 219.456187][ T8473] ocfs2_fill_super+0x3f09/0x5090 [ 219.461222][ T8473] ? ocfs2_mount+0x40/0x40 [ 219.465648][ T8473] ? mark_lock+0x94/0x320 [ 219.469977][ T8473] ? __lock_acquire+0x13cf/0x7d10 [ 219.474999][ T8473] ? mark_lock+0x94/0x320 [ 219.479328][ T8473] ? __lock_acquire+0x13cf/0x7d10 [ 219.484360][ T8473] ? verify_lock_unused+0x140/0x140 [ 219.489566][ T8473] ? verify_lock_unused+0x140/0x140 [ 219.494851][ T8473] ? mark_lock+0x94/0x320 [ 219.499183][ T8473] ? __lock_acquire+0x13cf/0x7d10 [ 219.504210][ T8473] ? alloc_super+0x1fa/0x930 [ 219.508798][ T8473] ? reacquire_held_locks+0x308/0x5a0 [ 219.514171][ T8473] ? alloc_super+0x1fa/0x930 [ 219.518757][ T8473] ? string+0x26d/0x2b0 [ 219.522901][ T8473] ? widen_string+0x3b/0x2b0 [ 219.527483][ T8473] ? string+0x26d/0x2b0 [ 219.531631][ T8473] ? bdev_name+0x2c1/0x3f0 [ 219.536040][ T8473] ? pointer+0x11e/0x1030 [ 219.540365][ T8473] ? format_decode+0x898/0x1300 [ 219.545214][ T8473] ? snprintf+0xe5/0x140 [ 219.549488][ T8473] ? vscnprintf+0x80/0x80 [ 219.553812][ T8473] ? set_blocksize+0x1d0/0x470 [ 219.558573][ T8473] ? sb_set_blocksize+0xa5/0xe0 [ 219.563419][ T8473] mount_bdev+0x287/0x3c0 [ 219.567742][ T8473] ? ocfs2_mount+0x40/0x40 [ 219.572157][ T8473] legacy_get_tree+0xe6/0x180 [ 219.576831][ T8473] ? trace_raw_output_ocfs2_buffer_cached_end+0xf0/0xf0 [ 219.583772][ T8473] vfs_get_tree+0x88/0x270 [ 219.588272][ T8473] do_new_mount+0x24a/0xa40 [ 219.592769][ T8473] __se_sys_mount+0x2e3/0x3d0 [ 219.597438][ T8473] ? __x64_sys_mount+0xc0/0xc0 [ 219.602195][ T8473] ? lockdep_hardirqs_on+0x94/0x140 [ 219.607397][ T8473] ? __x64_sys_mount+0x1c/0xc0 [ 219.612156][ T8473] do_syscall_64+0x4c/0xa0 [ 219.616573][ T8473] ? clear_bhb_loop+0x60/0xb0 [ 219.621249][ T8473] ? clear_bhb_loop+0x60/0xb0 [ 219.625920][ T8473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.631806][ T8473] RIP: 0033:0x7fe81ad9c14a [ 219.636233][ T8473] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.655831][ T8473] RSP: 002b:00007fe81bd1be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 219.664243][ T8473] RAX: ffffffffffffffda RBX: 00007fe81bd1bee0 RCX: 00007fe81ad9c14a [ 219.672208][ T8473] RDX: 0000200000004440 RSI: 0000200000000040 RDI: 00007fe81bd1bea0 [ 219.680262][ T8473] RBP: 0000200000004440 R08: 00007fe81bd1bee0 R09: 00000000000048d1 [ 219.688240][ T8473] R10: 00000000000048d1 R11: 0000000000000246 R12: 0000200000000040 [ 219.696203][ T8473] R13: 00007fe81bd1bea0 R14: 0000000000004446 R15: 0000200000000300 [ 219.704291][ T8473] [ 219.707324][ T8473] Modules linked in: [ 219.711309][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.738588][ C0] net_ratelimit: 8473 callbacks suppressed [ 219.738603][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 219.756661][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.768875][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.781000][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.793199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 219.805549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.817762][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.829880][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.834053][ T8473] ---[ end trace 0000000000000000 ]--- [ 219.842113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:12:01:d5:b3:2a:59, vlan:0) [ 219.842303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.971883][ T8473] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 219.989567][ T8473] Code: 02 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 e5 09 e2 ff e9 b3 fe ff ff e8 fb 1e 91 ff 0f 0b e8 f4 1e 91 ff <0f> 0b e8 ed 1e 91 ff 0f 0b e8 e6 1e 91 ff 0f 0b e8 df 1e 91 ff 0f [ 220.085455][ T8527] SQUASHFS error: zlib decompression failed, data probably corrupt [ 220.093641][ T8527] SQUASHFS error: Failed to read block 0x9b: -5 [ 220.106889][ T8527] SQUASHFS error: Unable to read metadata cache entry [99] [ 220.119931][ T8527] SQUASHFS error: Unable to read inode 0x127 [ 220.450906][ T8532] loop3: detected capacity change from 0 to 32768 [ 220.489078][ T8473] RSP: 0018:ffffc90003366ee8 EFLAGS: 00010287 [ 220.499460][ T8473] RAX: ffffffff81f1537c RBX: 0000000000000000 RCX: 0000000000080000 [ 220.525104][ T8473] RDX: ffffc90005799000 RSI: 000000000000bfd7 RDI: 000000000000bfd8 [ 220.593896][ T8532] XFS (loop3): Mounting V5 Filesystem [ 220.599434][ T8473] RBP: 0000000000000001 R08: ffff88805524382f R09: 1ffff1100aa48705 [ 220.610833][ T8473] R10: dffffc0000000000 R11: ffffed100aa48706 R12: 1ffff1100aa48705 [ 220.658358][ T8473] R13: 0000000000000000 R14: ffff888055243828 R15: dffffc0000000000 [ 220.690582][ T8473] FS: 00007fe81bd1c6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 220.734969][ T8473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.928690][ T8473] CR2: 00007f3ddef0cfe8 CR3: 0000000065711000 CR4: 00000000003506e0 [ 220.960994][ T8473] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.996070][ T8473] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.036662][ T8473] Kernel panic - not syncing: Fatal exception [ 221.043307][ T8473] Kernel Offset: disabled [ 221.047637][ T8473] Rebooting in 86400 seconds..