last executing test programs: 10m26.736807828s ago: executing program 32 (id=219): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) 7m46.386130287s ago: executing program 33 (id=1691): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x0, 0x4, 0x8000, 0x2, "a270fd6947d023d4ddc27b1e1936aed7244aca1a2bbf4d3d9cdad97801e5a147"}) 4m45.366788738s ago: executing program 34 (id=3121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f13df33c9f7b986", 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m42.480864766s ago: executing program 1 (id=3607): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000e80)=0x4000000001fb, 0x7) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000180)=ANY=[], 0x1, 0x5b7, &(0x7f0000000780)="$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") creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) 3m41.831080923s ago: executing program 1 (id=3612): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) 3m41.289714138s ago: executing program 1 (id=3618): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="2000000076000d0b0000000100000000030000000b0000200800"], 0x20}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/207, 0xcf}], 0x1) 3m40.931565873s ago: executing program 1 (id=3621): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000380)={[{@gqnoenforce}, {@dax}, {@pquota}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x2, 0xadea}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m37.631216522s ago: executing program 1 (id=3640): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) 3m36.502915666s ago: executing program 1 (id=3648): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x1, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x6, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) 3m35.828670453s ago: executing program 35 (id=3648): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x1, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x6, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) 2m53.925093185s ago: executing program 9 (id=3969): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) write(r0, &(0x7f0000000480)="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", 0x177) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x18, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) 2m53.374405932s ago: executing program 9 (id=3974): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pselect6(0x40, &(0x7f0000000040)={0x7, 0x3f00000000000000, 0x0, 0x300, 0x0, 0xd1d1}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) pwritev(r0, &(0x7f0000000c00)=[{&(0x7f0000000400)='\x00\x00', 0x2}], 0x1, 0x8003, 0xf) 2m52.088681646s ago: executing program 9 (id=3984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd250}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000020900020073797a30000000000900010073797a30000000002c0003800800014000000000080002400000000018000380140001006252696467655f736c6176655f30000014000000110001"], 0x80}}, 0x0) close(r0) 2m51.662166644s ago: executing program 9 (id=3989): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xd2f2, 0x2000, 0x9, 0x10000}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m50.981717998s ago: executing program 9 (id=3994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40090) 2m48.829186248s ago: executing program 9 (id=4007): io_setup(0x6, &(0x7f0000000080)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x9, &(0x7f0000000300)) io_setup(0x1ff, &(0x7f00000005c0)) io_setup(0xaa, &(0x7f00000006c0)) 2m48.044847196s ago: executing program 36 (id=4007): io_setup(0x6, &(0x7f0000000080)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x9, &(0x7f0000000300)) io_setup(0x1ff, &(0x7f00000005c0)) io_setup(0xaa, &(0x7f00000006c0)) 2m7.698116624s ago: executing program 6 (id=4295): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f00000005c0)="ff", 0x1}], 0x1}}, {{&(0x7f0000000a00)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000540)="d4", 0x1}], 0x1}}], 0x2, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x1}, 0x8) 2m7.313051455s ago: executing program 6 (id=4297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x1, 0x7, 0x0, {0x8, 0x80, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x0, 0x1}}, @void, @void, @void, [{0xdd, 0x6, "069835fd3962"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1d}]}]}, 0x94}}, 0x0) 2m6.829815023s ago: executing program 6 (id=4301): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f00008d8000/0x1000)=nil, 0x1000) 2m6.161834239s ago: executing program 6 (id=4306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x87901a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 2m5.540775262s ago: executing program 6 (id=4309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m2.288968707s ago: executing program 6 (id=4325): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x4, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x3000, 0xce, &(0x7f0000000680)=""/206}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) r1 = dup2(r0, r0) close_range(r1, 0xffffffffffffffff, 0x0) 2m1.41755276s ago: executing program 37 (id=4325): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x4, 0x0, [{0x0, 0x0, 0x0}, {0x4000, 0x62, &(0x7f0000000600)=""/98}, {0x3000, 0xce, &(0x7f0000000680)=""/206}, {0x30000, 0x36, &(0x7f0000000780)=""/54}]}) r1 = dup2(r0, r0) close_range(r1, 0xffffffffffffffff, 0x0) 1m18.38432779s ago: executing program 7 (id=4558): syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 1m13.691110335s ago: executing program 7 (id=4579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="111004002120000008000500", @ANYRES32=r2, @ANYBLOB="100012802800090068737200040002800a000200aaaaaaaaaaaa00000a000100aaaaaaaa"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 1m12.717214722s ago: executing program 7 (id=4586): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0xb, {{0xa, 0x0, 0x5, @mcast2, 0xffff}}, 0x1, 0x2, [{{0xa, 0x0, 0x5, @loopback}}, {{0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x16}}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 1m12.28853022s ago: executing program 7 (id=4587): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2000, 0x20) r1 = openat(r0, &(0x7f0000004280)='./file0\x00', 0x80000, 0x0) lseek(r1, 0x100, 0x4) 1m11.446212919s ago: executing program 7 (id=4595): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1m9.859319957s ago: executing program 7 (id=4601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x186}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, 0x14f}, 0x1c, 0x0}, 0x2606c0c0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='Jm', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="86", 0x1}], 0x1}}], 0x2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/197, 0xc5, 0x0, 0x0}, &(0x7f0000000100)=0x40) 1m8.85651875s ago: executing program 38 (id=4601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x186}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, 0x14f}, 0x1c, 0x0}, 0x2606c0c0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='Jm', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="86", 0x1}], 0x1}}], 0x2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/197, 0xc5, 0x0, 0x0}, &(0x7f0000000100)=0x40) 8.787299286s ago: executing program 0 (id=5017): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, 0x0, 0x0) 8.517692927s ago: executing program 0 (id=5020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x2b, &(0x7f0000000140)={0x5, 0xf, 0x2b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfd, "4129db191087aa2ebec0fa91171401bd"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x5, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x25, 0x6, 0xb, 0x8, 0x8}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 7.557429805s ago: executing program 3 (id=5026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 7.257121015s ago: executing program 3 (id=5027): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@empty}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x47ec, 0x0, 0x0, 0x0, 0x4}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 7.156971703s ago: executing program 3 (id=5028): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) fadvise64(r0, 0x5, 0x7, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6.266078623s ago: executing program 3 (id=5033): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5.531981718s ago: executing program 5 (id=5038): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="81d441f1f3c42704b6", 0x3dbe1488a38bb41b}], 0x1}, 0x4048081) 5.217070611s ago: executing program 0 (id=5039): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x1009}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000040), 0x1, 0x98c2, &(0x7f0000017640)="$eJzs3Qm8rWPBuP91nINjHkqkQqY0GjOkZB5KyhiZM2cMCWUeylBRQoVQJKUQKiKVhDLLPM/zPI//z3EOcbrI+/u/78t7ruv6dPaanr32ve/vc6/22s+21sqLL7/wYDDpYGQvnf6rsw68cY0VJlp6y5P3H3bFofssc8+oq8cZeTLZgqNOFxp1uvBgMBgy6n6GjLxu2AInnTzWYNhgxP/+1YTjjT/WhIPB+KMujrqfwTwjTyY4+qXtXhgtHuh0I77c3iP/vdhEI+5kxJnV1npus8FgMPwVnz9iXLP92zcqbeWFllj8X1Yvu4016uYh/7rtxdNhI/9NcORgMMHhg9feP0ZsO/YrPvd/sxFfc9IZBive+CZ87f9zrbzQEkuN5j9iLQ4ddd08I9b46GvQ2Oj7+T7Lb3zXqCkcMmrihr1ivbwZ+/3/UysvtPjSg9dex4NlFtvhzhdefNwctuhgMGyxwWDY4oPBsCXebI/67+lN3fmqqqrqTWmhhecc8Zx9rNF+Hhj+0s+19HPhOc/OfutgMGyZkc8Th6310nPBqqqqqqqqqnprttDCcy4Cz/8nfb3n/9OdtvtkPf+vqqqqqqqq+r/TUgstPOeI5/qjPf+f6vWe/z9493FHjfzb/wXnGflZz7+530RVVVVVVVVVvW6LL4XP/6d7vef/55003QU9/6+qqqqqqqr6v9Nycy6+yOAVr7M36upZXrqdnv+ffsf1q79Z462qqqqqqqqq/3rP33fqGf96zfdpBqO93vuLjfq9wJDjz7zoojdtoG+Nhvz770N2frPH9P+3Ec7Dj51uMNhsxTd7KPUm9H/mterrf6T83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/caxz/f/n1/08/cZ2X3gv+fTPNeeWp//rMF9/7f9gyS923y5s09DejMfX4/2CjIYPBKN9JNxoMBssstNwKswwGg1OvnHOmGQcv3zbviNvmn3zoi28Q/9J/JrLYZHzHO08/8nTEjjJ4+8v3cfyL97/UC0cMHTLaIF7RZKccddSGKz8x1+inM7/29zHWy+cmOvnul/5blrFG22j4a3zyS/f/0vcyuvOosc8yYuyzbr3pFrNutd32H95o07U3WG+D9Tabb465Z59rvvnmnnvW9TfaZL3ZRn58rTmb7sWPi7yROZtw9Dm7b6FXztno39trzdl0rz9nL97jAecO/+RLczbsvzhni7z+nE230agvNNmCYw/WenFuhgwGky069mDbERdmH3cwmGyxUdtONWLbj08+1mCw37++0RHnxn15Hxyy84htVl58+YVHPkwNBv86/Vev8X7244wa+YKjThcadbrwyC8z6eBfu+KwBU46eawRc/Gq6ZhwvPHHmnAwGH/UxVH3M5hv5Mn4p7203Wu8z/poA33xZVb2HvnvxSYaDAYTjDgzzdqn7zFi6v8X3qf9/+n////Na94hL++PQ0b9G7XNSK+FlljqX1/rxWkYMXdDR103zwiT/+a3tn9V/zbe6YYPpnud8b7O6+K8GO1fm5w6xa7/Xa+LQ+Od6nXG+zqv4/ua413p1oPvGnlX/23jHe2xbukXPy74Rh7rBq//WDeU7mC9898z+mPdp197iK96uHxpjsYdbaPXeqyb6pBpdx5x/wu+/mPd0iPGPvarHuvGGgwmW+Slx7oRD3yLjz3Yb8SFOUZcWGLswTEjLsz54oXxBmeOuPCRdTbfZN0RVyz57/vBLENe9QeasM4WH22dDXnF9z5ktL/vHDbydIIjX3oPp9d43Bwy6tv6j48VtN9O+jrjfZ33n8J5HnHduicMn+K/6/2naLzDX3+8r/V+2a853n0fP/3G/+bxvrzOxn7FdC35RtbZdK9eZyO+xaGvWBlv9OewdWH7keenevnettnx7pd/phh7tPv9Tz9TLPn662zSjUb7vL0OHwx5vblZ4o3Mzbv/7TFol1fOzRv9eWuWGUbePvR15mbc+daY+aW5Gee/ODdL/FfnZsHB0FfPzbDBYoPBYMZRjw+Lv5G5mer15+aN7jfjw/Yjz6/38lWL7nPs2S/Nzehz8Z/mZvH/6txM9/J+M+OLt00/1mCccQbbrr311lvOPvLjSxfnGPnx9dfgom9kLif975nLqYe91lz+a1ed8NYLjvwPa/DfHtNfuv9F/6tzOXh5Lgcbjb5Y6q1av/9zl7+7/N3l7y5/d/m7y1/caxz/f/n1/w+adP79R/1yY+wLpp1yzzd7vG9yY/Tx/1G+rzr+v+eU014w1uDl2173+OzIbd6Sx2fnGXkywdEvbTf68UEe6Gsfnz18vnl2/186Pvv/1Etr9Q38Hq7Hf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+41zj+P9tLfwdwx+zLPjzqQOjY9+y26rJv9njf5Mbo4/+jfF91/H/ZVXe7Z6zBy7e97vH/kds4jv/f/Mzi+76Vj/+/tFY7/l//ofzdof/orwFSY2ytf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xrHP9f8KW/AzjuuIO3f+nvAS6bbO9T3+zxvsmNqcf/e/9/bz3+u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MWNOv4/GO3tLT/XfoHB8f//272G/7L5Yxb/5fKnxhoMHP7L549Z1v8K+WMW/xXzxyz+K+WPWfw/nz9m8V85f8ziv0r+mMX/C/ljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/8X88cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/y/lj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y/nj1n8t8wfs/hvlT9m8d86f8zi/5X8MYv/NvljFv+v5o9Z/LfNH7P4b5c/ZvHfPn/M4v+1/DGL/9fzxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P4fyN/zOL/zfwxi/9e+WMW/73zxyz+++SPWfz3zR+z+H8rf8zi/+38MYv/d/LHLP775Y9Z/PfPH7P4fzd/zOL/vfwxi/8B+WMW/+/nj1n8D8wfs/gflD9m8T84f8zi/4P8MYv/D/PHLP4/yh+z+B+SP2bxPzR/zOJ/WP6Yxf/H+WMW/8Pzxyz+R+SPWfyPzB+z+P8kf8zi/9P8MYv/UfljFv+j88cs/j/LH7P4H5M/ZvH/ef6Yxf/Y/DGL/y/yxyz+v8wfs/gflz9m8f9V/pjF/9f5Yxb/4/PHLP4n5I9Z/E/MH7P4/yZ/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+aPWfx/lz9m8f99/pjF/9T8MYv/afljFv8/5I9Z/E/PH7P4n5E/ZvH/Y/6Yxf/M/DGL/5/yxyz+f84fs/j/JX/M4n9W/pjF/6/5Yxb/s/PHLP5/yx+z+J+TP2bxPzd/zOJ/Xv6Yxf/v+WMW/3/kj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfz/mT9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+X/4he2Gm0Kyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH5P4Dxnkj1n8h+SPWfzHyh+z+A/NH7P4D8sfs/iPnT9m8R8nf8ziP27+mMV/eP6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv+35Y9Z/N+eP2bxnyJ/zOL/jvwxi/+U+WMW/6nyxyz+78wfs/hPnT9m8X9X/pjF/935Yxb/9+SPWfynyR+z+E+bP2bxny5/zOL/3vwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxf1/+mMV/lvwxi//788cs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/h/NH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv/x/LHLP7z549Z/D+eP2bx/0T+mMV/gfwxi/8n88cs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+H8q/1c0ycvnLP6fzh+z+C+dP2bx/0z+mMV/mfwxi/9n88cs/p/LH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/p/PH7P4r5w/ZvFfZTAYjP1mjektnMX/C61/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvH/Yv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v+l/DGL/8b5Yxb/TfLHLP6b6vzHe0NbWfw30/m/sSz+m+ePWfy3yB+z+H85f8ziv2X+mMV/q/wxi//W+WMW/6/kj1n8t8kfs/h/NX/M4r9t/pjFf7v8MYv/9vljFv+v5Y9Z/L+eP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjF/xv5Yxb/b+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6Yxf9b+WMW/2/nj1n8v5M/ZvHfL3/M4r9//pjF/7v5Yxb/7+WPWfwPyB+z+H8/f8zif+BI/6nfrGG9VbP4H9T6xyz+B+ePWfx/kD9m8f9h/pjF/0f5Yxb/Q/LHLP6H5o9Z/A/LH7P4/zh/zOJ/eP6Yxf+I/DGL/5H5Yxb/n+SPWfx/mj9m8T8qf8zif3T+mMX/Z6/2v/1/fVxv0Sz+x7T+MYv/z/PHLP7H5o9Z/H+RP2bx/2X+mMX/uPwxi/+v8scs/r/OH7P4H58/ZvE/IX/M4n9i/pjF/zf5Yxb/k/LHLP4n549Z/E/JH7P4/zZ/zOL/u/wxi//v88cs/qfmj1n8T8sfs/j/IX/M4n96/pjF/4z8MYv/H/PHLP5n5o9Z/P+UP2bx/3P+mMX/L//Bf/j/9Ljeoln8z2r9Yxb/v+aPWfzPzh+z+P8tf8zif07+mMX/3Pwxi/95+WMS/xfL/9+T+A/5R/6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF/5/5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/qM1bNSpw//a/DHL+r8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGJ/4tn8//3LP5D8scs/mPlj1n8h+aPWfyH5Y9Z/MfOH7P4j5M/ZvEfN3/M4j88f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/9vyxyz+b88fs/hPkT9m8X9H/pjFf8r8MYv/VPljFv935o9Z/KfOH7P4vyt/zOL/7vwxi/978scs/tPkj1n8p80fs/hPlz9m8X9v/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/i/L3/M4j9L/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfxnzR+z+M+WPzbkrAPHHgwGY7z/7PljlvU/R/6YxX/O/DGL/1z5Yxb/j+aPWfznzh+z+M+TP2bxnzd/zOI/X/6Yxf9j+WMW//nzxyz+H88fs/h/In/M4r9A/pjF/5P5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8P5U/ZvH/dP6YxX/p/DGL/2fyxyz+y+SPWfw/mz9m8f9c/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8f98/pjFf+X8MYv/KvljFv8v5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/l/MH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8v5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8v5w/ZvHfMn/M4r9V/pjFf+v8MYv/V/LHLP7b5I9Z/L+aP2bx3zZ/zOK/Xf6YxX/7/DGL/9fyxyz+X88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOL/jfwxi/8388cs/nvlj1n8984fs/jvkz9m8d83f8zi/638MYv/t/PHLP7fyR+z+O+XP2bx3z9/zOL/3fwxi//38scs/gfkj1n8v58/ZvE/MH/M4n9Q/pjF/+D8MYv/D/LHLP4/zB+z+P8of8zif0j+mMX/0Pwxi/9h+WMW/x/nj1n8D88fs/gfkT9m8T8yf8zi/5P8MYv/T/PHLP5H5Y9Z/I/OH7P4/yx/zOJ/TP6Yxf/n+WMW/2PRf5z/vXG9RbP4/6L1j1n8f5k/ZvE/Ln/M4v+r/DGL/6/zxyz+x+ePWfxPyB+z+J+YP2bx/03+mMX/pPwxi//J+WMW/1Pyxyz+v80fs/j/Ln/M4v/7/DGL/6n5Yxb/0/LHLP5/yB+z+J+eP2bxPyN/zOL/x/wxi/+Z+WMW/z/lj1n8/5w/ZvH/S/6Yxf+s/DGL/1/zxyz+Z+ePWfz/lj9m8T8nf8zif27+mMX/vPwxi//f88cs/v/IH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/j/M3/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGJ/9BB/pjFf0j+mMV/rPwxi//Q/DGL/7D8MYv/2PljFv9x8scs/uPmj1n8h+ePWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvF/W/6Yxf/t+WMW/ynyxyz+78gfs/hPmT9m8Z8qf8zi/878MYv/1PljFv935Y9Z/N+dP2bxf0/+mMV/mvwxi/+0+WMW/+nyxyz+780fs/hPn//LjfuK8xb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvF/X/6YxX+W/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+H319/3H/x8f1Fs3iP3frH7P4z5M/ZvGfN3/M4j9f/pjF/2P5Yxb/+fPHLP4fzx+z+H8if8ziv0D+mMX/k/ljFv8F88cs/gvlj1n8F84fs/gvkj82xvuP/eLZoYvmj43x/iMbulj+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfw/lT9m8f90/pjFf+n8MYv/Z/LHLP7L5I9Z/D+bP2bx/1z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/3z+mMV/5fwxgf8I9qGr5I8J/Ec09Av5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/F/PHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv8v5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8v549Z/LfMH7P4b5U/ZvHfOn/M4v+V/DGL/zb5Yxb/r+aPWfy3zR+z+G+XP2bx3z5/zOL/tfwxi//X88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+H8jf8zi/838MYv/XvljFv+988cs/vvkj1n8980fs/h/K3/M4v/t/DGL/3fyxyz+++WPWfz3zx+z+H83f8zi/738MYv/AfljFv/v549Z/A/MH7P4H5Q/ZvE/OH/M4v+D/DGL/w/zxyz+P8ofs/gfkj9m8T80f8zif1j+mMX/x/ljFv/D88cs/kfkj1n8j8wfs/j/JH/M4v/T/DGL/1H5Yxb/o/PHLP4/yx+z+B+TP2bx/3n+mMX/2Pwxi/8v8scs/r/MH7P4H5c/ZvH/Vf7YGO8//MWzQ3+dPzbG+49s6PH5Yxb/E/LHLP4n5o9Z/H+TP2bxPyl/zOJ/cv6Yxf+U/DGL/2/zxyz+v8sfs/j/Pn/M4n9q/pjF/7T8MYv/H/LHLP6n549Z/M/IH7P4/zF/zOJ/Zv6Yxf9P+WMW/z/nj1n8/5I/ZvE/K3/M4v/X/DGL/9n5Yxb/v+WPWfzPyR+z+J+bP2bxPy9/zOL/9/wxi/8/8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+/8wfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX9M4j9skD9m8R+SP2bxHyt/zOI/NH/M4j8sf8ziP3b+mMV/nPwxi/+4+WMW/+H5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/pPnj1n835Y/9pL/Mye+8GJjqv/b88cs63+K/DGL/zvyxyz+U+aPWfynyh+z+L8zf8ziP3X+mMX/XfljFv93549Z/N+TP2bxnyZ/zOI/bf6YxX+6/DGL/3vzxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6Yxf99+WMW/1nyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/h/NH/M4j93/pjFf578MYv/vPljFv/58scs/h/LH7P4z58/ZvH/eP6Yxf8T+WMW/wXyxyz+n8wfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOL/qfwxi/+nX8ffvF9Y/JeWO79WFv/P5I9Z/JfJH7P4fzZ/zOL/ufwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/+fwxi//K+WMW/1Xyxyz+X8gfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfy/mD9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+H8pf8ziv3H+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB8bctaBwwaDwRjv/+X8Mcv63zJ/zOK/Vf6YxX/r/DGL/1fyxyz+2+SPWfy/mj9m8d82f8ziv13+mMV/+/wxi//X8scs/l/PH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88de5T/RmOu/W/6YZf3vnj9m8d8jf8ziv2f+mMX/G/ljFv9v5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjF/1v5Yxb/b+ePWfy/kz9m8d8vf8ziv3/+mMX/u/ljFv/v5Y9Z/A/IH7P4fz9/zOJ/YP6Yxf+g/DGL/8H5Yxb/H+SPWfx/mD9m8f9R/pjF/5D8MYv/ofljFv/D8scs/j/OH7P4H54/ZvE/In/M4n9k/pjF/yf5Yxb/n+aPWfyPyh+z+B+dP2bx/1n+mMX/mPwxi//P88cs/sfmj1n8f5E/ZvH/Zf6Yxf+4/DGL/6/yxyz+v84fs/gfnz9m8T8hf8zif2L+mMX/N/ljFv+T8scs/ifnj1n8T8kfs/j/Nn/M4v+7/DGL/+/zxyz+p+aPWfxPyx+z+P8hf8zif3r+mMX/jPwxi/8f88cs/mfmj1n8/5Q/ZvH/c/6Yxf8v+WMW/7Pyxyz+f80fs/ifnT9m8f9b/pjF/5z8MYv/ufljFv/z8scs/n/PH7P4/yN/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4v/P/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyT+Yw/yxyz+Q/LHLP5j5Y9Z/Ifmj1n8h+WPWfzHzh+z+I+TP2bxHzd/zOI/PH/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi//b8scs/m/PH7P4T5E/ZvF/R/6YxX/K/DGL/1T5Yxb/d+aPWfynzh+z+L8rf8zi/+78MYv/e/LHLP7T5I9Z/KfNH7P4T5c/ZvF/b/6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4vy9/zOI/S/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/4/mj1n8584fs/jPkz9m8Z83f8ziP1/+mMX/Y/ljFv/588cs/h/PH7P4fyJ/zOK/QP6Yxf+T+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/D+VP2bx/3T+mMV/6fwxi/9n8scs/svkj1n8P5s/ZvH/XP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/fP6YxX/l/DGL/yr5Yxb/L+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP5fzB+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/L+cP2bx3zJ/zOK/Vf6YxX/r/DGL/1fyxyz+2+SPWfy/mj9m8d82f8ziv13+mMV/+/wxi//X8scs/l/PH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/jvkT9m8d8zf8zi/438MYv/N/PHLP575Y9Z/PfOH7P475M/ZvHfN3/M4v+t/DGL/7fzxyz+38kfs/jvlz9m8d8/f8zi/938MYv/9/LHLP4H5I9Z/L+fP2bxPzB/zOJ/UP6Yxf/g/DGL/w/yxyz+P8wfs/j/KH/M4n9I/pjF/9D8MYv/YfljFv8f5z9aO7/40eJ/eP6Yxf+I/DGL/5H5Yxb/n+SPWfx/mj9m8T8qf8zif3T+mMX/Z/ljFv9j8scs/j/PH7P4H5s/ZvH/Rf6Yxf+X+WMW/+Pyxyz+v8ofs/j/On/M4n98/pjF/4T8MYv/ifljFv/f5I9Z/E/KH7P4n5w/ZvE/JX/M4v/b/DGL/+/yxyz+v88fs/ifmj9m8T8tf8zi/4f8MYv/6fljFv8z8scs/n/MH7P4n5k/ZvH/U/6Yxf/P+WMW/7/kj1n8z8ofs/j/NX/M4n92/pjF/2/5Yxb/c/LHLP7n5o9Z/M/LH7P4/z1/zOL/j/wxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