last executing test programs: 4m43.492150471s ago: executing program 32 (id=245): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000507000/0x2000)=nil) r2 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) write$binfmt_elf32(r1, &(0x7f0000001e80)=ANY=[], 0xfe74) splice(r0, 0x0, r2, 0x0, 0x200002, 0x0) 3m23.024900325s ago: executing program 1 (id=777): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) write$sndseq(r1, &(0x7f0000000040)=[{0x82, 0x4, 0x0, 0x0, @time={0x8, 0x6}, {0xb2, 0xb8}, {0x3, 0x2}, @result={0x0, 0x3b53}}, {0x0, 0x0, 0xff, 0x4, @time={0x8}, {0x9, 0x4}, {0xc}, @result={0x4, 0x2}}], 0x38) 3m22.057478432s ago: executing program 1 (id=783): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC], 0x8, 0x1d1, &(0x7f0000000440)="$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") gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m21.868944134s ago: executing program 1 (id=786): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x4, 0x550f, &(0x7f00000089c0)="$eJzs3EtvG9UXAPA7SdP3v/8IsWDXkSqkBNVWnEcFuwCteIhUUYEFK3DsieXW9kSx44SsWLBELPgmCCRWLPkMLFizQyxA7JBAnjuGhocEihOT5veTxmfu9fWZc62q0pmJHIBzaz796Yck3AhXQgizIYTrIRTnSXkU1mN4pjxmHjuScu63iYshhKshhBuj5DFnUr71ye3hrbXvX//xy68vXbj26RffTG/XwLQ9G0Lo7sTz/W6MeSvGh+V8fdguYnd1WMb4RvdROc5j3M+2igz79fG6ehFXWnF9vrPXH8XtTr0xiq32djG/04sX7A9b4zzFBx7Wd4txM9sqYrufF7F1GOs6OIz/tx32BzFPs8z3fpE+DAbjGOezgyzuZ+dRERu9QTkf8+bN7GAUh2UsLxcaeadZ1LF1nG/6v+2Ndm/vIB1mu/123kvXqrXnq7U7ldpu3swG2Wql3m3eWU0XWp3Rssogq3fXW3ne6mTVRt5dTBdajUalVksX7mZb7XovrdWqK9WlytpieXY7feX+22mnmS6M4kvt3t6g3emn2/luGj+xmC5XV15YTG/V0jc3NtPNB/fubWy+9e7dd+6/uPHay+WiP5X1XFheWl6u1JYqy7XFc7T/D8ui04WJ7R+OJZl2AQBnz7/t/2/q/4EJOLn+f/dBCCff/wf9/0Scqf53XNYE+9/zvn84Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ68WJ/NxfK2c/1859VQ5TkIIMyGEX/7CbLh4JOdsmWfub9bP/aGGr5JQZBhd41J5XA0hrJfHz/8/6W8BAAAAnlyff3Dz49itx5f5aRfEaYo3bWauvzehfEkIYW7+uwllmxm9PD2hZMW/7wvhYELZihtYlyeULN5yuzCpbP/I7JFw+bGQxDBzquUAAACn4mgncLpdCAAAAKfpo2kXwHQkYfwoc/wsuPjL+98fCF45MgIAAADOoGTaBQAAAAAnruj//f4fAAAAPNni7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7JzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH+zs7OxVXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+Dz0nkEu85bCHCJ4jMzuzO/kBrj86s0k+H3jzvjsM875vFkK+814CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQGL47ieP00B7Fjfzc5t6D5bTfOtSnHq1vL6QtjaMqkz4ZXi5/iDrjcK+OZAAAADgb4qK+DyHsJBuLad9oZ/V/UlyT1vzfPzuKi3r+cN1f9EXtn7bfft19cTxQezROetMbK4P+xaOpNJ/cLGfbc397RTN78tm7lzj7QhofrL0wTLLnGX37+PF7rSycqyJbAODfuFD0eVD8PpT2vToTA+DMaJYK76L+j9v15gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQheFaeLqIoxDCQnMSp7b2Hiwf1z9a314o2tWHD9fD15N7prdIQgg3Vgb9i5XOZrbdvXf/1tJg0L9TffBKCKGu0d/Jp3/roykuDqGW5yP4f4L9ufzLnpF8TkhQ4w8lAABOpSRvaV2/k2wspuei+RD2fzhY/79eisOU9f/ux1c3y2OV6/9eZTOcfd3V25937967/+bK7aWb/Zv9T9+61Hu7d/nalSvXutm7kq43JgAAAPw3rbyV6//G/NH1//OlOExZ/3/xXe+r8lix+v9Yk0W/ujMBAAA4255/9c8/omPOR61W+HJpdfVOb3Qcf740OtaQ6j82l7dy/R/P150VAAAAUIXhWnRg/f96KQ5Trv8/8+NLP5fvGYcQzuXr/xeWPxtcr246M62KPyeue44AAADU61zeyuv/Sbb/vzHe8tAIIbzx2ijO/w3gVPV//P43P5XHKu//v1zdFGdSozN6HlnfCaHZqTsjAAAATrOn8pYW+78nG4uf/HL+w5b9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABV+ysAAP//+Cw/6Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x201) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183b41, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) 3m21.07911266s ago: executing program 1 (id=791): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m20.531888883s ago: executing program 1 (id=797): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 3m20.300708927s ago: executing program 1 (id=799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) 3m17.782416516s ago: executing program 33 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') pread64(r1, &(0x7f0000000240)=""/188, 0xbc, 0x3) 3m5.07317947s ago: executing program 34 (id=799): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x38}, 0x4, 0x700000000000000}, 0x0) 3m0.360791519s ago: executing program 4 (id=866): setgroups(0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0xfffffd5f) 3m0.041832159s ago: executing program 4 (id=868): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r0, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 2m58.66576466s ago: executing program 4 (id=880): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m58.228204727s ago: executing program 4 (id=876): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f00000002c0)={[{@discard}, {@max_dir_size_kb}, {@norecovery}]}, 0x1, 0x7c5, &(0x7f0000000f80)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x186) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000300)='./bus\x00', 0x0, 0x1005400, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2040, 0xe8) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3fd, 0x0, 0x0, 0x1, 0x19, "e735af413bb901277fe4d0ce5d299db7aac63a0100000000d445f320710e9caa84a0ea00004121000000ef001d0000200000dcfbe6a300", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000f8ff00000000f0fffffffff2ff00", [0x4]}) chdir(&(0x7f0000000080)='./file0\x00') 2m57.563394546s ago: executing program 4 (id=877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2m55.46971911s ago: executing program 4 (id=882): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 2m54.95368658s ago: executing program 35 (id=882): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 2m33.565834569s ago: executing program 3 (id=984): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0xb, 0x284}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) 2m33.009878432s ago: executing program 3 (id=987): io_setup(0x3fe, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x4000000966a, 0x8001, 0x4, 0xd92, 0x0, 0x2401}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffa1, 0x2007bb}) 2m32.761060467s ago: executing program 3 (id=989): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0x9, 0x20, "3bcc48574cfd5bd6c87571fd79267f36a96c52788ca5e83b648fca6b98b9cde3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000200)={0x0, 0x22, 0x2, {0x2, 0xa}}, 0x0}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0xe, 0x73, "b41d5603c8107367c1f3794dcdb5f7ed1565167101148537a923d1cabac5b39847099c113b784cf88771c58c4ad255cfa7f5b42b6cbb8dbcdd80d5e6eb773307210e4c5e3b0b8f68fd0f0d08153eac01355a891c7609112ebf4b3d4fa64f825b9ea40b84b60b444a610002f3c8ff82df4b0ee7"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x20}, 0x0, 0x0}) 2m31.742338797s ago: executing program 7 (id=997): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x181900) r0 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m30.994667632s ago: executing program 7 (id=999): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffc) write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) ftruncate(r0, 0xf88) 2m29.813490252s ago: executing program 3 (id=1000): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000030000000804"], 0x18}, 0x40e0) 2m29.697785779s ago: executing program 7 (id=1001): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, 0x0, 0x0) 2m29.634963413s ago: executing program 3 (id=1002): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000001c0)=ANY=[], 0x1, 0xf1e, &(0x7f0000006600)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f0000000040)='./file1\x00', 0xd) 2m29.304337203s ago: executing program 7 (id=1004): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2e2, &(0x7f0000000900)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2m28.726759167s ago: executing program 3 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 2m28.252537204s ago: executing program 7 (id=1009): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000097c0), 0x1, 