last executing test programs: 2m25.851334323s ago: executing program 2 (id=142): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x800) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r0, 0x73b, &(0x7f0000000340)=[{&(0x7f0000000200)=""/174, 0xae}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x567, 0xa9ea, 0x5, 0x0, 0x0) 2m25.690244185s ago: executing program 2 (id=145): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200), &(0x7f0000000100)=0x8) 2m25.547024577s ago: executing program 2 (id=148): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 2m25.308098726s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc10700", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) 2m24.975612813s ago: executing program 2 (id=154): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) dup3(r1, r0, 0x80000) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1, 0x0, 0x0, 0x0, r0}]) 2m24.283810839s ago: executing program 2 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xfffffff5}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6bc}]}, 0x3c}}, 0x0) 2m23.971434474s ago: executing program 32 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xfffffff5}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6bc}]}, 0x3c}}, 0x0) 2m1.747304275s ago: executing program 4 (id=322): r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000002b00)={'syztnl1\x00', r2, 0x4, 0xff, 0x0, 0x7, 0x20, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback={0x0, 0xffff888101827518}, 0x7800, 0x20, 0x38dc5865, 0x10001}}) 2m1.614842366s ago: executing program 4 (id=323): r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fcntl$addseals(r0, 0x409, 0x8) 2m1.417369761s ago: executing program 4 (id=324): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)) 2m0.972335448s ago: executing program 4 (id=327): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f0000001280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae840099cb4d037cc46b3980928a506f800befa5037ecc4c128dc83d62f8d7ede6c05d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c5", @ANYRESOCT, @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') 2m0.57638783s ago: executing program 4 (id=332): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x2}}, 0x120) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 1m59.915929392s ago: executing program 4 (id=340): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) 1m59.590702239s ago: executing program 33 (id=340): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) 1m45.690491459s ago: executing program 3 (id=457): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m45.454418768s ago: executing program 3 (id=461): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000001000"}}}]}, 0x48}}, 0x0) 1m45.257193994s ago: executing program 3 (id=463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x48, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m44.916186162s ago: executing program 3 (id=467): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file1\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@attr2}, {@largeio}]}, 0x1, 0x979b, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0x121) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x40000, 0x0, 0x0, 0x1000}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x320c401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 1m43.764501314s ago: executing program 3 (id=471): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000240)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0xd, 0x852]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xfffffffffffffee5, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0xb0}}, 0x0) 1m42.847771898s ago: executing program 3 (id=479): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="f8", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x8905, &(0x7f0000000000)) 1m42.486552497s ago: executing program 34 (id=479): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="f8", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x8905, &(0x7f0000000000)) 1m37.440253394s ago: executing program 1 (id=503): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 1m37.267399498s ago: executing program 1 (id=504): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1m37.144567458s ago: executing program 1 (id=506): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 1m36.779467957s ago: executing program 1 (id=509): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file1\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@attr2}, {@largeio}]}, 0x1, 0x979b, &(0x7f0000009780)="$eJzs3QWcrWWheP85cOhGEEQEpMQkJUSRDkWUFCUEaUkBEVA6lFBBEZDu7u5u6e7ukO76fw4cUHHB9d6/v4vXtdbHM3t2zJ5nP9/3eZ0977D3kvMuOufAwJgD7/be6V+7aNd7l11stAXXPXnnwbfsvcNCTwy9ePh3T8aafejpHENP5xwYGBg09H4GvXvZ4NlOOnmYgcEDQ/7310YdaeRhRh0YGHno2aH3MzDTuyejHPLe7d7+QDzQSYZ8u+3f/fdOow25kyGfLL3cm2sNDAyM+DdfP2Rc0/zDA5W25BzzzftXq/fdhhl69aC/XvfO6eB3/41ywMDAKPsNfPj2MeS2w/3N1/5vNuR7jjnZwOL3fgzf+/9cS84x3wIf8B+yFocdetlMQ9b4B9egsQ9u5zssuvpjQ6dw0NCJG/w36+Xj2O7/Ry05x7wLDnz4Oh5YaJ5NHn37nf3m4LkHBgbPMzAweN6BgcHzfdwe9a/pY934qqqq6mNpjjmnH/KcfZgP/Dww4ns/19LPhZe9Me2DAwODF3r3eeLg5d57LlhVVVVVVVVV/57NMef0c8Hz/zE/6vn/JGduPVbP/6uqqqqqqqr+77TAHHNOP+S5/gee/4//Uc//n3n86IPf/dv/2Wd696ve+ngfRFVVVVVVVVV9ZPMugM//J/mo5/9XnDTJ1T3/r6qqqqqqqvq/0yJvv/32Zn/zOntDL57qvevp+f/Zj9y9zMc24Kqqqqqqqqr6b/fWU2ec89fXfJ9o4AOv9/5OQ38vMOi486699mMb6L9Hg/7x9yGbf9xj+v/bEOcRj5hkYGCtxT/uodTH0P+Z16qv/yfl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iPuT4//uv/3/2CSu8917wn5ti+lvP+OtXvvPe/4MXWuCpLT6moX8c/ace/x9YbdDAwFDfMVcbGBhYaI5FFptqYGDgjFunn2Lygfevm3nIdbOOPew7bxD/3n8mMs9YfMebT/ru6ZANZWCc9+/juHfuf4G39x920AcG8TeNdcrBB6+65MszfPB0yg9/HMO8/9loJz/+3n/LMswHbjTih3zxe/f/3mP5oPPQsU81ZOxTr7/mOlOvt9HGX15tzeVXWWmVldaaZboZp51hlllmnHHqlVdbY6Vp3v34YXM2yTsf5/pn5mzUD87ZU3P87Zx98LF92JxN8tFz9s497nL5iN98b84G/zfnbK6PnrNJVhv6jcaafbiB5d6Zm0EDA2PNPdzAhkPOTDvCwMBY8wy97fhDbvv1sYcZGNjprw90yGcjvL8NDtp8yG2WnHfROd/dTQ0M/PX0r33I+9kPP3Tksw89nWPo6ZzvfpsxB/66KQ6e7aSThxkyF383HaOONPIwow4MjDz07ND7GZjl3ZORz3zvdh/yPusfGOg7L7Oy/bv/3mm0gYGBUYZ8MtHyZ28zZOr/F96n/X/0////4DXzoPe3x0FD/w29zbtec8y3wF+/1zvTMGTuhh162UxDTP7Fb23/d/3DeCcZcWCSjxjvR7wuzjvR9rXGGeNu+a96XRwa7/gfMd6PeB3fDx3vEg/u/ti7d/UvG+8H9nULvvNx9n9mXzfw0fu6YekOVrrqMx/c1337w4f4d7vL9+ZohA/c6MP2dePvNfHmQ+5/9o/e1y04ZOzD/d2+bpiBgbHmem9fN2THN+9wAzsNOTPdkDPzDTdw2JAz079zZqSB84ac+coKa6+x4pAL5v/H7WCqQX/3B5qwzub9wDob9DePfdAH/r5z8Lunoxzw3ns4fch+c9DQh/Vf7itoux3zI8b7Ee8/hfM85LIVjx9x3H/V+0/ReEf86PF+2Ptlf+h4d3zp7Hv/xeN9f50N9zfTNf8/s84m+ft1NuQhDvs3K+Of/TlsRbj9u5+P//69bbDp4+//TDHcB+73v/qZYv6PXmdjrvaBr9tuv4FBHzU38/0zczPhP+yDtvjbuflnf96aarJ3rx/2I+ZmhFmWnfK9uRn+vzk38/1352b2gWH/fm4GD8wzMDAw+dD9w7z/zNyM/9Fz889uNyPD7d/9fKX3L5p7hyMueW9uPjgX/9XczPvfnZtJ3t9uJn/nukmHGRh++IENl19//XWnfffje2ene/fjR6/Buf+ZuRzzXzOXEwz+sLn866Y66oNXH/BfrMF/2Ke/d/9z/3fncuD9uRxY7YOLpf5d6/d/7vJ3l7+7/N3l7y5/d/mL+5Dj/++//v9uY86689Bfbgx39cTjbftxj/dj7j/6+P9Q3787/r/teBNfPczA+9d95PHZd2/zb3l8dqZ3T0Y55L3bffD4IA/0w4/P7jfLTFv/Lx2f/R/13lr9J34P1/7fXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5Djv9P897fATwy7cLPDT0QOtwTWy218Mc93o+5/+jj/0N9/+74/8JLbfXEMAPvX/eRx//fvY3j+P/9r8+747/z8f/31mrH/+u/KH93+bvL393/3P/ef+k46uOp9e8uf3f5u8vfXf7u8neXv7v83eUv7kOO/8/+3t8BHH307hu/9/cAN461/Rkf93g/5v5Tj//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ09/j/wgbe3/F7bBQbH//9v9yH+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+S+aPWfx/kD9m8f9h/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5Q/ZvFfLn/M4r98/pjF/8f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/T/PHLP7r5o9Z/NfLH7P4r58/ZvH/Wf6YxX+D/DGL/8/zxyz+G+aPWfw3yh+z+G+cP2bx/0X+mMX/l/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/lT9m8f91/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5M/ZvH/bf6Yxf93+WMW/53yxyz+O+ePWfx/nz9m8f9D/pjFf5f8MYv/H/PHLP675o9Z/HfLH7P4754/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5/zxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4/yV/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR/0ED+mMV/UP6YxX+Y/DGL/7D5Yxb/wfljFv/h8scs/sPnj1n8R8gfs/iPmD9m8R8pf8ziP3L+mMV/lPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6Yxf8T+WMW/3Hyxyz+4+aPWfw/mT9m8R8vf8ziP37+mMX/U/ljFv8J8scs/p/OH7P4T5g/ZvH/TP6YxX+i/DGL/8T5Yxb/SfLHLP6fzR+z+E/6nv+IH9O4/k2z+E/W+scs/pPnj1n8p8gfs/hPmT9m8f9c/pjFf6r8MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzR+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fyxyz+s+aPWfy/nj9m8f9G/pjFf7b8MYv/N/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/K3/M4v/t/DGL/4L5Yxb/7+SPWfwXyh+z+H83f8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/kvljFv8f5I9Z/H+YP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/H+WPWfyXyx+z+C+fP2bx/3H+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/k/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/0/wxi/+6+WMW//Xyxyz+6+ePWfx/lj9m8d8gf8zi//P8MYv/hvljFv+N8scs/hvnj1n8f5E/ZvH/Zf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f5Y9Z/H+dP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx/mz9m8f9d/pjFf6f8MYv/zvljFv/f549Z/P+QP2bx3yV/zOL/x/wxi/+u+WMW/93yxyz+u+ePWfz/lD9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H/r3/w//r4/o3zeJ/WOsfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/TOL/Tvn/YxL/QVfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+P8lf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5D08XWvxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5YxL/dz7N/x+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyJ/zOI/Tv6YxX/c/DGL/yfzxyz+4+WPWfzHzx+z+H8qf8ziP0H+mMX/0/ljFv8J88cs/p/JH7P4T5Q/ZvGfOH/M4j9J/pjF/7P5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+5/DGL/1T5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8Z86f8ziP03+2KCLdh1uYGDgP95/2vwxy/qfLn/M4j99/pjFf4b8MYv/V/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+1/DGL/6z5Yxb/r+ePWfy/kT9m8Z8tf8zi/838MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+38ofs/h/O3/M4r9g/pjF/zv5Yxb/hfLHLP7fzR+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8ziv2T+mMX/B/ljFv8f5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/0f5Yxb/5fLHLP7L549Z/H+cP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/zR/zOK/bv6YxX+9/DGL//r5Yxb/n+WPWfw3yB+z+P88f8ziv2H+mMV/o/wxi//G+WMW/1/kj1n8f5k/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/V/ljFv9f549Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/zf5Yxb/3+aPWfx/lz9m8d8pf8ziv3P+mMX/9/ljFv8/5I9Z/HfJH7P4/zF/zOK/a/6YxX+3/DGL/+75Yxb/P+WPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P85f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/1/yxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8hx3IH7P4D8ofs/gPkz9m8R82f8ziPzh/zOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/h/In/M4j9O/pjFf9z8MYv/J/PHLP7j5Y9Z/MfPH7P4fyp/zOI/Qf6Yxf/T+WMW/wnzxyz+n8kfs/hPlD9m8Z84f8ziP0n+mMX/s/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/7n8MYv/VPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+aP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+WPWfxnzR+z+H89f8zi/438MYv/bPljFv9v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9W/pjF/9v5Yxb/BfPHLP7fyR+z+C+UP2bx/27+mMX/e/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/+/ljFv8l88cs/j/IH7P4/zB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/yh+z+C+XP2bxXz5/zOL/4/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8n+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf+n+WMW/3Xzxyz+6+WPWfzXzx+z+P8sf8ziv0H+mMX/5/ljFv8N88cs/hvlj1n8N84fs/j/In/M4v/L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/KH7P4/zp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/yR+z+P82f8zi/7v8MYv/TvljFv+d88cs/r/PH7P4/yF/zOK/S/6Yxf+P+WMW/13zxyz+u+WPWfx3zx+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/z/ljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfz/kj9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O39M4j94IH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/4n8MYv/OPljFv9x88cs/p/MH7P4j5c/ZvEfP3/M4v+p/DGL/wT5Yxb/T+ePWfwnzB+z+H8mf8ziP1H+mMV/4vwxi/8k+WMW/8/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi//n8scs/lPlj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/av6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOL/9fwxi/838scs/rPlj1n8v5k/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/W/ljFv9v549Z/BfMH7P4fyd/zOK/UP6Yxf+7+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8l8wfs/j/IH/M4v/D/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4/yh/zOK/XP6YxX/5/DGL/4/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/n+aPWfzXzR+z+K+XP2bxXz9/zOL/s/wxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/L/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/Kn/M4v/r/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/yZ/zOL/2/wxi//v8scs/jvlj1n8d84fs/j/Pn/M4v+H/DGL/y75Yxb/P+aPWfx3zR+z+O+WP2bx3z1/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/z/nj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfFPu//REP3OL/lNj/o7L4D+SPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/gPN5A/ZvEflD9m8R8mf8ziP2z+mMV/cP6YxX+4/DGL//D5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8f9E/pjFf5z8MYv/uPljFv9P5o9Z/MfLH7P4j58/ZvH/VP6YxX+C/DGL/6fzxyz+E+aPWfw/kz9m8Z8of8ziP3H+mMV/kvwxi/9n88cs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMX/c/ljFv+p8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fzV/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyx+z+M+aP2bx/3r+mMX/G/ljFv/Z8scs/t/MH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/638MYv/t/PHLP4L5o9Z/L+TP2bxXyh/zOL/3fwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/kvmj1n8f5A/ZvH/Yf6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+UP2bxXy5/zOK/fP6Yxf/H+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/0/zxyz+6+aPWfzXyx+z+K+fP2bx/1n+mMV/g/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8f9F/pjF/5f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5U/ZvH/df6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+TP2bx/23+mMX/d/ljFv+d8scs/jvnj1n8f58/ZvH/Q/6YxX+X/DGL/x/zxyz+u+aPWfx3yx+z+O+eP2bx/1P+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+f88cs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X/E6z/sR11p8X/U6/+RWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/1/yxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8hx/IH7P4D8ofs/gPkz9m8R82f8ziPzh/zOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/h/In/M4j9O/pjFf9z8MYv/J/PHLP7j5Y9Z/MfPH7P4fyp/zOI/Qf6Yxf/T+WMW/wnzxyz+n8kfs/hPlD9m8Z84f8ziP0n+mMX/s/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/7n8MYv/VPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+aP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+WPWfxnzR+z+H89f8zi/438MYv/bPljFv9v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9W/pjF/9v5Yxb/BfPHLP7fyR+z+C+UP2bx/27+mMX/e/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/+/ljFv8l88cs/j/IH7P4/zB/zOK/VP7Yf6j/oA9YD790/th/qP87/e36XyZ/zOK/bP6Yxf9H+WMW/+Xyxyz+y+ePWfx/nD9m8V8hf2zQRYOGzsx/tv+K+WOW9b9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5I/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8f5o/ZvFfN3/M4r9e/pjFf/38MYv/z/LHLP4b5I9Z/H+eP2bx3zB/zOK/Uf6YxX/j/DGL/y/yxyz+v8wfs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/q/wxi/+v88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/5v8MYv/b/PHLP6/yx+z+O+UP2bx3zl/zOL/+/wxi/8f8scs/rvkj1n8/5g/ZvHfNX/M4r9b/pjFf/f8MYv/n/LHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/P+cP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/y/5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/gMjwWUW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH5P4jzCQP2bxH5Q/ZvEfJn/M4j9s/pjFf3D+mMV/uPwxi//w+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKf2gj/t05i//Y+WMW/0/kj1n8x8kfs/iPmz9m8f9k/pjFf7z8MYv/+PljFv9P5Y9Z/CfIH7P4fzp/zOI/Yf6Yxf8z+WMW/4nyxyz+E+ePWfwnyR+z+H82f8ziP2n+mMV/svwxi//k+WMW/ynyxyz+U+aPWfw/lz9m8Z8qf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/V/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+1/DGL/6z5Yxb/r+ePWfy/kT9m8Z8tf8zi/838MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+38ofs/h/O3/M4r9g/pjF/zv5Yxb/hfLHLP7fzR+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8ziv2T+mMX/B/ljFv8f5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/0f5Yxb/5fLHLP7L549Z/H+cP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/zR/zOK/bv6YxX+9/DGL//r5Yxb/n+WPWfw3yB+z+P88f8ziv2H+mMV/o/wxi//G+WMW/1/kj1n8f5k/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8G/dsiLP7bpo1Z/H+VP2bx/3X+mMV/u/wxi//2+WMW/x3e9X/z7Y9rXP+mWfx3bP1jFv/f5I9Z/H+bP2bx/13+mMV/p/wxi//O+WMW/9/nj1n8/5A/ZvHfJX/M4v/H/DGL/675Yxb/3fLHLP67549Z/P+UP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/5/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5/yR+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9xIH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8zi/4n8MYv/OPljFv9x88cs/p/MH7P4j5c/ZvEfP3/M4v+p/DGL/wT5Yxb/T+ePWfwnzB+z+H8mf8ziP1H+mMV/4vwxi/8k+WMW/8/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi//n8scs/lPlj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/av6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOL/9fwxi/838scs/rPlj1n8v5k/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/W/ljFv9v549Z/BfMH7P4fyd/zOK/UP6Yxf+7+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8l8wfs/j/IH/M4v/D/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4/yh/zOK/XP6YxX/5/DGL/4/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/n+aPWfzXzR+z+K+XP2bxXz9/zOL/s/wxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/L/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/Kn/M4v/r/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/yZ/zOL/2/wxi//v8scs/jvlj1n8d84fs/j/Pn/M4v+H/DGL/y75Yxb/P+aPWfx3zR+z+O+WP2bx3z1/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/z/nj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bwHzR4YMS/5I8Z/Ies/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/iMN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5E/ZvEfJ3/M4j9u/pjF/5P5Yxb/8fLHLP7j549Z/D+VP2bxnyB/zOL/6fwxi/+E+WMW/8/kj1n8J8ofs/hPnD9m8Z8kf8zi/9n8MYv/pPljFv/J8scs/pPnj1n8p8gfs/hPmT9m8f9c/pjFf6r8MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+E+dP2bxn2ZgYLOPa0j/zln8p239Yxb/6fLHLP7T549Z/GfIH7P4fzV/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fyx+z+M+aP2bx/3r+mMX/G/ljFv/Z8scs/t/MH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/638MYv/t/PHLP4L5o9Z/L+TP2bxXyh/zOL/3fwxi//38scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi//388cs/kvmj1n8f5A/ZvH/Yf6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+UP2bxXy5/zOK/fP6Yxf/H+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/0/zxyz+6+aPWfzXyx+z+K+fP2bx/1n+mMV/g/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8f9F/pjF/5f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5U/ZvH/df6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+TP2bx/23+mMX/d/ljFv+d8scs/jvnj1n8f58/ZvH/Q/6YxX+X/DGL/x/zxyz+u+aPWfx3yx+z+O+eP2bx/1P+