/z/zxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfk/iPM8gfs/gPyR+z+I+VP2bxH5o/ZvEflj9m8R87f8ziP07+mMV/3Pwxi//w/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/m/LH7P4vz1/zOI/Rf6Yxf8d+WMW/ynzxyz+U+WPWfzf+Qb8h/1PjustmsV/6tY/ZvF/V/6Yxf/d+WMW//fkj1n8p8kfs/hPmz9m8Z8uf8zi/978MYv/9PljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8X9f/pjFf5b8MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP4fzR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/8fyxyz+8+ePWfw/nj9m8f9E/pjFf4H8MYv/J/PHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8l8ofs/h/Kn/M4v/p/DGL/9L5Yxb/z+SPWfyXyR+z+H82f8zi/7n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8zi//n8MYv/yvljFv9V8scs/l/IH7P4r5o/Nob6DxnNepzV8sfGUP8Xe+X6Xz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP5fzB+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/L+cP2bx3zJ/zOK/Vf6YxX9ro//2/3kTi/9XjP5vIIv/NvljFv+v5o9Z/LfNH7P4b5c/ZvHfPn/M4v+1/DGL/9fzxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP575I9Z/PfMH7P4fyN/zOL/zfwxi/9e+WMW/73zxyz+++SPWfz3zR+z+H8rf8zi/+38MYv/d/LHLP775Y9Z/PfPH7P4fzd/zOL/vfwxi/8B+WMW/+/nj1n8D8wfs/gflD9m8T84f8zi/4P8MYv/D/PHLP4/yh+z+B+SP2bxPzR/zOJ/WP6Yxf/H+WMW/8Pzxyz+R+SPWfyPzB+z+P8kf8zi/9P8MYv/UfljFv+j88cs/j/LH7P4H5M/ZvH/ef6Yxf/Y/DGL/y/yxyz+v8wfs/gflz9m8f9V/pjF/9f5Yxb/4/PHLP4n5I9Z/E/MH7P4/yZ/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+aPWfx/5/Pf6Y1sZPH/vc//DWXxPzV/zOJ/Wv6Yxf8PTv8H/tMGFv/Tnf7/MYv/GfljFv8/5o9Z/M/MH7P4/yl/zOL/5/wxi/9f8scs/mflj1n8/5o/ZvE/O3/M4v+3/DGL/zku/7lvfYMbWvzPdfm/4Sz+5+WPWfz/nj9m8f9H/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/n/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+2Iv+g8EY7/9o/oPx4DrL+n8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGJ/7iD/DGL/5D8MYv/WPljFv+h+WMW/2H5Yxb/sfPHLP7j5I9Z/MfNH7P4D88fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+E+W/6iGv+qSxX/y/DGL/9vyxyz+b88fs/hPkT9m8X9H/pjFf8r8MYv/VPljFv935o9Z/KfOH7P4vyt/zOL/7vwxi/978scs/tPkj1n8p80fs/hPlz9m8X9v/pjFf/r8MYv/DPljFv8Z88fGRP/Bsy+82Cv9Z8ofGxP9af3PnD9m8X9f/pjFf5b8MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP4fzR+z+M+dP2bxnyd/zOI/b/6YxX++/DGL/8fyxyz+8+ePWfw/nj9m8f9E/pjFf4H8MYv/J/PHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8l8ofs/h/Kn/M4v/p/DGL/9L5Yxb/z+SPWfyXyR+z+H82f8zi/7n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8zi//n8MYv/yvljFv9V8scs/l/IH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n8v5g/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/h/KX/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/h/OX/M4r9l/pjFf6v8MYv/1vljFv+v5I9Z/LfJH7P4fzV/zOK/bf6YxX+7/DGL//b5Yxb/r+WPWfy/nj9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx3yx+z+O+eP2bx3wP92yMs/numjVn8v5E/ZvH/Zv6YxX+v/DGL/975Yxb/ffLHLP775o9Z/L+VP2bx/3b+mMX/O/ljFv/9jP7j/udNLP77G/3fQBb/7+aPWfy/lz9m8T8gf8zi//38MYv/gfljFv+D8scs/gfnj1n8f5A/ZvH/Yf6Yxf9H+WMW/0Pyxyz+h+aPWfwPyx+z+P84f8zif3j+mMX/iPwxi/+R+WMW/5/kj1n8f5o/ZvE/Kn/M4n90/pjF/2f5Yxb/Y/LHLP4/zx+z+B+bP2bx/0X+mMX/l/ljFv/j8scs/r/KH7P4/zp/zOJ/fP6Yxf+E/DGL/4n5Yxb/3+SPWfxPyh+z+J+cP2bxPyV/zOL/2/wxi//v8scs/r/PH7P4n5o/ZvE/LX/M4v+H/DGL/+n5Yxb/M/LHLP5/zB+z+J+ZP2bx/1P+mMX/z/ljFv+/5I9Z/M/KH7P4/zV/zOJ/dv6Yxf9v+WMW/3Pyxyz+5+aPWfzPyx+z+P89f8zi/4/8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi/8/88cs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH5P4Dx/kj1n8h+SPWfzHyh+z+A/NH7P4D8sfs/iPnT9m8R8nf8ziP27+mMV/eP6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/5PljFv+35Y9Z/N+eP2bxnyJ/zOL/jvwxi/+U+WMW/6nyxyz+78wfs/hPnT9m8X9X/pjF/935Yxb/9+SPWfynyR+z+E+bP2bxny5/zOL/3vwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxf1/+mMV/lvwxi//788cs/h/IH7P4fzB/zOL/oTfoP97/1Ljeoln8P9z6xyz+H8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+H80fs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//H8scs/vPnj1n8P54/ZvH/RP6YxX+B/DGL/yfzxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4fyp/zOL/6fwxi//S+WMW/8/kj1n8l8kfs/h/Nn/M4v+5/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4v/5/DGL/8r5Yxb/VfLHLP5fyB+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/L+YP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4fyl/zOK/sc9/3DeykcV/E5//G8riv2n+mMV/s/wxi//m+WMW/y3yxyz+X84fs/hvmT9m8d8qf8ziv3X+mMX/K/ljFv9t8scs/l/NH7P4b5s/ZvHfjvzbITT+28eNWfy/lj9m8f96/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/yx0fwHw97sAf3/7TX898wfs6z/b+SPWfy/mT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW/2/lj1n8v50/ZvH/Tv6YxX+//DGL//75Yxb/7+aPWfy/lz9m8T8gf8zi//38MYv/gfljFv+D8scs/gfnj1n8f5A/ZvH/Yf6Yxf9H+WMW/0Pyxyz+h+aPWfwPyx+z+P84f8zif3j+mMX/iPwxi/+R+WMW/5/kj1n8f5o/ZvE/Kn/M4n90/pjF/2f5Yxb/Y/LHLP4/t/iv8/B/aXOL/7EW//9iFv9f5I9Z/H+ZP2bxPy5/zOL/q/wxi/+v88cs/sfnj1n8T8gfs/ifmD9m8f9N/pjF/6T8MYv/yfljFv9T8scs/r/NH7P4/y5/zOL/+/wxi/+p+WMW/9Pyxyz+f8gfs/ifnj9m8T8jf8zi/8f8MYv/mfljFv8/5Y9Z/P+cP2bx/0v+mMX/rPwxi/9f88cs/mfnj1n8/5Y/ZvE/J3/M4n9u/pjF/7z8MYv/3/PHLP7/yB+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/zN/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxif94g/wxi/+Q/DGL/1j5Yxb/ofljFv9h+WMW/7Hzxyz+4+SPWfzHzR+z+A/PH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8zi/7b8MYv/2/PHLP5T5I9Z/N+RP2bxnzJ/zOI/Vf6Yxf+d+WMW/6nzxyz+78ofs/i/O3/M4v+e/DGL/zT5Yxb/afPHLP7T5Y9Z/N+bP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP7vyx+z+M+SP2bxf3/+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf+xF/2kHg8EY7j9X/phl/X80f8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+H8sfs/jPnz9m8f94/pjF/xP5Yxb/BfLHLP6fzB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4v+p/DGL/6fzxyz+S+ePWfw/kz9m8V8mf8zi/9n8MYv/5/LHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/5/PHLP4r549Z/FfJH7P4fyF/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvH/Yv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4v+l/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/l/DGL/5b5Yxb/rfLHLP5b549Z/L+SP2bx3yZ/zOL/1fwxi/+2+WMW/+3yxyz+2+ePWfy/lj9m8f96/pjFf4f8MYv/jvljFv+d8scs/jvnj1n8d8kfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/2/kj1n8v5k/ZvHfK39syFkHPj7q7Bjtv3f+mGX975M/ZvHfN3/M4v+t/DGL/7fzxyz+38kfs/jvlz9m8d8/f8zi/938MYv/9/LHLP4H5I9Z/L+fP2bxPzB/zOJ/UP6Yxf/g/DGL/w/yxyz+P8wfs/j/KH/M4n9I/pjF/9D8MYv/YfljFv8f549Z/A/PH7P4H5E/ZvE/Mn/M4v+T/DGL/0/zxyz+R+WPWfyPzh+z+P8sf8zif0z+mMX/5/ljFv9j88cs/r/IH7P4/zJ/zOJ/XP6Yxf9X+WMW/1/nj1n8j88fs/ifkD9m8T8xf8zi/5v8MYv/SfljFv+T88cs/qfkj1n8f5s/ZvH/Xf6Yxf/3+WMW/1Pzxyz+p+WPWfz/kD9m8T89f8zif0b+mMX/j/ljFv8z88cs/n/KH7P4/zl/zOL/l/wxi/9Z+WMW/7/mj1n8z84fs/j/LX/M4n9O/pjF/9z8MYv/efljFv+/549Z/P+RP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvH/Z/6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj42p/i+88MILr/R/On9sTPUfjLb+n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxif/4g/wxi/+Q/DGL/1j5Yxb/ofljFv9h+WMW/7Hzxyz+4+SPWfzHzR+z+A/PH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8zi/7b8MYv/2/PHLP5T5I9Z/N+RP2bxnzJ/zOI/Vf6Yxf+d+WMW/6nzxxz+y7xpw3mr5/AfjP/u1j9m8X9P/pjFf5r8MYv/tPljFv/p8scs/u/NH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv/35Y9Z/GfJH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/0fwxi//c+WMW/3nyxyz+8+aPWfznyx+z+H8sf8ziP3/+mMX/4/ljFv9P5I9Z/BfIH7P4fzJ/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/p/LHLP6fzh+z+C+dP2bx/0z+mMV/mfwxi/9n88cs/p/LH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/p/PH7P4r5w/ZvFfJX/M4v+F/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjF/4v5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/l/LHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/l/PHLP5b5o9Z/LfKH7P4b50/ZvH/Sv6YxX+b/DGL/1fzxyz+2+aPWfy3yx+z+G+fP2bx/1r+mMX/6/ljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfy/kT9m8f9m/pjFf6/8MYv/3vljFv998scs/vvmj1n8v5U/ZvH/dv6Yxf87+WMW//3yxyz+++ePWfy/mz9m8f9e/pjF/4D8MYv/9/PHLP4H5o9Z/A/KH7P4H5w/ZvH/Qf6Yxf+H+WMW/x/lj1n8D8kfs/gfmj9m8T8sf8zi/+P8MYv/4fljFv8j8scs/kfmj1n8f5I/ZvH/af6Yxf+o/DGL/9H5Yxb/n+WPWfyPyR+z+P88f8zif2z+mMX/F/ljFv9f5o9Z/I/LH7P4/yp/zOL/6/wxi//x+WMW/xPyxyz+J+aPWfx/kz9m8T8pf8zif3L+mMX/lPwxi/9v88cs/r/LH7P4/z5/zOJ/av6Yxf+0/DGL/x/yxyz+p+ePWfzPyB+z+P8xf8zif2b+mMX/T/ljFv8/549Z/P+SP2bxPyt/zOL/1/wxi//Z+WMW/7/lj1n8z8kfs/ifmz9m8T8vf8zi//f8MYv/P/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/v/MH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+Y/GAz996ss/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD8m8Z9gkD9m8R+SP2bxHyt/zOI/NH/M4j8sf8ziP3b+mMV/nPwxi/+4+WMW/+H5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/pPnj1n835Y/ZvF/e/6YxX+K/DGL/zvyxyz+U+aPWfynyh+z+L8zf8ziP3X+mMX/XfljFv93549Z/N+TP2bxnyZ/zOI/bf6YxX+6/DGL/3vzxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6Yxf99+WMW/1nyxyz+788fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/h/NH/M4j93/pjFf578MYv/vPljFv/58scs/h/LH7P4z58/ZvH/eP6Yxf8T+WMW/wXyxyz+n8wfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOL/qfwxi/+n88cs/kvnj1n8P5M/ZvFfJn/M4v/Z/DGL/+fyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/+fzxyz+K+ePWfxXyR+z+H8hf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bx/2L+mMV/Hbf/2K91g8V/Xbf/a2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5fyh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5fzh+z+G+ZP2bx3yp/zOK/df6Yxf8r+WMW/23yxyz+X80fs/hvmz9m8d8uf2zM9b/0hVf6b58/Nub6v3r9fy1/zOL/9fwxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP7fyB+z+H8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+38ofs/h/O3/M4v+d/DGL/375Yxb//fPHLP7fzR+z+H8vf8zif0D+mMX/+/ljFv8D88cs/gflj1n8D84fs/j/IH/M4v/D/DGL/4/yxyz+h+SPWfwPzR+z+B+WP2bx/3H+mMX/8Pwxi/8R+WMW/yPzxyz+P8kfs/j/NH/M4n9U/pjF/+j8MYv/z/LHLP7H5I9Z/H+eP2bxPzZ/zOL/i/wxi/8v88cs/sflj1n8f5U/ZvH/df6Yxf/4/DGL/wn5Yxb/E/PHLP6/yR+z+J+UP2bxPzl/zOJ/Sv6Yxf+3+WMW/9/lj1n8f58/ZvE/NX/M4n9a/thL/oPhg8GY7P+H/DHL+j89f8zif0b+mMX/j/ljFv8z88cs/n/KH7P4/zl/zOL/l/wxi/9Z+WMW/7/mj1n8z84fs/j/LX/M4n9O/pjF/9z8MYv/efljFv+/549Z/P+RP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvH/57/7tzuI/C8PHLP4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMj/QeDwc5jtv+t+WOW9X9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljEv8JB/ljFv8h+WNjsv8rvCccK39sTPZ/5fofmj9m8R+WP2bxH/s1/K+4cuia/1tDeytm8R+n9Y9Z/MfNH7P4D88fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+f9bO4v8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi//b8scs/m/PH7P4T5E/ZvF/R/6YxX/K/DGL/1T5Yxb/d+aPWfynzh+z+L8rf8zi/+78MYv/e/LHLP7T5I9Z/KfNH7P4T5c/ZvF/b/6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4vy9/zOI/S/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/4/mj1n8584fs/jPkz9m8Z83f8ziP1/+mMX/Y/ljFv/588cs/h/PH7P4fyJ/zOK/QP6Yxf+T+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/D+VP2bx/3T+mMV/6fwxi/9n8scs/svkj1n8P5s/ZvH/XP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/fP6YxX/l/DGL/yr5Yxb/L+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP5fzB+z+K+TP2bxX9fo/wa+YYv/ekb/N5DFf/38MYv/BvljFv8N88cs/hvlj1n8v5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8v5w/ZvHfMn/M4r9V/pjFf+v8MYv/V/LHLP7b5I9Z/L+aP2bx3zZ/zOK/Xf6YxX/7/DGL/9fyxyz+X88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOL/jfwxi/8388cs/nvlj1n8984fs/jvkz9m8d83f8zi/638MYv/t/PHLP7fyR+z+O+XP2bx3z9/zOL/3fwxi//38scs/gfkj1n8v58/ZvE/MH/M4n9Q/pjF/+D8MYv/D/LHLP4/zB+z+P8of8zif0j+mMX/0Pwxi/9h+WMW/x/nj1n8D88fs/gfkT9m8T8yf8zi/5P8MYv/T/PHLP5H5Y9Z/I/OH7P4/yx/zOJ/TP6Yxf/n+WMW/2Pzxyz+v8gfs/j/Mn/M4n9c/pjF/1f5Yxb/X+ePWfyPzx+z+J+QP2bxPzF/zOL/m/wxi/9J+WMW/5Pzxyz+p+SPWfx/mz9m8f9d/pjF//f5Yxb/U/PHLP6n5Y9Z/P+QP2bxPz1/zOJ/Rv6Yxf+P+WMW/zPzxyz+f8ofs/j/OX/M4v+X/DGL/1n5Yxb/v+aPWfzPzh+z+P8tf8zif07+mMX/3Pwxi/95+WMW/7/nj1n8/5E/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8f9n/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88de5X/YmOv/UP6YZf0/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHJP4TDfLHLP5D8scs/mPlj1n8h+aPWfyH5Y9Z/MfOH7P4j5M/ZvEfN3/M4j88f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/9vyxyz+b88fs/hPkT9m8X9H/pjFf8r8MYv/VPljFv935o9Z/KfOH7P4vyt/zOL/7vwxi/978scs/tPkj1n8p80fs/hPlz9m8X9v/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/i/L3/M4j9L/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/j+aPWfznzh+z+M+TP2bxnzd/zOI/X/6Yxf9j+WMW//nzxyz+H88fs/h/In/M4r9A/pjF/5P5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8P5U/ZvH/dP6YxX/p/DGL/2fyxyz+y+SPWfw/mz9m8f9c/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8f98/pjFf+X8MYv/KvljFv8v5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/l/MH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8v5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8v5w/ZvHfMn/M4r9V/pjFf+v8MYv/V/LHLP7b5I9Z/L+aP2bx3zZ/zOK/Xf6YxX97q//w17/Z4v81q/9/yOL/9fwxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP7fyB+z+H8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+38ofs/h/O3/M4v+d/DGL/375Yxb//fPHxlT/4aP5fzd/bEz1H4zm/738MYv/AfljFv/v549Z/A/MH7P4H5Q/ZvE/OH/M4v+D/DGL/w/zxyz+P8ofs/gfkj9m8T80f8zif1j+mMX/x/ljFv/D88cs/kfkj1n8j8wfs/j/JH/M4v/T/DGL/1H5Yxb/o/PHLP4/yx+z+B+TP2bx/3n+mMX/2Pwxi/8v8scs/r/MH7P4H5c/ZvH/Vf6Yxf/X+WMW/+Pzxyz+J+SPWfxPzB+z+P8mf8zif1L+mMX/5Pwxi/8p+WMW/9/mj1n8f5c/ZvH/ff6Yxf/U/DGL/2n5Yxb/Pyj9h//HLSz+pyv9/3MW/zPyxyz+f8wfs/ifmT9m8f9T/pjF/8/5Yxb/v+SPWfzPyh+z+P81f8zif3b+mMX/b/ljFv9z8scs/ufmj1n8z8sfs/j/PX/M4v+P/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/P/PHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/4vNt1oly3+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMR/4kH+mMV/SP6YxX+s/DGL/9D8MYv/sPwxi//Y+WMW/3Hyxyz+4+aPWfyH549Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8X9b/pjF/+35Yxb/KfLHLP7vyB+z+E+ZP2bxnyp/zOL/zvwxi//U+WMW/3flj1n8350/ZvF/T/6YxX+a/DGL/7T5Yxb/6fLHLP7vzR+z+E+fP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/9+WPWfxnebX/C0P/1wf21szi//7WP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bx/2j+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfw/lj9m8Z8/f8zi//GX/NsJXpXF/xPRYxb/BfLHLP6fzB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4v+p/DGL/6fzxyz+S+ePWfw/kz9m8V8mf8zi/9n8MYv/5/LHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/5/PHLP4r549Z/FfJH7P4fyF/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvH/Yv6YxX+d/DGL/7r5Yxb/9fLHLP7r548NOevAVSYZeXaM9t8gf8yy/jfMH7P4b5Q/ZvH/Uv6YxX/j/DGL/yb5Yxb/TfPHLP6b6f13wmst/pvr/TmL/xb5Yxb/L+ePWfy3zB+z+G+VP2bx3zp/zOL/lfwxi/82+WMW/6/mj1n8t80fs/hvlz9m8d8+f8zi/7X8MYv/1/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/bvljFv/d88cs/nvkj1n898wfs/h/I3/M4v/N/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4fyt/zOL/7fwxi/938scs/vvlj1n8988fs/h/N3/M4v+9/DGL/wH5Yxb/7+ePWfwPzB+z+B+UP2bxPzh/zOL/g/wxi/8P88cs/j/KH7P4H5I/ZvE/NH/M4n9Y/pjF/8f5Yxb/w/PHLP5H5I9Z/I/MH7P4/yR/zOL/0/wxi/9R+WMW/6Pzxyz+P8sfs/gfkz9m8f95/pjF/9j8MYv/L/LHLP6/zB+z+B+XP2bx/1X+mMX/1/ljFv/j88cs/ifkj1n8T8wfs/j/Jn/M4n9S/pjF/+T8MYv/KfljFv/f5o9Z/H+XP2bx/33+mMX/1Pwxi/9p+WMW/z/kj1n8T88fs/ifkT9m8f9j/pjF/8z8MYv/n/LHLP5/zh+z+P8lf8zif1b+mMX/r/ljFv+z88cs/n/LH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/f+SPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9J/IcMBjvnD0n8J7689Y9Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+T+E8yyB+z+A/JH7P4j5U/ZvEfmv//x87dx2td13ccv7g5gCjp1zZ1acOhMddmJDIatRAVxePNKRPNvEc9AgkiN5JgKm60UsemS90s2dTSMWerljrdXHcrm5Y1WzO3Vjlv1tKcc7DQnLHHBecQ5/TxPDw/9vtpfJ7PP+BcF3wukNfj7XX54PEwlKX/cP1DWfp36B/K0n+E/qEs/UfqH8rSf5T+oSz9t9M/lKX/aP1DWfpvr38oS/8d9A9l6T9G/1CW/q/SP5Sl/476h7L030n/UJb+Rf9Qlv476x/K0v/V+oey9P85/UNZ+v+8/qEs/XfRP5Sl/676h7L0303/UJb+v6B/KEv/1+gfytJ/d/1DWfrvoX8oS//X6h/K0v8X9Q9l6T9W/1CW/nvqH8rS/5f0D2XpP07/UJb+e+kfytJ/b/1DWfq/Tv9Qlv7j9Q9l6f/L+oey9N9H/1CW/r+ifyhL/9frH8rS/1f1D2Xp/2v6h7L031f/UJb+b9A/lKX/BP1DWfq/Uf9Qlv776R/K0n+i/qEs/ffXP5Sl/yT9Q1n6/7r+oSz9J+sfytL/TfqHsvT/Df1DWfpP0T+Upf+b9Q9l6f8W/UNZ+v+m/qEs/d+qfyhL/6n6h7L0P0D/UJb+0/QPZel/oP6hLP0P0j+Upf/B+oey9J+ufyhL/0P0D2Xpf6j+oSz9Z+gfytL/MP1DWfp36h/K0v9w/UNZ+h+hfyhL/yP1D2Xpf5T+oSz9u/QPZen/Nv1DWfq/Xf9Qlv5H6x/K0v8d+oey9D9G/1CW/jP1D2Xpf6z+oSz9j9M/lKX/O/UPZel/vP6hLP3fpX8oS/8T9A9l6X+i/qEs/U/SP5Sl/8n6h7L0P0X/UJb+p+ofytL/NP1DWfrP0j+Upf/p+oey9D9D/1CW/mfqH8rSv1v/UJb+Z+kfytJ/tv6hLP3n6B/K0n+u/qEs/d+tfyhL/7P1D2XpP0//UJb+8/UPZel/jv6hLP0X6B/K0v9c/UNZ+i/UP5Sl/yL9Q1n6L9Y/lKX/Ev1DWfqfp38oS/+l+oey9H+P/qEs/c/XP5Sl/zL9Q1n6L9c/lKX/BfqHsvR/r/6hLP0v1D+Upf9F+oey9L9Y/1CW/iv0D2Xpf4n+oSz9f0v/UJb+v61/KEv/lfqHsvR/n/6hLP1/R/9Qlv7v1z+Upf8H9A9l6X+p/qEs/S/TP5Sl/+X6h7L0/139Q1n6r9I/lKX/7+kfytL/9/UPZel/hf6hLP2v1D+Upf8f6B/K0v+D+oey9L9K/1CW/lfrH8rS/xr9Q1n6/6H+oSz9/0j/UJb+1+ofytL/Q/qHsvT/sP6hLP2v0z+Upf9q/UNZ+v+x/qEs/f9E/1CW/tfrH8rS/wb9Q1n636h/KEv/j+gfytL/o/qHsvS/qX//sQ3/vl6hsvS/2f5DWfr/qf6hLP3X6B/K0v/P9A9l6X+L/qEs/f9c/9C22H9Yz5db9r9V/9C22D/a/8f0D2Xp/xf6h7L0/7j+oSz9P6F/KEv/T+ofytL/L/UPZen/Kf1DWfrfpn8oS//b9Q9l6X+H/qEs/f9K/1CW/nfqH8rS/y79Q1n6/7X+oSz9/0b/UJb+d+sfytL/b/UPZen/af1DWfp/Rv9Qlv6f1T+Upf/n9A9l6f95/UNZ+v+d/qEs/b+gfyhL/y/qH8rS/x79Q1n6f0n/UJb+f69/KEv/e/UPZel/n/6hLP2/rH8oS/+v6B/K0v9+/UNZ+n9V/1CW/l/TP5Sl/z/oH8rS/wH9Q1n6f13/UJb+/6h/KEv/b+gfytL/n/QPZen/oP6hLP2/qX8oS/+H9A9l6f/P+oey9P8X/UNZ+n9L/1CW/v+qfyhL/2/rH8rS/zv6h7L0/67+oSz9H9Y/lKX/v+kfytL/Ef1DWfo/qn8oS//H9A9l6f+4/qEs/f9d/1CW/t/TP5Sl/3/oH8rS//v6h7L0f0L/UJb+T+ofytL/B/qHsvR/Sv9Qlv7/qX8oS/+n9Q9l6f9f+oey9H9G/1CW/v+tfyhL/7X6h7L0X6d/KEv//9E/lKX/D/UPZem/Xv9Qlv7P6h/K0v85/UNZ+v9I/1CW/s/rH8rS/3/1D2Xp/4L+oSz9f6x/KEv/DfqHkvTfqaV/KEv/IfqHsvQfqn8oS/9h+oey9B+ufyhL/w79Q1n6j9A/lKX/SP1DWfqP0j+Upf92+oey9B+tfyhL/+31D2Xpv4P+oSz9x+gfytL/VfqHsvTfUf/QNtcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADglWbxsuVnz5o3r3uRL3zhC19s/uLl/jcTAADw/+0nH/pf7t8JAAAAAAAAAAAAAAAAAAAA5NXE/07s5f5nBAAAAAAAAAAAAACAn3WdXQc+NWxIn6eGbfngtfd3b/x+0vrj59x00x2l9/ueHz4ieMmhWz7YsGHDhtXPTJ3e83Bkq9Vq/2o79Twe1f+4/forxl6326ZHZdoXrnn4lJljjlx0+5XDv7n68q4nOzY+29E67ay587rfOLTVKgd3tM5vP9hvSKtVDu1oXdF+MLH9YEZHa037wf4bH2zX+mz7wRvOWDDvzPYTh1X+M4NtRWfXitawPott9fm3wZb7XzH2kTm93w/wkr2vNrzVs/9xt395134/1utF9t/7+uXA/vsf9D8g8KIGt//nHur9foCX/Kn3/4/cu3559GMvvv/e1y8H2T/UJ/j832ej/T/39/v8v2fwkpvvDxh171Xt/Xcee8sePU8Nfymf/3/y+uXg/vsf2ufzf/tz/PTez/8jW61yyFb+cUAqnV2XPDXQ+//A+x/+mn43Q7bc/41ffWyH9v5vfr61suepjkHuf/pA7/+X9vu9AoPT2XXDhn7v/4PYf2t88JKb9//E7WM2fv5/7NYzdtnixwaz/0P673/CkvnnTli8bPm+c+fPmt09u/ucKRMn7zdpypTJkyds/ESw6dut/EOBJLbu/b81ut/NkFare/P9PbdcPr29/6fvWvnRnqdGxfsf+VO/3qZH5dAB3//39P4PoXFDWyNGtM6ftWTJov02fdv7cOKmbzf9tGD/g/jv/7326flpvX9nOKTV2m3z/fhTpoxs7/+CheXOnqdGDPL9f8aA+5/W9+8qgcHZyvf/M/vd9Nn/AU9ctLS9/71/uPNjPU8N9r//Dxtw/9d7/4et0dnVqvVNtL3//Udecni169Lp7/+gPk3sf+zaK9ZVuy6H2z/Up4n9z1z1ltOrXZcj7B/q08T+75h/6qpq1+VI+4f6NLH/F169bvdq1+Uo+4f6NLH/B773+E3VrkuX/UN9mtj/h67t2r/adXmb/UN9mtj/vuc9O7XadXm7/UN9mtj/Wdsfs6badTna/qE+Tez/8A0H7VLturzD/qE+Tex/yCXfX1Htuhxj/1CfJvb/6KxVC6pdl5n2D/VpYv9rxo5/rtp1Odb+oT5N7H/lk2+aUe26HGf/UJ8m9v+1q697oNp1eaf9Q32a2P8nT9r5umrX5Xj7h/o0sf8fjbtrdLXr8i77h/o0sf8HH1xzW7XrcoL9Q32a2P/qNcPGVbsuJ9o/1KeJ/V982Oz7q12Xk+wf6tPE/idN/sqJ1a7LyfYP9Wli/7t9/tuPV7sup9g/1KeJ/R9z99LF1a7LqfYP9Wli/0t3/8SPq12X0+wf6tPE/t/avfucatdllv1DfZrYf7ly9IPVrsvp9g/1aWL/Jzx9w7Rq1+UM+4f6NLH/O3f84serXZcz7R/q08T+1y48Z0q169Jt/1Cfqvsf8RJ/Xnv/333fxe+v8Eu093+W/UN9mnj/v+r5b5Rq12W2/UN9mtj/ExNPOKnadZlj/1CfJvZ/w5HP3Fftusy1f6hPE/tfdefDS6pdl3fbP9Snif3fc88Rj1S7LmfbP9Snif3vPX7CmL7PPvsSr8s8+4f6NLH/Bcev/HC16zLf/qE+Tez/4Fuvfl2163KO/UN9mtj/qK9P/VS167LA/qE+Tez/M1M/8Olq1+Vc+4f6NLH/ddP22qfadVlo/1CfJvb/0G0Tr6l2XRbZP9Snif1/8L5rK16XxfYP9Wli/wtf/8LT1a7LEvuH+jSx/zfPPG5Ztetynv1DfZrY/y7Xz/hSteuy1P6hPk3s/+Tv/ODoatflPfYP9Wli/3vtevoe1a7L+fYP9Wli/3Pm3ntZteuyzP6hPk3sf/rqhyZVuy7L7R/q08T+d3x08Y3VrssF9g/1aWL/Tw3b9ahq1+W99g/1aWL/N19497eqXZcL7R/q08T+L7v0Y93VrstF9g/1aWL/n1s/Ym2163Kx/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8cOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvytg+jdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CgAAP//oCD3sg==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840) 5.203669591s ago: executing program 5 (id=5040): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000001c0)={0x2, 0xffffffff, 0x3}) 5.037806808s ago: executing program 8 (id=5041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 4.74104256s ago: executing program 8 (id=5042): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.417555918s ago: executing program 8 (id=5044): r0 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3abf, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 4.402363848s ago: executing program 0 (id=5045): setresuid(0xee01, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="ee", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x0) 4.307430994s ago: executing program 2 (id=5046): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) fadvise64(r0, 0x5, 0x7, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.12389877s ago: executing program 4 (id=5047): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x4040000, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x20da, 0x4) read(r0, &(0x7f0000002400)=""/4062, 