0x9815, &(0x7f000000d000)="$eJzs3QeUJXWBeP8ehiEnARXFgICCqGSJBpIgEpQoKEhOShJQAYmCIqCAYkBUcs4555xzzjnnnPmfYWaUHS+I+9/94XrvPWem+1VXVdf7fl5VdXd1v7fM/EvMMzAwxsCwJhsYucdnPXPdjR5ZdNCRp6zwxFQLjT/H8MnDF5hk+M1JBg1/O8rAwMAow9czfNrYDx13/CgDo741/e+NPeZYg8YdGJhx+M25hr+dddibiR4eMd+bIzXyhg76281BOwz791bjD/0UQ9+ZebeX5h4YGJjgbcsPXWT6f7ij0paZe4H5/271N7ehVkOGv//2f6MN+zfRvQMDE901wI+Pt8876H24S0M/5wQ3X7/ptO/D5/4/1zJzL7DgSP5D98XBw6fNOnQfH3kfNDby4/zEg494avgQvvV4GxgYeoj7L/vK/4mWmXv+hQfe+Tg/cMlsrzz55lvHzbGfGhgY++mBgbGfGRgY+9mBgbGfGxgY+/n326X+/zX3PDPNM3R/H3F7OPuIx/IE9Lh4Yc5PHz8wMDD6sHnGfmPY+WKcyUacE6qqqurfu7nnmWleOP+P8W7n/0eu3+XZzv9VVVX/d1tw7nlmGnoeH+n8P867nf+n2HbIAsN+9j/XrMOWeuP9vRNVVVX1LzX/gnj+n+Ddzv+r3z54+87/VVVV/3dbfJG3zv/jjHT+n/jdzv9DJh33nuHzjfi64fW3rfKt3x8bPv3Vt00f/Lbpr7xt+pC3reft84/2tukvvW36GAMDYz80fPprf5889lNDl/nH9Yz9wt9/H2eSUd82/cW3TR/tbdNfGr5NQ6eP/rbpr79t/jH+Pn2cof9NNvzzvvwuQ11VVfVv0+IzzT/vwNt+z3745BG/2I+/F3rBm0u+8H5tb1VVVVVVVVX9673x+Cln/P1vvj8x8La/Xf3b37AO/7nAoKPOuuqq921D/z0a9I8/D9nq/d6m/78NdR7jkMkGBtZd6v3elHof+j/zt+r1v1L+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uHa7//+3v/7e7eJmvDZ919nMOH2Whvy85ycBaw997fNYz113rfdj296H/1Ov/A2sNGhgY7jvBUMtF5158yakHBgYWGuXwc2YZ+NvHZhv6sTknHPzWH3MODEz91v9DJnmHNQ9/lYW3Xtxh4r+t46i31r/gm3sPHjTSRrytD5yw//5rLvPizCO/neqd78ffXl/ixYn2n2zE37KMMtJMY7zDwiPWP+K+jOw8fNunHrrt0220zvrTbbjJpl9Ya52V1lhtjdXWnWnGWWecbdbpZ599pulWX2vt1aYf9v87jNmwl64Y/F7GbJyRx+zxud8+ZiPft3cas398VY//soq31njgrJNfNGLMRv0Xx2zwu4/ZZGsN/0STDAwZWPGtoRk0MDDJqEMGNh56Y4bRBwYmGTJ83kmGzvulCUcZGNjl73d00PAnGx02z6Cths7zb/a6JbMPH5HNR8w38vOsj7yh/+x1S26d56DJR3rdkv+t/lvn/3/wmm3Q3wZqxAsgDJ9nmNf7/DoT/7C9k4361knunbb3XZ4X563o8TXqbLNt8T/1vDi0veO8y/a+y/P4veP2zr3SV44atqr/se0d6Vi38LAPvpdj3cC7H+sG0/KrXf7xkY91C73zJv6X/XjEGI0+0kzvdKy7abGTthq6/oF3P9YtvNbwJw/4+7FulIGBSQaPONYNPfCNNmRgl6E3Zhx6Y/QhAwcNvTHTWzfGHDhr6I1pV1lv7VUHvfU0A8PXO/3Q9c414aC33LeaZppd39z1zTdHHb4tL4z9X7d1+ONjsrefz+eecNhgjlh2xHqHzjpivdNvOuxjow1f74v/wnpHLEvb+9Jywz42+vD1vjTSeoe8y3pHLPsP+8PUg/7LL6rC8eZ9fV0j2n/HeJftfZfn4cbH29Bpe2608+X/A8/DPeidtnfUd9/ed3rdkHfc3m12n2PH/6nnDafH2U1TDXusjDH8cfb6v/D4HbHsyMexYU8EMuywP8Z7OY5N9g/Hsa0HjzLSYL+td/qabVWYf9j7k/xtbbdve9VnR4z9kJHW+8++ZnvbfRkEx7EJRvp+btCWew0MojHfZfdBK7/xT8Z8yMB//d5ixJiPWPbdxnz09zLmH3v3MX+vXydPPcWwjw8ZafvfPub7D8xy6ogxH22k9f6zMR/93c8d/zjmAwNDaMyfum/YuL3b8fSdxnzEsiPGfOjnmXPCUQeGfpM/5fAxH+29jPkk/zOP87Fg/mHvr/a3SXM+dPcZI8Z85DH+Z2M+2r845lvc9bfH+ZRvfWzyUQZGG21g45U22miDGYb9P+LmjMP+52PRSRcOG+d3O5e+k9GIZd9tvxj1vRhN8J6MBv0zo4+O+k5Gf9+1zt99odP/u8eiUf9Vo7P4WLTxMcPG7d2+LnqnMR+xLJ0HJ37b8iN/H/ouz5+F92notLUnXXbvEascvtj7+fxZI77f/T/5/Fkjfia51sgH+Xqv9fN/d/m7y99d/u7yF/cO1/8nG3H9/76dllh++DedQx5aevy73+/tfZ/7j77+P9z3v1z/v3v8pR8a+q3V8I+96/XZYfP8W16fnXXYm4keHjHfyNcHR97Qf3Z99sVbvz7T/6Prs/+tRuyr7+H74o7/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3HvcP1/+hG/BzDFImcsNPxC6JD5Nltq1/d7e9/n/qOv/w/3/S/X/3ddarP5Rhn428fe9fr/sHkc1/93GDzvvv/O1/9H7Ktd/69/Uv7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+4drv/PNeL3AK6dbu8DRvw+wAEPTbvk+72973P/qdf//5uv/9+Trv0H1PHfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL2749f+BkS7mfqvHBQbX//9v9w7+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/7fzxyz+y+SPWfyXzR+z+H8nf8zi/938MYv/cvljFv/l88cs/t/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvkPDAyM9Q9TLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/9/PHLP4/yB+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+aPWfw3yB+z+G+YP2bx3yh/zOL/o/wxi/+P88cs/j/JH7P4b5w/ZvHfJH/M4r9p/pjF/6f5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/2f5Yxb/bfLHLP7b5o9Z/H+eP2bx/0X+mMV/u/wxi/8v88cs/tvnj1n8d8gfs/jvmD9m8f9V/pjF/9f5Yxb/nfLHLP47549Z/HfJH7P4/yZ/zOL/2/wxi/+u+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/93yxyz+f8ofs/jvnj9m8f9z/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n82+g/5f7ZZ/65Z/M9p/8cs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6YxH/QQP6YxX9Q/pjFf5T8MYv/4Pwxi/+o+WMW/yH5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/h/IH/M4j9h/pjFf6L8MYv/xPljFv8P5o9Z/D+UP2bx/3D+mMV/kvwxi/9H8scs/h/NH7P4T5o/NsJ/nE2H3f5P9f9Y/phl//94/pjF/xP5Yxb/T+aPWfwnyx+z+H8qf8ziP3n+mMV/ivwxi/+U+WMW/0/nj1n8P5M/ZvGfKn/M4j91/pjF/7P5Yxb/afLHLP6fyx+z+H8+f8zi/4X8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMX/i/ljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+H8tf8ziP3/+mMV/gfwxi//X88cs/gvmj1n8v5E/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv9v5o9Z/L+VP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+dP2bxXyZ/zOK/bP6Yxf87+WMW/+/mj1n8l8sfs/gvnz9m8f9e/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+388fs/j/IH/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5g/ZvHfIH/M4r9h/pjFf6P8MYv/j/LHLP4/zh+z+P8kf8ziv3H+mMV/k/wxi/+m+WMW/5/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/5/lj1n8t8kfs/hvmz9m8f95/pjF/xf5Yxb/7fLHLP6/zB+z+G+fP2bx3yF/zOK/Y/6Yxf9X+WMW/1/nj1n8d8ofs/jvnD9m8d8lf8zi/5v8MYv/b/PHLP675o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfLH7P4/yl/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx8b9PisgwcE/ufnj1n2/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/N96N/9/zOI/KH/M4j9K/pjFf3D+mMV/1Pwxi/+Q/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8P5A/ZvGfMH/M4j9R/pjFf+L8MYv/B/PHLP4fyh+z+H/4/dqef/Ms/pO0/2MW/4/kj1n8P5o/ZvGfNH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4j9Z/pjF/1P5Yxb/yfPHLP5T5I9Z/KfMH7P4fzp/zOL/mfwxi/9U+WMW/6nzxyz+n80fs/hPkz9m8f9c/pjF//P5Yxb/L+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP5fzB+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjF/2v5Yxb/+fPHLP4L5I9Z/L+eP2bxXzB/zOL/jfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+H8zf8zi/638MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8zi/+38MYv/MvljFv9l88cs/t/JH7P4fzd/zOK/XP6YxX/5/DGL//fyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/fv6Yxf8H+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/w/wxi/8G+WMW/w3zxyz+G+WPWfx/lD9m8f9x/pjF/yf5Yxb/jfPHLP6b5I9Z/DfNH7P4/zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4/yx/zOK/Tf6YxX/b/DGL/8/zxyz+v8gfs/hvlz9m8f9l/pjFf/v8MYv/DvljFv8d88cs/r/KH7P4/zp/zOK/U/6YxX/n/DGL/y75Yxb/3+SPWfx/mz9m8d81f8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1v+mMX/T/ljFv/d88cs/n/OH7P4/yV/zOL/1/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyT+gwfyxyz+g/LHLP6j5I9Z/Afnj1n8R80fs/gPyR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjF/wP5Yxb/CfPHLP4T5Y9Z/CfOH7P4fzB/zOL/ofwxi/+H88cs/pPkj1n8P5I/ZvH/aP6YxX/S/DGL/8fyxyz+H88fs/h/In/M4v/J/DGL/2T5Yxb/T+WPWfwnzx+z+E+RP2bxnzJ/zOL/6fwxi/9n8scs/lPlj1n8p84fs/h/Nn/M4j9N/pjF/3P5Yxb/z5v8x3zvs1r8v2Dy/xey+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/L+YP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv/1/LHLP7z549Z/BfIH7P4fz1/zOK/YP6Yxf8b+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bx/2b+mMX/W/ljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMX/2/ljFv9l8scs/svmj1n8v5M/ZvH/bv6YxX+5/DGL//L5Yxb/7+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4v/9/DGL/w/yxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6Yxf+H+WMW/w3yxyz+G+aPWfw3yh+z+P8of8zi/+P8MYv/T/LHLP4b549Z/DfJH7P4b5o/ZvH/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvH/Wf6YxX+b/DGL/7b5Yxb/n+ePWfx/kT9m8d8uf8zi/8v8MYv/9vljFv8d8scs/jvmj1n8f5U/ZvH/df6YxX+n/DGL/87v7j/kf327/k2z+O/S/o9Z/H+TP2bx/23+mMV/1/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9u+WMW/z/lj1n8d88fs/j/OX/M4v+X/DGL/1/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8v1/t/AqRb/K/T+nMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8//6GNMfIEi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyT+ow7kj40xMDBg8B+UP2bZ/0fJH7P4D84fs/iPmj9m8R+SP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/B/LHLP4T5o9Z/CfKH7P4T5w/ZvH/YP6Yxf9D+WMW/w/nj1n8J8kfs/h/JH/M4v/R/DGL/6T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/yfLHLP6fyh+z+E+eP2bxnyJ/zOI/Zf6Yxf/T+WMW/8/kj1n8p8ofs/hPnT9m8f9s/pjFf5r8MYv/5/LHLP6fzx+z+H8hf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bx/2L+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP5fyx+z+M+fP2bxXyB/zOL/9fwxi/+C+WMW/2/kj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMX/m/ljFv9v5Y9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9v549Z/JfJH7P4L5s/ZvH/Tv6Yxf+7+WMW/+Xyxyz+y+ePWfy/lz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL//fzxyz+P8gfs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