last executing test programs: 1m18.295858817s ago: executing program 0 (id=121): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140), 0x0, 0x97a1, &(0x7f0000009780)="$eJzs/QWcrWWhuH/Phg1sOgRBVEBKTFJCFOlQRElRQpCWFBABpUMJFRQBle7u7i7p7u7ujvezYYOKFxzP7z3/g4fruj7uWbNi1tzr/j7346x5hrWWnHfROQcGxhp4p3dP/94Fu9697GKjL7juiTsPvmnPHRZ6bNjFI75zMvbsw07nGHY658DAwKBh9zPoncsGz3bCicMNDB4Y+r+/N9rIoww32sDAKMPODrufgZneORn1oHdv99b74oFOMvTbbf/Ov7cbfeidDP1k6eXeWGtgYGDIP3z90HFN8y8PVNqSc8w379+t3nMbbtjVg/5+3dung9/5N+p+AwOj7jPwwdvH0NuO8A9f+7/Z0O851mQDi9/9EXzv/3MtOcd8C7zPf+haHH7YZTMNXePvX4PG3r+d77Do6o8Mm8JBwyZu8D+sl49iu/9/ask55l1w4IPX8cBC82zy8Ftv7zcHzz0wMHiegYHB8w4MDJ7vo/ao/5k+0o2vqqqqPpLmmHP6oc/Zh3vfzwND3v25ln4uvOT1ae8fGBi80DvPEwcv9+5zwaqqqqqqqqr6z2yOOaefC57/j/Vhz/8nOX3rsXv+X1VVVVVVVfV/pwXmmHP6oc/13/f8f4IPe/7/9KNHHvjO3/7PPtM7X/XmR/sgqqqqqqqqqupDm3cBfP4/yYc9/7/shEmu7Pl/VVVVVVVV1f+dFnnrrbc2+4fX2Rt28VTvXk/P/8986M5lPrIBV1VVVVVVVdV/uzefOO2sv7/m+0QD73u997cb9nuBQcecc/XVH9lA/9caZdQPuXLQv/4+ZPP/xbH9f9JQ5yGHTTIwsNbiH/VQ6iPo/8xr1df/J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/e6//f+ZxK7z7XvCfn2L6m0/7+1e+/d7/gxda4IktPqKhfxR9XI//D6w2aGBgmO9Yqw0MDCw0xyKLTTUwMHDazdNPMfnAe9fNPPS6WccZ/u03iH/3PxOZZ2y+480nfed06IYyMO5793HM2/e/wFv7Dj/ofYP4h8Y+6cADV13ypRnefzrlBz+O4d77bPQTH333v2UZ7n03GvIBX/zu/b/7WN7vPGzsUw0d+9Trr7nO1OtttPFXVltz+VVWWmWltWaZbsZpZ5hllhlnnHrl1dZYaZp3Pn7QnE3y9se5/p05G+39c/bEHP84Z+9/bB80Z5N8+Jy9fY+7XDrkW+/O2eD/5pzN9eFzNslqw77R2LOPMLDc23MzaGBg7LlHGNhw6JlpRxoYGHueYbedYOhtvzHOcAMDO/39gQ79bKT3tsFBmw+9zZLzLjrnO7upgYG/n/69D3g/+xGHjXz2YadzDDud851vM9bA3zfFwbOdcOJwQ+fin6ZjtJFHGW60gYFRhp0ddj8Ds7xzMsrp797uA95n/X0DfftlVrZ/59/bjT4wMPD23x9NtPyZ2wyd+v+F92n/f/r//3/xmnnQe9vjoGH/ht3mHa855lvg79/r7WkYOnfDD7tspqEm/8Nvbf9P/ct4JxkyMMmHjPdDXhfn7Wj7WuO08bb8n3pdHBrvBB8y3g95Hd8PHO8S9+/+yDt39T823vft6xZ8++Ps/86+buDD93XD0x2sdMVn37+v+84HD/GfdpfvztFI77vRB+3rJthj4s2H3v/sH76vW3Do2Ef4p33dcAMDY8/17r5u6I5v3hEGdhp6ZrqhZ+YbYeCQoWemf/vMyAPnDD3z1RXWXmPFoRfM/6/bwVSD/ukPNGGdzfu+dTboHx77oPf9fefgd05H3e/d93D6gP3moGEP67/cV9B2O9aHjPdD3n8K53noZSseO2S8/6n3n6LxDvnw8X7Q+2V/4Hh3fPHMu/+Hx/veOhvhH6Zr/n9nnU3yz+ts6EMc/h9Wxr/7c9iKcPt3Pp/gvXvbYNNH3/uZYoT33e9/9TPF/B++zsZa7X1ft90+A4M+bG7m+3fm5jP/sg/a4h/n5t/9eWuqyd65fvgPmZuRZll2ynfnZsT/5tzM99+dm9kHhv/nuRk8MM/AwMDkw/YP8/47czPBh8/Nv7vdjAK3f+fzld67aO4dDrvo3bl5/1z8V3Mz7393biZ5b7uZ/O3rJh1uYMQRBzZcfv311532nY/vnp3unY8fvgbn/nfmcqz/mbmccPAHzeXfN9XR7r9yv/9iDf7LPv3d+5/7vzuXA+/N5cBq718s9Z9av/9zl7+7/N3l7y5/d/m7y1/cBxz/f+/1/3cba9adh/1yY4QrJx5/2496vB9xH+vj/8N8/+n4/7bjT3zlcAPvXfehx2ffuc1/5PHZmd45GfWgd2/3/uODPNAPPj67zywzbf2/dHz2/6l31+q/8Xu49v/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/H+ad/8O4KFpF3522IHQER7baqmFP+rxfsR9rI//D/P9p+P/Cy+11WPDDbx33Yce/3/nNo7j//e+Nu+O/8nH/99dqx3/r/+i/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Acc/5/93b8DOPLI3Td+9+8Brh97+9M+6vF+xH1cj//3/v/e2v+7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xQ07/j/wvre3/H7bBQbH//9v9wH+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/w/yxyz+S+aPWfx/mD9m8f9R/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/z/LHLP7r5o9Z/NfLH7P4r58/ZvH/ef6YxX+D/DGL/y/yxyz+G+aPWfw3yh+z+G+cP2bx/2X+mMX/V/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/nT9m8f9N/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/oIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z/0Xf8hH9G4/kOz+E/W+scs/pPnj1n8p8gfs/hPmT9m8f98/pjFf6r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8f9m/pjFf7b8MYv/t/LHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/O3/M4v+d/DGL/4L5Yxb/7+aPWfwXyh+z+H8vf8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/kvljFv8f5o9Z/H+UP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/H+ePWfyXyx+z+C+fP2bx/0n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/0/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/s/wxi/+6+WMW//Xyxyz+6+ePWfx/nj9m8d8gf8zi/4v8MYv/hvljFv+N8scs/hvnj1n8f5k/ZvH/Vf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv9f549Z/H+TP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+aPWfx/lz9m8f99/pjFf6f8MYv/zvljFv8/5I9Z/P+YP2bx3yV/zOL/p/wxi/+u+WMW/93yxyz+u+ePWfz/nD9m8f9L/pjF/6/5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gf/M/+D/6vj+s/NIv/Ia1/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYn/2+X/r0n8B12eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyH5EutPi/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+b3+a/79m8R+UP2bxHy5/zOI/fP6YxX9w/pjFf4T8MYv/iPljFv+R8scs/kPyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4fyJ/zOI/bv6YxX+8/DGL/yfzxyz+4+ePWfwnyB+z+H8qf8ziP2H+mMX/0/ljFv/P5I9Z/D+bP2bxnyh/zOI/cf6YxX+S/DGL/+fyxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6Yxf/z+WMW/6nyxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4j91/pjFf5r8sUEX7DrCwMDAx95/2vwxy/qfLn/M4j99/pjFf4b8MYv/1/LHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/b+SPWfy/mT9m8Z8tf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+384fs/h/J3/M4r9g/pjF/7v5Yxb/hfLHLP7fyx+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8ziv2T+mMX/h/ljFv8f5Y9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4/yx/zOK/bv6YxX+9/DGL//r5Yxb/n+ePWfw3yB+z+P8if8ziv2H+mMV/o/wxi//G+WMW/1/mj1n8f5U/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/1/ljFv/f5I9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/7f5Yxb/3+WPWfx/nz9m8d8pf8ziv3P+mMX/D/ljFv8/5o9Z/HfJH7P4/yl/zOK/a/6YxX+3/DGL/+75Yxb/P+ePWfz/kj9m8f9r/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4v+3/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WPv+U/y8fa/I3/Msv7vzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEffiB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfyH5I9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8f9E/pjFf9z8MYv/ePljFv9P5o9Z/MfPH7P4T5A/ZvH/VP6YxX/C/DGL/6fzxyz+n8kfs/h/Nn/M4j9R/pjFf+L8MYv/JPljFv/P5Y9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/5/PHLP5T5Y9Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/6vwxi/80Kv8R/+1bWvynVfn/+1n8p8sfs/hPnz9m8Z8hf8zi/7X8MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/b+aPWfxnyx+z+H8rf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/7fzxyz+38kfs/gvmD9m8f9u/pjFf6H8MYv/9/LHLP7fzx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+C+ZP2bx/2H+mMX/R/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9x/pjFf7n8MYv/8vljFv+f5I9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/NH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/LH7P4r5s/ZvFfL3/M4r9+/pjF/+f5Yxb/DfLHLP6/yB+z+G+YP2bx3yh/zOK/cf6Yxf+X+WMW/1/lj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/3X+mMX/N/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9t/pjF/3f5Yxb/3+ePWfx3yh+z+O+cP2bx/0P+mMX/j/ljFv9d8scs/n/KH7P475o/ZvHfLX/M4r97/pjF/8/5Yxb/v+SPWfz/mj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/j/LX/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38sck/oMH8scs/oPyxyz+w+WPve0/4sfff/j8Mcv6H5w/ZvEfIX/M4j9i/pjFf6T8MYv/kPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP6fyB+z+I+bP2bxHy9/zOL/yfwxi//4+WMW/wnyxyz+n8ofs/hPmD9m8f90/pjF/zP5Yxb/z+aPWfwnyh+z+E+cP2bxnyR/zOL/ufwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bx/3z+mMV/qvwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/LH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/1/PHLP6z5o9Z/L+RP2bx/2b+mMV/tvwxi/+38scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H87f8zi/538MYv/gvljFv/v5o9Z/BfKH7P4fy9/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/+S+WMW/x/mj1n8f5Q/ZvFfKn/M4r90/pjFf5n8MYv/svljFv8f549Z/JfLH7P4L58/ZvH/Sf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/T/DGL/+r5Yxb/NfLHLP5r5o+95z/ywMDAx9h/rfwxy/pfO3/M4r9O/pjF/2f5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zx/zOK/Qf6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+P8yf8zi/6v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v84fs/j/Jn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/r/NH7P4/y5/zOL/+/wxi/9O+WMW/53zxyz+f8gfs/j/MX/M4r9L/pjF/0/5Yxb/XfPHLP675Y9Z/HfPH7P4/zl/zOL/l/wxi/9f88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv+/5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf4SB/DGL/6D8MYv/cPljFv/h88cs/oPzxyz+I+SPWfxHzB+z+I+UP2bxH5I/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMX/E/ljFv9x88cs/uPlj1n8P5k/ZvEfP3/M4j9B/pjF/1P5Yxb/CfPHLP6fzh+z+H8mf8zi/9n8MYv/RPljFv+J88cs/pPkj1n8P5c/ZvGfNH/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/p/PH7P4T5U/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf9r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/838scs/t/MH7P4z5Y/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v549Z/L+TP2bxXzB/zOL/3fwxi/9C+WMW/+/lj1n8v58/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5A/ZvFfMn/M4v/D/DGL/4/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/lj9m8V83f8ziv17+mMV//fwxi//P88cs/hvkj1n8f5E/ZvHfMH/M4r9R/pjFf+P8MYv/L/PHLP6/yh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/r/DGL/2/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/2/wxi//v8scs/r/PH7P475Q/ZvHfOX/M4v+H/DGL/x/zxyz+u+SPWfz/lD9m8d81f8ziv1v+mMV/9/wxi/+f88cs/n/JH7P4/zV/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bx/1v+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfxHHMgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv8h+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/D+RP2bxHzd/zOI/Xv6Yxf+T+WMW//Hzxyz+E+SPWfw/lT9m8Z8wf8zi/+n8MYv/Z/LHLP6fzR+z+E+UP2bxnzh/zOI/Sf6Yxf9z+WMW/0nzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOL/+fwxi/9U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv+v549Z/GfNH7P4fyN/zOL/zfwxi/9s+WMW/2/lj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/3b+mMX/O/ljFv8F88cs/t/NH7P4L5Q/ZvH/Xv6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/yXzxyz+P8wfs/j/KH/M4r9U/tjH1H/Q+6xHXDp/7GPq/3b/uP6XyR+z+C+bP2bx/3H+mMV/ufwxi//y+WMW/5/kj1n8V8gfG3TBoGEz8/H2XzF/zLL+V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi//P8scs/uvmj1n818sfs/ivnz9m8f95/pjFf4P8MYv/L/LHLP4b5o9Z/DfKH7P4b5w/ZvH/Zf6Yxf9X+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+dP2bx/03+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/mz9m8f9d/pjF//f5Yxb/nfLHLP47549Z/P+QP2bx/2P+mMV/l/wxi/+f8scs/rvmj1n8d8sfs/jvnj9m8f9z/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+f8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P5//wMhwmcX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP4jDeSPWfwH5Y9Z/IfLH7P4D58/ZvEfnD9m8R8hf8ziP2L+mMV/pPwxi/+Q/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PkPa8g/nbP4j5M/ZvH/RP6YxX/c/DGL/3j5Yxb/T+aPWfzHzx+z+E+QP2bx/1T+mMV/wvwxi/+n88cs/p/JH7P4fzZ/zOI/Uf6YxX/i/DGL/yT5Yxb/z+WPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/+fzxyz+U+WPWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8f9a/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v54/ZvGfNX/M4v+N/DGL/zfzxyz+s+WPWfy/lT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf/b+WMW/+/kj1n8F8wfs/h/N3/M4r9Q/pjF/3v5Yxb/7+ePWfwXzh+z+C+SP2bxXzT/93przL9/bvFfLH/M4r94/pjFf4n8MYv/D/LHLP5L5o9Z/H+YP2bx/1H+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n81zD7D/rgh27xX9Ps/yFZ/NfKH7P4r50/ZvFfJ3/M4v+z/DGL/7r5Yxb/9fLHLP7r549Z/H+eP2bx3yB/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfx/mT9m8f9V/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/G/Rvi7D4b5s2ZvH/df6Yxf83+WMW/+3yxyz+2+ePWfx3eMf/jbc+qnH9h2bx37H1j1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/kIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+38wfs/jPlj9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/2/nj1n8v5M/ZvFfMH/M4v/d/DGL/0L5Yxb/7+WPWfy/nz9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfx/kD9m8V8yf8zi/8P8MYv/j/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/H+WP2bxXzd/zOK/Xv6YxX/9/DGL/8/zxyz+G+SPWfx/kT9m8d8wf8ziv1H+mMV/4/wxi/8v88cs/r/KH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8zi/+v8MYv/b/LHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v/b/DGL/+/yxyz+v88fs/jvlD9m8d85f8zi/4f8MYv/H/PHLP675I9Z/P+UP2bx3zV/zOK/W/6YxX/3/DGL/5/zxyz+f8kfs/j/NX/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvH/W/6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljBv9BgweGPJk/ZvAfuv6fyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/iPPJA/ZvEflD9m8R8uf8ziP3z+mMV/cP6YxX+E/DGL/4j5Yxb/kfLHLP5D8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+H8if8ziP27+mMV/vPwxi/8n88cs/uPnj1n8J8gfs/h/Kn/M4j9h/pjF/9P5Yxb/z+SPWfw/mz9m8Z8of8ziP3H+mMV/kvwxi//n8scs/pPmj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMX/8/ljFv+p8scs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/df6YxX+agYHNPqoh/Sdn8Z+29Y9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/2/mj1n8Z8sfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+388cs/t/JH7P4L5g/ZvH/bv6YxX+h/DGL//fyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/gvmT9m8f9h/pjF/0f5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yx+z+K+bP2bxXy9/zOK/fv6Yxf/n+WMW/w3yxyz+v8gfs/hvmD9m8d8of8ziv3H+mMX/l/ljFv9f5Y9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f91/pjF/zf5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/bf6Yxf93+WMW/9/nj1n8d8ofs/jvnD9m8f9D/pjF/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP6jDOSPWfwH5Y9Z/IfLH7P4D58/ZvEfnD9m8R8hf8ziP2L+mMV/pPwxi/+Q/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/p/IH7P4j5s/ZvEfL3/M4v/J/DGL//j5Yxb/CfLHLP6fyh+z+E+YP2bx/3T+mMX/M/ljFv/P5o9Z/CfKH7P4T5w/ZvGfJH/M4v+5/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvH/fP6YxX+q/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvH/Zv6YxX+2/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzt/zOL/nfwxi/+C+WMW/+/mj1n8F8ofs/h/L3/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/5L5Yxb/H+aPWfx/lD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/9P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/7P8MYv/uvljFv/18scs/uvnj1n8f54/ZvHfIH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/H+ZP2bx/1X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+ePWfx/kz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/9/mj1n8f5c/ZvH/ff6YxX+n/DGL/875Yxb/P+SPWfz/mD9m8d8lf8zi/6f8MYv/rvljFv/d8scs/rvnj1n8/5w/ZvH/S/6Yxf+v+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//f8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP+pA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4D8kfs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/ifwxi/+4+WMW//Hyxyz+n8wfs/iPnz9m8Z8gf8zi/6n8MYv/hPljFv9P549Z/D+TP2bx/2z+mMV/ovwxi//E+WMW/0nyxyz+n8sfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/8/nj1n8p8ofs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+1/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fz1/zOI/a/6Yxf8b+WMW/2/mj1n8Z8sfs/h/K3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+388cs/t/JH7P4L5g/ZvH/bv6YxX+h/DGL//fyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/gvmT9m8f9h/pjF/0f5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yx+z+K+bP2bxXy9/zOK/fv6Yxf/n+WMW/w3yxyz+v8gfs/hvmD9m8d8of8ziv3H+mMX/l/ljFv9f5Y9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f91/pjF/zf5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/bf6Yxf93+WMW/9/nj1n8d8ofs/jvnD9m8f9D/pjF/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n/i3/1f+kjG9R+axf+k1j9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzx971HxgyMPBx9j8jf8yy/s/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMO/+Q/KIf/wKiPtRVgFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfbSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfyH5I9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj318/ae/6R8uHW3s/LGPr/8/r/9x8scs/p/IH7P4j5s/ZvEfL3/M4v/J/DGL//j5Yxb/CfLHLP6fyh+z+E+YP2bx/3T+mMX/M/ljFv/P5o9Z/CfKH7P4T5w/ZvGfJH/M4v+5/DGL/6T5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvH/fP6YxX+q/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvH/Zv6YxX+2/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzt/zOL/nfwxi/+C+WMW/+/mj1n8F8ofs/h/L3/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/5L5Yxb/H+aPWfx/lD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ikb/f+MBW/xXMvr/G1n8V84fs/ivkj9m8V81f8ziv1r+mMX/p/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/Z/ljFv9188cs/uvlj1n8188fs/j/PH/M4r9B/pjF/xf5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zJ/zOL/q/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/zh+z+P8mf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v80fs/j/Ln/M4v/7/DGL/075Yxb/nfPHLP5/yB+z+P8xf8ziv0v+mMX/T/ljFv9d88cs/rvlj1n8d88fs/j/OX/M4v+X/DGL/1/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/7/lj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/9IH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfkj9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6Yxf8T+WMW/3Hzxyz+4+WPWfw/mT9m8R8/f8ziP0H+mMX/U/ljFv8J88cs/p/OH7P4fyZ/zOL/2fwxi/9E+WMW/4nzxyz+k+SPWfw/lz9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+n88fs/hPlT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH/sn/2GXjfURj+n/rz7Af5b8Mcv6/3r+mMV/1vwxi/838scs/t/MH7P4z5Y/ZvH/Vv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v549Z/L+TP2bxXzB/zOL/3fwxi/9C+WMW/+/lj1n8v58/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5A/ZvFfMn/M4v/D/DGL/4/