0xffe9) 3.965370812s ago: executing program 8 (id=5048): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x42}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 3.751268248s ago: executing program 3 (id=5049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105da, &(0x7f0000032680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x20, 0x0, 0x8000) 3.590978914s ago: executing program 4 (id=5050): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x1}, 0x58) r0 = io_uring_setup(0x3eae, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 3.344233045s ago: executing program 8 (id=5051): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1bf1d7", 0x3}], 0x1}}], 0x4000000000002af, 0x10001) 3.235933283s ago: executing program 2 (id=5052): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2.821038313s ago: executing program 5 (id=5053): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0xf6c1d58, 0x0, 0xd2, 0xac26}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 2.678564623s ago: executing program 0 (id=5054): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2000000008, 0x0) fcntl$setpipe(r2, 0x407, 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xfffffe3e) 2.207260307s ago: executing program 5 (id=5055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x11, r0, 0x10000000000005, 0xfffffffffffffffa) 1.857940083s ago: executing program 3 (id=5056): creat(&(0x7f0000000000)='./file0\x00', 0x93) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffc, 0x3}}, 0x28) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.814022088s ago: executing program 2 (id=5057): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 1.813799878s ago: executing program 5 (id=5058): r0 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000, 0x1eb}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.614366476s ago: executing program 4 (id=5059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="36abf5eb0d32", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 1.345083334s ago: executing program 2 (id=5060): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.344845688s ago: executing program 0 (id=5061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0xc0) 1.252776183s ago: executing program 5 (id=5062): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x4c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.212592644s ago: executing program 4 (id=5063): unshare(0x28020480) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0xdcd8, 0x6) 964.563682ms ago: executing program 2 (id=5064): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x14a) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x4850) preadv2(r0, &(0x7f0000000b00)=[{&(0x7f0000005c40)=""/4097, 0x1001}], 0x1, 0x0, 0xffffffff, 0xf) 744.288448ms ago: executing program 4 (id=5065): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x5949}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000001200)={0x1008, r1}, 0x0) 310.375705ms ago: executing program 2 (id=5066): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0xa, 0x801, 0x0) getsockopt(r1, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) 177.825085ms ago: executing program 4 (id=5067): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2000000d}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 0s ago: executing program 8 (id=5068): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) kernel console output (not intermixed with test programs): T17481] ? find_held_lock+0x2b/0x80 [ 632.763829][T17481] __checkpoint_and_complete_reqs+0x53/0x2c0 [ 632.763887][T17481] issue_checkpoint_thread+0xe8/0x2e0 [ 632.763938][T17481] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 632.763983][T17481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.764031][T17481] ? rcu_is_watching+0x12/0xc0 [ 632.764072][T17481] ? __pfx_autoremove_wake_function+0x10/0x10 [ 632.764128][T17481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.764177][T17481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.764222][T17481] ? __kthread_parkme+0x18c/0x230 [ 632.764279][T17481] ? kthread+0x13a/0x450 [ 632.764336][T17481] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 632.764382][T17481] kthread+0x370/0x450 [ 632.764440][T17481] ? __pfx_kthread+0x10/0x10 [ 632.764501][T17481] ret_from_fork+0x754/0xd80 [ 632.764565][T17481] ? __pfx_ret_from_fork+0x10/0x10 [ 632.764640][T17481] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.764687][T17481] ? __switch_to+0x7b4/0x1120 [ 632.764730][T17481] ? __pfx_kthread+0x10/0x10 [ 632.764792][T17481] ret_from_fork_asm+0x1a/0x30 [ 632.764860][T17481] [ 632.771865][T17501] CPU: 0 UID: 0 PID: 17501 Comm: syz.8.4321 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.771922][T17501] Tainted: [L]=SOFTLOCKUP [ 632.771936][T17501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.771960][T17501] Call Trace: [ 632.771972][T17501] [ 632.771987][T17501] dump_stack_lvl+0x100/0x190 [ 632.772049][T17501] __f2fs_is_valid_blkaddr+0xbb7/0x1340 [ 632.772118][T17501] ? f2fs_map_blocks+0x963/0x4bd0 [ 632.772154][T17501] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 632.772202][T17501] f2fs_map_blocks+0x963/0x4bd0 [ 632.772272][T17501] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 632.772314][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.772369][T17501] ? find_held_lock+0x2b/0x80 [ 632.772413][T17501] ? xa_load+0x149/0x2c0 [ 632.772461][T17501] ? xa_load+0x149/0x2c0 [ 632.772518][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.772593][T17501] f2fs_mpage_readpages+0x7b5/0x3270 [ 632.772642][T17501] ? rcu_is_watching+0x12/0xc0 [ 632.772682][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.772729][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.772776][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.772823][T17501] ? __bfs+0x150/0x2a0 [ 632.772875][T17501] ? __schedule+0x1000/0x60e0 [ 632.772913][T17501] ? __pfx_f2fs_mpage_readpages+0x10/0x10 [ 632.772962][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.773009][T17501] ? __lock_acquire+0x4a5/0x2630 [ 632.773066][T17501] ? css_rstat_updated+0x1ce/0x5a0 [ 632.773129][T17501] ? __pfx_css_rstat_updated+0x10/0x10 [ 632.773182][T17501] ? xas_create+0x1f4/0x14e0 [ 632.773235][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.773286][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.773333][T17501] ? rcu_is_watching+0x12/0xc0 [ 632.773373][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.773443][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.773490][T17501] ? __filemap_add_folio+0xbd1/0x1280 [ 632.773546][T17501] f2fs_readahead+0x362/0x520 [ 632.773587][T17501] ? __pfx_f2fs_readahead+0x10/0x10 [ 632.773628][T17501] read_pages+0x1b1/0xdf0 [ 632.773696][T17501] ? __folio_batch_add_and_move+0x464/0xc60 [ 632.773747][T17501] ? __pfx_read_pages+0x10/0x10 [ 632.773824][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.773887][T17501] page_cache_ra_unbounded+0x48a/0xa40 [ 632.773972][T17501] do_page_cache_ra+0x10c/0x160 [ 632.774014][T17501] page_cache_ra_order+0xc4e/0xf30 [ 632.774075][T17501] page_cache_sync_ra+0x6e0/0xb10 [ 632.774123][T17501] page_cache_sync_readahead+0xb5/0xf0 [ 632.774166][T17501] ? __pfx_page_cache_sync_readahead+0x10/0x10 [ 632.774219][T17501] ? __pfx___might_resched+0x10/0x10 [ 632.774258][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.774304][T17501] ? aa_file_perm+0x7f3/0x14d0 [ 632.774352][T17501] f2fs_readdir+0x6ab/0xaf0 [ 632.774398][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.774455][T17501] ? __pfx_f2fs_readdir+0x10/0x10 [ 632.774497][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.774548][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.774599][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.774645][T17501] ? down_read_killable+0x30e/0x4c0 [ 632.774708][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.774755][T17501] ? apparmor_file_permission+0x13f/0x1c0 [ 632.774822][T17501] iterate_dir+0x296/0xae0 [ 632.774883][T17501] __x64_sys_getdents64+0x13b/0x2c0 [ 632.774929][T17501] ? __x64_sys_futex+0x358/0x4d0 [ 632.774993][T17501] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 632.775042][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.775089][T17501] ? __pfx_filldir64+0x10/0x10 [ 632.775142][T17501] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.775198][T17501] do_syscall_64+0x106/0xf80 [ 632.775241][T17501] ? irqentry_exit+0x138/0x670 [ 632.775291][T17501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.775331][T17501] RIP: 0033:0x7fc7bf79c629 [ 632.775363][T17501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.775402][T17501] RSP: 002b:00007fc7bd9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 632.775438][T17501] RAX: ffffffffffffffda RBX: 00007fc7bfa16090 RCX: 00007fc7bf79c629 [ 632.775465][T17501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 632.775489][T17501] RBP: 00007fc7bf832b39 R08: 0000000000000000 R09: 0000000000000000 [ 632.775513][T17501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.775538][T17501] R13: 00007fc7bfa16128 R14: 00007fc7bfa16090 R15: 00007ffdec825ca8 [ 632.775591][T17501] [ 633.694823][ T5833] net_ratelimit: 1 callbacks suppressed [ 633.694857][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.776347][T15501] Bluetooth: hci1: command tx timeout [ 633.974146][T17481] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 634.378785][T17468] chnl_net:caif_netlink_parms(): no params data found [ 634.719274][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.959572][T17529] loop8: detected capacity change from 0 to 256 [ 635.135552][T17529] FAT-fs (loop8): Directory bread(block 64) failed [ 635.187873][T17529] FAT-fs (loop8): Directory bread(block 65) failed [ 635.223246][T17529] FAT-fs (loop8): Directory bread(block 66) failed [ 635.239119][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.261368][T17529] FAT-fs (loop8): Directory bread(block 67) failed [ 635.295331][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.310175][T17529] FAT-fs (loop8): Directory bread(block 68) failed [ 635.334582][T17468] bridge_slave_0: entered allmulticast mode [ 635.341929][T17529] FAT-fs (loop8): Directory bread(block 69) failed [ 635.360409][T17468] bridge_slave_0: entered promiscuous mode [ 635.379791][T17529] FAT-fs (loop8): Directory bread(block 70) failed [ 635.409681][T17468] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.426523][T17529] FAT-fs (loop8): Directory bread(block 71) failed [ 635.448162][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.466015][T17529] FAT-fs (loop8): Directory bread(block 72) failed [ 635.492574][T17468] bridge_slave_1: entered allmulticast mode [ 635.508449][T17529] FAT-fs (loop8): Directory bread(block 73) failed [ 635.579614][T17468] bridge_slave_1: entered promiscuous mode [ 635.754498][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.835071][T15501] Bluetooth: hci1: command tx timeout [ 636.699873][T17553] loop3: detected capacity change from 0 to 131072 [ 636.737585][T17468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.764333][T17553] F2FS-fs (loop3): Test dummy encryption mode enabled [ 636.800739][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.827583][T17553] F2FS-fs (loop3): invalid crc value [ 636.909449][T17468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.962204][T17553] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 636.984502][T17553] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 637.196405][T17468] team0: Port device team_slave_0 added [ 637.207641][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.217699][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.236865][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.260017][T17468] team0: Port device team_slave_1 added [ 637.533721][T17468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.567429][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.647078][T17468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.744241][T17468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.751235][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.841963][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.850379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.914699][T17468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.928225][T15501] Bluetooth: hci1: command tx timeout [ 638.224501][ T5805] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 638.259679][T17468] hsr_slave_0: entered promiscuous mode [ 638.316362][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.216936][T16220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.233903][T17468] hsr_slave_1: entered promiscuous mode [ 639.240415][T17468] debugfs: 'hsr0' already exists in 'hsr' [ 639.246384][T17468] Cannot create hsr debugfs directory [ 639.457569][T17587] loop5: detected capacity change from 0 to 131072 [ 639.466720][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.485345][T17587] F2FS-fs (loop5): invalid crc value [ 639.492947][ T5805] usb 5-1: config 0 has no interfaces? [ 639.501696][ T5805] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.524045][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 639.532629][ T5805] usb 5-1: SerialNumber: syz [ 639.630801][T17587] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 639.644091][T17587] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 639.655192][ T5805] usb 5-1: config 0 descriptor?? [ 639.675959][T17604] loop8: detected capacity change from 0 to 2048 [ 639.725013][T17604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 639.858744][T17587] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 639.995994][T15501] Bluetooth: hci1: command tx timeout [ 640.016989][T14037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.168879][T17578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.202948][T17578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.273912][ T29] usb 5-1: USB disconnect, device number 3 [ 640.474473][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.480503][T17642] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4375'. [ 641.529038][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.601093][T17643] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4376'. [ 642.266416][T17468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.353093][T17468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.399461][T17468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.446939][T17468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 642.554295][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.571073][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4383'. [ 642.665921][T17668] loop4: detected capacity change from 0 to 4096 [ 642.713321][T17668] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 642.935164][T17683] loop3: detected capacity change from 0 to 1024 [ 642.942757][T17683] EXT4-fs: Ignoring removed orlov option [ 642.949029][ T30] audit: type=1800 audit(1771803167.683:389): pid=17668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4382" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 642.951441][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.987751][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.999278][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.032575][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.051708][T17683] EXT4-fs: Ignoring removed bh option [ 643.152801][T17468] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.160692][T17683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.187674][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.194910][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.330988][T17023] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.338295][T17023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.534997][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.610304][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.619943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.634071][T17699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 644.228128][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.933689][T17468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.128877][T17468] veth0_vlan: entered promiscuous mode [ 645.179902][T17468] veth1_vlan: entered promiscuous mode [ 645.259948][T17698] loop4: detected capacity change from 0 to 32768 [ 645.286062][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.310080][T17468] veth0_macvtap: entered promiscuous mode [ 645.340088][ T30] audit: type=1800 audit(1771803170.083:390): pid=17698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4389" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 645.357756][T17468] veth1_macvtap: entered promiscuous mode [ 645.487072][T17468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.547591][T17468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.613892][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.624466][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.633231][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.774958][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.320132][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.363742][T17023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.418610][T17023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.490535][T17751] loop3: detected capacity change from 0 to 1024 [ 646.622298][T17751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.767561][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.843853][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.048478][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.079624][T17765] loop4: detected capacity change from 0 to 1024 [ 647.498440][T17765] hfsplus: bad catalog file entry [ 647.581902][T17776] loop8: detected capacity change from 0 to 512 [ 647.629673][T17780] hfsplus: invalid catalog entry type [ 647.714696][T17776] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4411: inode has both inline data and extents flags [ 647.844128][T17776] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 647.854035][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 647.869735][ C1] EXT4-fs (loop8): initial error at time 1771803172: ext4_orphan_get:1391: inode 15 [ 647.879225][ C1] EXT4-fs (loop8): last error at time 1771803172: ext4_orphan_get:1391: inode 15 [ 647.910302][T17776] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.4411: couldn't read orphan inode 15 (err -117) [ 647.999096][T17776] loop8: lost filesystem error report for type 5 error -117 [ 648.006160][T17776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.282650][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.286934][T17776] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 5684 vs 220 free clusters [ 648.313291][ T147] hfsplus: b-tree write err: -5, ino 3 [ 648.599647][T17772] loop7: detected capacity change from 0 to 131072 [ 648.629230][T17772] F2FS-fs (loop7): invalid crc value [ 648.721030][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.774924][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.775715][T17772] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 648.800615][T17772] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 648.814597][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.834269][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.946482][T14037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.010042][T17772] F2FS-fs (loop7): invalid namelen(0), ino:8, run fsck to fix. [ 649.358128][T17023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.366604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.590155][T17809] loop8: detected capacity change from 0 to 1024 [ 649.607237][T17812] loop4: detected capacity change from 0 to 512 [ 649.615332][T17811] netlink: 'syz.3.4419': attribute type 12 has an invalid length. [ 649.623198][T17811] netlink: 'syz.3.4419': attribute type 43 has an invalid length. [ 649.649009][T17812] EXT4-fs: Ignoring removed mblk_io_submit option [ 649.681935][T17812] EXT4-fs (loop4): Test dummy encryption mode enabled [ 649.752787][T17812] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 649.832457][T17812] EXT4-fs (loop4): 1 truncate