/x/mj1n8N8gfs/hvmD9m8d8of8zi/6P8MYv/j/PHLP4/yR+z+G+cP2bx3yR/zOK/af6Yxf+n+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9n+WMW/23yxyz+2+aPWfx/nj9m8f9F/pjFf7v8MYv/L/PHLP7b549Z/HfIH7P475g/ZvH/Vf6Yxf/X+WMW/53yxyz+O+ePWfx3yR+z+P8mf8zi/9v8MYv/rvljFv/f5Y9Z/H+fP2bx/0P+mMX/j/ljFv/d8scs/n/KH7P4754/ZvH/c/6Yxf8v+WMW/7/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R8ykD9m8R+UP2bxHyV/zOI/OH/M4j9q/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4fyB+z+E+YP2bxnyh/zOI/cf6Yxf+D+WMW/w/lj1n8P5w/ZvGfJH/M4v+R/DGL/0fzxyz+k+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwnyx+z+H8qf8ziP3n+mMV/ivwxi/+U+WMW/0/nj1n8P5M/ZvGfKn/M4j91/pjF/7P5Yxb/afLHLP6fyx+z+H8+f8zi/4X8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMX/i/ljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+H8tf8ziP3/+mMV/gfwxi//X88cs/gvmj1n8v5E/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv9v5o9Z/L+VP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+dP2bxXyZ/zOK/bP6Yxf87+WMW/+/mj1n8l8sfs/gvnz9m8f9e/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+388fs/j/IH/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5g/ZvHfIH/M4r9h/pjFf6P8MYv/j/LHLP4/zh+z+P8kf8ziv3H+mMV/k/wxi/+m+WMW/5/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/5/lj1n8t8kfs/hvmz9m8f95/pjF/xf5Yxb/7fLHLP6/zB+z+G+fP2bx3yF/zOK/Y/6Yxf9X+WMW/1/nj1n8d8ofs/jvnD9m8d8lf8zi/5v8MYv/b/PHLP675o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfLH7P4/yl/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf+w/z3/w3959u/+Z+WP/ef68/5+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/8U/8x/ne36980i/+b7f+YxH+0gfwxi/+g/DGL/yj5Yxb/wfljFv9R88cs/kPyxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvH/QP6YxX/C/DGL/0T5Yxb/ifPHLP4fzB+z+H8of8zi/+H8MYv/JPljFv+P5I9Z/D+aP2bxnzR/zOL/sfwxi//H88cs/p/IH7P4fzJ/zOI/Wf6Yxf9T+WMW/8nzxyz+U+SPWfynzB+z+H86f8zi/5n8MYv/VHL/d7rvFv+p5f7vlMX/s/ljFv9p8scs/p/LH7P4fz5/zOL/hfwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6Yxf+L+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4fy1/zOI/f/6YxX+B/DGL/9fzxyz+C+aPWfy/kT9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/2/mj1n8v5U/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8v50/ZvFfJn/M4r9s/pjF/zv5Yxb/7+aPWfyXyx+z+C+fP2bx/17+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP7fzx+z+P8gf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/mD9m8d8gf8ziv2H+mMV/o/wxi/+P8scs/j/OH7P4/yR/zOK/cf6YxX+T/DGL/6b5Yxb/n+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/n+WPWfy3yR+z+G+bP2bx/3n+mMX/F/ljFv/t8scs/r/MH7P4b58/ZvHfIX/M4r9j/pjF/1f5Yxb/X+ePWfx3yh+z+O+cP2bx3yV/zOL/m/wxi/9v88cs/rvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8sfs/j/KX/M4r97/pjF/8/5Yxb/v+SPWfz/mj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMR/9IH8MYv/oPwxi/8o+WMW/8H5Yxb/UfPHLP5D8scs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bx/0D+mMV/wvwxi/9E+WMW/4nzxyz+H8wfs/h/KH/M4v/h/DGL/yT5Yxb/j+SPWfw/mj9m8Z80f8zi/7H8MYv/x/PHLP6fyB+z+H8yf8ziP1n+mMX/U/ljFv/J88cs/lPkj1n8p8wfs/h/On/M4v+Z/DGL/1T5Yxb/qfPHLP6fzR+z+E+TP2bx/1z+mMX/8/ljFv8v5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/l/MH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMX/a/ljFv/588cs/gvkj1n8v54/ZvFfMH/M4v+N/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4fzN/zOL/rfwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOL/7fwxi/8y+WMW/2Xzxyz+38kfs/h/N3/M4r9c/pjFf/n8MYv/9/LHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8f9+/pjF/wf5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/D/DGL/wb5Yxb/DfPHLP4b5Y9Z/H+UP2bx/3H+mMX/J/ljFv+N88cs/pvkj1n8N80fs/j/NH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/j/LH/M4r9N/pjFf9v8MYv/z/PHLP6/yB+z+G+XP2bx/2X+mMV/+/wxi/8O+WMW/x3zxyz+v8ofs/j/On/M4r9T/pjFf+f8MYv/LvljFv/f5I9Z/H+bP2bx3zV/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/W/6Yxf9P+WMW/93zxyz+f35n/8H/T7br3zSL/1/a/zGL/1/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+T+I8xkD9m8R+UP2bxHyV/zOI/OH/M4j9q/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4fyB+z+E+YP2bxnyh/zOI/cf6Yxf+D+WMW/w/lj1n8P5w/ZvGfJH/M4v+R/DGL/0fzxyz+k+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwnyx+z+H8qf8ziP3n+mMV/ivwxi/+U+WMW/0/nj1n8P5M/ZvGfKn/M4j91/pjF/7P5Yxb/afLHLP6fyx+z+H8+f8zi/4X8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMX/i/ljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+H8tf8ziP3/+mMV/gfwxi//X88cs/gvmj1n8v5E/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv9v5o9Z/L+VP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+dP2bxXyZ/zOK/bP6Yxf87+WMW/+/mj1n8l8sfs/gvnz9m8f9e/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+388fs/j/IH/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5g/ZvHfIH/M4r9h/pjFf6P8MYv/j/LHLP4/zh+z+P8kf8ziv3H+mMV/k/wxi/+m+WMW/5/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/5/lj1n8t8kfs/hvmz9m8f95/pjF/xf5Yxb/7fLHLP6/zB+z+G+fP2bx3yF/zOK/Y/6Yxf9X+WMW/1/nj1n8d8ofs/jvnD9m8d8lf8zi/5v8MYv/b/PHLP675o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfLH7P4/yl/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfG+r/1tv/cP/988cs+/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388ck/mMO5I9Z/Aflj1n8R8kfs/gPzh+z+I+aP2bxH5I/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/8H8scs/hPmj1n8J8ofs/hPnD9m8f9g/pjF/0P5Yxb/D+ePWfwnyR+z+H8kf8zi/9H8MYv/pPljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv/J8scs/p/KH7P4T54/ZvGfIn/M4j9l/pjF/9P5Yxb/z+SPWfynyh+z+E+dP2bx/2z+mMV/mvwxi//n8scs/p/PH7P4fyF/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvH/Yv6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/l/LH7P4z58/ZvFfIH/M4v/1/DGL/4L5Yxb/b+SPWfwXyh+z+C+cP2bxXyR/zOK/aP6Yxf+b+WMW/2/lj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2/nj1n8l8kfs/gvmz9m8f9O/pjF/7v5Yxb/5fLHLP7L549Z/L+XP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/9/PHLP4/yB+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+aPWfw3yB+z+G+YP2bx3yh/zOL/o/wxi/+P88cs/j/JH7P4b5w/ZvHfJH/M4r9p/pjF/6f5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/2f5Yxb/bfLHLP7b5o9Z/H+eP2bx/0X+mMV/u/wxi/8v88cs/tvnj1n8d8gfs/jvmD9m8f9V/pjF/9f5Yxb/nfLHLP47549Z/HfJH7P4/yZ/zOL/2/wxi/+u+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/93yxyz+f8ofs/jvnj9m8f9z/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxH2sgf8ziPyh/zOI/Sv6YxX9w/pjFf9T8MYv/kPwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/D+QP2bxnzB/zOI/Uf6YxX/i/DGL/wfzxyz+H8ofs/h/OH/M4j9J/pjF/yP5Yxb/j+aPWfwnzR+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+E+WP2bx/1T+mMV/8vwxi/8U+WMW/ynzxyz+n84f+7v/aAMDA/+5/p/JH7Ps/1Plj1n8p84fs/h/Nn/M4j9N/pjF/3P5Yxb/z+ePWfy/kD9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+H8xf8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+M+V/z90zCge/7ld/qO/1xkt/vO4/N9zFv9588cs/vPlj1n8v5Y/ZvGfP3/M4r9A/pjF/+v5Yxb/BfPHLP7fyB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/zfzxyz+38ofs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+384fs/gvkz9m8V82f8zi/538MYv/d/PHLP7L5Y9Z/JfPH7P4fy9/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf8335j/G/9p2/Ztm8V+r/R+z+H8/f8zi/4P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9h/pjFf4P8MYv/hvljFv+N8scs/j/KH7P4/zh/zOL/k/wxi//G+WMW/03yxyz+m+aPWfx/mj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfx/lj9m8d8mf8ziv23+mMX/5/ljFv9f5I9Z/LfLH7P4/zJ/zOK/ff6YxX+H/DGL/475Yxb/X+WPWfx/nT9m8d8pf8ziv3P+mMV/l/wxi/9v8scs/r/NH7P475o/ZvH/Xf6Yxf/3+WMW/z/kj1n8/5g/ZvHfLX/M4v+n/DGL/+75Yxb/P+ePWfz/kj9m8f9r/pjFf4/8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljEv+xB/LHLP6D8scs/qPkj1n8B+ePWfxHzR+z+A/JH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/A/ljFv8J88cs/hPlj1n8J84fs/h/MH/M4v+h/DGL/4fzxyz+k+SPWfw/kj9m8f9o/pjFf9L8MYv/x/LHLP4fzx+z+H8if8zi/8n8MYv/ZPljFv9P5Y9Z/CfPH7P4T5E/ZvGfMn/M4v/p/DGL/2fyxyz+U+WPWfynzh+z+H82f8ziP03+mMX/c/ljFv/P549Z/L+QP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4fzF/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv+v5Y9Z/OfPH7P4L5A/ZvH/ev6YxX/B/DGL/zfyxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOL/zfwxi/+38scs/ovlj