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hf/M/6vv/322/8Ph/bvmMX/ktY/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8/549Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8f9L/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGJ/8gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+SPWfzHyR+z+I+bP2bx/2T+mMV/vPwxi//4+WMW/0/lj1n8J8gfs/h/On/M4j9h/pjF/zP5Yxb/ifLHLP4T549Z/CfJH7P4fzZ/zOI/af6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/D+XP2bxnyp/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/9X88cs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/7X8MYv/rPljFv+v549Z/L+RP2bxny1/zOL/zfwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP7fyh+z+H87f8ziv2D+mMX/O/ljFv+F8scs/t/NH7P4fy9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fz9/zOK/ZP6Yxf8H+WMW/x/mj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMX/R/ljFv/l8scs/svnj1n8f5w/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/JH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/j/NH/M4r9u/pjFf738MYv/+vljFv+f5Y9Z/DfIH7P4/zx/zOK/Yf6YxX+j/DGL/8b5Yxb/X+SPWfx/mT9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf9X+WMW/1/nj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/N/ljFv/f5o9Z/H+XP2bx3yl/zOK/c/6Yxf/3+WMW/z/kj1n8d8kfs/j/MX/M4r9r/pjFf7f8MYv/7vljFv8/5Y9Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zl/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v/k3/u3KQzN4v9U6JjF/y/5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+owzkj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/kT9m8R8nf8ziP27+mMX/k/ljFv/x8scs/uPnj1n8P5U/ZvGfIH/M4v/p/DGL/4T5Yxb/z+SPWfwnyh+z+E+cP2bxnyR/zOL/2fwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bx/1z+mMV/qvwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/NH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/1/LHLP6z5o9Z/L+eP2bx/0b+mMV/tvwxi/8388cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8rf8zi/+38MYv/gvljFv/v5I9Z/BfKH7P4fzd/zOL/vfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL//fwxi/+S+WMW/x/kj1n8f5g/ZvFfKn/M4r90/pjFf5n8MYv/svljFv8f5Y9Z/JfLH7P4L58/ZvH/cf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+T/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFf5+/9R/hfH9e/aRb/n7b+MYv/uvljFv/18scs/uvnj1n8f5Y/ZvHfIH/M4v/z/DGL/4b5Yxb/jfLHLP4b549Z/H+RP2bx/2X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+WPWfx/nT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/9/kj1n8f5s/ZvH/Xf6YxX+n/DGL/875Yxb/3+ePWfz/kD9m8d8lf8zi/8f8MYv/rvljFv/d8scs/rvnj1n8/5Q/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+2Hv+AyMODPwn+5+VP2ZZ/2fnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5/zxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGHf/IflsN/YJQn2gowi/+T+WMW/6fyxyz+f8kfs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/JvEfdSB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+J/DGL/zj5Yxb/cfPHLP6fzB+z+I+XP2bxHz9/zOL/qfwxi/8E+WMW/0/nj1n8J8wfs/h/Jn/M4j9R/pjFf+L8MYv/JPljFv/P5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/5/LHLP5T5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMV/6g/zf/t/aVz/pln8p2n9Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/av6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOL/9fwxi/838scs/rPlj1n8v5k/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/W/ljFv9v549Z/BfMH7P4fyd/zOK/UP6Yxf+7+WMW/+/lj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/+/nj1n8l8wfs/j/IH/M4v/D/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4/yh/zOK/XP6YxX/5/DGL/4/zxyz+K+SPWfxXNPr/Ew/Y4r+S0f+fyOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/yR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/zR+z+K+bP2bxXy9/zOK/fv6Yxf9n+WMW/w3yxyz+P88fs/hvmD9m8d8of8ziv3H+mMX/F/ljFv9f5o9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9V/pjF/9f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/Tf6Yxf+3+WMW/9/lj1n8d8ofs/jvnD9m8f99/pjF/w/5Yxb/XfLHLP5/zB+z+O+aP2bx3y1/zOK/e/6Yxf9P+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f84fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/l/wxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4vy73H+5DLrf4vyH3/7As/m/mj1n838ofs/i/nT8m8R9tIH/M4j8of8ziP0z+mMV/2Pwxi//g/P+2Yd/7xOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/h/In/M4j9O/pjFf9z8MYv/J/PHLP7j5Y9Z/MfPH7P4fyp/zOI/Qf6Yxf/T+WMW/wnzxyz+n8kfs/hPlD9m8Z84f8ziP0n+mMX/s/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/7n8MYv/VPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+aP2bxnzF/zOI/U/6YxX/m/LG/8x962Zgf85j+f/Uh/rPkj1nW/9fyxyz+s+aPWfy/nj9m8f9G/pjFf7b8MYv/N/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/K3/M4v/t/DGL/4L5Yxb/7+SPWfwXyh+z+H83f8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/kvljFv8f5I9Z/H+YP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/H+WPWfyXyx+z+C+fP2bx/3H+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/k/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/0/wxi/+6+WMW//Xyxyz+6+ePWfx/lj9m8d8gf8zi//P8MYv/hvljFv+N8scs/hvnj1n8f5E/ZvH/Zf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f5Y9Z/H+dP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx/mz9m8f9d/pjFf6f8MYv/zvlj/6n+I37A//f5Y/+p/gMf8P9D/pjFf5f8MYv/H/PHLP675o9Z/HfLH7P4754/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5/zxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxf+SD/pv/L4/r3zSL/6Otf8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfz/kj9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O39M4j/6QP6YxX9Q/pjFf5j8MYv/sPljFv/B+WMW/+Hyxyz+w+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjF/xP5Yxb/cfLHLP7j5o9Z/D+ZP2bxHy9/zOI/fv6Yxf9T+WMW/wnyxyz+n84fs/hPmD9m8f9M/pjFf6L8MYv/xPljFv9J8scs/p/NH7P4T5o/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv/P5Y9Z/KfKH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/1fwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H8tf8ziP2v+mMX/6/ljFv9v5I9Z/GfLH7P4fzN/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/t/LHLP7fzh+z+C+YP2bx/07+mMV/ofwxi/9388cs/t/LH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/PH7P4L5k/ZvH/Qf6Yxf+H+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/1H+mMV/ufwxi//y+WMW/x/nj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+P8kfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+P80fs/ivmz9m8V8vf8ziv37+mMX/Z/ljFv8N8scs/j/PH7P4b5g/ZvHfKH/M4r9x/pjF/xf5Yxb/X+aPWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvH/Vf6Yxf/X+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx/03+mMX/t/ljFv/f5Y9Z/HfKH7P475w/ZvH/ff6Yxf8P+WMW/13yxyz+f8wfs/jvmj9m8d8tf8ziv3v+mMX/T/ljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/n/OH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/5f8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5YxL/MQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyB+z+I+TP2bxHzd/zOL/yfwxi/94+WMW//Hzxyz+n8ofs/hPkD9m8f90/pjFf8L8MYv//8fO3Yd7Xdd3HP9xT5azT7su9Zo1HBpzbUYio1ELUVE83pwy0cx71MNNciM3EmAKbLRSx6ZL3SzYxMIxZ6uWONxcdysaljVbI7ZWOcW1MMYcLDJn7DpwDsHZ23PtfNn36+b78fiDc36/4/uX8rxe/n5eXFev0T+Upf/P6h/K0n+Y/qEs/Y/WP5Sl/8/pH8rSf7j+oSz9j9E/lKX/sfqHsvR/rf6hLP1H6B/K0v/n9Q9l6X+c/qEs/X9B/1CW/q/TP5Sl/y/qH8rS/5f0D2Xpf7z+oSz9X69/KEv/kfqHsvR/g/6hLP1P0D+Upf8o/UNZ+p+ofyhL/9H6h7L0/2X9Q1n6j9E/lKX/G/UPZen/K/qHsvQfq38oS/836R/K0v/N+oey9P9V/UNZ+r9F/1CW/uP0D2Xpf5L+oSz9x+sfytL/ZP1DWfqfon8oS/9T9Q9l6T9B/1CW/qfpH8rS/3T9Q1n6T9Q/lKX/GfqHsvRv0z+Upf+Z+oey9D9L/1CW/mfrH8rS/xz9Q1n6t+sfytL/rfqHsvR/m/6hLP3P1T+Upf/b9Q9l6X+e/qEs/SfpH8rS/3z9Q1n6X6B/KEv/d+gfytL/Qv1DWfq/U/9Qlv4X6R/K0v9i/UNZ+l+ifyhL/0v1D2Xpf5n+oSz9L9c/lKX/FfqHsvSfrH8oS/8r9Q9l6X+V/qEs/a/WP5Slf4f+oSz9p+gfytJ/qv6hLP2n6R/K0n+6/qEs/d+lfyhL/2v0D2XpP0P/UJb+M/UPZek/S/9Qlv6z9Q9l6X+t/qEs/efoH8rSf67+oSz95+kfytJ/vv6hLP2v0z+Upf8C/UNZ+r9b/1CW/gv1D2Xpv0j/UJb+i/UPZel/vf6hLP3fo38oS/8b9A9l6X+j/qEs/ZfoH8rSf6n+oSz9l+kfytL/1/QPZen/6/qHsvRfrn8oS//36h/K0v839A9l6f8+/UNZ+r9f/1CW/jfpH8rS/2b9Q1n636J/KEv/39Q/lKX/Cv1DWfr/lv6hLP1/W/9Qlv636h/K0v82/UNZ+v+O/qEs/T+gfyhL/9v1D2Xpf4f+oSz979Q/lKX/7+ofytL/9/QPZel/l/6hLP0/qH8oS/8P6R/K0n+l/qEs/VfpH8rS//f1D2Xp/wf6h7L0v1v/UJb+q/UPZel/j/6hLP0/rH8oS/+P6B/K0n+N/qEs/e/VP5Sl/x/qH8rSf63+oSz9/0j/UJb+9+kfytL/j/UPZel/v/6hLP0/qn8oS/8/0T+Upf/H9A9l6f9x/UNZ+n9C/1CW/n+qfyhL/0/qH8rS/wH9Q1n6r9M/lKX/g/qHsvT/M/1DWfqv1z+Upf9D+oey9P9z/UNZ+v+F/qEs/R/WP5Sl/1/qH8rS/1P6h7L0/7T+oSz9P6N/KEv/z+ofytL/c/qHsvT/K/1DWfp/Xv9Qlv5f0D+Upf8G/UNZ+n9R/1CW/n+tfyhL/436h7L0f0T/UJb+X9I/lKX/l/UPZen/qP6hLP2/on8oS/+v6h/K0v9v9A9l6f+Y/qEs/b+mfyhL/7/VP5Sl/9f1D2Xp/3f6h7L036R/KEv/b+gfytJ/s/6hLP3/Xv9Qlv7/oH8oS/9v6h/K0v8f9Q9l6f8t/UNZ+n9b/1CW/t/RP5Sl/+P6h7L0/yf9Q1n6P6F/KEv/J/UPZem/Rf9Qlv5P6R/K0v+f9Q9l6f9d/UNZ+v+L/qEs/b+nfyhL/636h7L0f1r/UJb+39c/lKX/Nv1DWfr/q/6hLP236x/K0v/f9A9l6f+M/qEs/f9d/1CW/jv0D2Xpv1P/UJb+/6F/KEv/H+gfytJ/l/6hLP1/qH8oS/9n9Q9l6f8j/UNZ+j+nfyhL///UP5Sl//P6h7L0/7H+oSz9d+sfStL/lS39Q1n699M/lKV/f/1DWfoP0D+Upf9A/UNZ+g/SP5Sl/2D9Q1n6D9E/lKX/UP1DWfq/TP9Qlv6H6B/K0v/l+oey9H+F/qEs/Q/VP5Sl/0/pH8rS/zD9Qy+5/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/XzFu0+JrJM2Z0zPWNb3zjm33fvNj/ZgIAAP63/eRD/4v9dwIAAAAAAAAAAAAAAAAAAAB5NfF/J/Zi/zMCAAAAAAAAAAAAAMD/d23tJ28b0O+Apwbs/+A1j3bs+Tp614XT1qx5sHR/7frxWcFL9t//we7du3evembchK6HQ1qtVuf/2iu7Hg/tedz5+kuHrTxy76My/vN3Pn7ZpEPPnrvutoHfWHVL+9OD9jw7qHXFlOkzOt7Qv9Uqpw5qLex8cEK/VqucPqh1a+eDUZ0PJg5qre18cOKeBy9rfabzweuvmj3j6s4nzqj8ewYvFW3tS1sDDlhs64B/G+y//6XDnpjW/bWXl+x+tYGtrv0PX/elI3r8rNsL7L/79cvJPfff539A4AX1bf/Pbu7+2stL/rf3/w9v3LU4+tkL77/79csp9g/1CT7/H7DRnp/7e3z+Pzp4yX33Jw3deHvn/tvOv+/VXU8N/J98/v/J65dTe+6//wGf/zs/x0/o/vw/pNUqpx3kbwek0ta+bFtv7/+973/gz/S46bf//u/5ypZXdO7/3uday7ueGtTH/U/o7f3/ph5/r0DftLWv3t3j/b8P+2+NCF5y3/63rjt0z+f/Lfdfdfh+P+vL/k/ruf+R82deO3LeosXHT585eWrH1I5ZY0eNOWH02LFjxozc84lg768H+ZsCSRzc+3/rkB43/Vqtjn33G+67ZULn/rc/tPwjXU8N7eP+T+/1/f9o7/8QGt6/NXhwa+Hk+fPnnrD31+6Ho/b+uvcvC/bfh//+P+a4rr+s+88M+7VaR+67H3HZ2CGd+79+Tlnf9dTgPu5/Yq/7H3/gn1UCfXOQ7/9X97g5YP8nbb1xQef+j/3Bq7Z0PdXX//4/o9f93+39Hw5GW3ur1jfRzv2fOGTZmdWuS5s//4P6NLH/YTtu3Vntupxp/1CfJvY/acWbr6x2Xc6yf6hPE/t/cOblK6pdl7PtH+rTxP6f/+mdR1W7LufYP9Snif0/9t2n1lS7Lu32D/VpYv8fvKv9xGrX5a32D/VpYv/HX/fDcdWuy9vsH+rTxP6nvPy8tdWuy7n2D/VpYv9n7j7l8GrX5e32D/VpYv/9ln1vabXrcp79Q32a2P+Tk1fMrnZdJtk/1KeJ/a8dNuLZatflfPuH+jSx/+VPv3Fitetygf1DfZrY/1fvWPlYtevyDvuH+jSx/09c8qqV1a7LhfYP9Wli/z8a/tAh1a7LO+0f6tPE/jdtWvtAtetykf1DfZrY/6q1A4ZXuy4X2z/Up4n9Lzlj6qPVrssl9g/1aWL/o8d8+eJq1+VS+4f6NLH/Iz/3raeqXZfL7B/q08T+z3t4wbxq1+Vy+4f6NLH/BUd9/MfVrssV9g/1aWL/b+k4alq16zLZ/qE+Tey/3HbIpmrX5Ur7h/o0sf+Ltq8eX+26XGX/UJ8m9r/+sC98rNp1udr+oT5N7H/HnFljq12XDvuH+jSx/++8d8n7ql2XKfYP9Wli/7c/9/VS7bpMtX+oTxP73zrqokuqXZdp9g/1aWL/q89+5pFq12W6/UN9mtj/ivWPz692Xd5l/1CfJva/YcNZT1S7LtfYP9Snif0fO2LkodWuywz7h/o0sf/ZFy7/ULXrMtP+oT5N7P/U++94bbXrMsv+oT5N7H/o18Z9stp1mW3/UJ8m9v/pce//VLXrcq39Q32a2P/O8cccV+26zLF/qE8T+9/8wKg7q12XufYP9Wli/x945K6K12We/UN9mtj/nNc9v73adZlv/1CfJvb/pkkXLKp2Xa6zf6hPE/s//O6JX6x2XRbYP9Snif1f+u3vn1vturzb/qE+Tez/mCOufHW167LQ/qE+Tex/2vSNN1e7LovsH+rTxP4nrNo8utp1WWz/UJ8m9n/Yk/PuqXZdrrd/qE8T+9824Ihzql2X99g/1KeJ/d97w8PfrHZdbrB/qE8T+7/5po92VLsuN9o/1KeJ/X921+Ad1a7LEvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUTvBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA//83u+7H") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0x121) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x40000, 0x0, 0x0, 0x1000}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x320c401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 1m35.50353207s ago: executing program 1 (id=512): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.584067914s ago: executing program 1 (id=515): mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.25896585s ago: executing program 35 (id=515): mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1ffffff) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m20.108898011s ago: executing program 7 (id=620): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x5d, 0x6}, {0x8, 0x3}, 0x9, 0x1, 0x40}) 1m19.928986105s ago: executing program 7 (id=622): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m19.709235622s ago: executing program 7 (id=623): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) 1m18.574527944s ago: executing program 7 (id=627): r0 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', r1) 1m18.49795513s ago: executing program 7 (id=629): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 1m18.388967099s ago: executing program 7 (id=632): syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x3}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m3.220828891s ago: executing program 36 (id=632): syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp\x00') write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x3}}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4.131931017s ago: executing program 5 (id=1306): r0 = epoll_create(0x80) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x189300, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x11}) epoll_wait(r0, &(0x7f0000002240)=[{}], 0x1, 0xfffffffb) 3.535462885s ago: executing program 5 (id=1318): memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x321) sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000084000000"], 0xd0}, 0x807) 3.287735705s ago: executing program 5 (id=1322): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 1.710276332s ago: executing program 6 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4040) 1.62390119s ago: executing program 5 (id=1337): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083871090890e0878f0e1ac6e7049b334c959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31360d3b5d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f24394564774549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae290d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe597877cc4a116580dac4b008e595f437491d87abed02cfbcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000011c0)=""/230) 1.608377851s ago: executing program 6 (id=1338): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) mbind(&(0x7f0000188000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.323745473s ago: executing program 8 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}}, 0x0) 1.263397668s ago: executing program 6 (id=1341): r0 = gettid() clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.179284125s ago: executing program 6 (id=1344): r0 = fanotify_init(0x18, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0) fanotify_mark(r0, 0x80, 0x40000009, r1, 0x0) 1.11506016s ago: executing program 0 (id=1345): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.054526825s ago: executing program 6 (id=1346): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$kvm(0x0, &(0x7f00000001c0), 0x2b82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 902.052667ms ago: executing program 0 (id=1347): socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 272.443328ms ago: executing program 5 (id=1354): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1005, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0065581327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 167.956146ms ago: executing program 8 (id=1355): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xfffffbfd, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 167.502577ms ago: executing program 0 (id=1356): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 162.824457ms ago: executing program 5 (id=1357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'wlan1\x00', @random="01eaffffe200"}) 72.988114ms ago: executing program 8 (id=1358): r0 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4dd8, 0x4) sendto$inet(r0, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0xadf}], 0x1, 0x10000, 0x0) 0s ago: executing program 0 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): maxpacket: 16 [ 154.649759][ T55] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 154.684168][ T55] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 154.701823][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.726111][ T55] usb 7-1: Product: syz [ 154.730368][ T55] usb 7-1: Manufacturer: syz [ 154.748730][ T55] usb 7-1: SerialNumber: syz [ 154.775102][ T55] usb 7-1: config 0 descriptor?? [ 154.786455][ T55] hub 7-1:0.0: bad descriptor, ignoring hub [ 154.802013][ T55] hub: probe of 7-1:0.0 failed with error -5 [ 154.847131][ T55] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 155.007342][ T7762] loop0: detected capacity change from 0 to 32768 [ 155.035808][ T7762] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.618 (7762) [ 155.071943][ T7762] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.093448][ T7762] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 155.111887][ T7762] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 155.121167][ T7762] BTRFS info (device loop0): use lzo compression, level 0 [ 155.128440][ T7762] BTRFS info (device loop0): using free space tree [ 155.212052][ T5885] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 155.220217][ T7762] BTRFS info (device loop0): enabling ssd optimizations [ 155.235289][ T7762] BTRFS info (device loop0): auto enabling async discard [ 155.391903][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 155.403458][ T5885] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.435062][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.441846][ T6791] usb 7-1: USB disconnect, device number 2 [ 155.483306][ T5885] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.509602][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.516799][ T5784] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 155.526461][ T5885] usb 6-1: Product: syz [ 155.541629][ T5885] usb 6-1: Manufacturer: syz [ 155.546648][ T5885] usb 6-1: SerialNumber: syz [ 155.833819][ T7791] lo: Caught tx_queue_len zero misconfig [ 155.999024][ T5885] usb 6-1: 0:2 : does not exist [ 156.136289][ T7801] loop6: detected capacity change from 0 to 1024 [ 156.209036][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.216925][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.218239][ T7803] input: syz0 as /devices/virtual/input/input14 [ 156.226322][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.239156][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.246593][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.256052][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.271065][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.286705][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.296531][ T7804] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.309875][ T7804] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.326300][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.335499][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.343218][ T7804] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.350712][ T7804] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.358379][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.375587][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.389871][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.410613][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.413444][ T5885] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 156.429633][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.441882][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.449394][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.464515][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.482184][ T5885] usb 6-1: USB disconnect, device number 5 [ 156.486229][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.521834][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.529232][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.572163][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.579710][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.601843][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.609411][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.617863][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.627742][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.635365][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.647265][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.656021][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.664662][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.672751][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.680382][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.692923][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.701269][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.709039][ T7801] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.719615][ T28] audit: type=1800 audit(156.688:84): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.630" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 156.761923][ T55] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 156.828794][ T1084] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.843602][ T1084] hfsplus: request for non-existent node 16777216 in B*Tree [ 156.942019][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 156.953756][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.973086][ T55] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.989368][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.018858][ T55] usb 1-1: config 0 descriptor?? [ 157.446136][ T55] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 157.678965][ T7815] loop6: detected capacity change from 0 to 32768 [ 157.702022][ T7815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.637 (7815) [ 157.735700][ T7815] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.751919][ T7815] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 157.771974][ T7815] BTRFS info (device loop6): setting nodatacow, compression disabled [ 157.780200][ T7815] BTRFS info (device loop6): max_inline at 0 [ 157.801950][ T7815] BTRFS info (device loop6): enabling disk space caching [ 157.809075][ T7815] BTRFS info (device loop6): turning off barriers [ 157.831867][ T7815] BTRFS info (device loop6): disabling tree log [ 157.838214][ T7815] BTRFS info (device loop6): doing ref verification [ 157.861813][ T7815] BTRFS info (device loop6): force clearing of disk cache [ 157.869093][ T7815] BTRFS info (device loop6): max_inline at 4096 [ 157.891847][ T7815] BTRFS info (device loop6): disk space caching is enabled [ 157.904208][ T55] usb 1-1: USB disconnect, device number 10 [ 157.956917][ T7815] BTRFS info (device loop6): enabling ssd optimizations [ 157.976096][ T7815] BTRFS info (device loop6): auto enabling async discard [ 157.997223][ T7815] BTRFS info (device loop6): rebuilding free space tree [ 158.058057][ T7815] BTRFS info (device loop6): disabling free space tree [ 158.076351][ T7815] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.101817][ T7815] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.314762][ T7325] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.323001][ T7821] loop5: detected capacity change from 0 to 32768 [ 158.376071][ T7821] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.429918][ T7821] XFS (loop5): Ending clean mount [ 158.739479][ T6911] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.871314][ T7851] loop0: detected capacity change from 0 to 512 [ 158.907767][ T7851] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.644: corrupted in-inode xattr: invalid ea_ino [ 158.942953][ T7851] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.644: couldn't read orphan inode 15 (err -117) [ 159.006737][ T7851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.101905][ T55] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 159.176560][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.302142][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 159.312137][ T55] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.328357][ T55] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.341447][ T55] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.355122][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.365290][ T55] usb 7-1: Product: syz [ 159.369655][ T55] usb 7-1: Manufacturer: syz [ 159.384823][ T55] usb 7-1: SerialNumber: syz [ 159.503811][ T7863] loop5: detected capacity change from 0 to 128 [ 159.511192][ T7863] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.561970][ T7863] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.615467][ T55] usb 7-1: 0:2 : does not exist [ 159.624420][ T28] audit: type=1800 audit(159.598:85): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.648" name="file1" dev="loop5" ino=1048622 res=0 errno=0 [ 159.666155][ T55] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 159.704301][ T55] usb 7-1: USB disconnect, device number 3 [ 159.756344][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.411657][ T7869] loop5: detected capacity change from 0 to 32768 [ 160.433446][ T7869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.650 (7869) [ 160.474538][ T7869] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.502399][ T7869] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 160.511166][ T7869] BTRFS info (device loop5): setting nodatacow, compression disabled [ 160.542080][ T7869] BTRFS info (device loop5): max_inline at 0 [ 160.548125][ T7869] BTRFS info (device loop5): enabling disk space caching [ 160.553207][ T7877] ip6tnl0: Caught tx_queue_len zero misconfig [ 160.571841][ T7869] BTRFS info (device loop5): turning off barriers [ 160.590240][ T7869] BTRFS info (device loop5): disabling tree log [ 160.606299][ T7869] BTRFS info (device loop5): doing ref verification [ 160.615801][ T7869] BTRFS info (device loop5): force clearing of disk cache [ 160.626102][ T7869] BTRFS info (device loop5): max_inline at 4096 [ 160.632892][ T7869] BTRFS info (device loop5): disk space caching is enabled [ 160.683223][ T7869] BTRFS info (device loop5): enabling ssd optimizations [ 160.707069][ T7869] BTRFS info (device loop5): auto enabling async discard [ 160.726897][ T7869] BTRFS info (device loop5): rebuilding free space tree [ 160.743650][ T7896] loop0: detected capacity change from 0 to 512 [ 160.754012][ T7869] BTRFS info (device loop5): disabling free space tree [ 160.760975][ T7869] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.771516][ T7869] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.788296][ T7896] EXT4-fs: Ignoring removed bh option [ 160.796912][ T7896] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 160.843821][ T7896] EXT4-fs (loop0): 1 truncate cleaned up [ 160.863067][ T7896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.941260][ T6911] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.961045][ T28] audit: type=1804 audit(160.928:86): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.656" name="/newroot/189/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 160.989162][ T7896] EXT4-fs warning (device loop0): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 161.071898][ T5885] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 161.105215][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.309348][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.342842][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.361881][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.398913][ T5885] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.433925][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.454734][ T5885] usb 7-1: config 0 descriptor?? [ 161.876288][ T5885] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 161.922901][ T5885] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 162.063651][ T7916] loop0: detected capacity change from 0 to 8192 [ 162.092450][ T7916] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.121599][ T7916] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 162.137008][ T5885] usb 7-1: USB disconnect, device number 4 [ 162.154392][ T7916] REISERFS (device loop0): using ordered data mode [ 162.161095][ T7916] reiserfs: using flush barriers [ 162.171245][ T7916] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.188251][ T7916] REISERFS (device loop0): checking transaction log (loop0) [ 162.347870][ T7916] REISERFS (device loop0): Using tea hash to sort names [ 162.364045][ T7916] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 162.519086][ T7918] loop5: detected capacity change from 0 to 32768 [ 162.819393][ T7921] erspan0: entered promiscuous mode [ 163.167280][ T7931] syz.5.671 uses obsolete (PF_INET,SOCK_PACKET) [ 163.442038][ T5885] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 163.661855][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 163.668955][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 163.707319][ T5885] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 163.726768][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.752414][ T5885] usb 1-1: Product: syz [ 163.756616][ T5885] usb 1-1: Manufacturer: syz [ 163.769951][ T5885] usb 1-1: SerialNumber: syz [ 163.784070][ T5885] usb 1-1: config 0 descriptor?? [ 163.793331][ T5885] hub 1-1:0.0: bad descriptor, ignoring hub [ 163.809810][ T5885] hub: probe of 1-1:0.0 failed with error -5 [ 163.830632][ T5885] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 163.987332][ T7942] loop6: detected capacity change from 0 to 32768 [ 164.013119][ T7942] XFS: ikeep mount option is deprecated. [ 164.029145][ T7942] XFS: ikeep mount option is deprecated. [ 164.100258][ T7942] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.229500][ T7946] loop5: detected capacity change from 0 to 32768 [ 164.260200][ T7942] XFS (loop6): Ending clean mount [ 164.285414][ T7942] XFS (loop6): Quotacheck needed: Please wait. [ 164.356220][ T7942] XFS (loop6): Quotacheck: Done. [ 164.473284][ T7325] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.288296][ T7957] loop5: detected capacity change from 0 to 32768 [ 165.304649][ T7957] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 165.328975][ T7957] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 165.451599][ T6911] ocfs2: Unmounting device (7,5) on (node local) [ 166.031966][ T7963] netlink: 'syz.5.683': attribute type 1 has an invalid length. [ 166.041916][ T7963] nbd: error processing sock list [ 166.047718][ T7963] block nbd1: shutting down sockets [ 166.201187][ T1189] usb 1-1: USB disconnect, device number 11 [ 166.506006][ T7982] loop5: detected capacity change from 0 to 128 [ 167.137964][ T7978] loop6: detected capacity change from 0 to 32768 [ 167.177353][ T7990] team0: Device gtp0 is of different type [ 167.602222][ T7986] loop5: detected capacity change from 0 to 32768 [ 167.620084][ T7986] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum" [ 167.639114][ T7986] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)... [ 167.661901][ T7986] gfs2: fsid=statfs_quantum.s: journal 0 mapped with 16 extents in 0ms [ 167.758186][ T7986] gfs2: fsid=statfs_quantum.s: first mount done, others may mount [ 168.199971][ T8002] loop5: detected capacity change from 0 to 128 [ 168.224284][ T8002] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 168.253559][ T8002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.436637][ T7993] loop0: detected capacity change from 0 to 40427 [ 168.453652][ T8007] loop6: detected capacity change from 0 to 128 [ 168.460004][ T7993] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 168.469480][ T7993] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.482890][ T7993] F2FS-fs (loop0): invalid crc value [ 168.494342][ T7993] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.509129][ T8007] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.676849][ T7993] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 168.690507][ T7325] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.702041][ T7993] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.845731][ T8016] loop5: detected capacity change from 0 to 4096 [ 169.095889][ T1084] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 169.130258][ T1084] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 169.365869][ T8031] loop5: detected capacity change from 0 to 512 [ 169.411921][ T8032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.427770][ T8031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.487723][ T8031] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.712: corrupted inode contents [ 169.555010][ T8031] EXT4-fs error (device loop5): ext4_dirty_inode:6106: inode #2: comm syz.5.712: mark_inode_dirty error [ 169.623852][ T8031] EXT4-fs error (device loop5): ext4_do_update_inode:5230: inode #2: comm syz.5.712: corrupted inode contents [ 169.624834][ T8038] Bluetooth: MGMT ver 1.22 [ 169.655493][ T8031] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.712: mark_inode_dirty error [ 169.681879][ T8036] EXT4-fs error (device loop5): ext4_get_first_dir_block:3595: inode #18: comm syz.5.712: directory missing '.' [ 169.808953][ T6911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.942274][ T5876] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 170.055850][ T6791] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 170.152916][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 170.184937][ T5876] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 170.206091][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.227905][ T5876] pvrusb2: Hardware description: Terratec Grabster AV400 [ 170.235765][ T5876] pvrusb2: ********** [ 170.239980][ T5876] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 170.250337][ T5876] pvrusb2: Important functionality might not be entirely working. [ 170.261720][ T5876] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 170.280751][ T6791] usb 1-1: Using ep0 maxpacket: 32 [ 170.286364][ T5876] pvrusb2: ********** [ 170.297063][ T6791] usb 1-1: config 0 interface 0 has no altsetting 0 [ 170.311152][ T6791] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 170.329239][ T6791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.337601][ T6791] usb 1-1: Product: syz [ 170.347168][ T6791] usb 1-1: Manufacturer: syz [ 170.352098][ T6791] usb 1-1: SerialNumber: syz [ 170.359581][ T6791] usb 1-1: config 0 descriptor?? [ 170.435855][ T2316] pvrusb2: Invalid write control endpoint [ 170.565893][ T2316] pvrusb2: Invalid write control endpoint [ 170.581809][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 170.603783][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 170.611478][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 170.671833][ T2316] pvrusb2: Device being rendered inoperable [ 170.684210][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 170.704210][ T5790] usb 7-1: USB disconnect, device number 5 [ 170.713111][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 170.726240][ T2316] pvrusb2: Attached sub-driver cx25840 [ 170.732681][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 170.742850][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 170.798548][ T6791] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 171.018889][ T8057] loop5: detected capacity change from 0 to 32768 [ 171.027515][ T8057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.721 (8057) [ 171.049037][ T8057] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.064493][ T8057] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 171.077703][ T8057] BTRFS info (device loop5): using free space tree [ 171.200852][ T6791] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 171.209739][ T8057] BTRFS info (device loop5): enabling ssd optimizations [ 171.221849][ T8057] BTRFS info (device loop5): auto enabling async discard [ 171.250200][ T6791] usb 1-1: USB disconnect, device number 12 [ 171.430749][ T6911] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.691856][ T5795] Bluetooth: hci2: command 0x0401 tx timeout [ 171.698129][ T5797] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 171.702504][ T5885] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 171.799653][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.812966][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.838651][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.846920][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.870302][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 171.893594][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.902166][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 171.913504][ T5885] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 171.929400][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.944758][ T5885] usb 7-1: config 0 descriptor?? [ 172.180215][ T5885] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 172.184097][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.726'. [ 172.194414][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.206459][ T5885] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 172.231892][ T5885] usb 7-1: media controller created [ 172.276233][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.338382][ T42] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.382768][ T5885] az6027: usb out operation failed. (-71) [ 172.389255][ T5885] az6027: usb out operation failed. (-71) [ 172.410583][ T5885] stb0899_attach: Driver disabled by Kconfig [ 172.421821][ T5885] az6027: no front-end attached [ 172.421821][ T5885] [ 172.432593][ T5885] az6027: usb out operation failed. (-71) [ 172.440125][ T5885] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 172.456279][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 172.470184][ T5885] dvb-usb: schedule remote query interval to 400 msecs. [ 172.475135][ T42] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.477255][ T5885] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 172.502093][ T5885] usb 7-1: USB disconnect, device number 6 [ 172.551463][ T5885] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 172.647010][ T42] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.663709][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 172.779630][ T42] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.780111][ T8104] vivid-000: ================= START STATUS ================= [ 172.799508][ T8104] vivid-000: Radio HW Seek Mode: Bounded [ 172.807751][ T8104] vivid-000: Radio Programmable HW Seek: false [ 172.815903][ T8104] vivid-000: RDS Rx I/O Mode: Block I/O [ 172.821510][ T8104] vivid-000: Generate RBDS Instead of RDS: false [ 172.831895][ T8104] vivid-000: RDS Reception: true [ 172.836927][ T8104] vivid-000: RDS Program Type: 0 inactive [ 172.847052][ T8104] vivid-000: RDS PS Name: inactive [ 172.848358][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.858151][ T8104] vivid-000: RDS Radio Text: inactive [ 172.864607][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.871834][ T8104] vivid-000: RDS Traffic Announcement: false inactive [ 172.879953][ T8104] vivid-000: RDS Traffic Program: false inactive [ 172.881086][ T8076] bridge_slave_0: entered allmulticast mode [ 172.886734][ T8104] vivid-000: RDS Music: false inactive [ 172.886770][ T8104] vivid-000: ================== END STATUS ================== [ 172.914745][ T8076] bridge_slave_0: entered promiscuous mode [ 172.963233][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.970388][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.001181][ T8076] bridge_slave_1: entered allmulticast mode [ 173.019541][ T8076] bridge_slave_1: entered promiscuous mode [ 173.109622][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.150472][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.278194][ T8076] team0: Port device team_slave_0 added [ 173.327448][ T8076] team0: Port device team_slave_1 added [ 173.405554][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 173.430300][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.453308][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.491805][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.581187][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.601983][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.651810][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.827535][ T8076] hsr_slave_0: entered promiscuous mode [ 173.828169][ T8131] loop6: detected capacity change from 0 to 512 [ 173.847172][ T8076] hsr_slave_1: entered promiscuous mode [ 173.848346][ T8131] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.863086][ T8076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.870770][ T8076] Cannot create hsr debugfs directory [ 173.942489][ T5797] Bluetooth: hci4: command tx timeout [ 173.959764][ T8131] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.991019][ T8131] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 174.031013][ T8131] EXT4-fs (loop6): 1 truncate cleaned up [ 174.049484][ T8119] loop5: detected capacity change from 0 to 40427 [ 174.058651][ T8131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.071421][ T8119] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 174.078155][ T8119] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 174.104395][ T8137] loop0: detected capacity change from 0 to 128 [ 174.112158][ T8137] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.124587][ T28] audit: type=1800 audit(174.088:87): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.746" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 174.156889][ T8119] F2FS-fs (loop5): Found nat_bits in checkpoint [ 174.185971][ T7325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.282911][ T8119] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 174.290415][ T8119] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 174.498680][ T6911] syz-executor: attempt to access beyond end of device [ 174.498680][ T6911] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.520342][ T6911] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 174.988211][ T8076] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 175.118071][ T8076] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 175.154207][ T8076] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 175.173847][ T8076] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 175.244641][ T42] hsr_slave_0: left promiscuous mode [ 175.296164][ T42] hsr_slave_1: left promiscuous mode [ 175.318718][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.348927][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.379328][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.398437][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.416592][ T42] bridge_slave_1: left allmulticast mode [ 175.422954][ T42] bridge_slave_1: left promiscuous mode [ 175.445346][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.477618][ T42] bridge_slave_0: left allmulticast mode [ 175.485568][ T42] bridge_slave_0: left promiscuous mode [ 175.491807][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.564098][ T42] veth1_macvtap: left promiscuous mode [ 175.569696][ T42] veth0_macvtap: left promiscuous mode [ 175.582039][ T42] veth1_vlan: left promiscuous mode [ 175.587417][ T42] veth0_vlan: left promiscuous mode [ 175.594535][ T8168] serio: Serial port pty20 [ 175.613983][ T8161] loop6: detected capacity change from 0 to 32768 [ 175.638485][ T8161] (syz.6.757,8161,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.662427][ T8161] (syz.6.757,8161,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 175.699746][ T8161] JBD2: Ignoring recovery information on journal [ 175.732449][ T5790] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.808763][ T8161] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 175.959909][ T5790] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.982460][ T5790] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.989732][ T5790] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 176.009820][ T5790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.026791][ T5797] Bluetooth: hci4: command tx timeout [ 176.059718][ T8175] loop0: detected capacity change from 0 to 1024 [ 176.066785][ T5790] usb 6-1: config 0 descriptor?? [ 176.187858][ T28] audit: type=1800 audit(182.145:88): pid=8175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.762" name="file1" dev="loop0" ino=3 res=0 errno=0 [ 176.215995][ T7325] ocfs2: Unmounting device (7,6) on (node local) [ 176.281422][ T11] hfsplus: bad catalog file entry [ 176.298631][ T11] hfsplus: b-tree write err: -5, ino 3 [ 176.507827][ T5790] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x4 [ 176.531551][ T5790] magicmouse 0003:05AC:0269.0007: collection stack underflow [ 176.549637][ T5790] magicmouse 0003:05AC:0269.0007: item 0 1 0 12 parsing failed [ 176.578129][ T5790] magicmouse 0003:05AC:0269.0007: magicmouse hid parse failed [ 176.592150][ T5790] magicmouse: probe of 0003:05AC:0269.0007 failed with error -22 [ 176.766930][ T5885] usb 6-1: USB disconnect, device number 6 [ 176.913033][ T42] team0 (unregistering): Port device team_slave_1 removed [ 176.982074][ T5790] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 176.998334][ T42] team0 (unregistering): Port device team_slave_0 removed [ 177.075099][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.156889][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.186577][ T5790] usb 1-1: Using ep0 maxpacket: 8 [ 177.195496][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.206931][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.216962][ T5790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.229878][ T5790] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 177.240436][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.262570][ T5790] usb 1-1: config 0 descriptor?? [ 177.722038][ T5790] logitech 0003:046D:C293.0008: nested delimiters [ 177.728514][ T5790] logitech 0003:046D:C293.0008: item 0 4 2 10 parsing failed [ 177.758441][ T5790] logitech 0003:046D:C293.0008: parse failed [ 177.773377][ T5790] logitech: probe of 0003:046D:C293.0008 failed with error -22 [ 177.946050][ T23] usb 1-1: USB disconnect, device number 13 [ 178.001331][ T8205] loop6: detected capacity change from 0 to 8 [ 178.101835][ T5797] Bluetooth: hci4: command tx timeout [ 178.244572][ T42] bond0 (unregistering): Released all slaves [ 178.598452][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.655998][ T8076] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.689088][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.696487][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.708889][ T8207] loop6: detected capacity change from 0 to 32768 [ 178.742468][ T8207] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.776 (8207) [ 178.767437][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.774613][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.801665][ T8207] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 178.852915][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'. [ 178.859532][ T8207] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 178.891648][ T8207] BTRFS info (device loop6): doing ref verification [ 178.907435][ T8207] BTRFS info (device loop6): using free space tree [ 179.050795][ T8207] BTRFS info (device loop6): enabling ssd optimizations [ 179.089073][ T8207] BTRFS info (device loop6): auto enabling async discard [ 179.327822][ T8076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.466842][ T7325] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 179.766200][ T8076] veth0_vlan: entered promiscuous mode [ 179.803526][ T8076] veth1_vlan: entered promiscuous mode [ 179.888722][ T8076] veth0_macvtap: entered promiscuous mode [ 179.907904][ T8076] veth1_macvtap: entered promiscuous mode [ 179.941465][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.955032][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.966369][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.977619][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.988413][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.999116][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.011115][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.036714][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.061956][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.084504][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.095401][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.109956][ T8076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.158908][ T8076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.179557][ T5797] Bluetooth: hci4: command tx timeout [ 180.213859][ T8076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.275650][ T8076] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.309556][ T8076] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.310852][ T8274] loop0: detected capacity change from 0 to 1024 [ 180.323676][ T8076] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.345502][ T8076] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.591678][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.622659][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.664187][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.677734][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.719995][ T28] audit: type=1326 audit(186.675:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.0.798" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ccd58ebe9 code=0x0 [ 180.870159][ T8289] loop8: detected capacity change from 0 to 16 [ 180.880751][ T8289] erofs: (device loop8): check_layout_compatibility: unidentified incompatible feature 6000000, please upgrade kernel [ 180.947658][ T8284] loop5: detected capacity change from 0 to 32768 [ 180.975751][ T8284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.799 (8284) [ 181.009045][ T8284] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.030330][ T8284] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 181.052561][ T8284] BTRFS info (device loop5): setting nodatacow, compression disabled [ 181.060746][ T8284] BTRFS info (device loop5): max_inline at 0 [ 181.082048][ T8284] BTRFS info (device loop5): enabling disk space caching [ 181.099538][ T8284] BTRFS info (device loop5): turning off barriers [ 181.111914][ T8284] BTRFS info (device loop5): turning on flush-on-commit [ 181.129133][ T8284] BTRFS info (device loop5): doing ref verification [ 181.141988][ T8284] BTRFS info (device loop5): force clearing of disk cache [ 181.149652][ T8284] BTRFS info (device loop5): enabling ssd optimizations [ 181.157097][ T8284] BTRFS info (device loop5): max_inline at 4096 [ 181.158346][ T8282] loop6: detected capacity change from 0 to 32768 [ 181.170115][ T8284] BTRFS info (device loop5): disk space caching is enabled [ 181.199822][ T8282] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 181.209378][ T8284] BTRFS info (device loop5): auto enabling async discard [ 181.227320][ T8282] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.240364][ T8284] BTRFS info (device loop5): rebuilding free space tree [ 181.285414][ T8284] BTRFS info (device loop5): disabling free space tree [ 181.321303][ T8282] XFS (loop6): Ending clean mount [ 181.327797][ T8284] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.352952][ T8282] XFS (loop6): Quotacheck needed: Please wait. [ 181.359257][ T8284] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.382594][ T8289] loop8: detected capacity change from 0 to 32768 [ 181.419833][ T8282] XFS (loop6): Quotacheck: Done. [ 181.440685][ T8289] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 181.458636][ T8289] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.537804][ T8289] XFS (loop8): Ending clean mount [ 181.555397][ T8289] XFS (loop8): Quotacheck needed: Please wait. [ 181.580325][ T7325] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.649278][ T8289] XFS (loop8): Quotacheck: Done. [ 181.682138][ T6911] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.834169][ T8076] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.887479][ T8320] XFS (loop8): SB summary counter sanity check failed [ 181.915415][ T8320] XFS (loop8): Metadata corruption detected at xfs_sb_write_verify+0x177/0x370, xfs_sb block 0x0 [ 181.942079][ T8320] XFS (loop8): Unmount and run xfs_repair [ 181.969891][ T8320] XFS (loop8): First 128 bytes of corrupted metadata buffer: [ 182.000360][ T8320] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 182.009721][ T8320] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.043403][ T8320] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 182.061889][ T8320] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 11 40 ...............@ [ 182.071095][ T8320] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42 .......A.......B [ 182.126213][ T8320] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 182.144107][ T8320] 00000060: 00 00 04 3e b4 f5 02 00 04 00 00 04 00 00 00 00 ...>............ [ 182.166395][ T8320] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a ................ [ 182.188058][ T8320] XFS (loop8): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x203/0x670 (fs/xfs/xfs_buf.c:1559). Shutting down filesystem. [ 182.218547][ T8320] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 182.253525][ T8327] loop5: detected capacity change from 0 to 1024 [ 182.393228][ T8325] loop6: detected capacity change from 0 to 32768 [ 182.629036][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.5.804'. [ 182.815776][ T8337] loop5: detected capacity change from 0 to 2048 [ 182.908083][ T8342] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.113020][ T8342] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 183.136037][ T8342] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 183.164046][ T8342] Remounting filesystem read-only [ 183.254963][ T6911] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 183.299625][ T6911] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 183.321976][ T6911] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 183.340659][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.359899][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.379583][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.404407][ T6911] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 183.420092][ T6911] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 183.426165][ T8353] loop8: detected capacity change from 0 to 1024 [ 183.442008][ T6911] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 183.449435][ T6911] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 183.467539][ T6911] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 183.481890][ T6911] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 183.499132][ T6911] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 183.509285][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.534784][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.562094][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.586445][ T6911] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 183.593258][ T6911] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 183.600557][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.620927][ T8349] loop6: detected capacity change from 0 to 32768 [ 183.635805][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.650805][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.661982][ T6911] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 183.668983][ T6911] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 183.677380][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.687016][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.698953][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.710535][ T6911] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 183.717452][ T6911] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 183.729515][ T6911] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 183.738624][ T6911] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 183.751161][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.752512][ T8349] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 183.766647][ T6911] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 183.786283][ T42] (kworker/u4:2,42,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 183.816132][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.825213][ T28] audit: type=1800 