cleaned up [ 649.914586][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.948939][T17812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.094306][T17815] loop2: detected capacity change from 0 to 4096 [ 650.232604][T17815] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 650.268353][T17815] ntfs3(loop2): ino=1a, mi_enum_attr [ 650.341716][T17825] loop5: detected capacity change from 0 to 512 [ 650.344557][T17815] ntfs3(loop2): ino=1a, mi_enum_attr [ 650.418611][T16436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.428045][T17815] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 650.701272][T17825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.821748][T17825] ext4 filesystem being mounted at /752/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.954664][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.139658][T17825] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:104: comm syz.5.4423: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 651.620130][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.984301][ T6039] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 651.998211][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.177109][ T6039] usb 5-1: Using ep0 maxpacket: 16 [ 652.209713][ T6039] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.257812][ T6039] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.318107][ T6039] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 652.384036][ T6039] usb 5-1: config 0 interface 0 has no altsetting 0 [ 652.412406][ T6039] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 652.451796][ T6039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.496060][ T6039] usb 5-1: config 0 descriptor?? [ 652.763068][T17883] loop2: detected capacity change from 0 to 128 [ 652.830081][T17886] loop8: detected capacity change from 0 to 512 [ 652.850669][T17887] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 652.861616][T17886] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 652.882618][T17888] loop5: detected capacity change from 0 to 128 [ 652.890035][T17857] loop4: detected capacity change from 0 to 1024 [ 652.971205][T17886] EXT4-fs (loop8): 1 truncate cleaned up [ 652.999485][T17857] hfsplus: b-tree write err: -5, ino 2 [ 653.028217][T17886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.040834][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.248753][ T6039] hid (null): unknown global tag 0xd [ 653.260661][ T6039] hid (null): unknown global tag 0xe [ 653.313511][ T6039] hid (null): unknown global tag 0x3d [ 653.535078][ T6039] usb 5-1: USB disconnect, device number 4 [ 653.835634][T17908] loop3: detected capacity change from 0 to 512 [ 653.895380][T17908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 653.941784][T17908] EXT4-fs (loop3): DAX unsupported by block device. [ 653.959734][T14037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.084470][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.257661][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 654.301947][ T49] hfsplus: b-tree write err: -5, ino 25 [ 654.328100][ T49] hfsplus: b-tree write err: -5, ino 4 [ 654.333701][ T49] hfsplus: b-tree write err: -5, ino 2 [ 654.384384][ T49] hfsplus: b-tree write err: -5, ino 26 [ 654.488635][T17023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.497698][T16220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.514627][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.116567][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.125115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.644320][T17945] loop4: detected capacity change from 0 to 32768 [ 655.736635][T17945] JBD2: Ignoring recovery information on journal [ 655.861380][T17945] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 656.131642][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.141180][ T2147] block nbd1: Possible stuck request ffff888027590000: control (read@0,1024B). Runtime 300 seconds [ 656.151973][ T2147] block nbd1: Possible stuck request ffff888027590200: control (read@1024,1024B). Runtime 300 seconds [ 656.163324][ T2147] block nbd1: Possible stuck request ffff888027590400: control (read@2048,1024B). Runtime 300 seconds [ 656.444949][T17943] loop3: detected capacity change from 0 to 131072 [ 656.582823][T17943] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 656.593220][T16436] ocfs2: Unmounting device (7,4) on (node local) [ 656.594929][T17943] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 656.822646][T17943] F2FS-fs (loop3): access invalid blkaddr:0 [ 656.828715][T17943] CPU: 0 UID: 0 PID: 17943 Comm: syz.3.4458 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.828774][T17943] Tainted: [L]=SOFTLOCKUP [ 656.828789][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.828813][T17943] Call Trace: [ 656.828826][T17943] [ 656.828840][T17943] dump_stack_lvl+0x100/0x190 [ 656.828915][T17943] __f2fs_is_valid_blkaddr+0xa5b/0x1340 [ 656.828987][T17943] ? sanity_check_extent_cache+0x23a/0x6e0 [ 656.829026][T17943] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 656.829066][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.829124][T17943] sanity_check_extent_cache+0x23a/0x6e0 [ 656.829171][T17943] f2fs_iget+0x2545/0x6930 [ 656.829263][T17943] f2fs_lookup+0x52c/0xae0 [ 656.829329][T17943] ? __pfx_f2fs_lookup+0x10/0x10 [ 656.829393][T17943] ? __pfx_d_alloc_parallel+0x10/0x10 [ 656.829452][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.829501][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.829548][T17943] ? lockdep_init_map_type+0x5c/0x250 [ 656.829611][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.829668][T17943] __lookup_slow+0x251/0x460 [ 656.829708][T17943] ? __pfx___lookup_slow+0x10/0x10 [ 656.829760][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.829836][T17943] lookup_slow+0x50/0x70 [ 656.829883][T17943] path_lookupat+0x5e8/0xc40 [ 656.829929][T17943] ? do_getname+0x35/0x390 [ 656.829990][T17943] ? __do_sys_newstat+0x8c/0x130 [ 656.830055][T17943] filename_lookup+0x202/0x590 [ 656.830112][T17943] ? __pfx_filename_lookup+0x10/0x10 [ 656.830199][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.830255][T17943] ? find_held_lock+0x2b/0x80 [ 656.830301][T17943] ? __might_fault+0xc5/0x140 [ 656.830338][T17943] ? __might_fault+0xc5/0x140 [ 656.830373][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.830430][T17943] vfs_statx+0xff/0x3f0 [ 656.830490][T17943] ? __pfx_vfs_statx+0x10/0x10 [ 656.830550][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.830597][T17943] ? do_getname+0x191/0x390 [ 656.830664][T17943] __do_sys_newstat+0xaa/0x130 [ 656.830725][T17943] ? __pfx___do_sys_newstat+0x10/0x10 [ 656.830822][T17943] ? srso_alias_return_thunk+0x5/0xfbef5 [ 656.830888][T17943] do_syscall_64+0x106/0xf80 [ 656.830934][T17943] ? irqentry_exit+0x138/0x670 [ 656.830985][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.831028][T17943] RIP: 0033:0x7f7275d9c629 [ 656.831059][T17943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.831098][T17943] RSP: 002b:00007f7276d09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 656.831135][T17943] RAX: ffffffffffffffda RBX: 00007f7276015fa0 RCX: 00007f7275d9c629 [ 656.831171][T17943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000005640 [ 656.831197][T17943] RBP: 00007f7275e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 656.831222][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.831248][T17943] R13: 00007f7276016038 R14: 00007f7276015fa0 R15: 00007ffebd1b2f28 [ 656.831302][T17943] [ 656.831385][T17943] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 657.155727][T17919] loop8: detected capacity change from 0 to 32768 [ 657.194540][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.258348][T17962] F2FS-fs (loop3): access invalid blkaddr:0 [ 657.319712][T17962] CPU: 0 UID: 0 PID: 17962 Comm: syz.3.4458 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.319774][T17962] Tainted: [L]=SOFTLOCKUP [ 657.319789][T17962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.319812][T17962] Call Trace: [ 657.319825][T17962] [ 657.319839][T17962] dump_stack_lvl+0x100/0x190 [ 657.319914][T17962] __f2fs_is_valid_blkaddr+0xa5b/0x1340 [ 657.319985][T17962] ? sanity_check_extent_cache+0x23a/0x6e0 [ 657.320026][T17962] f2fs_is_valid_blkaddr+0xd0/0x2b0 [ 657.320065][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.320122][T17962] sanity_check_extent_cache+0x23a/0x6e0 [ 657.320170][T17962] f2fs_iget+0x2545/0x6930 [ 657.320261][T17962] f2fs_lookup+0x52c/0xae0 [ 657.320327][T17962] ? __pfx_f2fs_lookup+0x10/0x10 [ 657.320392][T17962] ? __pfx_d_alloc_parallel+0x10/0x10 [ 657.320451][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.320500][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.320548][T17962] ? lockdep_init_map_type+0x5c/0x250 [ 657.320611][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.320666][T17962] __lookup_slow+0x251/0x460 [ 657.320707][T17962] ? __pfx___lookup_slow+0x10/0x10 [ 657.320759][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.320836][T17962] lookup_slow+0x50/0x70 [ 657.320880][T17962] path_lookupat+0x5e8/0xc40 [ 657.320925][T17962] ? do_getname+0x35/0x390 [ 657.320982][T17962] ? vfs_fstatat+0xd0/0xe0 [ 657.321048][T17962] filename_lookup+0x202/0x590 [ 657.321105][T17962] ? __pfx_filename_lookup+0x10/0x10 [ 657.321191][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.321240][T17962] ? find_held_lock+0x2b/0x80 [ 657.321286][T17962] ? __might_fault+0xc5/0x140 [ 657.321326][T17962] ? __might_fault+0xc5/0x140 [ 657.321362][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.321422][T17962] vfs_statx+0xff/0x3f0 [ 657.321484][T17962] ? __pfx_vfs_statx+0x10/0x10 [ 657.321548][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.321598][T17962] ? do_getname+0x191/0x390 [ 657.321667][T17962] vfs_fstatat+0x77/0xe0 [ 657.321732][T17962] __do_sys_newfstatat+0x9d/0x120 [ 657.321798][T17962] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 657.321899][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.321950][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.322005][T17962] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.322064][T17962] do_syscall_64+0x106/0xf80 [ 657.322112][T17962] ? irqentry_exit+0x138/0x670 [ 657.322164][T17962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.322206][T17962] RIP: 0033:0x7f7275d9c629 [ 657.322239][T17962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.322279][T17962] RSP: 002b:00007f7276ce8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 657.322317][T17962] RAX: ffffffffffffffda RBX: 00007f7276016090 RCX: 00007f7275d9c629 [ 657.322346][T17962] RDX: 0000000000000000 RSI: 0000200000005700 RDI: ffffffffffffff9c [ 657.322372][T17962] RBP: 00007f7275e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 657.322398][T17962] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 657.322422][T17962] R13: 00007f7276016128 R14: 00007f7276016090 R15: 00007ffebd1b2f28 [ 657.322477][T17962] [ 657.659899][T17962] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 657.734654][T17966] loop4: detected capacity change from 0 to 1024 [ 657.738268][T17938] loop7: detected capacity change from 0 to 32768 [ 657.815917][T17938] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop7": -EINTR [ 658.235882][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.244090][ T70] hfsplus: b-tree write err: -5, ino 8 [ 658.316836][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.737869][T17988] loop4: detected capacity change from 0 to 2048 [ 658.833156][T17988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.059121][T17988] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 659.143329][T17988] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 659.215909][T17999] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 659.255385][T17988] EXT4-fs (loop4): This should not happen!! Data will be lost [ 659.255385][T17988] [ 659.279414][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.295188][T17999] EXT4-fs (loop4): This should not happen!! Data will be lost [ 659.295188][T17999] [ 659.394198][T17999] EXT4-fs (loop4): Total free blocks count 0 [ 659.400435][T17988] EXT4-fs (loop4): Total free blocks count 0 [ 659.442586][T17999] EXT4-fs (loop4): Free/Dirty block details [ 659.474188][T17988] EXT4-fs (loop4): Free/Dirty block details [ 659.504133][T17988] EXT4-fs (loop4): free_blocks=2415919504 [ 660.239683][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.248979][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.262787][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.876728][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.885304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.904138][T18023] netlink: 'syz.4.4477': attribute type 12 has an invalid length. [ 660.912674][T18023] netlink: 'syz.4.4477': attribute type 29 has an invalid length. [ 660.920661][T18023] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4477'. [ 660.930539][T18023] netlink: 'syz.4.4477': attribute type 1 has an invalid length. [ 660.938496][T18023] netlink: 'syz.4.4477': attribute type 2 has an invalid length. [ 660.947528][T18023] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4477'. [ 661.355058][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.697133][T18061] loop3: detected capacity change from 0 to 65536 [ 662.712490][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.805163][T18061] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 662.814520][T18061] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 662.947630][T18061] XFS (loop3): Ending clean mount [ 663.029112][T18061] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_cntbt block 0x6 [ 663.041740][T18061] XFS (loop3): Unmount and run xfs_repair [ 663.047869][T18061] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 663.055422][T18061] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 663.065880][T18061] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 663.075270][T18061] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 663.084215][T18061] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 663.093270][T18061] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 663.102366][T18061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 663.111407][T18061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 663.120629][T18061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 663.130079][T18061] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x6 len 2 error 74 [ 663.158324][T18061] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x9d0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 663.174276][T18061] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 663.494207][T18084] loop5: detected capacity change from 0 to 512 [ 663.591932][ T5826] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 663.758246][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.783490][T18084] EXT4-fs warning (device loop5): ext4_xattr_inode_get:559: inode #11: comm syz.5.4491: EA inode hash validation failed [ 663.919980][T18084] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.4491: corrupted inode contents [ 664.068523][T18084] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 664.074111][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 664.089879][ C1] EXT4-fs (loop5): initial error at time 1771803188: ext4_do_update_inode:5569: inode 15 [ 664.099780][ C1] EXT4-fs (loop5): last error at time 1771803188: ext4_do_update_inode:5569: inode 15 [ 664.110547][T18084] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.4491: mark_inode_dirty error [ 664.249740][T18084] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 664.250270][T18084] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.4491: corrupted inode contents [ 664.374398][T18084] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 664.374910][T18084] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.4491: mark_inode_dirty error [ 664.440274][T18084] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 664.450504][T18084] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.4491: mark inode dirty (error -117) [ 664.509128][T18084] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 664.510476][T18084] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 664.680695][T18084] EXT4-fs (loop5): 1 orphan inode deleted [ 664.747759][T18084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.796268][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.033592][T18119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4503'. [ 665.065510][ T5833] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 665.074194][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4503'. [ 665.234059][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 665.264966][ T5833] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 665.296986][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.334291][ T5833] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 665.375703][T18125] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 665.396465][ T5833] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.444169][ T5833] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 665.506563][ T5833] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 665.524753][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.555166][ T5833] usb 9-1: Product: syz [ 665.559382][ T5833] usb 9-1: Manufacturer: syz [ 665.598169][ T5833] usb 9-1: SerialNumber: syz [ 665.670827][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 665.688608][ T5833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input32 [ 665.834292][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.909086][ T5833] imon:send_packet: packet tx failed (-71) [ 665.958766][ T5833] imon 9-1:155.0: panel buttons/knobs setup failed [ 665.989733][ T5833] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 666.001287][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.010770][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.020373][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.050172][ T5833] (id 0x00) [ 666.304967][ T5833] rc_core: IR keymap rc-imon-pad not found [ 666.332391][ T5833] Registered IR keymap rc-empty [ 666.362757][ T5833] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 666.427999][ T5833] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 666.476089][ T5833] imon:send_packet: packet tx failed (-71) [ 666.498151][ T5833] imon 9-1:155.0: remote input dev register failed [ 666.510546][ T5833] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 666.636976][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.646109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.750131][ T5833] imon 9-1:155.0: unable to initialize intf0, err 0 [ 666.797662][ T5833] imon:imon_probe: failed to initialize context! [ 666.844064][ T5833] imon 9-1:155.0: unable to register, err -19 [ 666.924472][ T5833] usb 9-1: USB disconnect, device number 9 [ 667.036045][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.294937][ T6039] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 667.469881][ T6039] usb 4-1: Using ep0 maxpacket: 16 [ 667.507260][ T6039] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 667.544081][ T6039] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 667.577435][ T6039] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.651829][ T6039] usb 4-1: config 1 interface 0 has no altsetting 0 [ 667.672955][ T6039] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 667.704130][ T6039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.712183][ T6039] usb 4-1: Product: syz [ 667.744635][ T6039] usb 4-1: Manufacturer: syz [ 667.747812][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4521'. [ 667.754033][ T6039] usb 4-1: SerialNumber: syz [ 667.915877][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.053224][ T6039] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 668.083737][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.570013][T18172] loop8: detected capacity change from 0 to 32768 [ 668.623500][T18172] JBD2: Ignoring recovery information on journal [ 668.656570][ T5917] usb 4-1: USB disconnect, device number 