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/+388cs/svkj1n8l80fs/h/J3/M4v/d/DGL/3L5Yxb/5fPHLP7fyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjF//v5Yxb/H+SPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/zxyz+G+SPWfw3zB+z+G+UP2bx/1H+mMX/x/ljFv+f5I9Z/DfOH7P4b5I/ZvHfNH/M4v/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4v+z/DGL/zb5Yxb/bfPHLP4/zx+z+P8if8ziv13+mMX/l/ljFv/t88cs/jvkj1n8d8wfs/j/Kn/M4v/r/DGL/075Yxb/nfPHLP675I9Z/H+TP2bx/23+mMV/1/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9u+WMW/z/lj1n8d88fs/j/OX/M4v+X/DGL/1/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+T+I8zkD9m8R+UP2bxHyV/zOI/OH/M4j9q/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4fyB+z+E+YP2bxnyh/zOI/cf6Yxf+D+WMW/w/lj1n8P5w/ZvGfJH/M4v+R/DGL/0fzxyz+k+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwnyx+z+H8qf8ziP3n+mMV/ivwxi/+U+WMW/0/nj1n8P5M/ZvGfKn/M4j91/pjF/7P5Yxb/afLHLP6fyx+z+H8+f8zi/4X8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMX/i/ljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+H8tf8ziP3/+mMV/gfwxi//X88cs/gvmj1n8v5E/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv9v5o9Z/L+VP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/L+dP2bxXyZ/zOK/bP6Yxf87+WMW/+/mj1n8l8sfs/gvnz9m8f9e/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+388fs/j/IH/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5g/ZvHfIH/M4r9h/pjFf6P8MYv/j/LHLP4/zh+z+P8kf8ziv3H+mMV/k/wxi/+m+WMW/5/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/5/lj1n8t8kfs/hvmz9m8f95/pjF/xf5Yxb/7fLHLP6/zB+z+G+fP2bx3yF/zOK/Y/6Yxf9X+WMW/1/nj1n8d8ofs/jvnD9m8d8lf8zi/5v8MYv/b/PHLP675o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfLH7P4/yl/zOK/e/6Yxf/P+WMW/7/kj1n8/5o/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifLvQf8z3MY/E/Q+j/XrL4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxH3cgf8ziPyh/zOI/Sv6YxX9w/pjFf9T8MYv/kPwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/D+QP2bxnzB/zOI/Uf6YxX/i/DGL/wfzxyz+H8ofs/h/OH/M4j9J/pjF/yP5Yxb/j+aPWfwnzR+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+E+WP2bx/1T+mMV/8vwxi/8U+WMW/ynzxyz+n84fs/h/Jn/M4j9V/pjFf+r8MYv/Z/PHLP7T5I9Z/D+XP2bx/3z+mMX/C/ljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8X88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/+X8scs/l9+d3/tQ8Pi/xUz8rtk8f9q/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/h/LX/M4j9//pjFf4H8MYv/1/PHLP4L5o9Z/L+RP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/b+aPWfy/lT9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfy/nT9m8V8mf8ziv2z+mMX/O/ljFv/v5o9Z/JfLH7P4L58/ZvH/Xv6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/t/PH7P4/yB/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+YP2bx3yB/zOK/Yf6YxX+j/DGL/4/yxyz+P84fs/j/JP+Rm2tA5L9x/pjFf5P8MYv/pvljFv+f5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv+f5Y9Z/LfJH7P4b5s/ZvH/ef6Yxf8X+WMW/+3yxyz+v8wfs/hvnz9m8d8hf8ziv2P+mMX/V/ljAv83xx8YGPfX+WMC/6GNu1P+mMV/5/wxi/8u+WMW/9/kj1n8f5s/ZvHfNX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9b/pjF/0/5Yxb/3fPHLP5/zh+z+P8lf8zi/9f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388ck/uMN5I9Z/Aflj1n8R8kfs/gPzh+z+I+aP2bxH5I/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/8H8scs/hPmj1n8J8ofs/hPnD9m8f9g/pjF/0P5Yxb/D+ePWfwnyR+z+H8kf8zi/9H8MYv/pPljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv/J8scs/p/KH7P4T54/ZvGfIn/M4j9l/pjF/9P5Yxb/z+SPWfynyh+z+E+dP2bx/2z+mMV/mvwxi//n8scs/p/PH7P4fyF/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvH/Yv6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/l/LH7P4z58/ZvFfIH/M4v/1/DGL/4L5Yxb/b+SPWfwXyh+z+C+cP2bxXyR/zOK/aP6Yxf+b+WMW/2/lj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2/nj1n8l8kfs/gvmz9m8f9O/pjF/7v5Yxb/5fLHLP7L549Z/L+XP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/9/PHLP4/yB+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+aPWfw3yB+z+G+YP2bx3yh/zOL/o/wxi/+P88cs/j/JH7P4b5w/ZvHfJH/M4r9p/pjF/6f5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/2f5Yxb/bfLHLP7b5o9Z/H+eP2bx/0X+mMV/u/wxi/8v88cs/tvnj1n8d8gfs/jvmD9m8f9V/pjF/9f5Yxb/nfLHLP47549Z/HfJH7P4/yZ/zOL/2/wxi/+u+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/93yxyz+f8ofs/jvnj9m8f9z/pjF/y/5Yxb/v+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxH38gf8ziPyh/zOI/Sv6YxX9w/pjFf9T8MYv/kPwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5/3/s09MTIIYBxOG216vbu9qxrYtt27Zt27Zt27Zt27b1lpfsc3KT/b6/YGd+s1FL/0H6Ry39B+sftfT/s/5RS/+/6B+19P+r/lFL/7/pH7X0/7v+UUv/f+gftfT/p/5RS/9/6R+19P+3/lFL///oH7X0/6/+UUv//+kftfT/v/5RS/9h9I9a+g+rf9TSfzj9o5b+w+sftfQfQf+opf+I+kct/UfSP2rpP7L+UUv/UfSPWvqPqn/U0n80/aOW/qPrH7X0H0P/qKX/mPpHLf3H0j9q6T+2/lFL/3H0j1r6j6t/1NJ/PP2jlv7j6x+19J9A/6il/4T6Ry39J9I/auk/RP+opf/E+kct/SfRP2rpP6n+UUv/yfSPWvpPrn/U0n8K/aOW/lPqH7X0n0r/qKX/1PpHLf2n0T9q6T+t/lFL/+n0j1r6T69/1NJ/Bv2jlv4z6h+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+s+uf9TSfw79o5b+c+oftfSfS/+opf/c+kct/efRP2rpP6/+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv5L6h+19F9K/6il/9L6Ry39l9E/aum/rP5RS//l9I9a+i+vf9TSfwX9o5b+K+oftfRfSf+opf/K+kct/VfRP2rpv6r+UUv/1fSPWvqvrn/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL//X0j1r6r69/1NJ/A/2jlv4b6h+19N9I/6il/8b6Ry39N9E/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/7fSPWvpvr3/U0n8H/aOW/jvqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6765/1NJ/D/2jlv576h+19N9L/6il/976Ry3999E/aum/r/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/Q/RP2rpf6j+UUv/w/SPWvofrn/U0v8I/aOW/kfqH7X0P0r/qKX/0fpHLf2P0T9q6X+s/lFL/+P0j1r6H69/1NL/BP2jlv4n6h+19D9J/6il/8n6Ry39T9E/aul/qv5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/c/RP2rpf67+UUv/8/SPWvqfr3/U0v8C/aOW/hfqH7X0v0j/qKX/xfpHLf0v0T9q6X+p/lFL/8v0j1r6X65/1NL/Cv2jlv5X6h+19L9K/6il/9X6Ry39r9E/aul/rf5RS//r9I9a+l+vf9TS/wb9o5b+N37Xf8iAH2fY0Kml/03+H7X0v/n7/Qf+oLuGUi39b/H/qKX/rfpHLf1v0z9q6X+7/lFL/zv0j1r636l/1NL/Lv2jlv536x+19L9H/6il/736Ry3979M/aul/v/5RS/8H9I9a+j+of9TS/yH9o5b+D+sftfR/RP+opf+j+kct/R/TP2rp/7j+UUv/J/SPWvo/qX/U0v8p/aOW/k/rH7X0f0b/qKX/s/pHLf2f0z9q6f+8/lFL/xf0j1r6v6h/1NL/Jf2jlv4v6x+19H9F/6il/6v6Ry39X9M/aun/uv5RS/839I9a+r+pf9TS/y39o5b+b+sftfR/R/+opf+7+kct/d/TP2rp/77+UUv/D/SPWvp/qH/U0v8j/aOW/h/rH7X0/0T/qKX/p/pHLf0/0z9q6f+5/lFL/y/0j1r6f6l/1NL/K/2jlv5f6x+19P9G/6ik/+Cf6R+19P+5/lFL/1/oH7X0H6B/1NL/l/pHLf0H6h+19P+V/lFL/1/rH7X0/43+UUv/3+oftfT/nf5RS//f6x+19P+D/lFL/z/qH7X0/5P+UUv/QfpHP7n+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA37J3/zFe1wUcxz/3E8QCFNK3FD+C8lCD44dx/CiZtRon6xjpmq6lMDhRAzW4FT+Mjk1bf7CJizVrOmntZrZYYzpHEqWli7kx3aSVlk3KGcPhtC20H+vcl/t+j7uvx83v+3y/+YPH44+77+dzvD4HbE8+n5t3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFLatGXr11evX9+50QsvvPCi/8XZ/pcJSO109Gf7dwIAAAAAAAAAAAAAAJxJjh8nOtt/RgAAAAAAONe0d1x9oqFu0KmGgQeTD3eeen/l29ff0tPz+AWV9+UPLx/ikvUDD3p7e3t3HHh9WflwVFEUpc82vnw8unpcun73/pV/6jsKxYm239zedbyj7hdP3PRGy/Jxi5tOnW0qVt186/rOOfVFERqais2lg7l1RRGam4pdpYN5pYNRTcVPSwfzTx2cVzxZOpi95o71a0sn3vOp4ZzT3tFdNAwqthj0r8HA/rv3P/RO5f0wl6xcrbEo93/xF5/aVfWxijP0X7l+qKvuv+Y/IHBGtfX/aHfl/TCXfM/9f+Lft18z1MfO3H/l+qFe/5DOEM//gxqtfu6vev6fNsQl+/eHprc9XOp/24PPPlA+1fh+nv9PXz80VPdfP+j5v/Qc31h5/h9VFKFphH8dcE5p79hxYrj7//D9N06q2tQN7P/g8h89U+p/asfExvKpphr7bxzm/l+3/cnBv1egNu0dP+6tuv/X0H/RMsQl+/uf1jPh7VL/V43/76sDPlZL/03V/bd2bbizddOWrbNu3bB6Xee6ztvnz2ubt7BtzqJF81tPPRL0vR3h3wqcG0Z2/y/GVG3qiqKzf//ro8eWlPrfdOTY5vKp0TX23zzs/f8V938Y0vT6orm52Ly6q2vj3L63lcN5fW/7ftkQ/dfw9f+MmeVfVvm6u/QFef/+wIKip9T/zpeu21I+1Vxj/6OG6/87pz8vEGGE9/+1VZtB/V/2/N0vl/rf9+br15ZP1fr1/+hh+9/j/g8j0d5R9Q0/H7BS/ydPHoz8Zptwnv/+B+nk6P+l+p8/HrcOY/QP6eTo/767Rg31fQLvQzhf/5BOjv43PbDmubh1+JD+IZ0c/S/826Eb4tbhw/qHdHL0P/GiF/8Rtw5j9Q/p5Oj/pls2fiNuHcbpH9LJ0f+xu5++K24dxusf0snR/0/+c8fxuHW4QP+QTo7+7x27/bq4dbhQ/5BOjv6fvvMPv41bhwn6h3Ry9H/prn2z4tZhov4hnRz9b3hj0oG4dfiI/iGdHP1fPen8yJ/TDRfpH9LJ0f+YtXu+H7cOF+sf0snRf9fe2X+NW4egf0gnR/9LX7hnWdw6XKJ/SCdH/xNadp+MW4dJ+od0cvR//Q1LV8Wtw0f1D+nk6P+JX3713rh1+Jj+IZ0c/b/1+zcviVuHyfqHdHL0//L8ow/HrcMU/UM6Ofr/wZeumRu3DlP1D+nk6P/R4zt/FbcO0/QP6QzR/wf6/9Qo9f/O7pbL49bh4/qHdHLc/4+sWrA7bh2m6x/SydH/Q1MerI9bhxn6h3Ry9P/t///7RNw6fEL/kE6O/hd0f3lb3Dp8Uv+QTo7+J3V9/pm4dbhU/5BOjv5Xjjl2bdw6tOgf0snRf+vvbp4Stw4z9Q/p5Oh/7cHD34tbh8v0D+nk6H9Z+18WxK3D5fqHdHL039D2rT1x63CF/iGdHP0f/eOEFXHr8Cn9Qzo5+v/ZI/tfjFuHWfqHdHL0/92vPbIubh1m6x/SydH/4Rn1b8WtQ6v+IZ0c/W997rH/xa3DHP1DOjn6n7tv6m1x6zBX/5BOjv4nf2Hskbh1mKd/SCdH/19Z0vO5uHWYr39IJ0f/j/35qb1x63Cl/iGdHP339ty2JG4dPq1/SCdH/y+s3HZP3Dos0D+kk6P/+1ufnxC3Dm36h3Ry9P/aazfeGLcOC/UP6eTof+/9/zoUtw6L9A/p5Oh/x/pXvxm3Dov1D+nk6P/ZC1e8ErcOS/QP6eTof+Y/rxgXtw6f0T+kk6P/NTu7fxi3Dp/VP6STo/8Vm+9riVuHq/QP6eTov7F58b64dViqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN5lBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAMAAAAgzN86j/YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FMAAAD//84hVrM=") syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x20441, 