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/4/wxi/9y+WMW/+Xzxyz+P8kfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/mj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/lj9m8V83f8ziv17+mMV//fwxi//P88cs/hvkj1n8f5E/ZvHfMH/M4r9R/pjFf+P8MYv/L/PHLP6/yh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/r/DGL/2/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/2/wxi//v8scs/r/PH7P475Q/ZvHfOX/s4+o/5H3+f8gf+7j6D7zP/4/5Yxb/XfLHLP5/yh+z+O+aP2bx3y1/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4/y1/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h97vv/n/8rj+Q7P4P9z6xyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/zEG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf0j+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/T+SPWfzHzR+z+I+XP2bx/2T+mMV//Pwxi/8E+WMW/0/lj1n8J8wfs/h/On/M4v+Z/DGL/2fzxyz+E+WPWfwnzh+z+E+SP2bx/1z+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+H8+f8ziP1X+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv+v5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+H8zf8ziP1v+mMX/W3r/IXipxX92vT9n8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOL/7fwxi/938scs/gvmj1n8v5s/ZvFfKH/M4v+9/DGL//fzxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/w/yxyz+S+aPWfx/mD9m8f9R/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/z/LHLP7r5o9Z/NfLH7P4r58/ZvH/ef6YxX+D/DGL/y/yxyz+G+aPWfw3yh+z+G+cP2bx/2X+mMX/V/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/nT9m8f9N/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5s/ZvH/Xf6Yxf/3+WMW/53yxyz+O+ePWfz/kD9m8f9j/pjFf5f8MYv/n/LHLP675o9Z/HfLH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/n/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/mAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/JH/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/8n8scs/uPmj1n8x8sfs/h/Mn/M4j9+/pjFf4L8MYv/p/LHLP4T5o9Z/D+d//+PnbsP97qu7zj+454sZ592Xeo1bTg05tqMREajFqKieLw5ZaKZ96iHm+RGbiTAFNhopY5Nl7pZsImFY85WLXG4ue5WNCxrtkZsrXKKa2GMOVhkzth14ByCs7fn2vmy79et9+PxB+f8fsf3L+V5vfz9vLiuQln6H61/KEv/V+sfytL/Z/UPZek/TP9Qlv7H6B/K0v/n9A9l6T9c/1CW/sfqH8rS/zj9Q1n6v0b/UJb+I/QPZen/8/qHsvQ/Xv9Qlv6/oH8oS//X6h/K0v8X9Q9l6f9L+oey9D9B/1CW/q/TP5Sl/0j9Q1n6v17/UJb+J+ofytJ/lP6hLP1P0j+Upf9o/UNZ+v+y/qEs/cfoH8rS/w36h7L0/xX9Q1n6j9U/lKX/G/UPZen/Jv1DWfr/qv6hLP3frH8oS/9x+oey9D9Z/1CW/uP1D2Xpf4r+oSz9T9U/lKX/afqHsvSfoH8oS//T9Q9l6X+G/qEs/SfqH8rS/0z9Q1n6t+kfytL/LP1DWfqfrX8oS/9z9A9l6X+u/qEs/dv1D2Xp/xb9Q1n6v1X/UJb+5+kfytL/bfqHsvQ/X/9Qlv6T9A9l6X+B/qEs/S/UP5Sl/9v1D2Xpf5H+oSz936F/KEv/i/UPZel/if6hLP0v1T+Upf9l+oey9L9c/1CW/lfoH8rS/0r9Q1n6T9Y/lKX/VfqHsvS/Wv9Qlv7X6B/K0r9D/1CW/lP0D2XpP1X/UJb+0/QPZek/Xf9Qlv7v1D+Upf+1+oey9J+hfyhL/5n6h7L0n6V/KEv/2fqHsvS/Tv9Qlv5z9A9l6T9X/1CW/vP0D2XpP1//UJb+1+sfytJ/gf6hLP3fpX8oS/+F+oey9F+kfyhL/8X6h7L0v0H/UJb+79Y/lKX/jfqHsvS/Sf9Qlv5L9A9l6b9U/1CW/sv0D2Xp/2v6h7L0/3X9Q1n6L9c/lKX/e/QPZen/G/qHsvR/r/6hLP3fp38oS/+b9Q9l6X+L/qEs/W/VP5Sl/2/qH8rSf4X+oSz9f0v/UJb+v61/KEv/2/QPZel/u/6hLP1/R/9Qlv7v1z+Upf8d+oey9L9T/1CW/nfpH8rS/3f1D2Xp/3v6h7L0v1v/UJb+H9A/lKX/B/UPZem/Uv9Qlv6r9A9l6f/7+oey9P8D/UNZ+t+jfyhL/9X6h7L0v1f/UJb+H9I/lKX/h/UPZem/Rv9Qlv736R/K0v8P9Q9l6b9W/1CW/n+kfyhL//v1D2Xp/8f6h7L0f0D/UJb+H9E/lKX/n+gfytL/o/qHsvT/mP6hLP0/rn8oS/8/1T+Upf8n9A9l6f+g/qEs/dfpH8rS/yH9Q1n6/5n+oSz91+sfytL/Yf1DWfr/uf6hLP3/Qv9Qlv6P6B/K0v8v9Q9l6f9J/UNZ+n9K/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6/5X+oSz9P6d/KEv/z+sfytJ/g/6hLP2/oH8oS/+/1j+Upf9G/UNZ+j+qfyhL/y/qH8rS/0v6h7L0f0z/UJb+X9Y/lKX/V/QPZen/N/qHsvR/XP9Qlv5f1T+Upf/f6h/K0v9r+oey9P87/UNZ+m/SP5Sl/9f1D2Xpv1n/UJb+f69/KEv/f9A/lKX/N/QPZen/j/qHsvT/pv6hLP2/pX8oS/9v6x/K0v8J/UNZ+v+T/qEs/Z/UP5Sl/1P6h7L036J/KEv/p/UPZen/z/qHsvT/jv6hLP3/Rf9Qlv7f1T+Upf9W/UNZ+j+jfyhL/+/pH8rSf5v+oSz9/1X/UJb+2/UPZen/b/qHsvR/Vv9Qlv7/rn8oS/8d+oey9N+pfyhL///QP5Sl//f1D2Xpv0v/UJb+P9A/lKX/c/qHsvT/of6hLP2f1z+Upf9/6h/K0v8F/UNZ+v9I/1CW/rv1DyXp/8qW/qEs/fvpH8rSv7/+oSz9B+gfytJ/oP6hLP0H6R/K0n+w/qEs/YfoH8rSf6j+oSz9X6Z/KEv/Q/QPZen/cv1DWfq/Qv9Qlv6H6h/K0v+n9A9l6X+Y/qGfuP4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/18xbtPjayTNmdMz1jW9845t937zU/2YCAAD+t/34Q/9L/XcCAAAAAAAAAAAAAAAAAAAAeTXxfyf2Uv8zAgAAAAAAAAAAAADA/3dt7adsG9DvgKcG7P/g1Y917Pk6etdF09aseah0f+368dnBS/bf/8Hu3bt3r3p23ISuh0NarVbn/9orux4P7Xnc+fpLh608cu+jMv5zdz1x+aRDz5m77vaBX191a/szg/Y8O6h15ZTpMzpe37/VKqcNai3sfHBiv1arnDGodVvng1GdDyYOaq3tfHDSngcva32688Hrrp4945rOJ86s/HsGPyna2pe2Bhyw2NYB/zbYf/9Lhz05rftrLy/Z/WoDW137H77ui0f0+Fm3F9l/9+uXU3ruv8//gMCL6tv+n9vc/bWXl/xv7/8f2rhrcfSzF99/9+uXU+0f6hN8/j9goz0/9/f4/H9M8JL77k8euvGOzv23XXD/0V1PDfyffP7/8euX03ruv/8Bn/87P8dP6P78P6TVKqcf5G8HpNLWvmxbb+//ve9/4M/0uOm3//7v/fKWV3Tu/77nW8u7nhrUx/1P6O39/+Yef69A37S1r97d4/2/D/tvjQhect/+t647dM/n/y0PXH34fj/ry/5P77n/kfNnXjdy3qLFJ0yfOXlqx9SOWWNHjTlx9NixY8aM3POJYO+vB/mbAkkc3Pt/65AeN/1arY599xvuv3VC5/63P7z8w11PDe3j/s/o9f3/GO//EBrevzV4cGvh5Pnz556499fuh6P2/rr3Lwv234f//j/2+K6/rPvPDPu1Wkfuux9x+dghnfu/YU5Z3/XU4D7uf2Kv+x9/4J9VAn1zkO//1/S4OWD/J2+9aUHn/o/7/qu2dD3V1//+P7PX/d/j/R8ORlt7q9Y30c79nzRk2VnVrkubP/+D+jSx/2E7bttZ7bqcZf9Qnyb2P2nFm66qdl3Otn+oTxP7f2jmFSuqXZdz7B/q08T+X/jpnUdVuy7n2j/Up4n9P/6dp9dUuy7t9g/1aWL/H7i7/aRq1+Ut9g/1aWL/J1z/g3HVrstb7R/q08T+p7z8/LXVrst59g/1aWL/Z+0+9fBq1+Vt9g/1aWL//ZZ9d2m163K+/UN9mtj/U5NXzK52XSbZP9Snif2vHTbiuWrX5QL7h/o0sf/lz7xhYrXrcqH9Q32a2P9X7lz5eLXr8nb7h/o0sf+PX/qqldWuy0X2D/VpYv8/HP7wIdWuyzvsH+rTxP43bVr7YLXrcrH9Q32a2P+qtQOGV7sul9g/1KeJ/S85c+pj1a7LpfYP9Wli/6PHfOmSatflMvuH+jSx/yM/+82nq12Xy+0f6tPE/s9/ZMG8atflCvuH+jSx/wVHfexH1a7LlfYP9Wli/2/uOGpatesy2f6hPk3sv9x+yKZq1+Uq+4f6NLH/i7evHl/tulxt/1CfJva//rDPf7TadbnG/qE+Tex/x5xZY6tdlw77h/o0sf9vv2fJe6tdlyn2D/VpYv93PP+1Uu26TLV/qE8T+9866uJLq12XafYP9Wli/6vPefbRatdluv1DfZrY/4r1T8yvdl3eaf9Qnyb2v2HD2U9Wuy7X2j/Up4n9Hzdi5KHVrssM+4f6NLH/2Rct/2C16zLT/qE+Tez/tAfufE216zLL/qE+Tex/6FfHfaLadZlt/1CfJvb/qXHv+2S163Kd/UN9mtj/zvHHHl/tusyxf6hPE/vf/OCou6pdl7n2D/VpYv/vf/Tuitdlnv1DfZrY/5zXvrC92nWZb/9Qnyb2/8ZJFy6qdl2ut3+oTxP7P/yeiV+odl0W2D/Up4n9X/at751X7bq8y/6hPk3s/9gjrjq62nVZaP9Qnyb2P236xluqXZdF9g/1aWL/E1ZtHl3tuiy2f6hPE/s/7Kl591a7LjfYP9Snif1vG3DEudWuy7vtH+rTxP7vu/GRb1S7LjfaP9Snif3fcvNHOqpdl5vsH+rTxP4/s2vwjmrXZYn9AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rIHo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAA///+TOkC") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8080583a, 0x0) 1m16.922864193s ago: executing program 0 (id=129): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 1m16.151064814s ago: executing program 0 (id=134): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000410, &(0x7f0000000340)={[{@nombcache}, {@usrjquota}, {@dax_never}, {@norecovery}, {@auto_da_alloc}, {@noinit_itable}, {@minixdf}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {}]}, 0x0, 0x7bf, &(0x7f0000001900)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 1m15.692855716s ago: executing program 0 (id=139): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000140)={[{@utf8}, {@discard}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@discard}, {@discard}, {}, {@discard}, {@keep_last_dots}, {@time_offset={'time_offset', 0x3d, 0x78}}, {@errors_remount}]}, 0x1, 0x1528, &(0x7f0000001f80)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) 1m15.075773143s ago: executing program 0 (id=142): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000a00)={r1}) 1m14.371415321s ago: executing program 0 (id=147): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000140)=[{0x8, 0x8200, 0x20, 0x0}], 0x1}) 1m13.758756848s ago: executing program 32 (id=147): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000140)=[{0x8, 0x8200, 0x20, 0x0}], 0x1}) 1.363637853s ago: executing program 4 (id=683): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000004000000000000000000000000000000000000000000000001000000000000000000000000000005000000040200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000000000000008bffffffffffffff00000000000000000000000000000000dff90000000000000000000000000000fcffffffffffffff0000000000000000020000000000000000000000002000000000000000000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b0000000a000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) 1.274910806s ago: executing program 3 (id=685): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @local}, {0xa, 0x4e20, 0x2, @empty, 0x3}, r1, 0x3}}, 0x48) 1.215320257s ago: executing program 2 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000052c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000005400)={0x0, 0x0, &(0x7f00000053c0)={&(0x7f0000005300)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x4000) 1.055836012s ago: executing program 3 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010852}, 0x80) 1.051986222s ago: executing program 4 (id=695): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c000480050003bc070000000800020001000000040008"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 1.051375742s ago: executing program 1 (id=688): r0 = socket$inet_smc(0x2b, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000080)) 961.331474ms ago: executing program 2 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80000001, 0x5, 0x0, 0x100, 0x25, 0x21100e6, r1}) 885.265117ms ago: executing program 1 (id=690): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000000)) 854.894087ms ago: executing program 4 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 837.625338ms ago: executing program 2 (id=692): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200814, &(0x7f0000000480)=ANY=[], 0x1, 0x1d2, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x4000) 818.034958ms ago: executing program 3 (id=693): r0 = semget(0x1, 0x4, 0x69c) semop(r0, &(0x7f0000003640)=[{0x1, 0x8004, 0x1000}, {0x1, 0x5b7a}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 708.806691ms ago: executing program 1 (id=694): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 605.711594ms ago: executing program 4 (id=696): capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000002100)={0x0, 0x4, 0x0, 0x9, 0x4, 0x3}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 558.719225ms ago: executing program 3 (id=697): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="14020000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffff"], 0x214}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084) 557.646705ms ago: executing program 2 (id=698): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 449.117978ms ago: executing program 1 (id=699): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x8783, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCGETS(r0, 0x5401, 0x0) 342.25066ms ago: executing program 4 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x1, 0x27, 0x2, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0x3, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 315.861892ms ago: executing program 3 (id=701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x12042) 315.120001ms ago: executing program 2 (id=702): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0xffffffffffffffff) 212.607324ms ago: executing program 1 (id=703): sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) 83.246827ms ago: executing program 3 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff004}, {0x6, 0xff, 0x84, 0x1}]}) 83.040318ms ago: executing program 4 (id=705): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/26, 0x1a) close(r0) 22.725019ms ago: executing program 2 (id=706): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 0s ago: executing program 1 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) kernel console output (not intermixed with test programs): devsim netdevsim1 netdevsim0: renamed from eth0 [ 83.902389][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.924327][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.935860][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.019363][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.036705][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.048347][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.068616][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.176757][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.189440][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.212752][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.223952][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.253780][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.301074][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.349989][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.357849][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.412371][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.419591][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.469131][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.530851][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.546427][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.574941][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.600950][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.608312][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.645666][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.664376][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.671687][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.695675][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.713481][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.721531][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.750326][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.757715][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.780839][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.788177][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.818334][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.825551][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.984371][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.042761][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.061459][ T5779] Bluetooth: hci0: command tx timeout [ 85.063254][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.142327][ T5779] Bluetooth: hci3: command tx timeout [ 85.142479][ T51] Bluetooth: hci1: command tx timeout [ 85.148011][ T5779] Bluetooth: hci2: command tx timeout [ 85.308637][ T5772] veth0_vlan: entered promiscuous mode [ 85.366242][ T5772] veth1_vlan: entered promiscuous mode [ 85.469108][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.498226][ T5772] veth0_macvtap: entered promiscuous mode [ 85.539748][ T5772] veth1_macvtap: entered promiscuous mode [ 85.612046][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.627426][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.644589][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.657042][ T5771] veth0_vlan: entered promiscuous mode [ 85.666910][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.683476][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.693385][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.703038][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.712267][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.746549][ T5771] veth1_vlan: entered promiscuous mode [ 85.846286][ T5771] veth0_macvtap: entered promiscuous mode [ 85.858180][ T5771] veth1_macvtap: entered promiscuous mode [ 85.887789][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.899240][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.915815][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.951032][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.964218][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.976341][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.991011][ T5770] veth0_vlan: entered promiscuous mode [ 86.011692][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.025419][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.028970][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.048067][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.057726][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.067257][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.096046][ T5769] veth0_vlan: entered promiscuous mode [ 86.120144][ T5770] veth1_vlan: entered promiscuous mode [ 86.150651][ T5769] veth1_vlan: entered promiscuous mode [ 86.190583][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.222091][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.228973][ T5769] veth0_macvtap: entered promiscuous mode [ 86.258952][ T5770] veth0_macvtap: entered promiscuous mode [ 86.283246][ T5769] veth1_macvtap: entered promiscuous mode [ 86.313781][ T5770] veth1_macvtap: entered promiscuous mode [ 