26 [ 668.719917][ T5917] usblp0: removed [ 668.725011][T18172] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 668.823501][T15501] block nbd4: Receive control failed (result -32) [ 668.838083][T18186] block nbd4: shutting down sockets [ 668.997368][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4531'. [ 669.547685][T18220] loop2: detected capacity change from 0 to 2048 [ 669.629999][T18220] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 669.757012][T18226] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 669.817418][T14037] ocfs2: Unmounting device (7,8) on (node local) [ 669.869197][ T5805] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 670.067382][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 670.132812][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 670.203283][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 670.254867][ T5805] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 670.288434][ T5805] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 670.368839][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.407466][ T5805] usb 4-1: config 0 descriptor?? [ 670.413357][T18224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 670.727391][T18242] input: syz1 as /devices/virtual/input/input34 [ 670.918820][ T5805] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 671.196261][ T5833] net_ratelimit: 2 callbacks suppressed [ 671.196289][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.216841][ T6039] usb 4-1: USB disconnect, device number 27 [ 671.605504][T18264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.755781][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.766333][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.783038][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.397740][ T3479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.406316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.876280][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.937921][T18284] xt_hashlimit: size too large, truncated to 1048576 [ 673.189666][T18272] loop8: detected capacity change from 0 to 131072 [ 673.201768][T18272] F2FS-fs (loop8): invalid crc value [ 673.313083][T18272] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 673.329355][T18272] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 673.924847][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.330501][T18274] loop4: detected capacity change from 0 to 32768 [ 674.535468][T18274] JBD2: Ignoring recovery information on journal [ 674.693297][T18274] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 674.777639][T18322] netlink: 428 bytes leftover after parsing attributes in process `syz.3.4559'. [ 674.980525][T18322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4559'. [ 674.989869][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.491340][T16436] ocfs2: Unmounting device (7,4) on (node local) [ 677.522177][T17023] net_ratelimit: 1 callbacks suppressed [ 677.522206][T17023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.539370][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.624361][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.632500][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.641041][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.730371][T17023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.740517][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.155328][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.163764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.619421][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.635895][T18374] loop5: detected capacity change from 0 to 32768 [ 678.653168][T18383] loop8: detected capacity change from 0 to 1024 [ 678.960194][T18374] ialloc: diAlloc returned -5! [ 679.025242][T18367] loop3: detected capacity change from 0 to 262144 [ 679.044498][T18367] F2FS-fs (loop3): invalid crc value [ 679.163262][T18367] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 679.177061][ T36] hfsplus: b-tree write err: -5, ino 25 [ 679.184427][T18367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 679.225503][T18390] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4579'. [ 679.235445][ T36] hfsplus: b-tree write err: -5, ino 4 [ 679.277248][ T36] hfsplus: b-tree write err: -5, ino 2 [ 679.307300][T18390] bond0: ARP target 170.170.170.170 is already present [ 679.367377][T18390] bond0: option arp_ip_target: invalid value (2863311530) [ 679.424336][T18396] binder: 18395:18396 ioctl c0306201 200000000100 returned -14 [ 680.427753][T18418] loop7: detected capacity change from 0 to 512 [ 680.508851][T18418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 680.625755][T18418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 680.645003][T18418] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.161879][T10261] Quota error (device loop7): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 681.181040][T18437] loop8: detected capacity change from 0 to 7 [ 681.218422][T14037] Dev loop8: unable to read RDB block 7 [ 681.256887][T10261] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 681.277006][T18438] loop4: detected capacity change from 0 to 128 [ 681.297106][T18438] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 681.319923][T10261] EXT4-fs error (device loop7): ext4_acquire_dquot:6999: comm syz-executor: Failed to acquire dquot type 0 [ 681.360217][T18438] hpfs: filesystem error: improperly stopped [ 681.404986][T18438] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 681.444139][T18438] hpfs: You really don't want any checks? You are crazy... [ 681.461928][T14037] loop8: AHDI p1 p2 p3 [ 681.467189][T14037] loop8: partition table partially beyond EOD, truncated [ 681.473269][T18438] hpfs: hpfs_map_sector(): read error [ 681.518205][T14037] loop8: p1 start 1601398130 is beyond EOD, truncated [ 681.526482][T18438] hpfs: code page support is disabled [ 681.548101][T18438] hpfs: hpfs_map_4sectors(): unaligned read [ 681.564840][T14037] loop8: p2 start 1702059890 is beyond EOD, truncated [ 681.576854][T18438] hpfs: hpfs_map_4sectors(): unaligned read [ 681.610281][T18438] hpfs: filesystem error: unable to find root dir [ 681.626011][T18437] Dev loop8: unable to read RDB block 7 [ 681.631638][T18437] loop8: AHDI p1 p2 p3 [ 681.668881][T18437] loop8: partition table partially beyond EOD, truncated [ 681.693589][T18437] loop8: p1 start 1601398130 is beyond EOD, truncated [ 681.726320][T18437] loop8: p2 start 1702059890 is beyond EOD, truncated [ 681.769728][T18441] Dev loop8: unable to read RDB block 7 [ 681.807953][T18441] loop8: AHDI p1 p2 p3 [ 681.812237][T18441] loop8: partition table partially beyond EOD, truncated [ 681.865384][T18441] loop8: p1 start 1601398130 is beyond EOD, truncated [ 681.897580][T15461] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 681.907226][T18441] loop8: p2 start 1702059890 is beyond EOD, truncated [ 682.752737][ T70] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.006108][ T70] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.267175][ T70] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.486606][ T70] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.631635][T18456] loop5: detected capacity change from 0 to 32768 [ 683.737815][T18456] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 683.865428][T18456] JBD2: Ignoring recovery information on journal [ 684.096635][T18456] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 684.217268][ T70] bridge_slave_1: left promiscuous mode [ 684.223103][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.325471][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.341899][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.359809][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.365757][ T70] bridge_slave_0: left allmulticast mode [ 684.379375][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.391207][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 684.473670][ T70] bridge_slave_0: left promiscuous mode [ 684.544333][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.809010][T18495] overlayfs: upper fs does not support tmpfile. [ 684.909107][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4611'. [ 684.918341][T18495] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 684.918409][T18495] overlayfs: failed to set xattr on upper [ 684.918424][T18495] overlayfs: ...falling back to redirect_dir=nofollow. [ 684.918441][T18495] overlayfs: ...falling back to index=off. [ 684.918455][T18495] overlayfs: ...falling back to uuid=null. [ 684.918471][T18495] overlayfs: upper fs missing required features. [ 685.174586][ T5805] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 685.232217][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.264421][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.382140][ T5805] usb 4-1: Using ep0 maxpacket: 8 [ 685.417144][ T5805] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 685.441395][ T5824] ocfs2: Unmounting device (7,5) on (node local) [ 685.442515][T18512] loop8: detected capacity change from 0 to 512 [ 685.464927][ T5805] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 685.488334][ T5805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 685.530732][ T5805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 685.580284][T18512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.614268][ T5805] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.737428][ T5805] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 685.790208][T18512] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 685.795183][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.942560][T18520] loop4: detected capacity change from 0 to 1024 [ 685.988101][T18520] EXT4-fs: inline encryption not supported [ 686.056371][T14037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.059463][T18520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.184919][ T5805] usb 4-1: usb_control_msg returned -32 [ 686.190593][ T5805] usbtmc 4-1:16.0: can't read capabilities [ 686.257400][T18520] EXT4-fs error (device loop4): mb_free_blocks:2044: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 686.285068][T18520] EXT4-fs (loop4): Remounting filesystem read-only [ 686.301042][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.431439][T16436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.451743][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.474538][T15501] Bluetooth: hci0: command tx timeout [ 686.486742][ T2147] block nbd1: Possible stuck request ffff888027590000: control (read@0,1024B). Runtime 330 seconds [ 686.497674][ T2147] block nbd1: Possible stuck request ffff888027590200: control (read@1024,1024B). Runtime 330 seconds [ 686.510564][ T2147] block nbd1: Possible stuck request ffff888027590400: control (read@2048,1024B). Runtime 330 seconds [ 686.549222][ T70] bond0 (unregistering): Released all slaves [ 686.643570][T18530] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 686.687780][T18508] loop2: detected capacity change from 0 to 32768 [ 686.811953][T18508] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 686.869095][ T6039] usb 4-1: USB disconnect, device number 28 [ 687.103615][T18508] XFS (loop2): Ending clean mount [ 687.162110][T18508] XFS (loop2): Quotacheck needed: Please wait. [ 687.391088][T18508] XFS (loop2): Quotacheck: Done. [ 687.514471][T18508] XFS (loop2): User initiated shutdown received. [ 687.661812][T18508] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:475). Shutting down filesystem. [ 687.678998][T18508] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 687.778812][T17468] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 688.040454][T18564] loop8: detected capacity change from 0 to 2048 [ 688.154355][T18564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 688.295931][T18564] EXT4-fs (loop8): shut down requested (2) [ 688.475410][T18574] loop5: detected capacity change from 0 to 1764 [ 688.568103][T15501] Bluetooth: hci0: command tx timeout [ 688.653286][T14037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 689.044528][T18585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.051828][T18585] IPv6: NLM_F_CREATE should be set when creating new route [ 689.127708][T18589] loop3: detected capacity change from 0 to 1024 [ 689.171314][T18583] loop8: detected capacity change from 0 to 2048 [ 689.179986][T18589] EXT4-fs: inline encryption not supported [ 689.290980][T18583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.339786][T18589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0f00-000000000000 r/w without journal. Quota mode: none. [ 689.491221][T18589] ext4 filesystem being mounted at /822/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.735876][T18589] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm syz.3.4632: lblock 8 mapped to illegal pblock 8 (length 8) [ 689.814182][ T30] audit: type=1800 audit(1771803214.533:391): pid=18583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4629" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 689.849502][T18482] chnl_net:caif_netlink_parms(): no params data found [ 689.872594][T18589] EXT4-fs error (device loop3): ext4_ext_remove_space:2954: inode #15: comm syz.3.4632: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 690.216452][T14037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.228658][T17023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 690.304716][T17023] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 690.351085][ T70] hsr_slave_0: left promiscuous mode [ 690.371916][T17023] EXT4-fs (loop3): This should not happen!! Data will be lost [ 690.371916][T17023] [ 690.404138][ T70] hsr_slave_1: left promiscuous mode [ 690.410764][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.419187][T17023] EXT4-fs (loop3): Total free blocks count 0 [ 690.446510][T17023] EXT4-fs (loop3): Free/Dirty block details [ 690.459957][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.474622][T17023] EXT4-fs (loop3): free_blocks=0 [ 690.485808][T17023] EXT4-fs (loop3): dirty_blocks=16 [ 690.499484][T17023] EXT4-fs (loop3): Block reservation details [ 690.517100][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.536742][T17023] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 690.546877][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.578273][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0f00-000000000000. [ 690.647173][T15501] Bluetooth: hci0: command tx timeout [ 690.713370][ T70] team_slave_0: left promiscuous mode [ 690.719406][ T70] team_slave_1: left promiscuous mode [ 690.778118][ T70] veth1_macvtap: left promiscuous mode [ 690.783650][ T70] veth0_macvtap: left promiscuous mode [ 690.834180][ T70] veth1_vlan: left promiscuous mode [ 690.848346][ T70] veth0_vlan: left promiscuous mode [ 692.442605][T18629] loop8: detected capacity change from 0 to 32768 [ 692.458867][T18629] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4645 (18629) [ 692.510568][T18629] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 692.520804][T18629] BTRFS info (device loop8): using blake2b checksum algorithm [ 692.556803][ T70] team0 (unregistering): Port device team_slave_1 removed [ 692.599916][ T70] team0 (unregistering): Port device team_slave_0 removed [ 692.651653][T18629] BTRFS info (device loop8): enabling ssd optimizations [ 692.659153][T18629] BTRFS info (device loop8): turning on async discard [ 692.666068][T18629] BTRFS info (device loop8): enabling free space tree [ 692.714259][T15501] Bluetooth: hci0: command tx timeout [ 692.753496][ T30] audit: type=1800 audit(1771803217.493:392): pid=18629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4645" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 693.080674][T14037] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 694.151790][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.184111][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.230401][T18482] bridge_slave_0: entered allmulticast mode [ 694.282311][T18482] bridge_slave_0: entered promiscuous mode [ 694.323589][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.363925][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.371415][T18482] bridge_slave_1: entered allmulticast mode [ 694.449556][T18482] bridge_slave_1: entered promiscuous mode [ 694.759085][T18673] loop3: detected capacity change from 0 to 1024 [ 694.896450][T18673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 694.951105][T18673] ext4 filesystem being mounted at /829/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.987791][T18674] loop4: detected capacity change from 0 to 4096 [ 695.025056][T18673] EXT4-fs (loop3): shut down requested (2) [ 695.070094][ T70] IPVS: stop unused estimator thread 0... [ 695.147521][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.232098][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.246490][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 695.585930][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4657'. [ 695.679382][T18482] team0: Port device team_slave_0 added [ 695.749311][T18693] loop3: detected capacity change from 0 to 256 [ 695.796818][T18482] team0: Port device team_slave_1 added [ 695.817451][T18693] exfat: Deprecated parameter 'utf8' [ 695.822923][T18693] exfat: Deprecated parameter 'utf8' [ 695.947552][T18693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 696.216064][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.223107][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.245043][T18701] vcan0: tx drop: invalid da for name 0x0000000000000010 [ 696.304789][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.335548][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.404576][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.584074][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.635138][ T5833] net_ratelimit: 4 callbacks suppressed [ 696.635166][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.721446][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4663'. [ 697.021565][T18711] hsr_slave_1 (unregistering): left promiscuous mode [ 697.141867][T18716] loop4: detected capacity change from 0 to 512 [ 697.227977][T18482] hsr_slave_0: entered promiscuous mode [ 697.230765][T18716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 697.269335][T18482] hsr_slave_1: entered promiscuous mode [ 697.284567][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.293160][T18716] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.336995][T18723] loop2: detected capacity change from 0 to 256 [ 697.424401][T18723] exFAT-fs (loop2): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 697.487154][T18697] loop8: detected capacity change from 0 to 32768 [ 697.496005][T18716] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 697.552756][T18716] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 697.626691][T18716] EXT4-fs error (device loop4): ext4_acquire_dquot:6999: comm syz.4.4666: Failed to acquire dquot type 0 [ 697.638709][T18697] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 697.675647][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.774927][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4668'. [ 697.802645][T18697] XFS (loop8): Ending clean mount [ 697.932242][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4668'. [ 697.937094][T18697] XFS (loop8): Quotacheck needed: Please wait. [ 698.083417][T18697] XFS (loop8): Quotacheck: Done. [ 698.111902][T16436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 698.249068][T18697] XFS (loop8): User initiated shutdown received. [ 698.271788][T18697] XFS (loop8): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:475). Shutting down filesystem. [ 698.305329][T18697] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 698.714651][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.925429][T14037] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 699.392353][T18482] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.740428][T18482] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.754847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.833034][ T5805] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 