0x184) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) fallocate(r0, 0x0, 0x5, 0x4000) 2m27.421295314s ago: executing program 7 (id=1011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x1004) 2m26.935438742s ago: executing program 36 (id=1011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x1004) 2m12.678731919s ago: executing program 37 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 1m0.706876958s ago: executing program 8 (id=1422): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 59.688567699s ago: executing program 8 (id=1426): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x6, 0x4, 0xe, 0x2, 0x7bf}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 59.432286494s ago: executing program 8 (id=1428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f00000001c0), 0x0) 59.009918249s ago: executing program 8 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) 58.738889515s ago: executing program 8 (id=1434): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000defbffff02"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 58.301115431s ago: executing program 8 (id=1439): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') close_range(r2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 57.733134665s ago: executing program 38 (id=1439): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') close_range(r2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 39.468556378s ago: executing program 6 (id=1476): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000880)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36.07005334s ago: executing program 6 (id=1481): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18"], 0x18, 0x8801}}], 0x1, 0x20004031) 35.858146553s ago: executing program 6 (id=1484): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 35.294825706s ago: executing program 6 (id=1486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0xa08000, &(0x7f0000000240), 0xfe, 0x56b, &(0x7f00000003c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0xa, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359899d3ca03d52878c0020000100", [0x9]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0) 34.452148756s ago: executing program 6 (id=1490): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setuid(0xee01) r1 = io_uring_setup(0x3ead, &(0x7f0000000480)={0x0, 0xaa8, 0x400, 0x1, 0x30b}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) 32.976606654s ago: executing program 6 (id=1492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 32.343768131s ago: executing program 39 (id=1492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 6.301910696s ago: executing program 9 (id=1594): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) 6.014094753s ago: executing program 9 (id=1595): r0 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) acct(&(0x7f0000000240)='./file0\x00') 5.509999093s ago: executing program 9 (id=1596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0xa4}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x9, 0x0, 0x42}) 3.53714996s ago: executing program 5 (id=1604): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r1, 0x11) rt_sigsuspend(&(0x7f0000000040)={[0x4]}, 0x8) 3.261820387s ago: executing program 5 (id=1605): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/75, 0x4b}, 0x6}], 0x1, 0x40010163, 0x0) 3.233142768s ago: executing program 9 (id=1606): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 3.140496044s ago: executing program 0 (id=1607): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@usrquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000000680)='./file0\x00', &(0x7f0000000300)='./file1\x00') 2.961965434s ago: executing program 5 (id=1608): syz_read_part_table(0x104f, &(0x7f0000001080)="$eJzsz7ENgmAQBeCHiIFGVnAFN3AJVrHGLZyBEeycilj9xmAo7I0x+b7mXu6ueeGnzqWUbLPr6ySndb3Jo02zpFV3XGab5NJkn2vmcujbusvH52qsbsOS7iWZMs7lpXqfh+lrxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjzwDAAD//+NcE+8=") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f0000000280)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) 2.649225763s ago: executing program 2 (id=1609): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r3, 0x0, 0x1, 0x0, 0x2}) 2.454317635s ago: executing program 0 (id=1610): socket$packet(0x11, 0x3, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.354456821s ago: executing program 2 (id=1611): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) read(r0, &(0x7f00000000c0)=""/62, 0x3e) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.101991395s ago: executing program 5 (id=1612): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.101631735s ago: executing program 2 (id=1613): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf1}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.34851879s ago: executing program 0 (id=1614): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.272638485s ago: executing program 2 (id=1615): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x397) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.049988378s ago: executing program 0 (id=1616): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 656.688591ms ago: executing program 0 (id=1617): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x8000, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 564.791627ms ago: executing program 2 (id=1618): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f0000000100)=ANY=[@ANYBLOB="0096397bb229f118b1f6c334ff95e9d57079d2a61ef7526c03c3a0d9cd515719956a0e5922340c97beade3e691744c236c61868da817036b0bab4516cc735ee856ef073c7b0b540347b358404ebe8e0c22e3a8a3caad47889d996a07d6988b211450783f4fdfbb8ae60572ea3bb70fb29560525b"], 0x83, 0x22e, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 514.02247ms ago: executing program 9 (id=1619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvfrom(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) 382.158748ms ago: executing program 5 (id=1620): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) 272.162494ms ago: executing program 9 (id=1621): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$peek(0x15, r0, 0x0) 45.888977ms ago: executing program 5 (id=1622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 10.142299ms ago: executing program 2 (id=1623): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 0s ago: executing program 0 (id=1624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x5}, {0xf, 0x6}, {0xc, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) kernel console output (not intermixed with test programs): im netdevsim9 netdevsim3: renamed from eth3 [ 269.441062][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.496914][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 269.540780][ T9796] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.581114][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.588321][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.635214][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.642419][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.739536][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 269.786541][ T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 