audit(189.785:90): pid=8349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.811" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 183.827759][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.877196][ T8349] (syz.6.811,8349,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 183.887135][ T6911] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 183.894826][ T8349] (syz.6.811,8349,1):ocfs2_orphan_del:2382 ERROR: status = -117 [ 183.902650][ T6911] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 183.912085][ T8349] (syz.6.811,8349,0):ocfs2_orphan_del:2404 ERROR: status = -117 [ 183.928398][ T8349] (syz.6.811,8349,0):ocfs2_del_inode_from_orphan:2737 ERROR: status = -117 [ 183.942528][ T8349] (syz.6.811,8349,1):ocfs2_dio_end_io_write:2336 ERROR: status = -117 [ 183.969730][ T8349] (syz.6.811,8349,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 183.980059][ T8349] (syz.6.811,8349,1):ocfs2_orphan_del:2382 ERROR: status = -117 [ 183.987895][ T8349] (syz.6.811,8349,1):ocfs2_orphan_del:2404 ERROR: status = -117 [ 183.995671][ T8349] (syz.6.811,8349,1):ocfs2_del_inode_from_orphan:2737 ERROR: status = -117 [ 184.004637][ T8349] (syz.6.811,8349,1):ocfs2_add_inode_to_orphan:2653 ERROR: status = -117 [ 184.018584][ T8349] (syz.6.811,8349,1):ocfs2_dio_wr_get_block:2213 ERROR: status = -117 [ 184.027208][ T8349] (syz.6.811,8349,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 184.117181][ T7325] (syz-executor,7325,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 184.139217][ T7325] (syz-executor,7325,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 184.164191][ T7325] ocfs2: Unmounting device (7,6) on (node local) [ 184.499346][ T8388] loop8: detected capacity change from 0 to 764 [ 184.729325][ T8400] syz_tun: entered allmulticast mode [ 184.753390][ T8399] syz_tun: left allmulticast mode [ 185.122038][ T55] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 185.271201][ T8404] loop8: detected capacity change from 0 to 32768 [ 185.308143][ T8404] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.322289][ T55] usb 6-1: Using ep0 maxpacket: 32 [ 185.340547][ T55] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.352459][ T55] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.403576][ T55] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 185.438577][ T8410] loop0: detected capacity change from 0 to 40427 [ 185.447719][ T8410] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 185.454005][ T8408] loop6: detected capacity change from 0 to 32768 [ 185.461497][ T8410] F2FS-fs (loop0): invalid crc value [ 185.466809][ T55] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.476173][ T55] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 185.481149][ T8404] XFS (loop8): Ending clean mount [ 185.485610][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.501711][ T55] usb 6-1: config 0 descriptor?? [ 185.502077][ T8408] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 185.518448][ T8410] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.535707][ T8404] XFS (loop8): Quotacheck needed: Please wait. [ 185.586461][ T8404] XFS (loop8): Quotacheck: Done. [ 185.620947][ T8410] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 185.649027][ T7325] ocfs2: Unmounting device (7,6) on (node local) [ 185.697358][ T28] audit: type=1800 audit(191.665:91): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.838" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 185.755093][ T8076] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.770617][ T5784] syz-executor: attempt to access beyond end of device [ 185.770617][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.796024][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 185.951169][ T55] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 185.978852][ T55] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 185.999542][ T55] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 186.030530][ T55] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 186.051494][ T55] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 186.076006][ T55] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 186.102218][ T55] hid-thrustmaster 0003:044F:B65D.0009: Unexpected non-int endpoint [ 186.233431][ C1] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -71 [ 186.233706][ T1189] usb 6-1: USB disconnect, device number 7 [ 186.700609][ T8433] loop6: detected capacity change from 0 to 32768 [ 186.711435][ T8433] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.845 (8433) [ 186.732717][ T8433] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.757740][ T8433] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 186.776740][ T8433] BTRFS info (device loop6): using free space tree [ 186.923833][ T8433] BTRFS info (device loop6): enabling ssd optimizations [ 186.930840][ T8433] BTRFS info (device loop6): auto enabling async discard [ 187.052168][ T7325] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 187.063951][ T8437] loop0: detected capacity change from 0 to 40427 [ 187.073165][ T8437] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 187.088592][ T8437] F2FS-fs (loop0): invalid crc value [ 187.112098][ T8437] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.247743][ T8437] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 187.420997][ T5784] syz-executor: attempt to access beyond end of device [ 187.420997][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.472518][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 188.274252][ T8492] loop5: detected capacity change from 0 to 8 [ 188.492014][ T5790] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 188.598181][ T8504] loop0: detected capacity change from 0 to 8192 [ 188.607568][ T8504] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.686957][ T5790] usb 7-1: Using ep0 maxpacket: 16 [ 188.722431][ T5790] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.742142][ T5790] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.771873][ T5790] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.795844][ T5790] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.812668][ T5790] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 188.841888][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.862837][ T5790] usb 7-1: config 0 descriptor?? [ 188.900236][ T8498] loop5: detected capacity change from 0 to 32768 [ 188.948428][ T8498] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.106379][ T8498] XFS (loop5): Ending clean mount [ 189.130728][ T8498] XFS (loop5): Quotacheck needed: Please wait. [ 189.148761][ T8502] loop8: detected capacity change from 0 to 32768 [ 189.164251][ T8502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.868 (8502) [ 189.170038][ T8498] XFS (loop5): Quotacheck: Done. [ 189.205690][ T8502] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.227183][ T8502] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 189.251989][ T8502] BTRFS info (device loop8): setting nodatacow, compression disabled [ 189.260237][ T8502] BTRFS info (device loop8): max_inline at 0 [ 189.287173][ T8502] BTRFS info (device loop8): enabling disk space caching [ 189.293454][ T8506] loop0: detected capacity change from 0 to 32768 [ 189.299655][ T8502] BTRFS info (device loop8): turning off barriers [ 189.310634][ T5790] hid (null): usage index exceeded [ 189.317690][ T5790] hid (null): usage index exceeded [ 189.322848][ T8502] BTRFS info (device loop8): turning on flush-on-commit [ 189.322878][ T8502] BTRFS info (device loop8): doing ref verification [ 189.322897][ T8502] BTRFS info (device loop8): force clearing of disk cache [ 189.350239][ T8502] BTRFS info (device loop8): enabling ssd optimizations [ 189.364995][ T8502] BTRFS info (device loop8): max_inline at 4096 [ 189.371540][ T8502] BTRFS info (device loop8): disk space caching is enabled [ 189.383629][ T8506] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 189.383629][ T8506] [ 189.397073][ T8506] ERROR: (device loop0): remounting filesystem as read-only [ 189.409390][ T8506] jfs_mkdir: dtInsert returned -EIO [ 189.410137][ T6911] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.420783][ T8506] ERROR: (device loop0): jfs_mkdir: [ 189.420783][ T8506] [ 189.493336][ T8506] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 189.493336][ T8506] [ 189.583997][ T8502] BTRFS info (device loop8): auto enabling async discard [ 189.594931][ T6791] usb 7-1: USB disconnect, device number 7 [ 189.619834][ T8502] BTRFS info (device loop8): rebuilding free space tree [ 189.652497][ T8502] BTRFS info (device loop8): disabling free space tree [ 189.660952][ T8502] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.676918][ T8502] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.778477][ T8076] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.263088][ T8546] loop8: detected capacity change from 0 to 256 [ 190.283747][ T8548] netlink: 300 bytes leftover after parsing attributes in process `syz.6.878'. [ 190.728512][ T8553] loop8: detected capacity change from 0 to 32768 [ 190.770060][ T8553] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 190.863647][ T8551] loop6: detected capacity change from 0 to 32768 [ 190.911968][ T8076] ocfs2: Unmounting device (7,8) on (node local) [ 191.164499][ T8569] 9pnet_virtio: no channels available for device syz [ 191.283293][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.449286][ T8584] input: syz1 as /devices/virtual/input/input17 [ 191.532025][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 191.585626][ T8588] loop0: detected capacity change from 0 to 4096 [ 191.767993][ T8596] loop8: detected capacity change from 0 to 2048 [ 191.828859][ T8599] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.895494][ T8599] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 191.932764][ T8599] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 191.952627][ T8599] Remounting filesystem read-only [ 192.005140][ T8076] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 192.028421][ T8076] NILFS (loop8): discard dirty page: offset=0, ino=2 [ 192.048651][ T8076] NILFS (loop8): discard dirty block: blocknr=18, size=1024 [ 192.071968][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.101884][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.110795][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.161011][ T8076] NILFS (loop8): discard dirty page: offset=0, ino=6 [ 192.167866][ T8076] NILFS (loop8): discard dirty block: blocknr=35, size=1024 [ 192.194494][ T8076] NILFS (loop8): discard dirty block: blocknr=36, size=1024 [ 192.211837][ T8076] NILFS (loop8): discard dirty block: blocknr=37, size=1024 [ 192.221794][ T8076] NILFS (loop8): discard dirty block: blocknr=38, size=1024 [ 192.229145][ T8076] NILFS (loop8): discard dirty page: offset=4096, ino=6 [ 192.252024][ T8076] NILFS (loop8): discard dirty block: blocknr=39, size=1024 [ 192.269609][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.281801][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.300956][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.323385][ T8076] NILFS (loop8): discard dirty page: offset=0, ino=5 [ 192.330118][ T8076] NILFS (loop8): discard dirty block: blocknr=41, size=1024 [ 192.351831][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.371147][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.392022][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.401276][ T8076] NILFS (loop8): discard dirty page: offset=0, ino=4 [ 192.421925][ T8076] NILFS (loop8): discard dirty block: blocknr=40, size=1024 [ 192.429536][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.440728][ T8598] loop5: detected capacity change from 0 to 40427 [ 192.461844][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.469686][ T8598] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 192.470735][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.492538][ T8598] F2FS-fs (loop5): invalid crc value [ 192.506212][ T8598] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.508985][ T8076] NILFS (loop8): discard dirty page: offset=0, ino=3 [ 192.529751][ T8076] NILFS (loop8): discard dirty block: blocknr=42, size=1024 [ 192.547391][ T8076] NILFS (loop8): discard dirty block: blocknr=43, size=1024 [ 192.561900][ T8076] NILFS (loop8): discard dirty block: blocknr=44, size=1024 [ 192.577023][ T8603] loop0: detected capacity change from 0 to 32768 [ 192.583626][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.595664][ T8076] NILFS (loop8): discard dirty page: offset=196608, ino=3 [ 192.606312][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.615962][ T8598] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 192.623949][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.626969][ T8602] loop6: detected capacity change from 0 to 32768 [ 192.633902][ T8076] NILFS (loop8): discard dirty block: blocknr=49, size=1024 [ 192.647509][ T8076] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.686478][ T8603] find_entry called with index = 0 [ 192.697466][ T28] audit: type=1800 audit(198.665:92): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.887" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 192.698131][ T8603] read_mapping_page failed! [ 192.737223][ T8602] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.737223][ T8602] [ 192.750336][ T8603] ERROR: (device loop0): txCommit: [ 192.750336][ T8603] [ 192.778346][ T8602] ERROR: (device loop6): remounting filesystem as read-only [ 192.778899][ T8608] loop8: detected capacity change from 0 to 256 [ 192.791727][ T8602] xtLookup: xtSearch returned -5 [ 192.799874][ T6911] syz-executor: attempt to access beyond end of device [ 192.799874][ T6911] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.815615][ T8610] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt [ 192.815615][ T8610] [ 192.829424][ T6911] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 192.837677][ T8610] xtLookup: xtSearch returned -5 [ 192.844750][ T8610] ERROR: (device loop6): xtTruncate: XT_GETPAGE: xtree page corrupt [ 192.844750][ T8610] [ 193.219721][ T8617] loop8: detected capacity change from 0 to 128 [ 193.248999][ T8617] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.296456][ T8617] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.494903][ T1125] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 193.600459][ T8627] Driver unsupported XDP return value 0 on prog (id 117) dev N/A, expect packet loss! [ 193.648136][ T8615] loop6: detected capacity change from 0 to 32768 [ 193.845095][ T8634] loop8: detected capacity change from 0 to 256 [ 193.881901][ T23] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 194.083885][ T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.098570][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.108141][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.125657][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.134063][ T6791] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 194.146169][ T23] usb 1-1: Product: syz [ 194.150361][ T23] usb 1-1: Manufacturer: syz [ 194.156481][ T23] usb 1-1: SerialNumber: syz [ 194.163982][ T23] usb 1-1: config 0 descriptor?? [ 194.180889][ T23] usb 1-1: selecting invalid altsetting 0 [ 194.228328][ T8642] loop8: detected capacity change from 0 to 32768 [ 194.239814][ T8642] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.291700][ T8642] XFS (loop8): Ending clean mount [ 194.352110][ T6791] usb 7-1: Using ep0 maxpacket: 16 [ 194.362963][ T6791] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.373411][ T6791] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.388084][ T6791] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.398498][ T6791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.406635][ T6791] usb 7-1: Product: syz [ 194.410947][ T6791] usb 7-1: Manufacturer: syz [ 194.415686][ T6791] usb 7-1: SerialNumber: syz [ 194.424885][ T6791] usb 7-1: selecting invalid altsetting 1 [ 194.479252][ T8076] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.492071][ T23] usb 1-1: USB disconnect, device number 14 [ 194.595692][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606906][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.963207][ T8667] loop5: detected capacity change from 0 to 1024 [ 195.026204][ T8669] loop8: detected capacity change from 0 to 64 [ 195.043393][ T8669] hfs: unable to locate alternate MDB [ 195.049558][ T8669] hfs: continuing without an alternate MDB [ 195.271964][ T6791] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 195.303120][ T6791] usb 7-1: selecting invalid altsetting 1 [ 195.316279][ T8676] netlink: 46 bytes leftover after parsing attributes in process `syz.0.930'. [ 195.331988][ T6791] cdc_ncm 7-1:1.0: bind() failure [ 195.358830][ T6791] usb 7-1: USB disconnect, device number 8 [ 195.882933][ T8689] loop0: detected capacity change from 0 to 1024 [ 195.930238][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.8.938'. [ 195.946200][ T8689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.117878][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.526595][ T8696] loop6: detected capacity change from 0 to 32768 [ 196.565580][ T8696] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.606299][ T8696] XFS (loop6): Ending clean mount [ 196.632169][ T1189] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.644265][ T7325] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 196.834525][ T1189] usb 1-1: Using ep0 maxpacket: 16 [ 196.841794][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.852977][ T5790] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 196.882121][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.902142][ T1189] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 196.921508][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.943016][ T1189] usb 1-1: config 0 descriptor?? [ 196.996146][ T8732] loop6: detected capacity change from 0 to 4096 [ 197.009433][ T8732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.070574][ T5790] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 197.077063][ T8732] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #15: comm syz.6.951: corrupted inode contents [ 197.091942][ T5790] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.102289][ T8732] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #15: comm syz.6.951: mark_inode_dirty error [ 197.120157][ T5790] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 197.137910][ T8732] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #15: comm syz.6.951: corrupted inode contents [ 197.151689][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.169206][ T5790] usb 6-1: Product: syz [ 197.169469][ T8732] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.951: mark_inode_dirty error [ 197.173718][ T5790] usb 6-1: Manufacturer: syz [ 197.173736][ T5790] usb 6-1: SerialNumber: syz [ 197.203063][ T5790] usb 6-1: config 0 descriptor?? [ 197.211424][ T5790] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 197.218276][ T8732] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #15: comm syz.6.951: corrupted inode contents [ 197.230239][ T5790] ims_pcu: probe of 6-1:0.0 failed with error -22 [ 197.251804][ T8732] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #15: comm syz.6.951: mark_inode_dirty error [ 197.286766][ T8732] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #15: comm syz.6.951: corrupted inode contents [ 197.331946][ T8732] EXT4-fs error (device loop6): ext4_truncate:4288: inode #15: comm syz.6.951: mark_inode_dirty error [ 197.366525][ T8732] EXT4-fs error (device loop6) in ext4_setattr:5645: Corrupt filesystem [ 197.393447][ T1189] corsair 0003:1B1C:1B02.