699.978177][T18482] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.014172][ T5805] usb 3-1: Using ep0 maxpacket: 16 [ 700.030679][ T5805] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 700.063934][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.080730][ T5805] usb 3-1: Product: syz [ 700.081914][T18785] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.4683'. [ 700.094699][ T5805] usb 3-1: Manufacturer: syz [ 700.099762][ T5805] usb 3-1: SerialNumber: syz [ 700.131103][ T5805] usb 3-1: config 0 descriptor?? [ 700.145595][ T5805] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 700.314367][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.366293][T18482] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.635067][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 700.794582][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.817123][T18803] (syz.8.4687,18803,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 700.849260][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 700.874190][ T9] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 700.917997][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.918522][T18482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 700.967506][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 700.989942][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.024485][T18482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 701.024582][ T9] usb 4-1: Product: syz [ 701.069530][ T9] usb 4-1: Manufacturer: syz [ 701.090213][ T9] usb 4-1: SerialNumber: syz [ 701.125561][T18482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 701.131752][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 701.160431][T18805] loop4: detected capacity change from 0 to 4096 [ 701.187768][T18482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 701.196763][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.222954][ T5805] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 701.262396][ T5805] usb 3-1: USB disconnect, device number 12 [ 701.384552][ T9] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 701.683678][ T9] usb 4-1: USB disconnect, device number 29 [ 701.790845][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.835411][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.867695][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.889131][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.896384][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.918762][T18789] usblp0: removed [ 701.981011][T17023] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.988235][T17023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.874914][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.206812][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.291956][T18859] input: syz1 as /devices/virtual/input/input35 [ 703.356104][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.443603][T18482] veth0_vlan: entered promiscuous mode [ 703.462851][T18482] veth1_vlan: entered promiscuous mode [ 703.632384][T18482] veth0_macvtap: entered promiscuous mode [ 703.694431][T18482] veth1_macvtap: entered promiscuous mode [ 703.849435][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.928752][ T6039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.968780][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.038113][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.050402][T18872] loop2: detected capacity change from 0 to 128 [ 704.077702][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.088760][T18872] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 704.103586][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.134868][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.163602][T18872] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 704.521439][T17468] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 704.541427][T17468] FAT-fs (loop2): Filesystem has been set read-only [ 704.590905][T17468] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 704.619189][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.643195][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.752312][T17023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.775272][T17023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.962625][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.014569][ T1203] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 705.221960][ T1203] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 705.250128][ T1203] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 705.279678][ T1203] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.321707][ T1203] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 705.337898][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.365384][ T1203] usb 3-1: Product: syz [ 705.380378][ T1203] usb 3-1: Manufacturer: syz [ 705.395150][ T1203] usb 3-1: SerialNumber: syz [ 705.434732][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.444059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.446077][ T1203] usblp0: Disabling reads from problematic bidirectional printer [ 705.501946][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4716'. [ 705.513607][T18900] netlink: 'syz.0.4716': attribute type 30 has an invalid length. [ 705.570478][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4716'. [ 705.601606][ T84] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.635345][ T84] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.635555][T18901] netlink: 'syz.0.4716': attribute type 30 has an invalid length. [ 705.728703][ T84] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.740117][ T1203] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 705.784096][ T84] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.994942][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.040852][ T1203] usb 3-1: USB disconnect, device number 13 [ 706.256737][T18886] usblp0: removed [ 706.395674][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.034590][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.275199][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 707.764425][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 707.811765][T18948] netlink: 'syz.4.4738': attribute type 11 has an invalid length. [ 707.934227][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 708.228952][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.248004][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 708.265811][ T5917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 708.278555][ T5917] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 708.287769][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.295847][ T5917] usb 3-1: Product: syz [ 708.300122][ T5917] usb 3-1: Manufacturer: syz [ 708.304981][ T5917] usb 3-1: SerialNumber: syz [ 708.375130][ T5917] usb 3-1: config 0 descriptor?? [ 708.414902][ T5917] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 708.454249][ T5917] usb 3-1: Detected FT232R [ 708.549222][T18957] Bluetooth: MGMT ver 1.23 [ 708.634347][ T5917] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 708.872403][ T5917] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 708.904876][T13994] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 708.935523][T18966] GUP no longer grows the stack in syz.0.4746 (18966): 200000004000-20000000a000 (200000002000) [ 708.981466][T18966] CPU: 1 UID: 0 PID: 18966 Comm: syz.0.4746 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.981535][T18966] Tainted: [L]=SOFTLOCKUP [ 708.981551][T18966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.981581][T18966] Call Trace: [ 708.981595][T18966] [ 708.981621][T18966] dump_stack_lvl+0x100/0x190 [ 708.981687][T18966] gup_vma_lookup.cold+0x83/0x96 [ 708.981749][T18966] __get_user_pages+0x241/0x34d0 [ 708.981818][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.981882][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.981933][T18966] ? find_held_lock+0x2b/0x80 [ 708.981980][T18966] ? mtree_load+0x311/0xa40 [ 708.982029][T18966] ? __pfx___get_user_pages+0x10/0x10 [ 708.982089][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.982147][T18966] get_user_pages_remote+0x3d2/0xb10 [ 708.982204][T18966] ? mas_new_root+0x690/0x6e0 [ 708.982255][T18966] ? __pfx_get_user_pages_remote+0x10/0x10 [ 708.982314][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.982369][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.982427][T18966] __access_remote_vm+0x3ba/0xa70 [ 708.982484][T18966] ? do_raw_spin_lock+0x128/0x260 [ 708.982532][T18966] ? __pfx___access_remote_vm+0x10/0x10 [ 708.982584][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.982642][T18966] ? alloc_pages_noprof+0x233/0x390 [ 708.982700][T18966] proc_pid_cmdline_read+0x4f2/0x8c0 [ 708.982750][T18966] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 708.982797][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.982848][T18966] ? rw_verify_area+0xce/0x6d0 [ 708.982892][T18966] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 708.982934][T18966] vfs_readv+0x5d8/0x8d0 [ 708.982991][T18966] ? __pfx_vfs_readv+0x10/0x10 [ 708.983045][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.983118][T18966] ? __fget_files+0x21f/0x3d0 [ 708.983186][T18966] ? do_preadv+0x1ac/0x270 [ 708.983225][T18966] do_preadv+0x1ac/0x270 [ 708.983272][T18966] ? __pfx_do_preadv+0x10/0x10 [ 708.983319][T18966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 708.983378][T18966] do_syscall_64+0x106/0xf80 [ 708.983444][T18966] ? irqentry_exit+0x138/0x670 [ 708.983495][T18966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.983537][T18966] RIP: 0033:0x7fee0a59c629 [ 708.983568][T18966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.983613][T18966] RSP: 002b:00007fee0b400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 708.983653][T18966] RAX: ffffffffffffffda RBX: 00007fee0a815fa0 RCX: 00007fee0a59c629 [ 708.983682][T18966] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 708.983708][T18966] RBP: 00007fee0a632b39 R08: 00000000fffffff9 R09: 0000000000000000 [ 708.983735][T18966] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 708.983761][T18966] R13: 00007fee0a816038 R14: 00007fee0a815fa0 R15: 00007ffe077146c8 [ 708.983816][T18966] [ 709.275926][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.287295][T13994] usb 5-1: Using ep0 maxpacket: 16 [ 709.387439][T13994] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 709.424112][T13994] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 709.484452][T13994] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 709.492708][T13994] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 709.497548][T16220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.517053][ T5832] usb 3-1: USB disconnect, device number 14 [ 709.615692][ T5832] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 709.645500][T13994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 709.694335][ T5832] ftdi_sio 3-1:0.0: device disconnected [ 709.700142][T13994] usb 5-1: config 0 has no interface number 0 [ 709.716664][T13994] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 709.757810][T13994] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 709.769096][T18978] netlink: 'syz.5.4749': attribute type 29 has an invalid length. [ 709.781743][T13994] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 709.806001][T18978] netlink: 'syz.5.4749': attribute type 29 has an invalid length. [ 709.819102][T18979] sctp: [Deprecated]: syz.3.4751 (pid 18979) Use of int in maxseg socket option. [ 709.819102][T18979] Use struct sctp_assoc_value instead [ 709.833848][T13994] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 709.850081][T18978] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4749'. [ 709.874114][T13994] usb 5-1: config 0 interface 125 has no altsetting 0 [ 709.881007][T13994] usb 5-1: config 0 interface 125 has no altsetting 2 [ 709.888341][T18978] unsupported nla_type 58 [ 709.923739][T13994] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 709.958216][T13994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.998167][T13994] usb 5-1: Product: syz [ 710.002384][T13994] usb 5-1: Manufacturer: syz [ 710.054070][T13994] usb 5-1: SerialNumber: syz [ 710.115564][T13994] usb 5-1: config 0 descriptor?? [ 710.157365][T13994] usb 5-1: selecting invalid altsetting 2 [ 710.318373][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.798435][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.248407][T18971] loop8: detected capacity change from 0 to 40427 [ 711.272482][T18971] F2FS-fs (loop8): Image doesn't support compression [ 711.313505][T18971] F2FS-fs (loop8): build fault injection rate: 690 [ 711.342612][T18971] F2FS-fs (loop8): invalid crc value [ 711.364215][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.394774][ T5917] usb 5-1: USB disconnect, device number 5 [ 711.693524][T19010] loop5: detected capacity change from 0 to 512 [ 711.785689][T18971] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 711.804843][T19010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.834223][T19010] ext4 filesystem being mounted at /805/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 711.871745][T18971] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 712.017956][T18971] syz.8.4748: attempt to access beyond end of device [ 712.017956][T18971] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 712.120544][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.179089][T13994] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 712.321946][T14037] syz-executor: attempt to access beyond end of device [ 712.321946][T14037] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 712.375698][T13994] usb 4-1: Using ep0 maxpacket: 8 [ 712.396345][T14037] CPU: 1 UID: 0 PID: 14037 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 712.396404][T14037] Tainted: [L]=SOFTLOCKUP [ 712.396418][T14037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.396442][T14037] Call Trace: [ 712.396454][T14037] [ 712.396470][T14037] dump_stack_lvl+0x100/0x190 [ 712.396535][T14037] f2fs_handle_critical_error+0x5d7/0x970 [ 712.396596][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.396657][T14037] ? f2fs_build_fault_attr+0x53/0x280 [ 712.396715][T14037] f2fs_write_end_io+0xc3f/0xf30 [ 712.396780][T14037] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 712.396848][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.396906][T14037] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 712.396967][T14037] bio_endio+0x7a3/0x910 [ 712.397026][T14037] submit_bio_noacct+0x64c/0x2010 [ 712.397080][T14037] f2fs_submit_write_bio+0x133/0x350 [ 712.397139][T14037] __submit_merged_bio+0x331/0x7b0 [ 712.397206][T14037] __submit_merged_write_cond+0x3fe/0x510 [ 712.397279][T14037] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 712.397352][T14037] ? __pfx___might_resched+0x10/0x10 [ 712.397391][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.397448][T14037] f2fs_write_cache_pages+0x21c0/0x2720 [ 712.397524][T14037] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 712.397575][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.397631][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.397677][T14037] ? find_held_lock+0x2b/0x80 [ 712.397721][T14037] ? is_bpf_text_address+0x8a/0x1a0 [ 712.397765][T14037] ? is_bpf_text_address+0x8a/0x1a0 [ 712.397852][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.397935][T14037] ? bpf_ksym_find+0x124/0x1c0 [ 712.397992][T14037] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 712.398044][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.398091][T14037] ? rcu_is_watching+0x12/0xc0 [ 712.398137][T14037] f2fs_write_data_pages+0x799/0x16d0 [ 712.398199][T14037] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 712.398256][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.398305][T14037] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 712.398352][T14037] do_writepages+0x278/0x600 [ 712.398413][T14037] ? __pfx_do_writepages+0x10/0x10 [ 712.398465][T14037] ? do_raw_spin_unlock+0x145/0x1e0 [ 712.398506][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.398551][T14037] ? _raw_spin_unlock+0x28/0x50 [ 712.398591][T14037] filemap_writeback+0x22d/0x2e0 [ 712.398662][T14037] ? __pfx_filemap_writeback+0x10/0x10 [ 712.398768][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.398811][T14037] ? find_held_lock+0x2b/0x80 [ 712.398853][T14037] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 712.398896][T14037] ? f2fs_sync_dirty_inodes+0x38f/0x990 [ 712.398932][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.398989][T14037] f2fs_sync_dirty_inodes+0x452/0x990 [ 712.399049][T14037] block_operations+0x2a6/0xfc0 [ 712.399089][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.399134][T14037] ? finish_task_switch.isra.0+0x205/0xb80 [ 712.399189][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.399240][T14037] ? __pfx_block_operations+0x10/0x10 [ 712.399341][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.399389][T14037] ? ktime_get+0x200/0x300 [ 712.399435][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.399484][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.399530][T14037] ? rcu_is_watching+0x12/0xc0 [ 712.399576][T14037] f2fs_write_checkpoint+0x582/0x5550 [ 712.399657][T14037] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 712.399712][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.399756][T14037] ? rcu_is_watching+0x12/0xc0 [ 712.399794][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.399839][T14037] ? kthread_stop+0x280/0x680 [ 712.399907][T14037] kill_f2fs_super+0x3e5/0x490 [ 712.399951][T14037] ? __pfx_kill_f2fs_super+0x10/0x10 [ 712.400017][T14037] ? lockdep_hardirqs_on+0x78/0x100 [ 712.400061][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.400107][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.400173][T14037] deactivate_locked_super+0xc1/0x1b0 [ 712.400220][T14037] deactivate_super+0xe7/0x110 [ 712.400264][T14037] cleanup_mnt+0x21f/0x450 [ 712.400316][T14037] task_work_run+0x150/0x240 [ 712.400355][T14037] ? __pfx_task_work_run+0x10/0x10 [ 712.400393][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.400441][T14037] ? srso_alias_return_thunk+0x5/0xfbef5 [ 712.400502][T14037] exit_to_user_mode_loop+0x100/0x4a0 [ 712.400568][T14037] do_syscall_64+0x67c/0xf80 [ 712.400612][T14037] ? irqentry_exit+0x138/0x670 [ 712.400667][T14037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.400707][T14037] RIP: 0033:0x7fc7bf79d897 [ 712.400741][T14037] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 712.400779][T14037] RSP: 002b:00007ffdec824f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 712.400817][T14037] RAX: 0000000000000000 RBX: 00007fc7bf831ef0 RCX: 00007fc7bf79d897 [ 712.400842][T14037] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdec824fd0 [ 712.400867][T14037] RBP: 00007ffdec824fd0 R08: 00007ffdec825fd0 R09: 00000000ffffffff [ 712.400893][T14037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdec826060 [ 712.400918][T14037] R13: 00007fc7bf831ef0 R14: 00000000000addac R15: 00007ffdec8260a0 [ 712.400969][T14037] [ 712.403636][T13994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.411218][T14037] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 712.415891][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.948005][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.967881][T13994] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 712.977002][T13994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.027425][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.034300][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4767'. [ 713.049114][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.058614][T13994] usb 4-1: config 0 descriptor?? [ 713.080103][T19030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.096100][T19029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.108714][T19029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.360319][T13994] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 713.401916][T19040] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 713.408880][T19040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 