86.339261][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.356140][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.366480][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.377943][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.390888][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.418972][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.429959][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.440492][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.452460][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.465101][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.477024][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.488792][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.508728][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.520124][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.530491][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.541958][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.553583][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.584995][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.597011][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.612000][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.624987][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.635674][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.646675][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.660349][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.672363][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.687369][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.719785][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.740684][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.758413][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.771105][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.824834][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.840379][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.847372][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.878438][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.887761][ T5841] capability: warning: `syz.2.5' uses 32-bit capabilities (legacy support in use) [ 86.928410][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.951786][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.141475][ T5779] Bluetooth: hci0: command tx timeout [ 87.221884][ T5781] Bluetooth: hci3: command tx timeout [ 87.230028][ T5779] Bluetooth: hci1: command tx timeout [ 87.230704][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.236881][ T5781] Bluetooth: hci2: command tx timeout [ 87.263131][ T5847] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.290519][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.372637][ T5851] syz.2.8[5851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.408884][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.426182][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.489446][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.531466][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.632089][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.665704][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.678972][ T5853] netlink: 236 bytes leftover after parsing attributes in process `syz.1.9'. [ 87.979862][ T5857] loop1: detected capacity change from 0 to 1024 [ 88.014917][ T5857] ======================================================= [ 88.014917][ T5857] WARNING: The mand mount option has been deprecated and [ 88.014917][ T5857] and is ignored by this kernel. Remove the mand [ 88.014917][ T5857] option from the mount to silence this warning. [ 88.014917][ T5857] ======================================================= [ 88.108072][ T5857] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 88.189018][ T5857] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.10: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.215566][ T5857] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 88.227579][ T5857] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.10: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.243477][ T5857] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 88.254030][ T5857] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.10: Failed to acquire dquot type 0 [ 88.267488][ T5857] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 88.279596][ T5857] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.10: mark_inode_dirty error [ 88.297783][ T5859] macsec1: entered promiscuous mode [ 88.312180][ T5859] macsec1: entered allmulticast mode [ 88.312992][ T5857] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 88.330730][ T5857] EXT4-fs (loop1): 1 orphan inode deleted [ 88.338842][ T5857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.363396][ T2896] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.381574][ T5809] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.435622][ T2896] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 88.448276][ T2896] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:8: Failed to release dquot type 0 [ 88.457402][ T5851] loop2: detected capacity change from 0 to 32768 [ 88.485683][ T5857] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.10: Invalid inode table block 1 in block_group 0 [ 88.591662][ T5869] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.616844][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 88.631784][ T5851] JBD2: Ignoring recovery information on journal [ 88.665173][ T5809] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 88.723300][ T5809] usb 4-1: config 0 has no interface number 0 [ 88.763436][ T5809] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 88.834741][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.874956][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.885036][ T5809] usb 4-1: Product: syz [ 88.889277][ T5809] usb 4-1: Manufacturer: syz [ 88.910999][ T5809] usb 4-1: SerialNumber: syz [ 88.924933][ T5851] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 88.945017][ T5809] usb 4-1: config 0 descriptor?? [ 88.972910][ T5771] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 89.004767][ T5809] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 89.014213][ T5771] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 89.066002][ T5771] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 89.152170][ T28] audit: type=1800 audit(1777411915.473:2): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 89.228686][ T5781] Bluetooth: hci0: command tx timeout [ 89.257644][ T5809] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 89.286028][ T5809] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 89.303215][ T5781] Bluetooth: hci1: command tx timeout [ 89.303242][ T5779] Bluetooth: hci2: command tx timeout [ 89.309045][ T5781] Bluetooth: hci3: command tx timeout [ 89.333919][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 89.394974][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 89.844245][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 89.846799][ T23] usb 4-1: USB disconnect, device number 2 [ 89.892319][ T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 89.946055][ T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 89.981145][ T23] quatech2 4-1:0.51: device disconnected [ 90.503577][ T5885] loop1: detected capacity change from 0 to 32768 [ 90.525554][ T5887] loop0: detected capacity change from 0 to 32768 [ 90.581692][ T5887] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.21 (5887) [ 90.712917][ T5887] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 90.757144][ T5887] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 90.793712][ T5887] BTRFS info (device loop0): using free space tree [ 90.884215][ T5891] loop2: detected capacity change from 0 to 32768 [ 90.982749][ T5887] BTRFS info (device loop0): enabling ssd optimizations [ 90.989916][ T5887] BTRFS info (device loop0): auto enabling async discard [ 91.192059][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.401316][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 91.435469][ T8] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 91.475706][ T8] usb 4-1: config 0 has no interface number 0 [ 91.501607][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 91.531224][ T8] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 91.551899][ T8] usb 4-1: config 0 interface 41 has no altsetting 0 [ 91.567945][ T8] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 91.586166][ T5917] loop2: detected capacity change from 0 to 512 [ 91.587750][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.618910][ T8] usb 4-1: Product: syz [ 91.635379][ T5769] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 91.651242][ T8] usb 4-1: Manufacturer: syz [ 91.655921][ T8] usb 4-1: SerialNumber: syz [ 91.672646][ T5917] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.700364][ T8] usb 4-1: config 0 descriptor?? [ 91.720574][ T5917] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.728084][ T5908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.746115][ T5908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.753713][ T5917] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.788848][ T5917] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 91.812961][ T5917] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 91.850766][ T5917] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.27: corrupted inode contents [ 91.946546][ T5917] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #12: comm syz.2.27: mark_inode_dirty error [ 91.982812][ T5917] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.27: corrupted inode contents [ 92.045121][ T5917] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.27: mark_inode_dirty error [ 92.075107][ T5917] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.27: corrupted inode contents [ 92.131387][ T8] CoreChips: probe of 4-1:0.41 failed with error -71 [ 92.150044][ T5917] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 92.173263][ T5917] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #12: comm syz.2.27: corrupted inode contents [ 92.201104][ T8] usb 4-1: USB disconnect, device number 3 [ 92.248877][ T5917] EXT4-fs error (device loop2): ext4_truncate:4301: inode #12: comm syz.2.27: mark_inode_dirty error [ 92.300953][ T1753] cfg80211: failed to load regulatory.db [ 92.377726][ T5917] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 92.423778][ T5917] EXT4-fs (loop2): 1 truncate cleaned up [ 92.445597][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.743868][ T5916] loop1: detected capacity change from 0 to 32768 [ 92.964595][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.387274][ T5930] loop0: detected capacity change from 0 to 4096 [ 93.497879][ T5933] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.589497][ T5930] NILFS (loop0): bad btree node (ino=18446744073709486081, blocknr=1024): level = 0, flags = 0x0, nchildren = 0 [ 93.631096][ T5930] NILFS (loop0): error -5 preparing GC: cannot read source blocks [ 93.930984][ T5943] hsr0: entered promiscuous mode [ 93.960696][ T5943] macvtap1: entered promiscuous mode [ 94.067438][ T5947] loop1: detected capacity change from 0 to 16 [ 94.096379][ T5947] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 94.771348][ T5957] loop3: detected capacity change from 0 to 8192 [ 94.807925][ T5957] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.856396][ T5962] loop1: detected capacity change from 0 to 256 [ 94.892011][ T5957] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 94.896990][ T5945] loop0: detected capacity change from 0 to 40427 [ 94.926224][ T5945] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 94.948352][ T5957] REISERFS (device loop3): using ordered data mode [ 94.963656][ T5945] F2FS-fs (loop0): invalid crc value [ 94.997147][ T5945] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.998519][ T5957] reiserfs: using flush barriers [ 95.065865][ T5962] FAT-fs (loop1): Directory bread(block 64) failed [ 95.092286][ T5957] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 95.101386][ T5962] FAT-fs (loop1): Directory bread(block 65) failed [ 95.156642][ T5957] REISERFS (device loop3): checking transaction log (loop3) [ 95.166678][ T5962] FAT-fs (loop1): Directory bread(block 66) failed [ 95.183313][ T5945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.205927][ T5962] FAT-fs (loop1): Directory bread(block 67) failed [ 95.230193][ T5957] REISERFS (device loop3): Using rupasov hash to sort names [ 95.239896][ T5962] FAT-fs (loop1): Directory bread(block 68) failed [ 95.264206][ T5962] FAT-fs (loop1): Directory bread(block 69) failed [ 95.274061][ T5957] REISERFS (device loop3): using 3.5.x disk format [ 95.286939][ T5962] FAT-fs (loop1): Directory bread(block 70) failed [ 95.302716][ T5962] FAT-fs (loop1): Directory bread(block 71) failed [ 95.313032][ T5957] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.320578][ T5962] FAT-fs (loop1): Directory bread(block 72) failed [ 95.342582][ T5962] FAT-fs (loop1): Directory bread(block 73) failed [ 95.362675][ T5957] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.415218][ T5957] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.438694][ T5957] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 95.578681][ T5971] loop2: detected capacity change from 0 to 512 [ 95.649537][ T5769] syz-executor: attempt to access beyond end of device [ 95.649537][ T5769] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.678630][ T5971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.700585][ T5769] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 95.714655][ T5971] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.889107][ T5957] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.922823][ T5957] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 95.942629][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.103413][ T5978] program syz.1.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.167370][ T5980] tipc: Started in network mode [ 96.216588][ T5980] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 96.249295][ T5980] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 96.291847][ T5980] tipc: Enabled bearer , priority 10 [ 96.534582][ T5988] loop1: detected capacity change from 0 to 256 [ 96.597228][ T5988] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.707483][ T5988] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.729428][ T5993] loop2: detected capacity change from 0 to 512 [ 96.786934][ T5993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.868968][ T5993] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.59: bad orphan inode 11 [ 96.890635][ T5993] ext4_test_bit(bit=10, block=4) = 1 [ 96.897903][ T5993] is_bad_inode(inode)=0 [ 96.911337][ T5993] NEXT_ORPHAN(inode)=2080374784 [ 96.917027][ T5993] max_ino=32 [ 96.920273][ T5993] i_nlink=0 [ 96.927166][ T5993] EXT4-fs (loop2): 1 truncate cleaned up [ 96.936209][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.961767][ T6001] loop0: detected capacity change from 0 to 256 [ 96.978403][ T6003] loop1: detected capacity change from 0 to 512 [ 96.987666][ T6001] exfat: Deprecated parameter 'utf8' [ 97.002439][ T6003] EXT4-fs: Ignoring removed nobh option [ 97.029771][ T6003] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 97.088498][ T6001] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 97.235664][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.413732][ T1753] tipc: Node number set to 1 [ 97.479584][ T6010] ISOFS: unable to read i-node block [ 97.493144][ T6012] EXT4-fs: Ignoring removed orlov option [ 97.499158][ T6010] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 97.540919][ T6012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.578631][ T6012] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.650975][ T6012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.666857][ T6013] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 97.729654][ T6012] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.67: Invalid block bitmap block 0 in block_group 0 [ 97.746146][ T6013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.841114][ T6012] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 97.857955][ T6012] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.67: attempt to clear invalid blocks 983261 len 1 [ 97.902602][ T6012] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.67: Invalid inode table block 0 in block_group 0 [ 97.951334][ T6012] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 97.996893][ T6012] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 98.026746][ T6012] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.67: Invalid inode table block 0 in block_group 0 [ 98.049348][ T6012] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 98.059729][ T6012] EXT4-fs error (device loop3): ext4_truncate:4301: inode #11: comm syz.3.67: mark_inode_dirty error [ 98.143334][ T6012] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 98.171267][ T6012] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.67: Invalid inode table block 0 in block_group 0 [ 98.220536][ T6012] EXT4-fs (loop3): 1 truncate cleaned up [ 98.227314][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'. [ 98.247577][ T6012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.273157][ T6028] [U] ß [ 98.366863][ T6012] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz.3.67: Invalid inode table block 0 in block_group 0 [ 98.505004][ T6033] set_capacity_and_notify: 3 callbacks suppressed [ 98.505031][ T6033] loop2: detected capacity change from 0 to 2048 [ 98.509632][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.523212][ T6033] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=301129, location=301129 [ 98.597970][ T6033] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.787854][ T6040] loop3: detected capacity change from 0 to 16 [ 98.790012][ T6036] loop1: detected capacity change from 0 to 4096 [ 98.829947][ T6040] erofs: (device loop3): mounted with root inode @ nid 36. [ 98.869906][ T6036] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 98.917929][ T6040] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 98.953188][ T6040] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 98.976390][ T6040] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 99.008556][ T6040] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 99.585717][ T6038] loop0: detected capacity change from 0 to 32768 [ 99.807687][ T6055] loop1: detected capacity change from 0 to 65 [ 99.843800][ T6055] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 100.270869][ T6061] loop0: detected capacity change from 0 to 512 [ 100.347119][ T6061] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.90: Directory hole found for htree index block 0 [ 100.349866][ T6068] mkiss: ax0: crc mode is auto. [ 100.382040][ T6061] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 100.507008][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.638373][ T6074] loop3: detected capacity change from 0 to 512 [ 100.711363][ T6074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.747280][ T6074] EXT4-fs (loop3): 1 truncate cleaned up [ 100.752658][ T6076] loop1: detected capacity change from 0 to 2048 [ 100.757485][ T6074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.810245][ T6076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.837603][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.893983][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.141001][ T6081] loop3: detected capacity change from 0 to 2048 [ 101.230391][ T6081] loop3: p1 < > p4 [ 101.230391][ T6081] p4: [ 101.290235][ T6081] loop3: p4 size 722688 extends beyond EOD, truncated [ 101.512864][ T6093] loop1: detected capacity change from 0 to 4096 [ 101.545500][ T6093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.688071][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.689207][ T6093] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 101.702455][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 101.708658][ T6093] EXT4-fs: Cannot change journaled quota options when quota turned on [ 101.911987][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.229322][ T6110] exfat: Deprecated parameter 'namecase' [ 102.247857][ T6110] exfat: Deprecated parameter 'namecase' [ 102.291532][ T6110] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 102.375999][ T6115] exfat: Deprecated parameter 'namecase' [ 102.408070][ T6115] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 102.463991][ T6115] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 103.226408][ T6136] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 103.391831][ T6138] netlink: 39 bytes leftover after parsing attributes in process `syz.2.123'. [ 103.427037][ T6138] netlink: 1 bytes leftover after parsing attributes in process `syz.2.123'. [ 103.511617][ T6140] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.546435][ T6140] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 103.552395][ T6128] set_capacity_and_notify: 3 callbacks suppressed [ 103.552409][ T6128] loop1: detected capacity change from 0 to 32768 [ 103.577151][ T6140] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2002e01c, mo2=0006] [ 103.603013][ T6140] System zones: 0-2, 18-18, 34-35 [ 103.609073][ T6128] (syz.1.118,6128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.635336][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.674741][ T6134] loop0: detected capacity change from 0 to 32768 [ 103.686300][ T6128] (syz.1.118,6128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.749678][ T6134] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.821742][ T6128] JBD2: Ignoring recovery information on journal [ 103.939737][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.977397][ T6134] XFS (loop0): Ending clean mount [ 104.063032][ T6128] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.248205][ T5769] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.573322][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 105.141808][ T6171] loop0: detected capacity change from 0 to 2048 [ 105.158775][ T6155] loop2: detected capacity change from 0 to 32768 [ 105.224737][ T6171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.279168][ T6155] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 105.330863][ T6155] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.488521][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.551891][ T6155] XFS (loop2): Ending clean mount [ 105.623158][ T6155] XFS (loop2): Quotacheck needed: Please wait. [ 105.635312][ T6190] IPVS: persistence engine module ip_vs_pe_s not found [ 105.713430][ T5773] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 105.741651][ T5773] XFS (loop2): Unmount and run xfs_repair [ 105.745948][ T6193] loop0: detected capacity change from 0 to 256 [ 105.747516][ T5773] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 105.791508][ T5773] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 105.800978][ T6193] exfat: Deprecated parameter 'utf8' [ 105.838777][ T6193] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 105.843957][ T5773] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 105.888887][ T6195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.140'. [ 105.898234][ T5773] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 105.939306][ T5773] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 105.969396][ T5773] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 105.985088][ T5773] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 106.015571][ T5773] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.048892][ T5773] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 106.077489][ T37] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 106.108690][ T6198] loop3: detected capacity change from 0 to 512 [ 106.131243][ T6155] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 106.139791][ T6198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.173796][ T6198] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.241081][ T6198] EXT4-fs (loop3): 1 truncate cleaned up [ 106.282684][ T6198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.365693][ T28] audit: type=1800 audit(1777411932.693:3): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 106.475047][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.538218][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.813045][ T6205] loop1: detected capacity change from 0 to 2048 [ 106.860159][ T6205] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.967674][ T6206] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.098773][ T2970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.225114][ T6210] loop2: detected capacity change from 0 to 512 [ 107.286843][ T6210] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.335682][ T2970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.356884][ T6210] EXT4-fs error (device loop2): ext4_find_extent:945: inode #4: comm syz.2.143: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 107.406366][ T6210] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 107.418297][ T6210] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 107.485268][ T6210] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 107.516809][ T2970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.529002][ T6210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.635712][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.732608][ T2970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.772378][ T788] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.001410][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 108.030709][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.074009][ T788] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.156232][ T788] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 108.181630][ T788] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 108.204706][ T28] audit: type=1326 audit(1777411934.523:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1d19cdd9 code=0x7ffc0000 [ 108.210642][ T788] usb 4-1: Product: syz [ 108.297745][ T28] audit: type=1326 audit(1777411934.523:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1d19cdd9 code=0x7ffc0000 [ 108.320835][ T788] usb 4-1: Manufacturer: syz [ 108.343548][ T788] usb 4-1: SerialNumber: syz [ 108.372514][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.383520][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.401542][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.410862][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.423414][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.426186][ T28] audit: type=1326 audit(1777411934.553:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f3a1d19cdd9 code=0x7ffc0000 [ 108.464315][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.469374][ T788] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 108.557416][ T28] audit: type=1326 audit(1777411934.553:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1d19cdd9 code=0x7ffc0000 [ 108.665841][ T28] audit: type=1326 audit(1777411934.553:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f3a1d19cdd9 code=0x7ffc0000 [ 108.755950][ T28] audit: type=1326 audit(1777411934.553:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1d19cdd9 code=0x7ffc0000 [ 108.821620][ T28] audit: type=1326 audit(1777411934.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.1.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1d19cdd9 code=0x7ffc0000 [ 108.880739][ T788] usb 4-1: USB disconnect, device number 4 [ 108.989145][ T788] appletouch 4-1:1.0: input: appletouch disconnected [ 109.509066][ T6234] loop1: detected capacity change from 0 to 32768 [ 109.572639][ T6234] (syz.1.157,6234,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.601847][ T6234] (syz.1.157,6234,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 109.710991][ T6256] capability: warning: `syz.2.161' uses deprecated v2 capabilities in a way that may be insecure [ 109.810598][ T6234] JBD2: Ignoring recovery information on journal [ 109.930945][ T6234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.036884][ T6261] loop3: detected capacity change from 0 to 2048 [ 110.058783][ T6227] chnl_net:caif_netlink_parms(): no params data found [ 110.161459][ T6265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.406537][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 110.578460][ T6267] sp0: Synchronizing with TNC [ 110.583715][ T5781] Bluetooth: hci3: command tx timeout [ 110.654603][ T6266] [U] è` [ 110.661448][ T6265] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 110.690637][ T6265] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 110.760702][ T6265] Remounting filesystem read-only [ 110.785038][ T49] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 110.837101][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 110.842444][ T49] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 110.911100][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 110.923199][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 110.941255][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 110.978936][ T49] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 111.009794][ T49] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 111.043985][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.069596][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.121924][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.130933][ T49] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 111.186861][ T49] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 111.218294][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.231778][ T49] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 111.239490][ T49] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 111.263014][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.278810][ T6227] bridge_slave_0: entered allmulticast mode [ 111.281306][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.303950][ T6227] bridge_slave_0: entered promiscuous mode [ 111.311298][ T49] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 111.318559][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.324622][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.341054][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.347662][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.368289][ T49] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 111.381566][ T6227] bridge_slave_1: entered allmulticast mode [ 111.381605][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.389121][ T6227] bridge_slave_1: entered promiscuous mode [ 111.411267][ T49] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 111.434737][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.491592][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.517588][ T49] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 111.541670][ T2970] hsr_slave_0: left promiscuous mode [ 111.544791][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.563269][ T2970] hsr_slave_1: left promiscuous mode [ 111.578476][ T49] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 111.587357][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.601389][ T49] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 111.607595][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.608829][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.628581][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.645998][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.652158][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.668162][ T49] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.678528][ T2970] bridge_slave_1: left allmulticast mode [ 111.687656][ T2970] bridge_slave_1: left promiscuous mode [ 111.688040][ T5770] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 111.698213][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.720567][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 111.721492][ T2970] bridge_slave_0: left allmulticast mode [ 111.736902][ T2970] bridge_slave_0: left promiscuous mode [ 111.740971][ T5770] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 111.743192][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.765561][ T5770] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 111.774767][ T5770] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 111.787708][ T5770] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 111.798270][ T5770] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 111.805857][ T5770] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 111.813935][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.823878][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.834384][ T2970] veth1_macvtap: left promiscuous mode [ 111.834684][ T5770] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.840380][ T2970] veth0_macvtap: left promiscuous mode [ 111.861055][ T2970] veth1_vlan: left promiscuous mode [ 111.870166][ T2970] veth0_vlan: left promiscuous mode [ 112.129030][ T6293] loop1: detected capacity change from 0 to 40427 [ 112.140612][ T6293] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 112.159177][ T6293] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.187279][ T6293] F2FS-fs (loop1): invalid crc value [ 112.210695][ T6293] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.329747][ T6293] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.347285][ T6293] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.528166][ T5771] syz-executor: attempt to access beyond end of device [ 112.528166][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.543245][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 112.661423][ T5781] Bluetooth: hci3: command tx timeout [ 113.202036][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 113.232287][ T6311] loop1: detected capacity change from 0 to 1024 [ 113.266657][ T6311] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0082] [ 113.293184][ T6311] System zones: 0-1, 3-36 [ 113.336511][ T6311] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.174: bad orphan inode 134217728 [ 113.362030][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.367066][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 113.459026][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.517860][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.586177][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.089164][ T2970] bond0 (unregistering): Released all slaves [ 114.247265][ T6298] warning: `syz.2.171' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.292798][ T6301] pimreg3: entered allmulticast mode [ 114.354231][ T6227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.404689][ T6227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.565845][ T6227] team0: Port device team_slave_0 added [ 114.618600][ T6227] team0: Port device team_slave_1 added [ 114.751378][ T5781] Bluetooth: hci3: command tx timeout [ 114.788106][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.805553][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.833336][ T6227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.850549][ T6227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.858084][ T6227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.884753][ T6227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.931981][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 115.054227][ T6227] hsr_slave_0: entered promiscuous mode [ 115.086442][ T6227] hsr_slave_1: entered promiscuous mode [ 115.119162][ T6227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.152904][ T6227] Cannot create hsr debugfs directory [ 115.919241][ T6227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.940733][ T6227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.965527][ T6227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.991036][ T6227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.257809][ T6227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.340768][ T6227] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.422225][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.429584][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.456708][ T6350] loop1: detected capacity change from 0 to 32768 [ 116.473507][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.480797][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.515384][ T6350] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.188 (6350) [ 116.594104][ T6355] loop2: detected capacity change from 0 to 32768 [ 116.676112][ T6355] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.190 (6355) [ 116.699373][ T6350] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.759838][ T6355] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.774803][ T6350] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 116.822415][ T5781] Bluetooth: hci3: command tx timeout [ 116.825042][ T6350] BTRFS info (device loop1): setting nodatacow, compression disabled [ 116.833218][ T6355] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 116.857906][ T6350] BTRFS info (device loop1): enabling disk space caching [ 116.858724][ T6355] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 116.866669][ T6350] BTRFS info (device loop1): force clearing of disk cache [ 116.907912][ T6350] BTRFS info (device loop1): enabling ssd optimizations [ 116.917359][ T6350] BTRFS info (device loop1): using spread ssd allocation scheme [ 116.927233][ T6355] BTRFS info (device loop2): use zstd compression, level 3 [ 116.935325][ T6350] BTRFS info (device loop1): turning on sync discard [ 116.942671][ T6355] BTRFS info (device loop2): using free space tree [ 116.961395][ T6350] BTRFS info (device loop1): turning off barriers [ 116.968642][ T6350] BTRFS info (device loop1): not using ssd optimizations [ 116.996835][ T6350] BTRFS info (device loop1): not using spread ssd allocation scheme [ 117.040324][ T6350] BTRFS info (device loop1): force zlib compression, level 3 [ 117.100393][ T6350] BTRFS info (device loop1): disk space caching is enabled [ 117.141951][ T6350] workqueue: max_active 32768 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 117.161869][ T6350] workqueue: max_active 32768 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 117.164810][ T6359] loop3: detected capacity change from 0 to 40427 [ 117.234366][ T6359] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 117.245615][ T6359] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.266451][ T6350] workqueue: max_active 32768 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 117.351419][ T6350] workqueue: max_active 32768 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 117.363298][ T6355] BTRFS info (device loop2): enabling ssd optimizations [ 117.380508][ T6355] BTRFS info (device loop2): auto enabling async discard [ 117.388612][ T6359] F2FS-fs (loop3): invalid crc value [ 117.448420][ T6350] workqueue: max_active 32768 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 117.503816][ T6350] workqueue: max_active 32768 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 117.513775][ T6359] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.556338][ T6350] workqueue: max_active 32768 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 117.820909][ T6359] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 117.823955][ T6227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.836745][ T6350] BTRFS info (device loop1): rebuilding free space tree [ 117.866998][ T6359] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.990750][ T6350] BTRFS info (device loop1): disabling free space tree [ 118.032150][ T6350] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.081438][ T6350] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.171025][ T5772] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 118.544683][ T5771] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.291402][ T5773] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.334616][ T6227] veth0_vlan: entered promiscuous mode [ 119.379201][ T6227] veth1_vlan: entered promiscuous mode [ 119.497774][ T5773] usb 3-1: Using ep0 maxpacket: 16 [ 119.523343][ T5773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.543091][ T6227] veth0_macvtap: entered promiscuous mode [ 119.567782][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.585147][ T6227] veth1_macvtap: entered promiscuous mode [ 119.620148][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.661401][ T5773] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 119.670807][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.690754][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.705997][ T5773] usb 3-1: config 0 descriptor?? [ 119.740721][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.791217][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.817386][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.843743][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.868758][ T6452] loop1: detected capacity change from 0 to 256 [ 119.875442][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.896437][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.943430][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.986766][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.027584][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.073698][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.101208][ T6227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.119944][ T6458] loop3: detected capacity change from 0 to 16 [ 120.138445][ T6227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.165641][ T6227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.208489][ T5773] hid-picolcd 0003:04D8:F002.0001: global environment stack underflow [ 120.209265][ T6458] erofs: (device loop3): mounted with root inode @ nid 36. [ 120.226067][ T5773] hid-picolcd 0003:04D8:F002.0001: item 0 4 1 11 parsing failed [ 120.254470][ T6227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.282593][ T5773] hid-picolcd 0003:04D8:F002.0001: device report parse failed [ 120.290243][ T5773] hid-picolcd: probe of 0003:04D8:F002.0001 failed with error -22 [ 120.295630][ T6227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.314323][ T28] audit: type=1800 audit(1777411946.644:11): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.193" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 120.331818][ T6227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.407029][ T6227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.558406][ T5773] usb 3-1: USB disconnect, device number 2 [ 120.722304][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.730292][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.837653][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.861499][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.859987][ T6467] loop3: detected capacity change from 0 to 40427 [ 121.879090][ T6467] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 121.897756][ T6467] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.946464][ T6467] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 121.974920][ T6467] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 122.015857][ T6467] F2FS-fs (loop3): invalid crc value [ 122.046517][ T6467] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.275683][ T6467] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.302513][ T6467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 122.639360][ T5770] syz-executor: attempt to access beyond end of device [ 122.639360][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.691655][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.833755][ T6521] loop4: detected capacity change from 0 to 256 [ 123.055709][ T6521] FAT-fs (loop4): Directory bread(block 64) failed [ 123.081239][ T6521] FAT-fs (loop4): Directory bread(block 65) failed [ 123.086911][ T6499] loop1: detected capacity change from 0 to 32768 [ 123.087913][ T6521] FAT-fs (loop4): Directory bread(block 66) failed [ 123.127275][ T6521] FAT-fs (loop4): Directory bread(block 67) failed [ 123.151398][ T6521] FAT-fs (loop4): Directory bread(block 68) failed [ 123.158386][ T6499] [ 123.158386][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.158386][ T6499] [ 123.176896][ T6521] FAT-fs (loop4): Directory bread(block 69) failed [ 123.191760][ T6521] FAT-fs (loop4): Directory bread(block 70) failed [ 123.198366][ T6521] FAT-fs (loop4): Directory bread(block 71) failed [ 123.241228][ T6521] FAT-fs (loop4): Directory bread(block 72) failed [ 123.259691][ T6521] FAT-fs (loop4): Directory bread(block 73) failed [ 123.295861][ T6499] [ 123.295861][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.295861][ T6499] [ 123.355343][ T6499] [ 123.355343][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.355343][ T6499] [ 123.424602][ T6499] [ 123.424602][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.424602][ T6499] [ 123.486952][ T6531] [ 123.486952][ T6531] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.486952][ T6531] [ 123.501378][ T6531] [ 123.501378][ T6531] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.501378][ T6531] [ 123.559063][ T6499] [ 123.559063][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.559063][ T6499] [ 123.591520][ T6499] [ 123.591520][ T6499] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.591520][ T6499] [ 123.635366][ T113] [ 123.635366][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.635366][ T113] [ 123.739789][ T37] [ 123.739789][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.739789][ T37] [ 123.767075][ T37] [ 123.767075][ T37] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.767075][ T37] [ 123.815258][ T112] [ 123.815258][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.815258][ T112] [ 123.846459][ T5771] [ 123.846459][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.846459][ T5771] [ 123.885526][ T5771] [ 123.885526][ T5771] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.885526][ T5771] [ 123.973661][ T6543] dccp_invalid_packet: P.Data Offset(4) too small [ 124.211865][ T6546] netlink: 'syz.2.224': attribute type 7 has an invalid length. [ 124.240249][ T6546] netlink: 'syz.2.224': attribute type 8 has an invalid length. [ 124.514327][ T6557] [U]  [ 124.805696][ T6567] netlink: 104 bytes leftover after parsing attributes in process `syz.2.231'. [ 125.305786][ T6587] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 125.678470][ T6561] loop4: detected capacity change from 0 to 32768 [ 126.046340][ T6600] loop2: detected capacity change from 0 to 512 [ 126.082577][ T6600] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.089143][ T6600] EXT4-fs: inline encryption not supported [ 126.132701][ T6600] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.195015][ T6600] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.205032][ T6582] loop1: detected capacity change from 0 to 32768 [ 126.217887][ T6600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.308776][ T6600] EXT4-fs (loop2): 1 truncate cleaned up [ 126.317917][ T6582] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.353699][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.481874][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.245'. [ 126.584981][ T6582] XFS (loop1): Ending clean mount [ 126.648962][ T6582] XFS (loop1): Quotacheck needed: Please wait. [ 126.667677][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.843586][ T6582] XFS (loop1): Quotacheck: Done. [ 127.115036][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.223950][ T6632] loop4: detected capacity change from 0 to 1024 [ 127.243284][ T8] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 127.251312][ T6632] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.288179][ T6632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.452880][ T6227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.474417][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.493344][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.522044][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 127.564791][ T8] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 127.594513][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.641855][ T8] usb 3-1: config 0 descriptor?? [ 127.829287][ T6641] loop3: detected capacity change from 0 to 8192 [ 127.893845][ T6641] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.907385][ T6641] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 127.917578][ T6641] REISERFS (device loop3): using ordered data mode [ 127.925406][ T6641] reiserfs: using flush barriers [ 127.937916][ T6641] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.971974][ T6641] REISERFS (device loop3): checking transaction log (loop3) [ 128.008397][ T6641] REISERFS (device loop3): Using r5 hash to sort names [ 128.036837][ T6641] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 128.089725][ T6641] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 128.146546][ T6641] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 128.152916][ T8] cypress 0003:04B4:0001.0002: bogus close delimiter [ 128.182853][ T8] cypress 0003:04B4:0001.0002: item 0 1 2 10 parsing failed [ 128.190573][ T6641] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 128.195604][ T8] cypress 0003:04B4:0001.0002: parse failed [ 128.220696][ T8] cypress: probe of 0003:04B4:0001.0002 failed with error -22 [ 128.494662][ T5773] usb 3-1: USB disconnect, device number 3 [ 129.092325][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 129.351035][ T6678] CUSE: unknown device info "€" [ 129.361045][ T6678] CUSE: unknown device info "" [ 129.392790][ T6678] CUSE: unknown device info "" [ 129.398136][ T6678] CUSE: unknown device info "" [ 129.431462][ T6678] CUSE: zero length info key specified [ 129.512767][ T6680] veth1_to_team: entered promiscuous mode [ 129.518553][ T6682] loop2: detected capacity change from 0 to 256 [ 129.588054][ T6680] veth1_to_team: left promiscuous mode [ 129.606039][ T6682] FAT-fs (loop2): Directory bread(block 64) failed [ 129.649735][ T6682] FAT-fs (loop2): Directory bread(block 65) failed [ 129.669868][ T6682] FAT-fs (loop2): Directory bread(block 66) failed [ 129.689560][ T6682] FAT-fs (loop2): Directory bread(block 67) failed [ 129.705740][ T6682] FAT-fs (loop2): Directory bread(block 68) failed [ 129.740263][ T6682] FAT-fs (loop2): Directory bread(block 69) failed [ 129.757258][ T6682] FAT-fs (loop2): Directory bread(block 70) failed [ 129.782056][ T6682] FAT-fs (loop2): Directory bread(block 71) failed [ 129.806500][ T6682] FAT-fs (loop2): Directory bread(block 72) failed [ 129.829231][ T6682] FAT-fs (loop2): Directory bread(block 73) failed [ 130.264994][ T6703] loop4: detected capacity change from 0 to 64 [ 130.721436][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.921494][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 130.932254][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.955376][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.985269][ T6715] vim2m vim2m.0: vidioc_s_fmt queue busy [ 130.986100][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.040167][ T5809] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.054560][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.092927][ T5809] usb 2-1: config 0 descriptor?? [ 131.198563][ T6705] loop2: detected capacity change from 0 to 32768 [ 131.253456][ T6711] loop4: detected capacity change from 0 to 32768 [ 131.290355][ T6711] [ 131.290355][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.290355][ T6711] [ 131.350493][ T6711] [ 131.350493][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.350493][ T6711] [ 131.353245][ T6705] blkno = 8ed2c, nblocks = 1 [ 131.372617][ T6705] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 131.372617][ T6705] [ 131.381061][ T6711] [ 131.381061][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.381061][ T6711] [ 131.410807][ T6711] [ 131.410807][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.410807][ T6711] [ 131.435387][ T6705] ERROR: (device loop2): remounting filesystem as read-only [ 131.458566][ T6705] ialloc: diAlloc returned -17! [ 131.462168][ T6711] [ 131.462168][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.462168][ T6711] [ 131.495382][ T6720] [ 131.495382][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.495382][ T6720] [ 131.521080][ T6711] [ 131.521080][ T6711] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.521080][ T6711] [ 131.559894][ T6720] [ 131.559894][ T6720] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.559894][ T6720] [ 131.579698][ T5809] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 131.596584][ T112] [ 131.596584][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.596584][ T112] [ 131.617365][ T5809] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 131.647702][ T5809] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 131.674861][ T2918] [ 131.674861][ T2918] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.674861][ T2918] [ 131.690809][ T5809] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 131.707319][ T2918] [ 131.707319][ T2918] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.707319][ T2918] [ 131.737206][ T5809] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 131.743826][ T6227] [ 131.743826][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.743826][ T6227] [ 131.801869][ T5809] microsoft 0003:045E:07DA.0003: no inputs found [ 131.810874][ T5809] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 131.831733][ T113] [ 131.831733][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.831733][ T113] [ 131.865530][ T5809] usb 2-1: USB disconnect, device number 2 [ 131.875405][ T6227] [ 131.875405][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 131.875405][ T6227] [ 132.030254][ T6723] fido_id[6723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 132.234245][ T6730] loop2: detected capacity change from 0 to 64 [ 132.444560][ T6733] loop4: detected capacity change from 0 to 1024 [ 132.622459][ T11] hfsplus: b-tree write err: -5, ino 25 [ 132.631978][ T11] hfsplus: b-tree write err: -5, ino 4 [ 132.637885][ T11] hfsplus: b-tree write err: -5, ino 2 [ 132.688713][ T6736] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 132.765343][ T6736] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 132.878329][ T6728] loop3: detected capacity change from 0 to 32768 [ 132.910176][ T6728] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.288 (6728) [ 132.950382][ T6728] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 132.988809][ T6728] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 133.007575][ T6743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.292'. [ 133.016812][ T6728] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 133.016846][ T6728] BTRFS info (device loop3): use zstd compression, level 3 [ 133.016868][ T6728] BTRFS info (device loop3): using free space tree [ 133.222198][ T6728] BTRFS info (device loop3): enabling ssd optimizations [ 133.233008][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.240142][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.256785][ T6728] BTRFS info (device loop3): auto enabling async discard [ 133.804512][ T5770] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.084849][ T5763] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5763) [ 134.480822][ T6771] loop1: detected capacity change from 0 to 32768 [ 134.570717][ T6771] JBD2: Ignoring recovery information on journal [ 134.712813][ T6771] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 135.078872][ T6771] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 135.132797][ T6771] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 135.143926][ T6771] OCFS2: File system is now read-only. [ 135.149628][ T6771] (syz.1.298,6771,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 135.161608][ T6771] (syz.1.298,6771,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 135.169424][ T6771] (syz.1.298,6771,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 135.181444][ T6771] (syz.1.298,6771,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 135.202103][ T6771] (syz.1.298,6771,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 135.210866][ T6771] (syz.1.298,6771,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 135.225596][ T6771] (syz.1.298,6771,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 135.239346][ T6771] (syz.1.298,6771,0):ocfs2_symlink:1944 ERROR: status = -30 [ 135.257125][ T6771] (syz.1.298,6771,0):ocfs2_symlink:2068 ERROR: status = -30 [ 135.307796][ T6771] syz.1.298 (6771) used greatest stack depth: 19024 bytes left [ 135.363133][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.430271][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 135.563353][ T23] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 135.579932][ T23] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 135.600242][ T23] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 135.620919][ T23] usb 5-1: config 220 has no interface number 2 [ 135.642275][ T23] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 135.671387][ T23] usb 5-1: config 220 interface 0 has no altsetting 0 [ 135.686361][ T23] usb 5-1: config 220 interface 76 has no altsetting 0 [ 135.701296][ T23] usb 5-1: config 220 interface 1 has no altsetting 0 [ 135.721115][ T23] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 135.734337][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.751767][ T23] usb 5-1: Product: syz [ 135.761686][ T23] usb 5-1: Manufacturer: syz [ 135.776815][ T23] usb 5-1: SerialNumber: syz [ 136.028497][ T23] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 136.049344][ T23] usb 5-1: No valid video chain found. [ 136.061927][ T23] usb 5-1: selecting invalid altsetting 0 [ 136.103327][ T23] usb 5-1: selecting invalid altsetting 0 [ 136.109417][ T23] usbtest: probe of 5-1:220.1 failed with error -22 [ 136.138852][ T23] usb 5-1: USB disconnect, device number 2 [ 136.416430][ T6811] loop3: detected capacity change from 0 to 32768 [ 136.853504][ T6842] loop3: detected capacity change from 0 to 128 [ 137.378997][ T6850] loop1: detected capacity change from 0 to 4096 [ 137.421789][ T6850] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 137.495162][ T6859] loop4: detected capacity change from 0 to 1024 [ 137.526744][ T6850] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 137.832199][ T5771] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 137.838811][ T5771] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 137.923613][ T6869] macvtap1: entered promiscuous mode [ 138.981540][ T6898] loop4: detected capacity change from 0 to 4096 [ 139.061935][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.095671][ T6907] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.276799][ T788] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 139.297868][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.351312][ T788] usb 3-1: config 0 has no interface number 0 [ 139.360998][ T788] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 139.372196][ T788] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.395568][ T788] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 139.407668][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.417498][ T788] usb 3-1: Product: syz [ 139.422316][ T788] usb 3-1: Manufacturer: syz [ 139.426969][ T788] usb 3-1: SerialNumber: syz [ 139.443280][ T788] usb 3-1: config 0 descriptor?? [ 139.615678][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.354'. [ 139.634070][ T6917] loop4: detected capacity change from 0 to 128 [ 139.753358][ T6917] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 139.796423][ T6917] hpfs: filesystem error: improperly stopped [ 139.831331][ T6917] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.839284][ T6917] hpfs: You really don't want any checks? You are crazy... [ 139.893146][ T6917] hpfs: hpfs_map_sector(): read error [ 139.915929][ T6917] hpfs: code page support is disabled [ 139.924920][ T6917] hpfs: hpfs_map_4sectors(): unaligned read [ 139.941430][ T6917] hpfs: hpfs_map_4sectors(): unaligned read [ 139.981714][ T6917] hpfs: filesystem error: unable to find root dir [ 140.240455][ T5773] usb 3-1: USB disconnect, device number 4 [ 141.014670][ T6957] smc: net device wlan0 applied user defined pnetid SYZ0 [ 141.561154][ C0] sched: RT throttling activated [ 142.218979][ T6976] loop4: detected capacity change from 0 to 2048 [ 142.280949][ T6976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.348702][ T6980] loop1: detected capacity change from 0 to 2048 [ 142.388628][ T6976] exFAT-fs (loop4): invalid boot record signature [ 142.411341][ T5773] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.421098][ T6980] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.448550][ T6976] exFAT-fs (loop4): failed to read boot sector [ 142.497562][ T6976] exFAT-fs (loop4): failed to recognize exfat type [ 142.562557][ T6980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.662033][ T5773] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 142.725599][ T5773] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 142.783691][ T6980] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.375: bg 0: block 234: padding at end of block bitmap is not set [ 142.806899][ T5773] usb 3-1: Product: syz [ 142.862828][ T5773] usb 3-1: Manufacturer: syz [ 142.867603][ T5773] usb 3-1: SerialNumber: syz [ 142.917778][ T5773] usb 3-1: config 0 descriptor?? [ 142.957313][ T6980] EXT4-fs (loop1): Remounting filesystem read-only [ 142.982960][ T5773] ch341 3-1:0.0: ch341-uart converter detected [ 143.020197][ T6980] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 143.169464][ T6949] loop3: detected capacity change from 0 to 262144 [ 143.227316][ T6949] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.272182][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.318275][ T6949] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.448744][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.377'. [ 143.490032][ T6996] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 143.672382][ T5773] usb 3-1: failed to send control message: -71 [ 143.691320][ T5773] ch341-uart: probe of ttyUSB0 failed with error -71 [ 143.740981][ T5773] usb 3-1: USB disconnect, device number 5 [ 143.786372][ T5773] ch341 3-1:0.0: device disconnected [ 144.405604][ T7018] loop4: detected capacity change from 0 to 128 [ 144.462163][ T7020] process 'syz.3.385' launched '/dev/fd/3' with NULL argv: empty string added [ 144.478634][ T7018] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.551090][ T7018] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.945699][ T7055] loop1: detected capacity change from 0 to 64 [ 146.090317][ T7058] loop2: detected capacity change from 0 to 256 [ 146.164963][ T7058] FAT-fs (loop2): Directory bread(block 64) failed [ 146.194428][ T7058] FAT-fs (loop2): Directory bread(block 65) failed [ 146.227103][ T7058] FAT-fs (loop2): Directory bread(block 66) failed [ 146.256792][ T7058] FAT-fs (loop2): Directory bread(block 67) failed [ 146.293502][ T7058] FAT-fs (loop2): Directory bread(block 68) failed [ 146.320621][ T7058] FAT-fs (loop2): Directory bread(block 69) failed [ 146.339515][ T7058] FAT-fs (loop2): Directory bread(block 70) failed [ 146.377055][ T7058] FAT-fs (loop2): Directory bread(block 71) failed [ 146.404419][ T7058] FAT-fs (loop2): Directory bread(block 72) failed [ 146.431284][ T7058] FAT-fs (loop2): Directory bread(block 73) failed [ 146.584754][ T28] audit: type=1800 audit(1777411972.914:12): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.398" name="file1" dev="loop2" ino=1048686 res=0 errno=0 [ 146.622059][ T7058] syz.2.398: attempt to access beyond end of device [ 146.622059][ T7058] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 146.689393][ T7036] loop3: detected capacity change from 0 to 32768 [ 146.790348][ T7042] loop4: detected capacity change from 0 to 32768 [ 146.828138][ T7036] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.869103][ T7042] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 146.922813][ T7042] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.205990][ T7036] XFS (loop3): Ending clean mount [ 147.238825][ T7036] XFS (loop3): Quotacheck needed: Please wait. [ 147.391885][ T7036] XFS (loop3): Quotacheck: Done. [ 147.462028][ T7042] XFS (loop4): Ending clean mount [ 147.826820][ T5770] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.882336][ T6227] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.541879][ T7112] loop3: detected capacity change from 0 to 512 [ 148.647455][ T7112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.655302][ T7114] loop4: detected capacity change from 0 to 512 [ 148.668949][ T7114] EXT4-fs: Ignoring removed orlov option [ 148.690670][ T7112] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.701350][ T7114] EXT4-fs (loop4): Test dummy encryption mode enabled [ 148.701373][ T7114] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.711549][ T5809] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.776088][ T7114] EXT4-fs (loop4): 1 truncate cleaned up [ 148.788363][ T7114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.954693][ T5809] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.954702][ T7096] loop2: detected capacity change from 0 to 32768 [ 148.954727][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.023497][ T5809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.058868][ T7096] (syz.2.403,7096,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 149.080296][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.104676][ T7096] (syz.2.403,7096,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 149.128696][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.135871][ T5809] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.177409][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.211383][ T5809] usb 2-1: Product: syz [ 149.215738][ T5809] usb 2-1: Manufacturer: syz [ 149.226254][ T7096] JBD2: Ignoring recovery information on journal [ 149.246393][ T5809] cdc_wdm 2-1:1.0: skipping garbage [ 149.261270][ T5809] cdc_wdm 2-1:1.0: skipping garbage [ 149.278079][ T5809] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 149.284289][ T5809] cdc_wdm 2-1:1.0: Unknown control protocol [ 149.473168][ T7096] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.636081][ T7114] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 149.827659][ T6227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.975635][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 150.858272][ T7171] loop4: detected capacity change from 0 to 1024 [ 151.089966][ T5773] kernel read not supported for file /dsp (pid: 5773 comm: kworker/1:3) [ 151.131215][ T2918] hfsplus: b-tree write err: -5, ino 25 [ 151.137882][ T2918] hfsplus: b-tree write err: -5, ino 4 [ 151.171340][ T2918] hfsplus: b-tree write err: -5, ino 2 [ 151.385795][ T7179] loop2: detected capacity change from 0 to 1024 [ 151.451704][ T5809] usb 2-1: USB disconnect, device number 3 [ 151.514524][ T7179] hfsplus: bad catalog entry