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 197.409065][ T8728] loop8: detected capacity change from 0 to 40427 [ 197.427721][ T8728] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 197.437108][ T8728] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 197.461963][ T8728] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff [ 197.470473][ T8728] F2FS-fs (loop8): heap/no_heap options were deprecated [ 197.490771][ T8728] F2FS-fs (loop8): Image doesn't support compression [ 197.519496][ T8728] F2FS-fs (loop8): invalid crc value [ 197.542285][ T8728] F2FS-fs (loop8): Found nat_bits in checkpoint [ 197.581270][ T1189] corsair 0003:1B1C:1B02.000B: Read invalid backlight brightness: f7. [ 197.622442][ T8728] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 197.631391][ T8728] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 197.646349][ T5790] usb 6-1: USB disconnect, device number 8 [ 197.670878][ T8728] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 197.716271][ T8076] syz-executor: attempt to access beyond end of device [ 197.716271][ T8076] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.735668][ T8076] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 197.788527][ T9] usb 1-1: USB disconnect, device number 15 [ 197.859257][ T8732] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #15: comm syz.6.951: corrupted inode contents [ 197.930983][ T7325] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 197.953554][ T7325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.155908][ T8744] warning: `syz.5.954' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.392525][ T8752] netlink: 'syz.8.959': attribute type 5 has an invalid length. [ 198.465397][ T8756] loop5: detected capacity change from 0 to 512 [ 198.507391][ T8756] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 198.531963][ T8756] System zones: 0-2, 18-18, 34-35 [ 198.567841][ T8762] gfs2: path_lookup on @ returned error -2 [ 198.582211][ T8756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.629210][ T8745] loop6: detected capacity change from 0 to 32768 [ 198.679758][ T8745] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 198.839189][ T6911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.909034][ T7325] (syz-executor,7325,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 198.965205][ T7325] ocfs2: Unmounting device (7,6) on (node local) [ 199.062952][ T8778] loop0: detected capacity change from 0 to 64 [ 199.092623][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 199.176854][ T8772] loop8: detected capacity change from 0 to 32768 [ 199.236978][ T8772] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 199.259952][ T8772] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 199.527004][ T8791] loop6: detected capacity change from 0 to 2048 [ 199.617922][ T8792] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.673841][ T8785] loop5: detected capacity change from 0 to 32768 [ 199.699165][ T8794] loop0: detected capacity change from 0 to 2048 [ 199.705755][ T8785] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.973 (8785) [ 199.723787][ T8794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.760803][ T8785] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 199.802515][ T8785] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 199.836379][ T8785] BTRFS info (device loop5): using free space tree [ 199.982576][ T8785] BTRFS info (device loop5): enabling ssd optimizations [ 200.004836][ T8785] BTRFS info (device loop5): auto enabling async discard [ 200.242464][ T6911] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 200.287437][ T8820] macvtap1: entered allmulticast mode [ 200.321852][ T8820] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 200.414868][ T8820] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 200.992449][ T8076] ocfs2: Unmounting device (7,8) on (node local) [ 201.023970][ T8830] loop0: detected capacity change from 0 to 512 [ 201.065859][ T8830] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.987: casefold flag without casefold feature [ 201.089940][ T8830] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.987: couldn't read orphan inode 15 (err -117) [ 201.109382][ T8830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.157602][ T8835] loop8: detected capacity change from 0 to 128 [ 201.172098][ T23] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 201.186148][ T8835] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.203303][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.273700][ T8835] fscrypt (loop8, inode 12): Unsupported encryption flags (0x10) [ 201.347374][ T8076] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.402325][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 201.424800][ T23] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 201.433225][ T23] usb 7-1: config 0 has no interface number 0 [ 201.439447][ T23] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 201.454965][ T23] usb 7-1: config 0 interface 196 has no altsetting 0 [ 201.465851][ T23] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 201.479127][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.488488][ T23] usb 7-1: Product: syz [ 201.496094][ T23] usb 7-1: Manufacturer: syz [ 201.500792][ T23] usb 7-1: SerialNumber: syz [ 201.515951][ T23] usb 7-1: config 0 descriptor?? [ 201.522043][ T8826] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 201.684827][ T8856] loop8: detected capacity change from 0 to 4096 [ 201.707394][ T8856] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 201.729261][ T8856] ntfs3: loop8: Failed to load $Extend (-22). [ 201.735559][ T8856] ntfs3: loop8: Failed to initialize $Extend. [ 201.751892][ T1189] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 201.846947][ T8858] loop8: detected capacity change from 0 to 1024 [ 201.855581][ T8858] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.876719][ T8858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.902261][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:1) [ 201.920720][ T8858] EXT4-fs error (device loop8): ext4_xattr_inode_iget:445: comm syz.8.998: error while reading EA inode 20 err=-116 [ 201.946480][ T8858] EXT4-fs (loop8): Remounting filesystem read-only [ 201.957890][ T8858] EXT4-fs warning (device loop8): ext4_xattr_block_set:2202: inode #19: comm syz.8.998: dec ref error=-5 [ 201.969409][ T1189] usb 6-1: Using ep0 maxpacket: 16 [ 201.982751][ T1189] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.009959][ T1189] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.035576][ T1189] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 202.061489][ T8076] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.076160][ T1189] usb 6-1: config 0 interface 0 has no altsetting 0 [ 202.112090][ T1189] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 202.120726][ T8866] loop0: detected capacity change from 0 to 256 [ 202.134039][ T1189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.147240][ T23] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 202.155930][ T1189] usb 6-1: config 0 descriptor?? [ 202.194413][ T23] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 202.414121][ T5790] usb 7-1: USB disconnect, device number 9 [ 202.466273][ T5790] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 202.522029][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 202.583225][ T1189] hid (null): invalid report_size 27418 [ 202.716337][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.725062][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.735329][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.744494][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.759414][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.768987][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.777104][ T9] usb 9-1: Product: syz [ 202.781299][ T9] usb 9-1: Manufacturer: syz [ 202.787814][ T6791] usb 6-1: USB disconnect, device number 9 [ 202.902068][ T1189] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 203.005505][ T23] usb 9-1: USB disconnect, device number 2 [ 203.099193][ T1189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.111638][ T1189] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 203.126261][ T1189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.138315][ T1189] usb 1-1: config 0 descriptor?? [ 203.230047][ T8892] loop6: detected capacity change from 0 to 1024 [ 203.239023][ T8892] EXT4-fs: Ignoring removed bh option [ 203.245481][ T8892] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 203.266237][ T8892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.324000][ T7325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.570485][ T1189] elecom 0003:056E:00FF.000D: item fetching failed at offset 0/3 [ 203.592573][ T1189] elecom: probe of 0003:056E:00FF.000D failed with error -22 [ 203.792750][ T5790] usb 1-1: USB disconnect, device number 16 [ 203.881520][ T8911] loop5: detected capacity change from 0 to 128 [ 204.010378][ T8903] loop8: detected capacity change from 0 to 32768 [ 204.025349][ T8903] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1015 (8903) [ 204.043833][ T8903] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.054652][ T8903] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 204.064718][ T8903] BTRFS info (device loop8): using free space tree [ 204.161935][ T8903] BTRFS info (device loop8): enabling ssd optimizations [ 204.169076][ T8903] BTRFS info (device loop8): auto enabling async discard [ 204.237482][ T8076] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 204.432126][ T5790] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 204.636082][ T5790] usb 6-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 204.652356][ T5790] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping [ 204.665051][ T5790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 64 [ 204.676195][ T5790] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.716183][ T5790] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 204.731618][ T5790] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 204.742171][ T5790] usb 6-1: Manufacturer: syz [ 204.749010][ T5790] usb 6-1: config 0 descriptor?? [ 204.755392][ T8932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 204.765746][ T5790] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 204.860883][ T8955] loop6: detected capacity change from 0 to 4096 [ 204.874605][ T8955] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 204.938636][ T8955] ntfs3: loop6: Failed to initialize $Extend/$Reparse. [ 204.976727][ T5790] usb 6-1: USB disconnect, device number 10 [ 205.185795][ T8966] loop6: detected capacity change from 0 to 256 [ 205.194252][ T8966] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.205329][ T8966] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 205.222253][ T8966] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 205.333596][ T8970] loop6: detected capacity change from 0 to 1024 [ 205.369655][ T1125] hfsplus: b-tree write err: -5, ino 8 [ 205.404694][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'. [ 205.418648][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1040'. [ 205.519426][ T8976] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1042'. [ 205.876241][ T8990] sp0: Synchronizing with TNC [ 205.933501][ T8993] loop5: detected capacity change from 0 to 512 [ 205.955425][ T8993] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.971176][ T8993] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 206.001728][ T8993] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 206.027706][ T8993] System zones: 0-2, 18-18, 34-35 [ 206.028332][ T9000] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1052'. [ 206.057228][ T8993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 206.120715][ T8993] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 206.144602][ T8993] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 206.160441][ T8993] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 206.236122][ T8993] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1050: bg 0: block 353: padding at end of block bitmap is not set [ 206.268352][ T9008] loop6: detected capacity change from 0 to 4096 [ 206.280284][ T9008] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.298066][ T9008] EXT4-fs (loop6): Test dummy encryption mode enabled [ 206.320496][ T6911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.358978][ T9008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.442375][ T7325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.489006][ T9015] loop8: detected capacity change from 0 to 4096 [ 206.496639][ T9015] ntfs3: Unknown parameter 'measure' [ 206.536005][ T9017] netlink: 'syz.6.1059': attribute type 1 has an invalid length. [ 206.672187][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 206.690690][ T9024] loop6: detected capacity change from 0 to 128 [ 206.700260][ T9024] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.716936][ T9024] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 206.876174][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 206.899953][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.911360][ T9] usb 6-1: Product: syz [ 206.918203][ T9] usb 6-1: Manufacturer: syz [ 206.932122][ T9] usb 6-1: SerialNumber: syz [ 206.944678][ T9] usb 6-1: config 0 descriptor?? [ 207.137635][ T5795] Bluetooth: hci4: command tx timeout [ 207.165337][ T9] usb 6-1: USB disconnect, device number 11 [ 207.380879][ T9028] loop6: detected capacity change from 0 to 40427 [ 207.393106][ T9028] F2FS-fs (loop6): Invalid log sectors per block(0) log sectorsize(9) [ 207.401338][ T9028] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 207.420718][ T9028] F2FS-fs (loop6): invalid crc value [ 207.428101][ T9033] loop0: detected capacity change from 0 to 32768 [ 207.444536][ T9033] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 207.466483][ T9033] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 207.494312][ T42] (kworker/u4:2,42,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 207.502137][ T9028] F2FS-fs (loop6): Start checkpoint disabled! [ 207.525376][ T9028] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 207.531910][ T1189] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 207.532814][ T9028] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 207.590227][ T9033] syz.0.1066 (9033) used greatest stack depth: 18224 bytes left [ 207.599896][ T42] kworker/u4:2: attempt to access beyond end of device [ 207.599896][ T42] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.615548][ T42] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 207.624682][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 207.724109][ T1189] usb 9-1: config 0 has no interfaces? [ 207.729644][ T1189] usb 9-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.20 [ 207.760599][ T1189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.783548][ T1189] usb 9-1: config 0 descriptor?? [ 207.952741][ T9048] loop5: detected capacity change from 0 to 2048 [ 208.000332][ T9050] loop0: detected capacity change from 0 to 1024 [ 208.010504][ T9053] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.155202][ T9057] loop5: detected capacity change from 0 to 1024 [ 208.195101][ T23] kernel write not supported for file /input/mouse0 (pid: 23 comm: kworker/1:0) [ 208.287023][ T11] hfsplus: b-tree write err: -5, ino 8 [ 208.501406][ T9072] loop6: detected capacity change from 0 to 128 [ 208.515030][ T9072] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.638522][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 208.887048][ T9083] loop6: detected capacity change from 0 to 8192 [ 208.981687][ T9076] loop5: detected capacity change from 0 to 32768 [ 209.005643][ T9076] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 209.044071][ T9076] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 209.179877][ T6911] ocfs2: Unmounting device (7,5) on (node local) [ 209.240109][ T9097] pimreg: entered allmulticast mode [ 209.262248][ T9097] pimreg: left allmulticast mode [ 209.693936][ T9120] loop5: detected capacity change from 0 to 128 [ 209.700937][ T9120] EXT4-fs: Ignoring removed nobh option [ 210.299821][ T1189] usb 9-1: USB disconnect, device number 3 [ 210.500120][ T9137] loop6: detected capacity change from 0 to 1024 [ 210.608650][ T28] audit: type=1800 audit(222.573:93): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1112" name="file1" dev="loop6" ino=3 res=0 errno=0 [ 210.723440][ T1125] hfsplus: bad catalog file entry [ 210.738616][ T1125] hfsplus: b-tree write err: -5, ino 3 [ 211.029870][ T9139] loop5: detected capacity change from 0 to 32768 [ 211.041883][ T9] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 211.233095][ T9] usb 9-1: config 0 has an invalid interface number: 227 but max is 0 [ 211.250753][ T9] usb 9-1: config 0 has no interface number 0 [ 211.257054][ T9] usb 9-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 211.278657][ T9] usb 9-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 211.300141][ T9] usb 9-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.320492][ T9] usb 9-1: config 0 interface 227 has no altsetting 0 [ 211.338163][ T9162] loop0: detected capacity change from 0 to 1024 [ 211.366173][ T9] usb 9-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 211.376646][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.385584][ T9] usb 9-1: Product: syz [ 211.389937][ T9] usb 9-1: Manufacturer: syz [ 211.395466][ T9162] EXT4-fs: Ignoring removed orlov option [ 211.402351][ T9] usb 9-1: SerialNumber: syz [ 211.409696][ T9] usb 9-1: config 0 descriptor?? [ 211.416060][ T9162] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 211.426654][ T9149] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 211.437032][ T9] usbtouchscreen: probe of 9-1:0.227 failed with error -90 [ 211.458838][ T9162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.667220][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.684637][ T5885] usb 9-1: USB disconnect, device number 4 [ 211.731503][ T9173] loop5: detected capacity change from 0 to 4096 [ 212.031901][ T6791] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 212.221908][ T6791] usb 1-1: Using ep0 maxpacket: 8 [ 212.231244][ T6791] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.243037][ T6791] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.253618][ T6791] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.263946][ T6791] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.277247][ T6791] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.299443][ T6791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.535549][ T6791] usb 1-1: GET_CAPABILITIES returned 0 [ 212.545672][ T6791] usbtmc 1-1:16.0: can't read capabilities [ 212.757418][ T23] usb 1-1: USB disconnect, device number 17 [ 212.904158][ T6791] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 213.101942][ T6791] usb 6-1: Using ep0 maxpacket: 32 [ 213.110245][ T6791] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.125720][ T6791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.144329][ T6791] usb 6-1: config 0 descriptor?? [ 213.370040][ T6791] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 213.387980][ T6791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 213.413950][ T6791] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 213.421231][ T6791] usb 6-1: media controller created [ 213.451266][ T9215] loop0: detected capacity change from 0 to 4096 [ 213.476499][ T6791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 213.584777][ T6791] az6027: usb out operation failed. (-71) [ 213.597459][ T6791] az6027: usb out operation failed. (-71) [ 213.604495][ T6791] stb0899_attach: Driver disabled by Kconfig [ 213.610542][ T6791] az6027: no front-end attached [ 213.610542][ T6791] [ 213.621476][ T6791] az6027: usb out operation failed. (-71) [ 213.652103][ T6791] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 213.660884][ T6791] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 213.696487][ T9211] loop6: detected capacity change from 0 to 32768 [ 213.697307][ T6791] dvb-usb: schedule remote query interval to 400 msecs. [ 213.717994][ T6791] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 213.719337][ T9211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1143 (9211) [ 213.731682][ T6791] usb 6-1: USB disconnect, device number 12 [ 213.755186][ T9211] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.770415][ T9211] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 213.777407][ T6791] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 213.782988][ T9211] BTRFS info (device loop6): using free space tree [ 213.891648][ T9211] BTRFS info (device loop6): enabling ssd optimizations [ 213.903320][ T9211] BTRFS info (device loop6): auto enabling async discard [ 213.973641][ T7325] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.000287][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 214.215930][ T23] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 214.232042][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.253464][ T23] usb 1-1: config 0 descriptor?? [ 214.308770][ T9246] loop6: detected capacity change from 0 to 256 [ 214.330767][ T9246] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.361862][ T9246] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 214.406691][ T9246] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 214.458902][ T9248] sp0: Synchronizing with TNC [ 214.473871][ T9247] [U] `` [ 214.830801][ T9261] loop8: detected capacity change from 0 to 512 [ 214.860441][ T9261] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1159: invalid block [ 214.879107][ T9261] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1159: invalid indirect mapped block 10 (level 1) [ 214.879370][ T23] usb 1-1: Cannot set autoneg [ 214.908115][ T9261] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1159: invalid indirect mapped block 8 (level 1) [ 214.932430][ T23] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 214.946144][ T9261] EXT4-fs (loop8): 1 truncate cleaned up [ 214.949611][ T23] usb 1-1: USB disconnect, device number 18 [ 214.969166][ T9261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.104710][ T8076] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.170696][ T9254] loop6: detected capacity change from 0 to 32768 [ 215.181536][ T9254] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1155 (9254) [ 215.203001][ T9254] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.223935][ T9254] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 215.241491][ T9254] BTRFS info (device loop6): metadata ratio 2 [ 215.247866][ T9254] BTRFS info (device loop6): allowing degraded mounts [ 215.257990][ T9254] BTRFS info (device loop6): force zlib compression, level 3 [ 215.267009][ T9254] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 215.279014][ T9254] BTRFS info (device loop6): use zstd compression, level 3 [ 215.291449][ T9254] BTRFS info (device loop6): force clearing of disk cache [ 215.300919][ T9254] BTRFS info (device loop6): max_inline at 0 [ 215.311468][ T9254] BTRFS info (device loop6): using free space tree [ 215.368285][ T9265] loop5: detected capacity change from 0 to 32768 [ 215.377945][ T9265] XFS: noikeep mount option is deprecated. [ 215.409108][ T9254] BTRFS info (device loop6): enabling ssd optimizations [ 215.421040][ T9254] BTRFS info (device loop6): rebuilding free space tree [ 215.560098][ T28] audit: type=1800 audit(227.523:94): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1155" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 215.578371][ T9267] loop8: detected capacity change from 0 to 32768 [ 215.622923][ T9267] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.764612][ T9267] XFS (loop8): Ending clean mount [ 215.787545][ T9267] XFS (loop8): Quotacheck needed: Please wait. [ 215.852446][ T9267] XFS (loop8): Quotacheck: Done. [ 215.915427][ T9298] loop5: detected capacity change from 0 to 1024 [ 215.923002][ T9298] EXT4-fs: Ignoring removed bh option [ 215.927182][ T7325] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.956296][ T8076] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.308357][ T9310] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 216.314411][ T9310] syzkaller1: ignored: set checksum enabled [ 216.695309][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1176'. [ 216.753763][ T9312] loop0: detected capacity change from 0 to 32768 [ 216.782150][ T9312] (syz.0.1172,9312,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.814639][ T9312] (syz.0.1172,9312,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 216.861121][ T9312] JBD2: Ignoring recovery information on journal [ 216.894763][ T9327] kernel profiling enabled (shift: 9) [ 216.931561][ T9312] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 217.331261][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 218.040662][ T9345] loop0: detected capacity change from 0 to 32768 [ 218.057219][ T9345] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 218.071733][ T9345] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 218.084056][ T1125] (kworker/u4:8,1125,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 218.138584][ T9345] (syz.0.1181,9345,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 218.148972][ T9345] (syz.0.1181,9345,0):ocfs2_orphan_del:2382 ERROR: status = -117 [ 218.156969][ T9345] (syz.0.1181,9345,0):ocfs2_orphan_del:2404 ERROR: status = -117 [ 218.164846][ T9345] (syz.0.1181,9345,0):ocfs2_remove_inode:676 ERROR: status = -117 [ 218.173231][ T9345] (syz.0.1181,9345,0):ocfs2_wipe_inode:821 ERROR: status = -117 [ 218.183366][ T9345] (syz.0.1181,9345,1):ocfs2_delete_inode:1082 ERROR: status = -117 [ 218.257255][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 218.568974][ T9350] loop5: detected capacity change from 0 to 32768 [ 219.175134][ T9360] loop8: detected capacity change from 0 to 32768 [ 219.532342][ T5797] Bluetooth: hci0: command 0x1003 tx timeout [ 219.539938][ T5795] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.682271][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 219.891848][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 219.903925][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.917953][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 219.941957][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.957486][ T9] usb 1-1: Product: syz [ 219.962697][ T9] usb 1-1: Manufacturer: syz [ 219.967399][ T9] usb 1-1: SerialNumber: syz [ 219.980009][ T9] usb 1-1: config 0 descriptor?? [ 220.408993][ T9] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 220.652246][ T9391] loop8: detected capacity change from 0 to 32768 [ 220.669601][ T9391] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 220.692567][ T11] (kworker/u4:0,11,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 220.722977][ T28] audit: type=1800 audit(233.696:95): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1200" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 220.757954][ T9391] (syz.8.1200,9391,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 220.767871][ T9391] (syz.8.1200,9391,1):ocfs2_orphan_del:2382 ERROR: status = -117 [ 220.775733][ T9391] (syz.8.1200,9391,1):ocfs2_orphan_del:2404 ERROR: status = -117 [ 220.783711][ T9391] (syz.8.1200,9391,1):ocfs2_del_inode_from_orphan:2737 ERROR: status = -117 [ 220.792773][ T9391] (syz.8.1200,9391,1):ocfs2_dio_end_io_write:2336 ERROR: status = -117 [ 220.812733][ T9391] (syz.8.1200,9391,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 220.822928][ T9] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 220.824279][ T9391] (syz.8.1200,9391,1):ocfs2_orphan_del:2382 ERROR: status = -117 [ 220.839459][ T9] usb 1-1: USB disconnect, device number 19 [ 220.861910][ T9391] (syz.8.1200,9391,0):ocfs2_orphan_del:2404 ERROR: status = -117 [ 220.869796][ T9391] (syz.8.1200,9391,0):ocfs2_del_inode_from_orphan:2737 ERROR: status = -117 [ 220.878835][ T9391] (syz.8.1200,9391,0):ocfs2_add_inode_to_orphan:2653 ERROR: status = -117 [ 220.888419][ T9391] (syz.8.1200,9391,0):ocfs2_dio_wr_get_block:2213 ERROR: status = -117 [ 220.896872][ T9391] (syz.8.1200,9391,0):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 220.923988][ T9396] loop6: detected capacity change from 0 to 1024 [ 221.008696][ T9398] loop5: detected capacity change from 0 to 2048 [ 221.058930][ T8076] (syz-executor,8076,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 221.071465][ T8076] (syz-executor,8076,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 221.086755][ T8076] ocfs2: Unmounting device (7,8) on (node local) [ 221.555941][ T9423] netlink: 'syz.5.1215': attribute type 9 has an invalid length. [ 221.582044][ T9423] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.1215'. [ 221.697354][ T9424] loop0: detected capacity change from 0 to 8192 [ 221.780525][ T9433] raw_sendmsg: syz.5.1219 forgot to set AF_INET. Fix it! [ 221.795090][ T9434] loop6: detected capacity change from 0 to 64 [ 221.914036][ T9439] Bluetooth: MGMT ver 1.22 [ 222.195521][ T9451] loop8: detected capacity change from 0 to 256 [ 222.239662][ T9451] FAT-fs (loop8): Directory bread(block 64) failed [ 222.256949][ T9451] FAT-fs (loop8): Directory bread(block 65) failed [ 222.275288][ T9451] FAT-fs (loop8): Directory bread(block 66) failed [ 222.284602][ T9451] FAT-fs (loop8): Directory bread(block 67) failed [ 222.291302][ T9451] FAT-fs (loop8): Directory bread(block 68) failed [ 222.300259][ T9451] FAT-fs (loop8): Directory bread(block 69) failed [ 222.309261][ T9451] FAT-fs (loop8): Directory bread(block 70) failed [ 222.318343][ T9451] FAT-fs (loop8): Directory bread(block 71) failed [ 222.328161][ T9451] FAT-fs (loop8): Directory bread(block 72) failed [ 222.338266][ T9451] FAT-fs (loop8): Directory bread(block 73) failed [ 222.754753][ T28] audit: type=1326 audit(235.726:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.0.1235" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ccd58ebe9 code=0x0 [ 222.775717][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.037495][ T9477] loop6: detected capacity change from 0 to 128 [ 223.088325][ T9477] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 223.097854][ T9477] FAT-fs (loop6): Filesystem has been set read-only [ 223.109698][ T9477] FAT-fs (loop6): error, clusters badly computed (3 != 1) [ 223.124465][ T9477] FAT-fs (loop6): error, clusters badly computed (4 != 2) [ 223.150900][ T9479] loop8: detected capacity change from 0 to 1024 [ 223.159010][ T9479] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.165859][ T9479] EXT4-fs: inline encryption not supported [ 223.186620][ T9479] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 223.199520][ T9479] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802e018, mo2=0000] [ 223.223069][ T9479] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1241: bad orphan inode 11 [ 223.242119][ T9479] ext4_test_bit(bit=10, block=4) = 1 [ 223.251057][ T9479] is_bad_inode(inode)=0 [ 223.263625][ T9479] NEXT_ORPHAN(inode)=3254779904 [ 223.271960][ T9479] max_ino=32 [ 223.275218][ T9479] i_nlink=0 [ 223.315841][ T9479] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 2: comm syz.8.1241: lblock 2 mapped to illegal pblock 2 (length 1) [ 223.337379][ T9479] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 223.345835][ T9479] EXT4-fs error (device loop8): ext4_map_blocks:608: inode #3: block 48: comm syz.8.1241: lblock 0 mapped to illegal pblock 48 (length 1) [ 223.372081][ T9479] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 223.383156][ T9479] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1241: Failed to acquire dquot type 0 [ 223.412806][ T9479] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 223.454568][ T9479] EXT4-fs error (device loop8): ext4_evict_inode:252: inode #11: comm syz.8.1241: mark_inode_dirty error [ 223.468526][ T9485] loop6: detected capacity change from 0 to 4096 [ 223.472303][ T9479] EXT4-fs warning (device loop8): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 223.503167][ T9479] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.617798][ T8076] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.657198][ T8076] EXT4-fs error (device loop8): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 223.663736][ T9487] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1245'. [ 223.690843][ T9487] openvswitch: netlink: Flow key attribute not present in set flow. [ 223.701587][ T8076] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 223.739108][ T8076] EXT4-fs error (device loop8): ext4_quota_off:7222: inode #3: comm syz-executor: mark_inode_dirty error [ 224.377070][ T9501] loop6: detected capacity change from 0 to 128 [ 224.819849][ T9492] loop0: detected capacity change from 0 to 65536 [ 224.831524][ T9492] XFS: ikeep mount option is deprecated. [ 224.900428][ T9492] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 224.967240][ T9492] XFS (loop0): Ending clean mount [ 225.212741][ T5784] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 225.338966][ T9522] loop6: detected capacity change from 0 to 64 [ 225.390037][ T9522] hfs: unable to locate alternate MDB [ 225.406666][ T9522] hfs: continuing without an alternate MDB [ 225.786138][ T9533] loop0: detected capacity change from 0 to 8 [ 226.119578][ T28] audit: type=1326 audit(239.086:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.164974][ T28] audit: type=1326 audit(239.116:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.210811][ T9526] loop5: detected capacity change from 0 to 40427 [ 226.227988][ T28] audit: type=1326 audit(239.116:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.268189][ T28] audit: type=1326 audit(239.116:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.322144][ T28] audit: type=1326 audit(239.116:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.376326][ T28] audit: type=1326 audit(239.116:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.422930][ T28] audit: type=1326 audit(239.116:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.472048][ T28] audit: type=1326 audit(239.116:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.532412][ T28] audit: type=1326 audit(239.116:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6ccd58ebe9 code=0x7ffc0000 [ 226.591870][ T28] audit: type=1326 audit(239.116:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 226.837830][ T9535] loop6: detected capacity change from 0 to 40427 [ 226.866968][ T9535] F2FS-fs (loop6): heap/no_heap options were deprecated [ 226.874123][ T9535] F2FS-fs (loop6): build fault injection attr: rate: 19, type: 0x7ffff [ 226.896721][ T9535] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x77e8c [ 226.930778][ T9535] F2FS-fs (loop6): invalid crc value [ 226.949277][ T9535] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920 [ 227.016390][ T9535] F2FS-fs (loop6): Found nat_bits in checkpoint [ 227.080452][ T9535] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 227.115682][ T9535] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 227.185039][ T9567] loop5: detected capacity change from 0 to 512 [ 227.198247][ T9535] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 227.261581][ T9535] syz.6.1261: attempt to access beyond end of device [ 227.261581][ T9535] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 227.301322][ T9535] F2FS-fs (loop6): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x4ef/0x1020 [ 227.491225][ T7325] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 227.512707][ T7325] F2FS-fs (loop6): invalid blkaddr: 1024, type: 10, run fsck to fix. [ 227.537227][ T9562] loop0: detected capacity change from 0 to 32768 [ 227.546628][ T7325] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 227.563997][ T7325] F2FS-fs (loop6): invalid blkaddr: 512, type: 10, run fsck to fix. [ 227.584590][ T9562] find_entry called with index = 0 [ 227.589848][ T9573] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1278'. [ 227.604613][ T9562] read_mapping_page failed! [ 227.609246][ T9562] ERROR: (device loop0): txCommit: [ 227.609246][ T9562] [ 227.620980][ T7325] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 