713.436801][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.507043][T19040] vhci_hcd vhci_hcd.0: Device attached [ 713.684352][T13994] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 713.721817][T19051] loop5: detected capacity change from 0 to 64 [ 713.746273][ T5832] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 713.776027][ T5805] usb 4-1: USB disconnect, device number 30 [ 713.888725][T19051] Trying to free block not in datazone [ 713.904135][T13994] usb 3-1: config 0 has no interfaces? [ 713.923152][T13994] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 713.973533][T13994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.017943][T13994] usb 3-1: config 0 descriptor?? [ 714.241665][T19041] usb 37-1: recv xbuf, 0 [ 714.252343][T13994] usb 3-1: string descriptor 0 read error: -71 [ 714.288444][T13994] usb 3-1: USB disconnect, device number 15 [ 714.323998][ T36] vhci_hcd vhci_hcd.2: stop threads [ 714.337296][ T36] vhci_hcd vhci_hcd.2: release socket [ 714.402499][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 714.434099][ T5832] usb 37-1: device descriptor read/64, error -71 [ 714.476109][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.674176][ T5832] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 715.454070][ T5805] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 715.514537][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.638624][ T5805] usb 3-1: Using ep0 maxpacket: 8 [ 715.690124][ T5805] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 715.725881][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.758067][ T5805] usb 3-1: Product: syz [ 715.762276][ T5805] usb 3-1: Manufacturer: syz [ 715.802909][ T5805] usb 3-1: SerialNumber: syz [ 715.859286][ T5805] usb 3-1: config 0 descriptor?? [ 715.919173][ T5805] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 716.531591][T19119] input: syz1 as /devices/virtual/input/input36 [ 716.561857][ T2147] block nbd1: Possible stuck request ffff888027590000: control (read@0,1024B). Runtime 360 seconds [ 716.569260][T19119] input: failed to attach handler leds to device input36, error: -6 [ 716.572738][ T2147] block nbd1: Possible stuck request ffff888027590200: control (read@1024,1024B). Runtime 360 seconds [ 716.595052][ T2147] block nbd1: Possible stuck request ffff888027590400: control (read@2048,1024B). Runtime 360 seconds [ 716.919223][T19122] loop5: detected capacity change from 0 to 4096 [ 717.011837][ T5805] usb 3-1: USB disconnect, device number 16 [ 717.089686][ T30] audit: type=1800 audit(1771803241.833:393): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4797" name="file1" dev="loop5" ino=33 res=0 errno=0 [ 717.200506][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4801'. [ 717.605474][ T1203] net_ratelimit: 2 callbacks suppressed [ 717.605503][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.163451][T19159] vlan0: entered allmulticast mode [ 718.245930][T19159] bridge0: port 3(vlan0) entered blocking state [ 718.248407][T19165] loop0: detected capacity change from 0 to 512 [ 718.304158][T19159] bridge0: port 3(vlan0) entered disabled state [ 718.360247][T19159] vlan0: entered promiscuous mode [ 718.431654][T19165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.499391][T19165] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 718.634977][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.887828][T18482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.931688][T19187] dummy0: entered promiscuous mode [ 718.954340][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.972078][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4816'. [ 719.079458][T19187] dummy0 (unregistering): left promiscuous mode [ 719.291131][T19193] loop0: detected capacity change from 0 to 2048 [ 719.400114][T19193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 719.522475][T19193] UDF-fs: warning (device loop0): udf_rmdir: empty directory has nlink != 2 (0) [ 719.673559][T19200] loop5: detected capacity change from 0 to 128 [ 719.674602][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.399547][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.560780][T19213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4827'. [ 720.714691][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.790461][T19218] loop5: detected capacity change from 0 to 64 [ 720.968336][T19218] hfs: keylen 94 too large [ 721.012541][T19218] hfs: fail to get the keylen: node_id 2, record index 1 [ 721.034800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.299673][ T5824] hfs: node 4:2 still has 1 user(s)! [ 721.754758][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.995106][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.794974][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.700549][T19277] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 723.834469][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.875318][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.043992][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.366949][T19308] loop0: detected capacity change from 0 to 512 [ 725.409025][T19308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 725.526538][T19308] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4858: inode has both inline data and extents flags [ 725.623806][T19316] loop2: detected capacity change from 0 to 512 [ 725.654356][T19308] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 725.654989][T19308] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4858: couldn't read orphan inode 15 (err -117) [ 725.664214][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 725.664250][ C1] EXT4-fs (loop0): initial error at time 1771803250: ext4_orphan_get:1391: inode 15 [ 725.664307][ C1] EXT4-fs (loop0): last error at time 1771803250: ext4_orphan_get:1391: inode 15 [ 725.791914][T19308] loop0: lost filesystem error report for type 5 error -117 [ 725.813211][T19316] ext4: Bad value for 'sb' [ 725.854112][T19308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.914557][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.042187][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4863'. [ 726.158024][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.216512][T18482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.608372][T19331] loop5: detected capacity change from 0 to 256 [ 726.761819][T19331] FAT-fs (loop5): Directory bread(block 64) failed [ 726.784993][T19331] FAT-fs (loop5): Directory bread(block 65) failed [ 726.821802][T19331] FAT-fs (loop5): Directory bread(block 66) failed [ 726.835021][T19331] FAT-fs (loop5): Directory bread(block 67) failed [ 726.842324][T19331] FAT-fs (loop5): Directory bread(block 68) failed [ 726.853457][T19331] FAT-fs (loop5): Directory bread(block 69) failed [ 726.863723][T19331] FAT-fs (loop5): Directory bread(block 70) failed [ 726.870596][T19331] FAT-fs (loop5): Directory bread(block 71) failed [ 726.877645][T19331] FAT-fs (loop5): Directory bread(block 72) failed [ 726.887368][T19331] FAT-fs (loop5): Directory bread(block 73) failed [ 726.954923][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.291541][T19342] loop4: detected capacity change from 0 to 2048 [ 727.356228][T19342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.567550][T19348] loop2: detected capacity change from 0 to 1024 [ 727.626747][T16436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.660812][T19348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec019, mo2=0002] [ 727.697195][T19348] System zones: 1-12 [ 727.706951][T19348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.994901][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.184426][T17468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.551029][T19378] loop5: detected capacity change from 0 to 128 [ 728.603378][T19378] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 728.626494][T19379] loop3: detected capacity change from 0 to 1024 [ 728.769748][T19379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.802750][T19378] ext4 filesystem being mounted at /826/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 728.884632][T19386] loop8: detected capacity change from 0 to 512 [ 728.978636][ T30] audit: type=1800 audit(1771803253.703:394): pid=19379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4889" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 729.036310][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.126905][T19391] loop0: detected capacity change from 0 to 1764 [ 729.171903][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.196897][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.346485][ T5824] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.463889][T19395] loop4: detected capacity change from 0 to 1024 [ 729.606770][T19397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.787164][T19397] EXT4-fs (loop8): shut down requested (0) [ 729.856809][T19407] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 729.967627][T19407] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 730.077049][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.332882][T14037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.022914][T19431] macvlan2: entered promiscuous mode [ 731.115182][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.134637][T19432] macvlan3: entered promiscuous mode [ 731.154657][T19438] set_capacity_and_notify: 3 callbacks suppressed [ 731.154685][T19438] loop5: detected capacity change from 0 to 256 [ 731.243426][T19440] evm: overlay not supported [ 731.249356][T19438] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 731.293810][ T30] audit: type=1800 audit(1771803512.030:395): pid=19438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4915" name="file2" dev="loop5" ino=1048820 res=0 errno=0 [ 732.034063][ T5832] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 732.186342][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.216976][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.238522][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.252667][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.303897][ T5832] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 732.337793][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.375476][ T5832] usb 6-1: config 0 descriptor?? [ 732.710251][T19466] loop2: detected capacity change from 0 to 128 [ 732.841156][ T5832] cm6533_jd 0003:0D8C:0022.002C: unknown main item tag 0x0 [ 732.874283][ T5832] cm6533_jd 0003:0D8C:0022.002C: unknown main item tag 0x0 [ 732.922378][ T5832] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.002C/input/input37 [ 733.024784][ T5832] cm6533_jd 0003:0D8C:0022.002C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 733.137008][ T5832] usb 6-1: USB disconnect, device number 36 [ 733.206536][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.527158][T19477] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4932'. [ 733.601017][T19471] fido_id[19471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 734.144684][T19489] vivid-000: disconnect [ 734.174785][T19488] vivid-000: reconnect [ 734.234574][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.354196][ T5805] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 734.541301][T19500] loop0: detected capacity change from 0 to 128 [ 734.555720][ T5805] usb 6-1: Using ep0 maxpacket: 16 [ 734.577447][ T5805] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 734.593123][T19500] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 734.603981][ T5805] usb 6-1: config 1 has no interface number 0 [ 734.634937][T19500] hpfs: filesystem error: improperly stopped [ 734.638005][ T5805] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 734.641298][T19500] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 734.641331][T19500] hpfs: You really don't want any checks? You are crazy... [ 734.641706][T19500] hpfs: hpfs_map_sector(): read error [ 734.641726][T19500] hpfs: code page support is disabled [ 734.641840][T19500] hpfs: hpfs_map_4sectors(): unaligned read [ 734.696056][ T5805] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 734.720804][T19500] hpfs: hpfs_map_4sectors(): unaligned read [ 734.730319][T19500] hpfs: filesystem error: unable to find root dir [ 734.738632][ T5805] usb 6-1: config 1 interface 105 has no altsetting 0 [ 734.767351][ T5805] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 734.776626][ T29] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 734.789187][T19500] hpfs: hpfs_map_4sectors(): unaligned read [ 734.798924][T19500] hpfs: hpfs_map_sector(): read error [ 734.800601][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.813281][ T5805] usb 6-1: Product: syz [ 734.817939][ T5805] usb 6-1: Manufacturer: syz [ 734.822339][T19500] hpfs: hpfs_map_4sectors(): unaligned read [ 734.822535][ T5805] usb 6-1: SerialNumber: syz [ 734.838443][T19500] hpfs: hpfs_map_sector(): read error [ 734.851365][T19487] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 734.859282][T19487] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 734.959724][ T29] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 734.989453][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.025826][ T29] usb 3-1: config 0 descriptor?? [ 735.050539][ T29] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 735.249534][T19514] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.264240][ T29] gp8psk: usb in 128 operation failed. [ 735.274728][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.288048][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.297256][T19487] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 735.323254][T19487] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 735.487840][ T29] gp8psk: usb in 146 operation failed. [ 735.493669][ T29] gp8psk: failed to get FW version [ 735.505614][ T29] gp8psk: FPGA Version = 157 [ 735.708096][ T29] gp8psk: usb in 138 operation failed. [ 735.713727][ T29] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 735.747337][ T29] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 735.789227][ T29] usb 3-1: USB disconnect, device number 17 [ 735.789323][T19523] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4952'. [ 735.944016][ T5805] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 735.961174][T19525] vivid-004: disconnect [ 735.979779][ T5805] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 735.982906][T19525] vivid-004: reconnect [ 736.025943][ T5805] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 90:7d:00:73:ae:b9 [ 736.062135][ T5805] usb 6-1: USB disconnect, device number 37 [ 736.090139][ T5805] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 736.225388][ T5805] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 736.245421][ T5805] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 736.291013][ T5805] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 736.318301][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.760178][T19533] loop2: detected capacity change from 0 to 4096 [ 736.809316][T19533] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 736.956600][T19533] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 737.355261][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.754423][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 737.944758][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 737.968174][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 737.986927][ T9] usb 4-1: config 179 has no interface number 0 [ 738.003489][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 738.063542][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 738.116431][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 738.190676][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 738.272277][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 738.299059][T19560] loop0: detected capacity change from 0 to 32768 [ 738.317330][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.398435][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.407784][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 738.419522][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.432581][T19549] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 738.448904][T19560] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 738.567802][T19560] XFS (loop0): Ending clean mount [ 738.638375][T19560] XFS (loop0): Corruption warning: Metadata has LSN (16777217:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 738.655150][T19560] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 [ 738.666643][T19560] XFS (loop0): Unmount and run xfs_repair [ 738.672446][T19560] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 738.680051][T19560] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 738.689366][T19560] 00000010: 00 00 00 00 00 00 00 ff 01 00 00 01 00 00 00 10 ................ [ 738.698309][T19560] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 738.707288][T19560] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 738.716379][T19560] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 738.726084][T19560] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 738.737918][T19560] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 738.747345][T19560] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 738.756310][T19560] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x14 len 4 error 74 [ 738.776088][T19560] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x3fc/0x9d0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 738.791040][T19560] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 738.862502][T19549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.954720][T19549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.005952][T18482] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 739.225568][ T5917] usb 4-1: USB disconnect, device number 31 [ 739.225589][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 739.240222][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 739.336598][T19586] loop2: detected capacity change from 0 to 64 [ 739.437685][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.441354][T19588] loop0: detected capacity change from 0 to 128 [ 739.486787][ T30] audit: type=1800 audit(1771803520.210:396): pid=19586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4978" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 739.574463][T19588] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 740.083167][ T5917] kernel write not supported for file /ppp (pid: 5917 comm: kworker/1:6) [ 740.484289][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.547678][T19612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.556897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.034271][T19619] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4993'. [ 741.150284][T19623] loop5: detected capacity change from 0 to 16 [ 741.189710][T19623] erofs (device loop5): mounted with root inode @ nid 36. [ 741.238089][T19623] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 741.299494][T15501] erofs (device loop5): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 741.355594][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.364045][T19623] erofs (device loop5): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 741.392258][T19623] erofs (device loop5): read error -117 @ 1 of nid 89 [ 741.491129][ T30] audit: type=1800 audit(1771803522.230:397): pid=19623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4995" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 741.517036][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.905277][ T1203] kernel write not supported for file /sg0 (pid: 1203 comm: kworker/0:2) [ 742.121066][T19652] loop4: detected capacity change from 0 to 4096 [ 742.274272][ T5805] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 742.284029][ T30] audit: type=1800 audit(1771803523.020:398): pid=19652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5006" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 742.450501][ T5805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.491275][ T5805] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 742.520209][ T5805] usb 4-1: config 1 has no interface number 0 [ 742.534066][ T5805] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.557326][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.573069][ T5805] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.593053][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.603181][ T5805] usb 4-1: Product: syz [ 742.623571][ T5805] usb 4-1: Manufacturer: syz [ 742.632122][ T5805] usb 4-1: SerialNumber: syz [ 742.759410][ T1203] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 742.799421][ T1203] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 742.889435][ T5805] usb 4-1: selecting invalid altsetting 1 [ 743.018702][T19668] loop5: detected capacity change from 0 to 2048 [ 743.094130][ T5805] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 743.099936][T19668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.100199][ T5805] cdc_ncm 4-1:1.1: bind() failure [ 743.118749][T19668] ext4 filesystem being mounted at /845/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.269979][ T5805] usb 4-1: USB disconnect, device number 32 [ 743.460880][ T5824] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.595697][ T1203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.404830][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.634596][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.734101][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 744.951377][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.003198][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.046163][ T29] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 745.065699][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.088880][ T29] usb 9-1: config 0 descriptor?? [ 745.606978][ T29] cm6533_jd 0003:0D8C:0022.002E: unknown main item tag 0x0 [ 745.649336][ T29] cm6533_jd 0003:0D8C:0022.002E: unknown main item tag 0x0 [ 745.674973][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.677326][ T29] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.002E/input/input38 [ 745.742087][ T29] cm6533_jd 0003:0D8C:0022.002E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 746.016529][ T29] usb 9-1: USB disconnect, device number 10 [ 746.371370][T19719] fido_id[19719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 746.522673][T19724] loop5: detected capacity change from 0 to 1024 [ 746.529189][ T1203] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 746.643613][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.650334][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.653532][T19726] netlink: 'syz.2.5036': attribute type 2 has an invalid length. [ 746.658782][ T2147] block nbd1: Possible stuck request ffff888027590000: control (read@0,1024B). Runtime 390 seconds [ 746.679979][ T2147] block nbd1: Possible stuck request ffff888027590200: control (read@1024,1024B). Runtime 390 seconds [ 746.691426][ T2147] block nbd1: Possible stuck request ffff888027590400: control (read@2048,1024B). Runtime 390 seconds [ 746.714832][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.723399][ T1203] usb 4-1: Using ep0 maxpacket: 32 [ 746.734781][ T1203] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 746.743171][ T1203] usb 4-1: config 0 has no interface number 0 [ 746.749578][ T1203] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 746.762375][ T1203] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 746.771759][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.780421][ T1203] usb 4-1: Product: syz [ 746.785081][ T1203] usb 4-1: Manufacturer: syz [ 746.789696][ T1203] usb 4-1: SerialNumber: syz [ 746.797269][T19727] netlink: 'syz.2.5036': attribute type 2 has an invalid length. [ 746.798219][ T1203] usb 4-1: config 0 descriptor?? [ 746.838367][ T1203] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 746.887505][ T1203] em28xx 4-1:0.132: Video interface 132 found: [ 746.934759][T19726] !: entered promiscuous mode [ 746.945626][T19732] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5037'. [ 747.058162][T17023] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.109402][T17023] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.225219][T19727] !: left promiscuous mode [ 747.434287][T16220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.545934][T17023] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.568703][T17023] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.652921][ T1203] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 747.693691][T19738] loop0: detected capacity change from 0 to 32768 [ 747.706155][T16220] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 747.758844][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.791914][T19738] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 747.867761][T19738] XFS (loop0): Ending clean mount [ 747.871607][T16220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.884420][T16220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.887818][T17023] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.894577][T16220] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.918016][T16220] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 747.934190][T16220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.960266][ T1203] em28xx 4-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 748.005864][T16220] usb 6-1: config 0 descriptor?? [ 748.011599][T17023] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.022083][ T1203] em28xx 4-1:0.132: board has no eeprom [ 748.059082][T18482] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 748.084783][ T1203] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 748.092671][ T1203] em28xx 4-1:0.132: analog set to bulk mode. [ 748.119235][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 748.145749][ T1203] usb 4-1: USB disconnect, device number 33 [ 748.156014][ T1203] em28xx 4-1:0.132: Disconnecting em28xx [ 748.317772][T17023] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.383302][T17023] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.562208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.623456][T16220] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 748.751388][T16220] usb 6-1: USB disconnect, device number 38 [ 748.843882][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.348560][T19769] fido_id[19769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 749.874801][ T5917] page_pool_release_retry() stalled pool shutdown: id 99, 1 inflight 60 sec [ 749.886949][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 749.915137][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.969162][T17023] bridge_slave_1: left allmulticast mode [ 750.037413][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 750.054184][T17023] bridge_slave_1: left promiscuous mode [ 750.086453][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 750.093695][T17023] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.115684][T19771] loop3: detected capacity change from 0 to 131072 [ 750.148660][T19771] F2FS-fs (loop3): invalid crc value [ 750.176231][ T9] usb 4-1: Decoder not found [ 750.197092][T17023] bridge_slave_0: left allmulticast mode [ 750.202773][T17023] bridge_slave_0: left promiscuous mode [ 750.214654][ T9] em28xx 4-1:0.132: failed to create media graph [ 750.250415][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 750.267866][T17023] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.299435][T19771] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 750.322256][T19771] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 750.471054][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 750.485289][T16220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.527036][ T1203] em28xx 4-1:0.132: Closing input extension [ 750.928073][ T1203] em28xx 4-1:0.132: Freeing device [ 750.972565][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.649139][T19823] loop2: detected capacity change from 0 to 512 [ 751.689751][T19823] EXT4-fs: Ignoring removed mblk_io_submit option [ 751.718244][T19823] EXT4-fs: inline encryption not supported [ 751.725658][T19823] EXT4-fs: Ignoring removed mblk_io_submit option [ 751.760861][T19823] EXT4-fs (loop2): Test dummy encryption mode enabled [ 751.833449][T19823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 751.909309][T19823] EXT4-fs (loop2): 1 truncate cleaned up [ 751.961513][T19823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.996154][T13994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.056633][ T30] audit: type=1800 audit(1771803532.760:399): pid=19823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5064" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 752.148173][T17468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.149535][T17023] team0: Port device bridge1 removed [ 752.304691][T17023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.379752][T17023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.436343][T17023] bond0 (unregistering): Released all slaves [ 752.509924][T19814] ------------[ cut here ]------------ [ 752.509985][T19814] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 752.510037][T19814] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2693 at mac80211_hwsim_sta_rc_update+0x5db/0x840, CPU#1: syz.5.5062/19814 [ 752.510109][T19814] Modules linked in: [ 752.510167][T19814] CPU: 1 UID: 0 PID: 19814 Comm: syz.5.5062 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.510226][T19814] Tainted: [L]=SOFTLOCKUP [ 752.510243][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.510270][T19814] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 752.510321][T19814] Code: 00 48 8d 3d 05 94 c2 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 d2 db e4 fa e8 fd 6c 6a 04 [ 752.510363][T19814] RSP: 0018:ffffc90003847120 EFLAGS: 00010246 [ 752.510399][T19814] RAX: ffff888034cbea90 RBX: 0000000000000000 RCX: ffff88807a780ec0 [ 752.510428][T19814] RDX: 0000000000000000 RSI: ffff888034cbf002 RDI: ffffffff90e63640 [ 752.510457][T19814] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 752.510484][T19814] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 752.510513][T19814] R13: ffff88807a781090 R14: ffff888054d0b100 R15: 0000000000000005 [ 752.510546][T19814] FS: 00007fe0468a76c0(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000 [ 752.510584][T19814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.510613][T19814] CR2: 00007fc7c05456b8 CR3: 0000000085aab000 CR4: 0000000000350ef0 [ 752.510643][T19814] Call Trace: [ 752.510665][T19814] [ 752.510696][T19814] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 752.510743][T19814] mac80211_hwsim_sta_add+0xc9/0x290 [ 752.510794][T19814] drv_sta_state+0x887/0x1960 [ 752.510867][T19814] sta_info_insert_rcu+0x170b/0x2fa0 [ 752.510930][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.510999][T19814] sta_info_insert+0x16/0xd0 [ 752.511047][T19814] ieee80211_add_station+0x471/0x6d0 [ 752.511107][T19814] nl80211_new_station+0x145b/0x1dd0 [ 752.511159][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.511220][T19814] ? __pfx_nl80211_new_station+0x10/0x10 [ 752.511317][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.511369][T19814] ? nl80211_pre_doit+0x19a/0xae0 [ 752.511443][T19814] genl_family_rcv_msg_doit+0x214/0x300 [ 752.511512][T19814] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 752.511571][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.511623][T19814] ? genl_get_cmd+0x3ef/0x720 [ 752.511699][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.511750][T19814] ? security_capable+0x80/0x260 [ 752.511804][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.511854][T19814] ? ns_capable+0xd2/0xf0 [ 752.511903][T19814] genl_rcv_msg+0x560/0x800 [ 752.511969][T19814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.512028][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.512079][T19814] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 752.512145][T19814] ? __pfx_nl80211_new_station+0x10/0x10 [ 752.512193][T19814] ? __pfx_nl80211_post_doit+0x10/0x10 [ 752.512272][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.512331][T19814] netlink_rcv_skb+0x159/0x420 [ 752.512386][T19814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.512449][T19814] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 752.512523][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.512575][T19814] ? netlink_deliver_tap+0x1ae/0xcc0 [ 752.512633][T19814] genl_rcv+0x28/0x40 [ 752.512694][T19814] netlink_unicast+0x5aa/0x870 [ 752.512755][T19814] ? __pfx_netlink_unicast+0x10/0x10 [ 752.512828][T19814] netlink_sendmsg+0x8b0/0xda0 [ 752.512890][T19814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.512941][T19814] ? PageHuge+0x170/0x180 [ 752.512986][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.513038][T19814] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 752.513103][T19814] ____sys_sendmsg+0xa54/0xc30 [ 752.513169][T19814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.513239][T19814] ? __pfx_futex_wake_mark+0x10/0x10 [ 752.513297][T19814] ___sys_sendmsg+0x190/0x1e0 [ 752.513363][T19814] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.513425][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.513502][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.513590][T19814] __sys_sendmsg+0x170/0x220 [ 752.513638][T19814] ? __pfx___sys_sendmsg+0x10/0x10 [ 752.513689][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.513741][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.513815][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.513876][T19814] do_syscall_64+0x106/0xf80 [ 752.514365][T19814] ? irqentry_exit+0x138/0x670 [ 752.514418][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.514462][T19814] RIP: 0033:0x7fe04599c629 [ 752.514496][T19814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.514536][T19814] RSP: 002b:00007fe0468a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.514579][T19814] RAX: ffffffffffffffda RBX: 00007fe045c15fa0 RCX: 00007fe04599c629 [ 752.514608][T19814] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 752.514636][T19814] RBP: 00007fe045a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 752.514675][T19814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.514703][T19814] R13: 00007fe045c16038 R14: 00007fe045c15fa0 R15: 00007fffd055ca88 [ 752.514760][T19814] [ 752.514782][T19814] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 752.514812][T19814] CPU: 1 UID: 0 PID: 19814 Comm: syz.5.5062 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.514870][T19814] Tainted: [L]=SOFTLOCKUP [ 752.514885][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 752.514911][T19814] Call Trace: [ 752.514925][T19814] [ 752.514941][T19814] dump_stack_lvl+0x100/0x190 [ 752.515005][T19814] vpanic+0x552/0x970 [ 752.515046][T19814] ? __pfx_vpanic+0x10/0x10 [ 752.515102][T19814] panic+0xd1/0xe0 [ 752.515141][T19814] ? __pfx_panic+0x10/0x10 [ 752.515204][T19814] check_panic_on_warn.cold+0x19/0x34 [ 752.515250][T19814] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 752.515296][T19814] __warn.cold+0x191/0x348 [ 752.515342][T19814] __report_bug+0x296/0x3d0 [ 752.515382][T19814] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 752.515433][T19814] ? __pfx___report_bug+0x10/0x10 [ 752.515471][T19814] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 752.515514][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.515565][T19814] ? lockdep_hardirqs_on+0x78/0x100 [ 752.515636][T19814] report_bug_entry+0xe1/0x290 [ 752.515685][T19814] ? mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 752.515732][T19814] handle_bug+0x1c9/0x2a0 [ 752.515787][T19814] exc_invalid_op+0x17/0x50 [ 752.515841][T19814] asm_exc_invalid_op+0x1a/0x20 [ 752.515881][T19814] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 752.515930][T19814] Code: 00 48 8d 3d 05 94 c2 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 d2 db e4 fa e8 fd 6c 6a 04 [ 752.515970][T19814] RSP: 0018:ffffc90003847120 EFLAGS: 00010246 [ 752.516000][T19814] RAX: ffff888034cbea90 RBX: 0000000000000000 RCX: ffff88807a780ec0 [ 752.516027][T19814] RDX: 0000000000000000 RSI: ffff888034cbf002 RDI: ffffffff90e63640 [ 752.516054][T19814] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 752.516079][T19814] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 752.516106][T19814] R13: ffff88807a781090 R14: ffff888054d0b100 R15: 0000000000000005 [ 752.516172][T19814] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 752.516217][T19814] mac80211_hwsim_sta_add+0xc9/0x290 [ 752.516262][T19814] drv_sta_state+0x887/0x1960 [ 752.516330][T19814] sta_info_insert_rcu+0x170b/0x2fa0 [ 752.516392][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.516459][T19814] sta_info_insert+0x16/0xd0 [ 752.516505][T19814] ieee80211_add_station+0x471/0x6d0 [ 752.516567][T19814] nl80211_new_station+0x145b/0x1dd0 [ 752.516619][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.516726][T19814] ? __pfx_nl80211_new_station+0x10/0x10 [ 752.516820][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.516869][T19814] ? nl80211_pre_doit+0x19a/0xae0 [ 752.516942][T19814] genl_family_rcv_msg_doit+0x214/0x300 [ 752.517007][T19814] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 752.517068][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.517118][T19814] ? genl_get_cmd+0x3ef/0x720 [ 752.517181][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.517227][T19814] ? security_capable+0x80/0x260 [ 752.517274][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.517314][T19814] ? ns_capable+0xd2/0xf0 [ 752.517355][T19814] genl_rcv_msg+0x560/0x800 [ 752.517417][T19814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.517474][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.517524][T19814] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 752.517588][T19814] ? __pfx_nl80211_new_station+0x10/0x10 [ 752.517634][T19814] ? __pfx_nl80211_post_doit+0x10/0x10 [ 752.517721][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.517778][T19814] netlink_rcv_skb+0x159/0x420 [ 752.517829][T19814] ? __pfx_genl_rcv_msg+0x10/0x10 [ 752.517890][T19814] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 752.517966][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.518013][T19814] ? netlink_deliver_tap+0x1ae/0xcc0 [ 752.518068][T19814] genl_rcv+0x28/0x40 [ 752.518119][T19814] netlink_unicast+0x5aa/0x870 [ 752.518176][T19814] ? __pfx_netlink_unicast+0x10/0x10 [ 752.518246][T19814] netlink_sendmsg+0x8b0/0xda0 [ 752.518305][T19814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.518354][T19814] ? PageHuge+0x170/0x180 [ 752.518401][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.518449][T19814] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 752.518510][T19814] ____sys_sendmsg+0xa54/0xc30 [ 752.518572][T19814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.518639][T19814] ? __pfx_futex_wake_mark+0x10/0x10 [ 752.518702][T19814] ___sys_sendmsg+0x190/0x1e0 [ 752.518764][T19814] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.518823][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.518890][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.518972][T19814] __sys_sendmsg+0x170/0x220 [ 752.519017][T19814] ? __pfx___sys_sendmsg+0x10/0x10 [ 752.519059][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.519106][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.519175][T19814] ? srso_alias_return_thunk+0x5/0xfbef5 [ 752.519233][T19814] do_syscall_64+0x106/0xf80 [ 752.519279][T19814] ? irqentry_exit+0x138/0x670 [ 752.519329][T19814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.519372][T19814] RIP: 0033:0x7fe04599c629 [ 752.519404][T19814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.519445][T19814] RSP: 002b:00007fe0468a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.519483][T19814] RAX: ffffffffffffffda RBX: 00007fe045c15fa0 RCX: 00007fe04599c629 [ 752.519512][T19814] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 752.519539][T19814] RBP: 00007fe045a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 752.519566][T19814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.519592][T19814] R13: 00007fe045c16038 R14: 00007fe045c15fa0 R15: 00007fffd055ca88 [ 752.519646][T19814] [ 752.520045][T19814] Kernel Offset: disabled