269.826797][ T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 269.874467][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.897312][ T5776] Bluetooth: hci2: command tx timeout [ 269.909391][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.938011][ T9] usb 9-1: Product: syz [ 269.948171][ T9] usb 9-1: Manufacturer: syz [ 269.956293][ T9] usb 9-1: SerialNumber: syz [ 269.971487][ T9873] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 270.214862][ T9873] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 270.248074][ T9873] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 270.425488][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.896136][ T9873] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 270.943595][ T9873] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 271.202751][ T9] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 271.225785][ T9] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 271.244442][ T9796] veth0_vlan: entered promiscuous mode [ 271.246496][ T9] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 271.313683][ T9796] veth1_vlan: entered promiscuous mode [ 271.421186][ T9] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 271.461662][ T9] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 271.473027][ T9796] veth0_macvtap: entered promiscuous mode [ 271.516686][ T9] usb 9-1: USB disconnect, device number 3 [ 271.525891][ T9796] veth1_macvtap: entered promiscuous mode [ 271.532812][ T9] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 271.655555][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.714305][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.753636][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.794659][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.838150][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.880121][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.915847][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.976954][ T5776] Bluetooth: hci2: command tx timeout [ 271.981693][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.037578][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.058367][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.093799][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.115874][ T9796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.155263][ T9796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.210073][ T9796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.269432][ T9796] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.306540][ T9796] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.325961][ T9796] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.349827][ T9796] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.662074][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.707771][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.786481][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.794361][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.818650][ T9926] loop5: detected capacity change from 0 to 32768 [ 272.920175][ T9926] JBD2: Ignoring recovery information on journal [ 273.140384][ T9926] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 273.671839][ T8518] ocfs2: Unmounting device (7,5) on (node local) [ 273.893616][ T9940] loop8: detected capacity change from 0 to 32768 [ 274.047710][ T9940] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.056683][ T5776] Bluetooth: hci2: command tx timeout [ 274.147841][ T9968] loop9: detected capacity change from 0 to 2048 [ 274.263534][ T9940] XFS (loop8): Ending clean mount [ 274.284550][ T9968] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 274.301738][ T9968] UDF-fs: Scanning with blocksize 512 failed [ 274.364275][ T9968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.553731][ T9560] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 275.472814][ T9993] loop8: detected capacity change from 0 to 1024 [ 275.986652][ T5851] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 276.188494][ T5851] usb 7-1: config 0 interface 1 has no altsetting 0 [ 276.219098][ T5851] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 276.246773][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.255095][ T5851] usb 7-1: Product: syz [ 276.260941][ T5851] usb 7-1: Manufacturer: syz [ 276.280891][ T5851] usb 7-1: SerialNumber: syz [ 276.297176][ T5851] usb 7-1: config 0 descriptor?? [ 276.570759][ T5851] msi2500 7-1:0.1: Registered as swradio24 [ 276.588266][ T5851] msi2500 7-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 276.640679][T10019] loop8: detected capacity change from 0 to 8192 [ 276.678433][T10019] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 276.751676][T10019] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 276.764298][ T5851] videodev: could not get a free minor [ 276.806722][T10019] REISERFS (device loop8): using ordered data mode [ 276.812154][ T5851] msi2500 7-1:0.0: Failed to register as video device (-23) [ 276.846514][ T787] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 276.854327][T10019] reiserfs: using flush barriers [ 276.869887][ T5851] msi2500: probe of 7-1:0.0 failed with error -23 [ 276.899299][T10019] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 276.930888][ T5851] usb 7-1: USB disconnect, device number 6 [ 276.952016][T10019] REISERFS (device loop8): checking transaction log (loop8) [ 277.013940][T10019] REISERFS (device loop8): Using r5 hash to sort names [ 277.039462][T10019] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 277.049758][ T787] usb 6-1: Using ep0 maxpacket: 32 [ 277.062195][ T787] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 277.092631][ T787] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 277.130022][ T787] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 277.161953][ T787] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 277.222182][ T787] usb 6-1: config 0 interface 0 has no altsetting 0 [ 277.240794][ T787] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 277.250925][ T787] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 277.265900][ T787] usb 6-1: Product: syz [ 277.280329][ T787] usb 6-1: Manufacturer: syz [ 277.295227][ T787] usb 6-1: SerialNumber: syz [ 277.310232][ T5830] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 277.319380][ T787] usb 6-1: config 0 descriptor?? [ 277.339718][ T787] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 277.372438][ T787] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 277.499745][ T5830] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 277.555672][ T5830] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.624319][ T5830] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 277.653763][ T5830] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 277.680110][ T5830] usb 10-1: Manufacturer: syz [ 277.711311][ T5830] usb 10-1: config 0 descriptor?? [ 277.805895][ T5851] usb 6-1: USB disconnect, device number 6 [ 277.806087][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 277.823813][T10024] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 277.854902][ T5851] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 277.926599][ T5830] rc_core: IR keymap rc-hauppauge not found [ 277.949415][ T5830] Registered IR keymap rc-empty [ 277.975783][ T5830] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 278.027953][ T5830] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input16 [ 278.065809][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 278.186698][ T5830] usb 10-1: USB disconnect, device number 2 [ 278.276680][ T27] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 278.490713][ T27] usb 9-1: config 0 has no interfaces? [ 278.512097][ T27] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 278.539236][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.550108][ T27] usb 9-1: Product: syz [ 278.554434][ T27] usb 9-1: Manufacturer: syz [ 278.560296][ T27] usb 9-1: SerialNumber: syz [ 278.574045][ T27] usb 9-1: config 0 descriptor?? [ 278.732329][T10069] netlink: 'syz.6.1124': attribute type 12 has an invalid length. [ 278.764680][T10069] netlink: 'syz.6.1124': attribute type 29 has an invalid length. [ 278.789644][T10069] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1124'. [ 279.162110][T10084] loop5: detected capacity change from 0 to 1024 [ 279.205021][T10084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.324415][ T9966] usb 9-1: USB disconnect, device number 4 [ 279.482492][ T8518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.673156][T10097] loop5: detected capacity change from 0 to 2048 [ 279.693051][T10097] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 279.716840][T10083] mmap: syz.9.1129 (10083) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 279.764777][T10097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.774098][ T27] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 279.987648][ T27] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.037124][ T27] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.069787][ T27] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.102558][T10104] loop8: detected capacity change from 0 to 256 [ 280.133279][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.162566][T10104] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.185999][T10092] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 280.208092][T10104] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 280.232522][ T27] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 280.268355][T10104] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 280.582229][ T787] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 280.632514][ T5830] usb 7-1: USB disconnect, device number 7 [ 280.809606][ T787] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 280.862533][ T787] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 256 [ 280.908975][ T787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.922370][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.930799][ T787] usb 6-1: Product: syz [ 280.935058][ T787] usb 6-1: Manufacturer: syz [ 280.939948][ T787] usb 6-1: SerialNumber: syz [ 281.156062][T10109] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 281.290740][T10125] loop8: detected capacity change from 0 to 1024 [ 281.362227][ T28] audit: type=1800 audit(1770432697.717:319): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1138" name="file1" dev="loop8" ino=2 res=0 errno=0 [ 281.564645][ T1326] hfsplus: bad catalog file entry [ 281.576952][ T1326] hfsplus: b-tree write err: -5, ino 3 [ 281.790213][T10109] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 281.816611][ T5830] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 281.996898][ T5830] usb 7-1: Using ep0 maxpacket: 8 [ 282.008736][ T787] cdc_ncm 6-1:1.0: bind() failure [ 282.021229][ T5830] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 282.046905][ T787] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 282.061164][ T787] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 282.071999][ T5830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 282.096265][ T787] usbtest: probe of 6-1:1.1 failed with error -71 [ 282.116559][ T5830] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.140923][ T787] usb 6-1: USB disconnect, device number 7 [ 282.150649][ T5830] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.198640][ T5830] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.223640][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.464948][T10148] input: syz1 as /devices/virtual/input/input17 [ 282.502813][ T5830] usb 7-1: GET_CAPABILITIES returned 0 [ 282.524342][ T5830] usbtmc 7-1:16.0: can't read capabilities [ 282.779721][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 282.818533][ T5830] usb 7-1: USB disconnect, device number 8 [ 282.903481][T10155] loop9: detected capacity change from 0 to 2048 [ 282.988578][T10140] loop8: detected capacity change from 0 to 32768 [ 283.005128][T10158] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.054222][T10140] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 283.117583][T10155] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 283.160845][T10155] Remounting filesystem read-only [ 283.205451][T10155] NILFS error (device loop9): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 283.229057][T10140] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 283.353127][ T28] audit: type=1800 audit(1770432699.707:320): pid=10140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1141" name="file1" dev="loop8" ino=17058 res=0 errno=0 [ 283.601504][T10173] loop9: detected capacity change from 0 to 256 [ 283.647852][T10173] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 283.891501][ T9560] ocfs2: Unmounting device (7,8) on (node local) [ 284.140949][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1155'. [ 284.168674][T10180] loop6: detected capacity change from 0 to 4096 [ 284.180440][T10186] loop9: detected capacity change from 0 to 128 [ 284.300404][T10186] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.317915][T10180] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 284.387099][T10186] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.401404][T10180] ntfs3: loop6: Failed to load $Extend (-22). [ 284.436917][T10180] ntfs3: loop6: Failed to initialize $Extend. [ 284.571812][T10193] input: syz1 as /devices/virtual/input/input18 [ 284.599134][ T28] audit: type=1800 audit(1770432700.957:321): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1152" name="file2" dev="loop6" ino=31 res=0 errno=0 [ 284.676303][ T9796] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.947227][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1158'. [ 285.015145][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1158'. [ 285.586566][ T787] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 285.809190][ T787] usb 6-1: Using ep0 maxpacket: 16 [ 285.838184][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.867785][ T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.905341][ T787] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 285.934207][ T787] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 285.972668][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.006216][ T787] usb 6-1: config 0 descriptor?? [ 286.183725][T10239] loop8: detected capacity change from 0 to 16 [ 286.215938][T10239] erofs: (device loop8): mounted with root inode @ nid 36. [ 286.514113][ T787] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 286.533125][ T787] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 286.542570][ T5776] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 286.558332][ T787] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 286.565502][ T787] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 286.572805][ T787] shield 0003:0955:7214.000E: unknown main item tag 0x0 [ 286.593162][ T787] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 286.596001][T10239] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 286.693902][T10214] netlink: 'syz.5.1162': attribute type 2 has an invalid length. [ 286.713027][ T787] shield 0003:0955:7214.000E: Registered Thunderstrike controller [ 286.721051][T10214] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1162'. [ 286.775342][ T787] shield 0003:0955:7214.000E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 286.907521][ T787] usb 6-1: USB disconnect, device number 8 [ 286.914088][ T5830] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 286.970125][ T5830] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 286.994329][T10257] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1174'. [ 287.030249][ T5830] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 