227.648584][ T9562] ERROR: (device loop0): remounting filesystem as read-only [ 227.655959][ T7325] F2FS-fs (loop6): invalid blkaddr: 1025, type: 10, run fsck to fix. [ 228.709083][ T9602] macvlan0: entered promiscuous mode [ 228.710355][ T9594] loop0: detected capacity change from 0 to 32768 [ 228.728050][ T9594] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1285 (9594) [ 228.753474][ T9594] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.762548][ T9602] netlink: 'syz.6.1290': attribute type 1 has an invalid length. [ 228.775047][ T9594] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 228.785290][ T9594] BTRFS info (device loop0): disabling tree log [ 228.788406][ T9602] netlink: 'syz.6.1290': attribute type 2 has an invalid length. [ 228.791642][ T9594] BTRFS info (device loop0): using free space tree [ 228.917375][ T9594] BTRFS info (device loop0): auto enabling async discard [ 228.934138][ T9594] BTRFS info (device loop0): checking UUID tree [ 229.001609][ T5784] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 229.128195][ T9626] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 229.203955][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 229.438271][ T23] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 229.448304][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.461490][ T23] usb 7-1: config 0 descriptor?? [ 229.566112][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1297'. [ 229.638460][ T9623] loop8: detected capacity change from 0 to 40427 [ 229.651285][ T9623] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 229.666798][ T9623] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 229.677198][ T9623] F2FS-fs (loop8): invalid crc value [ 229.707146][ T9623] F2FS-fs (loop8): Found nat_bits in checkpoint [ 229.785946][ T9645] loop0: detected capacity change from 0 to 512 [ 229.795050][ T9645] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 229.808113][ T9645] EXT4-fs (loop0): orphan cleanup on readonly fs [ 229.815423][ T9645] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1301: iget: bad i_size value: 360287970189639680 [ 229.815547][ T9623] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 229.840504][ T9645] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1301: couldn't read orphan inode 15 (err -117) [ 229.855717][ T9645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.861984][ T9623] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 229.895602][ T9645] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #2: block 3: comm syz.0.1301: lblock 0 mapped to illegal pblock 3 (length 1) [ 229.947517][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.993810][ T8076] syz-executor: attempt to access beyond end of device [ 229.993810][ T8076] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 230.021904][ T8076] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 230.313835][ T23] usb 7-1: Cannot set autoneg [ 230.322235][ T23] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 230.350521][ T23] usb 7-1: USB disconnect, device number 10 [ 230.373393][ T9655] loop0: detected capacity change from 0 to 1024 [ 230.467255][ T3487] hfsplus: b-tree write err: -5, ino 4 [ 230.586701][ T9663] netem: incorrect ge model size [ 230.593072][ T9663] netem: change failed [ 230.746113][ T9671] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1311'. [ 230.873006][ T9677] loop0: detected capacity change from 0 to 256 [ 230.886711][ T9677] exfat: Deprecated parameter 'namecase' [ 230.893336][ T9677] exfat: Deprecated parameter 'utf8' [ 230.914823][ T9677] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 231.232110][ T1189] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 231.430046][ T1189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.454151][ T1189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.467661][ T1189] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 231.491853][ T1189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.513718][ T1189] usb 7-1: config 0 descriptor?? [ 231.557811][ T9708] loop0: detected capacity change from 0 to 4096 [ 231.562071][ T6791] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 231.574707][ T9708] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 231.752949][ T6791] usb 6-1: Using ep0 maxpacket: 8 [ 231.769944][ T9706] loop8: detected capacity change from 0 to 32768 [ 231.778318][ T6791] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 231.786666][ T6791] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.799442][ T9706] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1326 (9706) [ 231.811728][ T6791] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.821540][ T6791] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.832234][ T6791] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.845266][ T6791] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.847508][ T9706] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 231.871833][ T6791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.881987][ T9706] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 231.892197][ T9706] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 231.902181][ T9706] BTRFS info (device loop8): use zstd compression, level 3 [ 231.909454][ T9706] BTRFS info (device loop8): using free space tree [ 231.929568][ T1189] pyra 0003:1E7D:2CF6.000E: item fetching failed at offset 0/7 [ 231.938197][ T1189] pyra 0003:1E7D:2CF6.000E: parse failed [ 231.944042][ T1189] pyra: probe of 0003:1E7D:2CF6.000E failed with error -22 [ 231.966935][ T9706] BTRFS info (device loop8): enabling ssd optimizations [ 231.974597][ T9706] BTRFS info (device loop8): auto enabling async discard [ 232.021961][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 232.040857][ T8076] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 232.113110][ T6791] usb 6-1: GET_CAPABILITIES returned 0 [ 232.118641][ T6791] usbtmc 6-1:16.0: can't read capabilities [ 232.151799][ T1189] usb 7-1: USB disconnect, device number 11 [ 232.216687][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.257922][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.283262][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.302025][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.310050][ T9] usb 1-1: SerialNumber: syz [ 232.321204][ T5885] usb 6-1: USB disconnect, device number 13 [ 232.532336][ T9729] syz.8.1330 (9729) used greatest stack depth: 17776 bytes left [ 232.549620][ T9] usb 1-1: 0:2 : does not exist [ 232.564115][ T9] usb 1-1: USB disconnect, device number 20 [ 232.994996][ T9736] loop8: detected capacity change from 0 to 32768 [ 233.039086][ T9736] ERROR: (device loop8): dbFindCtl: Corrupt dmapctl page [ 233.039086][ T9736] [ 233.051367][ T9736] ERROR: (device loop8): remounting filesystem as read-only [ 233.061280][ T9736] jfs_mkdir: dtInsert returned -EIO [ 233.068728][ T9736] ERROR: (device loop8): jfs_mkdir: [ 233.068728][ T9736] [ 233.129864][ T9736] ERROR: (device loop8): dbFindCtl: Corrupt dmapctl page [ 233.129864][ T9736] [ 233.182070][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 233.262261][ T9751] loop0: detected capacity change from 0 to 256 [ 233.392724][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 233.411294][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 233.416535][ T9760] loop0: detected capacity change from 0 to 1024 [ 233.421046][ T9] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 233.435838][ T9] usb 6-1: Product: syz [ 233.441838][ T9] usb 6-1: Manufacturer: syz [ 233.446601][ T9] usb 6-1: SerialNumber: syz [ 233.454597][ T9] usb 6-1: config 0 descriptor?? [ 233.456965][ T9760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.534354][ T9760] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 233.698808][ T9] usb 6-1: USB disconnect, device number 14 [ 233.777655][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.810910][ T9772] loop8: detected capacity change from 0 to 512 [ 233.834502][ T9772] EXT4-fs: Ignoring removed bh option [ 233.851961][ T9772] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 233.882854][ T9772] EXT4-fs (loop8): 1 truncate cleaned up [ 233.889740][ T9772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.945883][ T8076] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.062799][ T9780] loop7: detected capacity change from 0 to 7 [ 234.071597][ T9780] Dev loop7: unable to read RDB block 7 [ 234.091906][ T9780] loop7: unable to read partition table [ 234.097824][ T9780] loop7: partition table beyond EOD, truncated [ 234.108700][ T9780] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 234.147205][ T9780] Dev loop7: unable to read RDB block 7 [ 234.155777][ T9782] loop0: detected capacity change from 0 to 128 [ 234.162181][ T9780] loop7: unable to read partition table [ 234.168160][ T9780] loop7: partition table beyond EOD, truncated [ 234.183682][ T9770] loop6: detected capacity change from 0 to 32768 [ 234.204658][ T9782] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.218026][ T9770] (syz.6.1349,9770,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.233029][ T9770] (syz.6.1349,9770,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.304951][ T9770] JBD2: Ignoring recovery information on journal [ 234.354671][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.383265][ T9770] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 234.495220][ T9770] [ 234.497593][ T9770] ====================================================== [ 234.504618][ T9770] WARNING: possible circular locking dependency detected [ 234.511743][ T9770] 6.6.102-syzkaller #0 Not tainted [ 234.516862][ T9770] ------------------------------------------------------ [ 234.523887][ T9770] syz.6.1349/9770 is trying to acquire lock: [ 234.529871][ T9770] ffff8880563a94a0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 234.541478][ T9770] [ 234.541478][ T9770] but task is already holding lock: [ 234.548854][ T9770] ffff8880563a9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 234.559498][ T9770] [ 234.559498][ T9770] which lock already depends on the new lock. [ 234.559498][ T9770] [ 234.569938][ T9770] [ 234.569938][ T9770] the existing dependency chain (in reverse order) is: [ 234.578951][ T9770] [ 234.578951][ T9770] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 234.586779][ T9770] down_read+0x46/0x2e0 [ 234.591461][ T9770] ocfs2_calc_xattr_init+0x208/0xd80 [ 234.597263][ T9770] ocfs2_mknod+0xc57/0x20f0 [ 234.602280][ T9770] ocfs2_mkdir+0x196/0x410 [ 234.607223][ T9770] vfs_mkdir+0x296/0x440 [ 234.611997][ T9770] do_mkdirat+0x1d4/0x440 [ 234.616848][ T9770] __x64_sys_mkdir+0x6e/0x80 [ 234.621965][ T9770] do_syscall_64+0x55/0xb0 [ 234.626892][ T9770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.633328][ T9770] [ 234.633328][ T9770] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 234.643838][ T9770] down_write+0x97/0x1f0 [ 234.648687][ T9770] ocfs2_evict_inode+0x1313/0x3e60 [ 234.654316][ T9770] evict+0x486/0x870 [ 234.658723][ T9770] ocfs2_dentry_iput+0x248/0x370 [ 234.664177][ T9770] __dentry_kill+0x431/0x650 [ 234.669289][ T9770] dentry_kill+0xb8/0x290 [ 234.674132][ T9770] dput+0xfe/0x1e0 [ 234.678407][ T9770] do_renameat2+0x8b1/0xc70 [ 234.683416][ T9770] __x64_sys_rename+0x86/0x90 [ 234.688602][ T9770] do_syscall_64+0x55/0xb0 [ 234.693523][ T9770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.699931][ T9770] [ 234.699931][ T9770] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}: [ 234.710294][ T9770] down_write+0x97/0x1f0 [ 234.715062][ T9770] ocfs2_del_inode_from_orphan+0x135/0x740 [ 234.721384][ T9770] ocfs2_dio_end_io+0x47b/0x10f0 [ 234.726852][ T9770] dio_complete+0x254/0x710 [ 234.731877][ T9770] __blockdev_direct_IO+0x2dc8/0x3420 [ 234.737763][ T9770] ocfs2_direct_IO+0x240/0x2b0 [ 234.743038][ T9770] generic_file_direct_write+0x1d4/0x3e0 [ 234.749236][ T9770] __generic_file_write_iter+0x11b/0x230 [ 234.755402][ T9770] ocfs2_file_write_iter+0x1582/0x1d00 [ 234.761412][ T9770] do_iter_write+0x79a/0xc70 [ 234.766517][ T9770] iter_file_splice_write+0x66f/0xc50 [ 234.772413][ T9770] direct_splice_actor+0xe8/0x130 [ 234.777953][ T9770] splice_direct_to_actor+0x2f0/0x870 [ 234.783841][ T9770] do_splice_direct+0x1b7/0x2c0 [ 234.789204][ T9770] do_sendfile+0x5dc/0xf70 [ 234.794133][ T9770] __se_sys_sendfile64+0x13f/0x190 [ 234.799752][ T9770] do_syscall_64+0x55/0xb0 [ 234.804724][ T9770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.811141][ T9770] [ 234.811141][ T9770] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 234.819915][ T9770] __lock_acquire+0x2ddb/0x7c80 [ 234.825288][ T9770] lock_acquire+0x197/0x410 [ 234.830296][ T9770] down_write+0x97/0x1f0 [ 234.835069][ T9770] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 234.841559][ T9770] ocfs2_xattr_set+0x596/0x11f0 [ 234.846919][ T9770] ocfs2_set_acl+0x4e1/0x590 [ 234.852020][ T9770] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 234.857467][ T9770] vfs_set_acl+0x803/0xa60 [ 234.862398][ T9770] path_setxattr+0x39f/0x550 [ 234.867496][ T9770] __x64_sys_setxattr+0xbb/0xd0 [ 234.872855][ T9770] do_syscall_64+0x55/0xb0 [ 234.877779][ T9770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.884185][ T9770] [ 234.884185][ T9770] other info that might help us debug this: [ 234.884185][ T9770] [ 234.894486][ T9770] Chain exists of: [ 234.894486][ T9770] &ocfs2_file_ip_alloc_sem_key --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4 --> &oi->ip_xattr_sem [ 234.894486][ T9770] [ 234.911708][ T9770] Possible unsafe locking scenario: [ 234.911708][ T9770] [ 234.919144][ T9770] CPU0 CPU1 [ 234.924506][ T9770] ---- ---- [ 234.929865][ T9770] lock(&oi->ip_xattr_sem); [ 234.934443][ T9770] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4); [ 234.944239][ T9770] lock(&oi->ip_xattr_sem); [ 234.951336][ T9770] lock(&ocfs2_file_ip_alloc_sem_key); [ 234.956906][ T9770] [ 234.956906][ T9770] *** DEADLOCK *** [ 234.956906][ T9770] [ 234.965039][ T9770] 3 locks held by syz.6.1349/9770: [ 234.970134][ T9770] #0: ffff88805fdec418 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 234.979363][ T9770] #1: ffff8880563a9818 (&type->i_mutex_dir_key#18){++++}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 234.989635][ T9770] #2: ffff8880563a9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320 [ 235.000671][ T9770] [ 235.000671][ T9770] stack backtrace: [ 235.006552][ T9770] CPU: 1 PID: 9770 Comm: syz.6.1349 Not tainted 6.6.102-syzkaller #0 [ 235.015035][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.025101][ T9770] Call Trace: [ 235.028388][ T9770] [ 235.031325][ T9770] dump_stack_lvl+0x16c/0x230 [ 235.036085][ T9770] ? load_image+0x3b0/0x3b0 [ 235.040591][ T9770] ? show_regs_print_info+0x20/0x20 [ 235.045780][ T9770] ? print_circular_bug+0x12b/0x1a0 [ 235.050979][ T9770] check_noncircular+0x2bd/0x3c0 [ 235.055912][ T9770] ? arch_stack_walk+0x160/0x190 [ 235.060831][ T9770] ? look_up_lock_class+0x75/0x140 [ 235.065931][ T9770] ? print_deadlock_bug+0x5d0/0x5d0 [ 235.071115][ T9770] ? lockdep_lock+0xe0/0x220 [ 235.075692][ T9770] ? stack_trace_save+0x9c/0xe0 [ 235.080542][ T9770] ? _find_first_zero_bit+0xd3/0x100 [ 235.085822][ T9770] __lock_acquire+0x2ddb/0x7c80 [ 235.090672][ T9770] ? verify_lock_unused+0x140/0x140 [ 235.095864][ T9770] ? verify_lock_unused+0x140/0x140 [ 235.101055][ T9770] lock_acquire+0x197/0x410 [ 235.105559][ T9770] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 235.111706][ T9770] ? __might_sleep+0xe0/0xe0 [ 235.116300][ T9770] ? read_lock_is_recursive+0x20/0x20 [ 235.121665][ T9770] down_write+0x97/0x1f0 [ 235.125902][ T9770] ? ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 235.132045][ T9770] ? down_read_killable+0x340/0x340 [ 235.137243][ T9770] ? ocfs2_xattr_set+0x56f/0x11f0 [ 235.142256][ T9770] ? __lock_acquire+0x7c80/0x7c80 [ 235.147269][ T9770] ? ocfs2_xattr_block_find+0x154/0x4c0 [ 235.152807][ T9770] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 235.158779][ T9770] ? ocfs2_remove_refcount_tree+0xd50/0xd50 [ 235.164665][ T9770] ? up_write+0x1c3/0x410 [ 235.168980][ T9770] ocfs2_xattr_set+0x596/0x11f0 [ 235.173866][ T9770] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 235.179575][ T9770] ? mark_lock+0x94/0x320 [ 235.183896][ T9770] ? __lock_acquire+0x1334/0x7c80 [ 235.188926][ T9770] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 235.194641][ T9770] ? do_raw_spin_lock+0x121/0x2c0 [ 235.199665][ T9770] ? __rwlock_init+0x150/0x150 [ 235.204419][ T9770] ? do_raw_spin_unlock+0x121/0x230 [ 235.209608][ T9770] ? _raw_spin_unlock+0x28/0x40 [ 235.214551][ T9770] ? ocfs2_inode_lock_tracker+0x3ec/0x660 [ 235.220258][ T9770] ? __x64_sys_setxattr+0xbb/0xd0 [ 235.225272][ T9770] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 235.230812][ T9770] ocfs2_set_acl+0x4e1/0x590 [ 235.235407][ T9770] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 235.240356][ T9770] ? read_lock_is_recursive+0x20/0x20 [ 235.245724][ T9770] ? ocfs2_xattr_get+0x220/0x220 [ 235.250655][ T9770] ? evm_inode_set_acl+0xbb/0x410 [ 235.255673][ T9770] ? down_write+0x162/0x1f0 [ 235.260165][ T9770] ? evm_revalidate_status+0x4f/0xb0 [ 235.265528][ T9770] ? ima_inode_set_acl+0x81/0x180 [ 235.270564][ T9770] ? make_vfsuid+0x51/0xb0 [ 235.274971][ T9770] ? inode_owner_or_capable+0xf0/0x1c0 [ 235.280449][ T9770] vfs_set_acl+0x803/0xa60 [ 235.284898][ T9770] ? path_setxattr+0x314/0x550 [ 235.289655][ T9770] path_setxattr+0x39f/0x550 [ 235.294235][ T9770] ? simple_xattrs_free+0x150/0x150 [ 235.299429][ T9770] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 235.305400][ T9770] ? lock_chain_count+0x20/0x20 [ 235.310592][ T9770] __x64_sys_setxattr+0xbb/0xd0 [ 235.315435][ T9770] do_syscall_64+0x55/0xb0 [ 235.319838][ T9770] ? clear_bhb_loop+0x40/0x90 [ 235.324503][ T9770] ? clear_bhb_loop+0x40/0x90 [ 235.329173][ T9770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.335058][ T9770] RIP: 0033:0x7f409878ebe9 [ 235.339471][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.359067][ T9770] RSP: 002b:00007f409953a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 235.367554][ T9770] RAX: ffffffffffffffda RBX: 00007f40989b5fa0 RCX: 00007f409878ebe9 [ 235.375521][ T9770] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 235.383479][ T9770] RBP: 00007f4098811e19 R08: 0000000000000000 R09: 0000000000000000 [ 235.391442][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.399397][ T9770] R13: 00007f40989b6038 R14: 00007f40989b5fa0 R15: 00007fff97782658 [ 235.407363][ T9770] [ 235.442720][ T7325] ocfs2: Unmounting device (7,6) on (node local) [ 242.733175][ T5795] Bluetooth: hci2: command 0x0401 tx timeout