type [ 151.694340][ T37] hfsplus: b-tree write err: -5, ino 25 [ 151.700944][ T37] hfsplus: b-tree write err: -5, ino 4 [ 151.737748][ T37] hfsplus: b-tree write err: -5, ino 2 [ 151.964303][ T7197] loop1: detected capacity change from 0 to 1024 [ 152.076514][ T28] audit: type=1800 audit(1777411978.404:13): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.428" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 152.283201][ T7207] loop3: detected capacity change from 0 to 256 [ 152.481925][ T7210] loop2: detected capacity change from 0 to 4096 [ 152.551420][ T7210] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 152.589013][ T7210] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 152.661991][ T7210] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 152.711453][ T7210] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 152.729170][ T7218] loop1: detected capacity change from 0 to 128 [ 152.761807][ T7218] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 152.805234][ T7210] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 152.854094][ T7218] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.864014][ T7186] loop4: detected capacity change from 0 to 32768 [ 152.958855][ T7210] ntfs: volume version 3.1. [ 152.967153][ T7218] ext2 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.002924][ T7210] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 153.023159][ T7210] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 153.087693][ T7210] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 153.142565][ T7224] netlink: 84 bytes leftover after parsing attributes in process `syz.3.435'. [ 153.146960][ T7210] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 153.204484][ T7224] netlink: 84 bytes leftover after parsing attributes in process `syz.3.435'. [ 153.340526][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.662524][ T7233] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.161890][ T7250] loop4: detected capacity change from 0 to 512 [ 154.232939][ T7250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.321545][ T7250] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.420177][ T7263] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.548314][ T7261] loop3: detected capacity change from 0 to 4096 [ 154.569183][ T7261] ntfs: volume version 3.1. [ 154.576165][ T6227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.801403][ T5809] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 154.817629][ T7269] loop4: detected capacity change from 0 to 256 [ 154.866430][ T7271] netlink: 'syz.3.455': attribute type 4 has an invalid length. [ 155.016311][ T5809] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 155.041607][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.049684][ T5809] usb 3-1: Product: syz [ 155.089216][ T5809] usb 3-1: Manufacturer: syz [ 155.106618][ T5809] usb 3-1: SerialNumber: syz [ 155.123571][ T5809] usb 3-1: config 0 descriptor?? [ 155.145356][ T5809] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 155.355388][ T7283] loop3: detected capacity change from 0 to 256 [ 155.624636][ T7289] loop3: detected capacity change from 0 to 1024 [ 155.655945][ T7289] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.718507][ T7289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.731295][ T5773] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.768453][ T5809] gspca_stk1135: reg_w 0x3 err -71 [ 155.778936][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.786017][ T5809] gspca_stk1135: Sensor write failed [ 155.791465][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.799232][ T5809] gspca_stk1135: Sensor write failed [ 155.804688][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.811875][ T5809] gspca_stk1135: Sensor read failed [ 155.817243][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.829666][ T5809] gspca_stk1135: Sensor read failed [ 155.835338][ T5809] gspca_stk1135: Detected sensor type unknown (0x0) [ 155.842177][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.843064][ T7289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, [ 155.848682][ T5809] gspca_stk1135: Sensor read failed [ 155.848788][ T7289] block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 155.857342][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.878279][ T5809] gspca_stk1135: Sensor read failed [ 155.883754][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.890484][ T5809] gspca_stk1135: Sensor write failed [ 155.895935][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 155.910529][ T5809] gspca_stk1135: Sensor write failed [ 155.922525][ T5809] stk1135: probe of 3-1:0.0 failed with error -71 [ 155.935148][ T5773] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 155.950411][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.959090][ T5773] usb 2-1: Product: syz [ 155.961460][ T5809] usb 3-1: USB disconnect, device number 6 [ 155.963663][ T5773] usb 2-1: Manufacturer: syz [ 155.989311][ T5773] usb 2-1: SerialNumber: syz [ 156.028632][ T5773] usb 2-1: config 0 descriptor?? [ 156.152595][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.408233][ T1753] usb 2-1: USB disconnect, device number 4 [ 156.757637][ T7314] loop3: detected capacity change from 0 to 128 [ 156.787099][ T7314] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 156.818230][ T7314] hpfs: filesystem error: improperly stopped [ 156.836233][ T7316] loop2: detected capacity change from 0 to 1024 [ 156.841250][ T7314] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 156.871093][ T7314] hpfs: You really don't want any checks? You are crazy... [ 156.881308][ T7314] hpfs: Code page index out of array [ 156.883018][ T7316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.886771][ T7314] hpfs: code page support is disabled [ 156.940398][ T7314] hpfs: hpfs_map_4sectors(): unaligned read [ 156.973937][ T7314] hpfs: hpfs_map_4sectors(): unaligned read [ 156.979935][ T7314] hpfs: filesystem error: unable to find root dir [ 157.065968][ T7316] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 157.110828][ T7316] EXT4-fs warning (device loop2): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 157.265302][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.714536][ T7329] loop3: detected capacity change from 0 to 2048 [ 157.772483][ T7329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.787332][ T7312] loop4: detected capacity change from 0 to 40427 [ 157.807712][ T7332] netlink: 288 bytes leftover after parsing attributes in process `syz.2.484'. [ 157.829989][ T7329] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.854960][ T7312] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 157.856963][ T7329] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 157.891940][ T7312] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 157.929066][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.949475][ T7312] F2FS-fs (loop4): invalid crc value [ 158.264659][ T7312] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 158.291222][ T7312] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 158.407975][ T7345] loop2: detected capacity change from 0 to 4096 [ 158.427926][ T6227] syz-executor: attempt to access beyond end of device [ 158.427926][ T6227] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.449188][ T7345] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 158.463020][ T6227] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 158.492621][ T7345] ntfs3: loop2: Failed to load $Extend (-22). [ 158.499034][ T7345] ntfs3: loop2: Failed to initialize $Extend. [ 158.801365][ T7352] NILFS (loop3): invalid segment: Checksum error in segment payload [ 158.813894][ T7352] NILFS (loop3): trying rollback from an earlier position [ 158.884505][ T7352] NILFS (loop3): recovery complete [ 158.919449][ T7361] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.200881][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 159.200918][ T28] audit: type=1800 audit(1777411985.524:14): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.491" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 159.629256][ T7375] set_capacity_and_notify: 1 callbacks suppressed [ 159.629274][ T7375] loop3: detected capacity change from 0 to 2048 [ 159.668217][ T7375] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 159.710837][ T7375] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.812198][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.503'. [ 160.127070][ T7392] loop2: detected capacity change from 0 to 1024 [ 160.374041][ T28] audit: type=1400 audit(1777411986.704:15): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A12 pid=7399 comm="syz.1.510" [ 161.149164][ T7428] UBIFS error (pid: 7428): cannot open "usrquota", error -22 [ 161.190023][ T7426] loop3: detected capacity change from 0 to 4096 [ 161.267621][ T7426] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.336435][ T7426] ntfs3: loop3: Failed to load $Extend (-22). [ 161.350648][ T7426] ntfs3: loop3: Failed to initialize $Extend. [ 161.667417][ T7421] loop1: detected capacity change from 0 to 32768 [ 161.684471][ T28] audit: type=1326 audit(1777411987.994:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d72d9cdd9 code=0x7ffc0000 [ 161.692462][ T7433] loop3: detected capacity change from 0 to 1024 [ 161.721498][ T7421] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.520 (7421) [ 161.746610][ T28] audit: type=1326 audit(1777411987.994:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d72d9cdd9 code=0x7ffc0000 [ 161.787970][ T7421] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 161.801452][ T7421] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 161.813987][ T28] audit: type=1326 audit(1777411988.004:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d72d9cdd9 code=0x7ffc0000 [ 161.838808][ T7421] BTRFS info (device loop1): enabling disk space caching [ 161.847248][ T7421] BTRFS info (device loop1): force clearing of disk cache [ 161.854987][ T7421] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 161.869574][ T28] audit: type=1326 audit(1777411988.004:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d72d9cdd9 code=0x7ffc0000 [ 161.895532][ T7421] BTRFS info (device loop1): use zstd compression, level 3 [ 161.919837][ T7421] BTRFS info (device loop1): disk space caching is enabled [ 161.931291][ T5773] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 161.962841][ T28] audit: type=1326 audit(1777411988.004:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d72d9cdd9 code=0x7ffc0000 [ 161.989391][ T11] hfsplus: b-tree write err: -5, ino 25 [ 162.008755][ T11] hfsplus: b-tree write err: -5, ino 4 [ 162.036822][ T11] hfsplus: b-tree write err: -5, ino 2 [ 162.067097][ T28] audit: type=1326 audit(1777411988.004:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7d72d9cb42 code=0x7ffc0000 [ 162.121214][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 162.128661][ T5773] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 162.141636][ T5773] usb 5-1: config 0 has no interface number 0 [ 162.148767][ T5773] usb 5-1: config 0 interface 32 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.160627][ T7421] BTRFS info (device loop1): enabling ssd optimizations [ 162.168630][ T7421] BTRFS info (device loop1): auto enabling async discard [ 162.176627][ T5773] usb 5-1: config 0 interface 32 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.190521][ T5773] usb 5-1: config 0 interface 32 has no altsetting 0 [ 162.197647][ T5773] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 162.207640][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.211258][ T28] audit: type=1326 audit(1777411988.014:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d72d5d60e code=0x7ffc0000 [ 162.238714][ T5773] usb 5-1: config 0 descriptor?? [ 162.244909][ T7421] BTRFS info (device loop1): rebuilding free space tree [ 162.306238][ T28] audit: type=1326 audit(1777411988.014:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7d72d9cc07 code=0x7ffc0000 [ 162.357432][ T7421] BTRFS info (device loop1): disabling free space tree [ 162.381330][ T7421] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 162.432611][ T7421] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 162.772046][ T5773] uclogic 0003:5543:0047.0004: interface is invalid, ignoring [ 162.968525][ T5771] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 163.045002][ T5773] usb 5-1: USB disconnect, device number 3 [ 164.541571][ T7484] loop1: detected capacity change from 0 to 4096 [ 164.608446][ T7484] ntfs3: loop1: ino=3, Correct links count -> 2. [ 164.881586][ T7484] ntfs3: loop1: failed to convert "0080" to cp874 [ 164.930615][ T7484] ntfs3: loop1: failed to convert name for inode 1e. [ 165.328194][ T7501] loop3: detected capacity change from 0 to 64 [ 165.350495][ T7503] loop2: detected capacity change from 0 to 64 [ 165.871863][ T788] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 166.002464][ T7518] loop1: detected capacity change from 0 to 512 [ 166.013747][ T7518] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.024761][ T7518] EXT4-fs: inline encryption not supported [ 166.030769][ T7518] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.045712][ T7518] EXT4-fs (loop1): Test dummy encryption mode enabled [ 166.061306][ T7518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.084516][ T788] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.094726][ T788] usb 3-1: config 0 has no interface number 0 [ 166.101070][ T788] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 166.110846][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.122687][ T7518] EXT4-fs (loop1): 1 truncate cleaned up [ 166.122932][ T788] usb 3-1: config 0 descriptor?? [ 166.129644][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.139887][ T788] usb 3-1: selecting invalid altsetting 1 [ 166.162344][ T788] dvb_ttusb_budget: ttusb_init_controller: error [ 166.168934][ T788] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 166.374080][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.421381][ T788] DVB: Unable to find symbol cx22700_attach() [ 166.555416][ T788] DVB: Unable to find symbol tda10046_attach() [ 166.572249][ T788] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 166.612653][ T788] usb 3-1: USB disconnect, device number 7 [ 166.881491][ T5773] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 167.081246][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 167.093526][ T5773] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.131379][ T5773] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.168940][ T5773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.187378][ T5773] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 167.209959][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.240405][ T5773] usb 5-1: config 0 descriptor?? [ 167.364472][ T7537] loop3: detected capacity change from 0 to 32768 [ 167.381380][ T5781] Bluetooth: hci3: command tx timeout [ 167.401710][ T7537] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.566 (7537) [ 167.442236][ T7537] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.480999][ T7537] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 167.491946][ T7537] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 167.530593][ T7537] BTRFS info (device loop3): trying to use backup root at mount time [ 167.540405][ T7537] BTRFS info (device loop3): setting nodatasum [ 167.566408][ T7537] BTRFS info (device loop3): enabling ssd optimizations [ 167.586175][ T7537] BTRFS info (device loop3): using spread ssd allocation scheme [ 167.612886][ T7537] BTRFS info (device loop3): turning on flush-on-commit [ 167.634833][ T7537] BTRFS info (device loop3): using free space tree [ 167.685545][ T5773] smartjoyplus 0003:6666:8804.0005: item fetching failed at offset 2/5 [ 167.701989][ T5773] smartjoyplus 0003:6666:8804.0005: parse failed [ 167.714743][ T5773] smartjoyplus: probe of 0003:6666:8804.0005 failed with error -22 [ 167.998494][ T5773] usb 5-1: USB disconnect, device number 4 [ 168.022334][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.250016][ T5763] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5763) [ 168.297883][ T7545] loop2: detected capacity change from 0 to 32768 [ 168.416171][ T7545] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 168.647750][ T7586] loop1: detected capacity change from 0 to 512 [ 168.685079][ T7586] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.733209][ T7545] XFS (loop2): Ending clean mount [ 168.751683][ T7586] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 168.792902][ T7545] XFS (loop2): Quotacheck needed: Please wait. [ 168.838277][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.578'. [ 168.857773][ T7586] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.575: bad orphan inode 117440527 [ 168.921384][ T7586] EXT4-fs (loop1): Remounting filesystem read-only [ 168.946846][ T7586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.954609][ T7545] XFS (loop2): Quotacheck: Done. [ 168.993069][ T7594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.579'. [ 169.040320][ T7594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.579'. [ 169.092803][ T7594] netlink: 36 bytes leftover after parsing attributes in process `syz.4.579'. [ 169.198561][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.237996][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 169.653457][ T7604] ip6gretap0: entered promiscuous mode [ 169.659723][ T7604] macvtap1: entered allmulticast mode [ 169.691723][ T7604] ip6gretap0: entered allmulticast mode [ 169.715413][ T7604] ip6gretap0: left allmulticast mode [ 169.721061][ T7604] ip6gretap0: left promiscuous mode [ 169.840661][ T7608] netlink: 'syz.4.586': attribute type 8 has an invalid length. [ 170.180186][ T7615] loop4: detected capacity change from 0 to 8192 [ 170.233505][ T7615] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.247638][ T7615] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 170.258100][ T7615] REISERFS (device loop4): using ordered data mode [ 170.265681][ T7615] reiserfs: using flush barriers [ 170.278330][ T7615] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.299324][ T7615] REISERFS (device loop4): checking transaction log (loop4) [ 170.314323][ T7615] REISERFS (device loop4): Using r5 hash to sort names [ 170.326377][ T7615] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 170.366438][ T7615] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 170.391533][ T7615] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 170.406098][ T7615] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 170.507654][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.572036][ T1753] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.721630][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 170.736683][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.761260][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.779525][ T1753] usb 4-1: Using ep0 maxpacket: 16 [ 170.795029][ T788] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.815158][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.815468][ T1753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.836014][ T788] usb 2-1: Product: syz [ 170.840234][ T788] usb 2-1: Manufacturer: syz [ 170.849361][ T788] usb 2-1: SerialNumber: syz [ 170.856196][ T1753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.897119][ T1753] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 170.910098][ T1753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.926037][ T1753] usb 4-1: config 0 descriptor?? [ 170.988212][ T7635] loop2: detected capacity change from 0 to 1024 [ 171.057679][ T7635] hfsplus: bad catalog entry type [ 171.110495][ T59] hfsplus: b-tree write err: -5, ino 25 [ 171.115320][ T788] usb 2-1: 0:2 : does not exist [ 171.131451][ T59] hfsplus: b-tree write err: -5, ino 4 [ 171.137958][ T788] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 171.143737][ T59] hfsplus: b-tree write err: -5, ino 2 [ 171.321813][ T788] usb 2-1: USB disconnect, device number 5 [ 171.377708][ T1753] apple 0003:05AC:024B.0006: unknown main item tag 0x3 [ 171.413311][ T1753] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 171.416208][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.420253][ T1753] apple 0003:05AC:024B.0006: item fetching failed at offset 24/69 [ 171.420992][ T1753] apple 0003:05AC:024B.0006: parse failed [ 171.519552][ T1753] apple: probe of 0003:05AC:024B.0006 failed with error -22 [ 171.550814][ T7631] loop4: detected capacity change from 0 to 32768 [ 171.570868][ T1753] usb 4-1: USB disconnect, device number 5 [ 171.595920][ T7631] [ 171.595920][ T7631] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.595920][ T7631] [ 171.740020][ T6227] [ 171.740020][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.740020][ T6227] [ 171.771392][ T6227] [ 171.771392][ T6227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 171.771392][ T6227] [ 171.788944][ T788] kernel write not supported for file /radio1 (pid: 788 comm: kworker/0:2) [ 172.030838][ T7643] loop4: detected capacity change from 0 to 4096 [ 172.042453][ T7643] __ntfs_warning: 20 callbacks suppressed [ 172.042469][ T7643] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 172.104710][ T7643] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 172.158514][ T7643] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 172.202703][ T7643] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 172.259148][ T7643] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 172.281373][ T7643] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 172.371362][ T7643] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 172.383453][ T7643] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 172.465652][ T7643] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 172.501342][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'. [ 172.502827][ T7643] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 172.577324][ T7643] ntfs: volume version 3.1. [ 173.296803][ T7669] loop3: detected capacity change from 0 to 256 [ 173.330538][ T7669] exfat: Deprecated parameter 'namecase' [ 173.371500][ T7669] exfat: Deprecated parameter 'utf8' [ 173.379659][ T7653] loop2: detected capacity change from 0 to 32768 [ 173.420721][ T7669] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 173.478080][ T7653] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 173.496996][ T7653] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.743348][ T7653] XFS (loop2): Ending clean mount [ 173.755937][ T7681] loop3: detected capacity change from 0 to 1024 [ 173.785956][ T7681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.809048][ T7653] XFS (loop2): Quotacheck needed: Please wait. [ 173.872428][ T7681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.971249][ T7653] XFS (loop2): Quotacheck: Done. [ 174.222320][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.234759][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 174.705024][ T7704] loop3: detected capacity change from 0 to 512 [ 174.727640][ T7707] loop4: detected capacity change from 0 to 256 [ 174.751827][ T7707] exfat: Deprecated parameter 'utf8' [ 174.757216][ T7707] exfat: Deprecated parameter 'utf8' [ 174.805261][ T7704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.854315][ T7707] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 174.871911][ T7704] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.159782][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.273541][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.634'. [ 175.662482][ T5773] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 175.765904][ T7738] loop2: detected capacity change from 0 to 64 [ 175.865328][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 175.881266][ T1753] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 175.920394][ T5773] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 175.933786][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.943176][ T5773] usb 4-1: Product: syz [ 175.947733][ T5773] usb 4-1: Manufacturer: syz [ 175.954242][ T5773] usb 4-1: SerialNumber: syz [ 175.973593][ T5773] usb 4-1: config 0 descriptor?? [ 176.003989][ T5773] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 176.113280][ T1753] usb 5-1: Using ep0 maxpacket: 16 [ 176.120968][ T1753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.151499][ T1753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.171522][ T1753] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.206447][ T1753] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 176.215864][ T1753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.227924][ T1753] usb 5-1: config 0 descriptor?? [ 176.613764][ T5773] gspca_sonixj: reg_w1 err -71 [ 176.618866][ T5773] sonixj: probe of 4-1:0.0 failed with error -71 [ 176.654273][ T5773] usb 4-1: USB disconnect, device number 6 [ 176.667139][ T7754] loop2: detected capacity change from 0 to 4096 [ 176.696683][ T1753] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 176.735793][ T1753] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 176.768080][ T7754] ntfs: volume version 3.1. [ 176.770786][ T1753] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 176.794956][ T1753] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 176.806014][ T1753] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 176.824260][ T1753] microsoft 0003:045E:07DA.0007: no inputs found [ 176.840995][ T1753] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 176.891767][ T1753] usb 5-1: USB disconnect, device number 5 [ 177.023865][ T7759] loop1: detected capacity change from 0 to 64 [ 177.035122][ T7757] fido_id[7757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 177.146421][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 177.146438][ T28] audit: type=1800 audit(1777412003.474:45): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.651" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 177.378639][ T7761] loop2: detected capacity change from 0 to 4096 [ 177.533725][ T7769] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.569214][ T7768] loop1: detected capacity change from 0 to 1024 [ 177.727762][ T7768] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 177.761246][ T7768] hfsplus: xattr searching failed [ 177.776141][ T28] audit: type=1804 audit(1777412004.104:46): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.655" name="/newroot/174/file0/file1" dev="loop1" ino=20 res=1 errno=0 [ 177.797928][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.832495][ T7774] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 177.853513][ T7774] hfsplus: xattr searching failed [ 177.937663][ T7774] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 177.988032][ T7774] hfsplus: xattr searching failed [ 178.009478][ T7774] syz.1.655: attempt to access beyond end of device [ 178.009478][ T7774] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 178.070912][ T7774] Buffer I/O error on dev loop1, logical block 458752, async page read [ 178.123646][ T7774] hfsplus: unable to mark blocks free: error -5 [ 178.130106][ T7774] hfsplus: can't free extent [ 178.251587][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 178.327163][ T7789] loop4: detected capacity change from 0 to 256 [ 178.419506][ T7789] FAT-fs (loop4): Directory bread(block 64) failed [ 178.446454][ T7789] FAT-fs (loop4): Directory bread(block 65) failed [ 178.466860][ T7789] FAT-fs (loop4): Directory bread(block 66) failed [ 178.482633][ T7789] FAT-fs (loop4): Directory bread(block 67) failed [ 178.507354][ T7789] FAT-fs (loop4): Directory bread(block 68) failed [ 178.541353][ T7789] FAT-fs (loop4): Directory bread(block 69) failed [ 178.548472][ T7789] FAT-fs (loop4): Directory bread(block 70) failed [ 178.560984][ T7791] loop2: detected capacity change from 0 to 4096 [ 178.568249][ T7789] FAT-fs (loop4): Directory bread(block 71) failed [ 178.575281][ T7789] FAT-fs (loop4): Directory bread(block 72) failed [ 178.596936][ T7789] FAT-fs (loop4): Directory bread(block 73) failed [ 178.626762][ T7791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.637723][ T7789] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.658176][ T7798] loop1: detected capacity change from 0 to 1024 [ 178.812032][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 179.024050][ T5814] hid-generic 0004:00A9:0000.0008: unknown main item tag 0x0 [ 179.064872][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.072138][ T5814] hid-generic 0004:00A9:0000.0008: unknown main item tag 0x2 [ 179.105712][ T5814] hid-generic 0004:00A9:0000.0008: unknown main item tag 0xe [ 179.174423][ T5814] hid-generic 0004:00A9:0000.0008: hidraw0: HID v1.01 Device [syz1] on syz0 [ 179.388356][ T7807] fido_id[7807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.706479][ T7822] loop2: detected capacity change from 0 to 64 [ 180.198428][ T7838] netlink: 480 bytes leftover after parsing attributes in process `syz.4.695'. [ 180.466509][ T7851] loop2: detected capacity change from 0 to 64 [ 180.737201][ T7857] netlink: 472 bytes leftover after parsing attributes in process `syz.3.697'. [ 180.742483][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.696'. [ 180.942284][ T7869] loop2: detected capacity change from 0 to 64 [ 181.164565][ T2918] ------------[ cut here ]------------ [ 181.170162][ T2918] kernel BUG at fs/hfs/inode.c:449! [ 181.207961][ T2918] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 181.214206][ T2918] CPU: 1 PID: 2918 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 181.221797][ T2918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.231989][ T2918] Workqueue: writeback wb_workfn (flush-7:2) [ 181.238644][ T2918] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 181.244251][ T2918] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 181.263986][ T2918] RSP: 0000:ffffc9000c527340 EFLAGS: 00010293 [ 181.270248][ T2918] RAX: ffffffff825b5f2a RBX: ffff88807c83bc28 RCX: ffff88802bd75a00 [ 181.278379][ T2918] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 181.286656][ T2918] RBP: ffffc9000c5274d0 R08: ffff88802bd75a00 R09: 0000000000000003 [ 181.294741][ T2918] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 181.302835][ T2918] R13: 1ffff920018a4e6c R14: ffff88807c83bbd8 R15: 0000000000000000 [ 181.310823][ T2918] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 181.319770][ T2918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.326370][ T2918] CR2: 00007ffe0141c000 CR3: 0000000018ed2000 CR4: 00000000003506e0 [ 181.334365][ T2918] Call Trace: [ 181.337830][ T2918] [ 181.340775][ T2918] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 181.346174][ T2918] ? __rwlock_init+0x150/0x150 [ 181.351054][ T2918] __writeback_single_inode+0x705/0xec0 [ 181.356624][ T2918] writeback_sb_inodes+0x7cd/0xf50 [ 181.361940][ T2918] ? queue_io+0x550/0x550 [ 181.366329][ T2918] ? rcu_is_watching+0x15/0xb0 [ 181.371143][ T2918] wb_writeback+0x46a/0xbf0 [ 181.375769][ T2918] ? queue_io+0x3b1/0x550 [ 181.380117][ T2918] ? percpu_ref_tryget+0x250/0x250 [ 181.385246][ T2918] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 181.391245][ T2918] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.396990][ T2918] wb_workfn+0x400/0xe60 [ 181.401347][ T2918] ? inode_wait_for_writeback+0x230/0x230 [ 181.407172][ T2918] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 181.413168][ T2918] ? read_lock_is_recursive+0x20/0x20 [ 181.418560][ T2918] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.423857][ T2918] ? process_scheduled_works+0x96f/0x15d0 [ 181.429592][ T2918] ? process_scheduled_works+0x96f/0x15d0 [ 181.435496][ T2918] process_scheduled_works+0xa5d/0x15d0 [ 181.441186][ T2918] ? worker_attach_to_pool+0x380/0x380 [ 181.446952][ T2918] ? assign_work+0x3d2/0x5d0 [ 181.451653][ T2918] worker_thread+0xa55/0xfc0 [ 181.456530][ T2918] kthread+0x2fa/0x390 [ 181.460610][ T2918] ? pr_cont_work+0x560/0x560 [ 181.465319][ T2918] ? kthread_blkcg+0xd0/0xd0 [ 181.470048][ T2918] ret_from_fork+0x48/0x80 [ 181.474564][ T2918] ? kthread_blkcg+0xd0/0xd0 [ 181.479171][ T2918] ret_from_fork_asm+0x11/0x20 [ 181.484042][ T2918] [ 181.487168][ T2918] Modules linked in: [ 181.508412][ T2918] ---[ end trace 0000000000000000 ]--- [ 181.514533][ T2918] RIP: 0010:hfs_write_inode+0x87a/0x880 [ 181.520171][ T2918] Code: c7 c1 00 03 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 03 31 97 e8 f0 f9 83 ff e9 62 fe ff ff e8 d6 c2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49 [ 181.540395][ T2918] RSP: 0000:ffffc9000c527340 EFLAGS: 00010293 [ 181.548384][ T2918] RAX: ffffffff825b5f2a RBX: ffff88807c83bc28 RCX: ffff88802bd75a00 [ 181.564999][ T2918] RDX: 0000000000000000 RSI: ffffffff8d339b40 RDI: 0000000000000000 [ 181.573432][ T2918] RBP: ffffc9000c5274d0 R08: ffff88802bd75a00 R09: 0000000000000003 [ 181.581761][ T2918] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 181.589928][ T2918] R13: 1ffff920018a4e6c R14: ffff88807c83bbd8 R15: 0000000000000000 [ 181.597989][ T2918] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 181.607646][ T2918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.615898][ T2918] CR2: 00007effbf7ea2f8 CR3: 000000002fac0000 CR4: 00000000003506e0 [ 181.624589][ T2918] Kernel panic - not syncing: Fatal exception [ 181.631154][ T2918] Kernel Offset: disabled [ 181.635510][ T2918] Rebooting in 86400 seconds..