287.080164][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1174'. [ 287.107319][ T5830] shield 0003:0955:7214.000E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 287.135265][T10259] loop6: detected capacity change from 0 to 1024 [ 287.151404][T10259] EXT4-fs: inline encryption not supported [ 287.232069][T10259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.307710][T10259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.550038][ T8728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.839741][T10279] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 287.846905][T10279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 287.867113][T10286] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6) [ 287.873690][T10286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 287.914629][T10291] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 287.941600][T10279] vhci_hcd vhci_hcd.0: Device attached [ 287.953975][T10286] vhci_hcd vhci_hcd.0: Device attached [ 288.128221][T10279] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(5) [ 288.134808][T10279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.146514][ T5851] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 288.259104][T10279] vhci_hcd vhci_hcd.0: Device attached [ 288.303681][T10286] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(12) [ 288.310383][T10286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.390603][ T5851] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.450158][T10286] vhci_hcd vhci_hcd.0: Device attached [ 288.469795][ T5851] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 288.500477][T10291] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(15) [ 288.507135][T10291] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 288.551643][ T5851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.632597][T10295] vhci_hcd: connection closed [ 288.637557][ T5851] usb 10-1: config 0 descriptor?? [ 288.650742][T10291] vhci_hcd vhci_hcd.0: Device attached [ 288.668665][T10283] vhci_hcd: connection closed [ 288.707125][ T1326] vhci_hcd: stop threads [ 288.726353][T10288] vhci_hcd: connection closed [ 288.771597][ T1326] vhci_hcd: release socket [ 288.789637][T10298] vhci_hcd: connection closed [ 288.862606][ T1326] vhci_hcd: disconnect device [ 288.948819][ T1326] vhci_hcd: stop threads [ 288.953168][ T1326] vhci_hcd: release socket [ 288.988137][T10300] vhci_hcd: connection closed [ 289.015002][ T1326] vhci_hcd: disconnect device [ 289.078302][T10292] loop5: detected capacity change from 0 to 131072 [ 289.094510][ T1326] vhci_hcd: stop threads [ 289.100458][T10292] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 289.108913][T10292] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 289.119019][T10292] F2FS-fs (loop5): invalid crc value [ 289.131988][ T1326] vhci_hcd: release socket [ 289.141575][T10292] F2FS-fs (loop5): Found nat_bits in checkpoint [ 289.154184][ T1326] vhci_hcd: disconnect device [ 289.197693][ T1326] vhci_hcd: stop threads [ 289.209178][ T1326] vhci_hcd: release socket [ 289.227740][T10292] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 289.235087][T10292] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 289.264985][ T1326] vhci_hcd: disconnect device [ 289.288348][ T5867] usb 10-1: USB disconnect, device number 3 [ 289.301883][ T1326] vhci_hcd: stop threads [ 289.332502][ T1326] vhci_hcd: release socket [ 289.356628][ T1326] vhci_hcd: disconnect device [ 289.386555][ T787] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 289.592579][T10316] netlink: 'syz.8.1186': attribute type 10 has an invalid length. [ 289.606461][ T787] usb 7-1: Using ep0 maxpacket: 32 [ 289.633317][ T787] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 289.662698][ T787] usb 7-1: config 0 has no interface number 0 [ 289.672974][T10316] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 289.682310][ T787] usb 7-1: config 0 interface 230 has no altsetting 0 [ 289.693692][ T787] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 289.731720][ T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.778186][ T787] usb 7-1: Product: syz [ 289.782405][ T787] usb 7-1: Manufacturer: syz [ 289.801418][ T787] usb 7-1: SerialNumber: syz [ 289.819741][ T787] usb 7-1: config 0 descriptor?? [ 289.850287][ T787] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 289.898368][ T787] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 291.687902][T10358] loop9: detected capacity change from 0 to 32768 [ 291.702452][T10375] loop5: detected capacity change from 0 to 128 [ 291.719054][T10358] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.1197 (10358) [ 291.771015][T10358] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 291.796549][T10375] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 291.810398][T10358] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 291.848883][T10375] hpfs: filesystem error: improperly stopped [ 291.858522][T10358] BTRFS info (device loop9): use no compression [ 291.875414][T10375] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 291.884554][T10358] BTRFS info (device loop9): using free space tree [ 291.903645][T10375] hpfs: You really don't want any checks? You are crazy... [ 291.953876][T10375] hpfs: hpfs_map_sector(): read error [ 292.014922][T10375] hpfs: code page support is disabled [ 292.050031][T10375] hpfs: hpfs_map_4sectors(): unaligned read [ 292.074528][T10375] hpfs: hpfs_map_4sectors(): unaligned read [ 292.081269][T10375] hpfs: filesystem error: unable to find root dir [ 292.155044][T10358] BTRFS info (device loop9): enabling ssd optimizations [ 292.196967][ T787] ums-usbat: probe of 7-1:0.230 failed with error -5 [ 292.211619][T10358] BTRFS info (device loop9): auto enabling async discard [ 292.725346][ T9796] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 293.140781][ T6316] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 11 /dev/loop9 scanned by udevd (6316) [ 293.514316][ T5918] usb 7-1: USB disconnect, device number 9 [ 293.741186][T10440] loop6: detected capacity change from 0 to 512 [ 293.900599][T10444] loop5: detected capacity change from 0 to 512 [ 293.943377][T10440] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.979738][T10444] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 294.036697][T10440] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.067871][T10444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800e01c, mo2=0002] [ 294.081176][T10440] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #2: comm syz.6.1210: corrupted inode contents [ 294.096154][T10444] System zones: 1-12 [ 294.113375][T10444] EXT4-fs (loop5): orphan cleanup on readonly fs [ 294.142976][T10444] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1211: invalid indirect mapped block 12 (level 1) [ 294.178287][T10440] EXT4-fs error (device loop6): ext4_dirty_inode:6124: inode #2: comm syz.6.1210: mark_inode_dirty error [ 294.216137][T10444] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1211: invalid indirect mapped block 2 (level 2) [ 294.250276][T10440] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #2: comm syz.6.1210: corrupted inode contents [ 294.273341][T10444] EXT4-fs (loop5): 1 truncate cleaned up [ 294.294877][T10444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 294.337736][T10440] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.1210: mark_inode_dirty error [ 294.489578][T10444] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 294.548206][ T8728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.622026][ T8518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 294.817497][T10434] loop8: detected capacity change from 0 to 32768 [ 294.922290][T10434] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.065550][T10434] XFS (loop8): Ending clean mount [ 295.110569][T10434] XFS (loop8): Quotacheck needed: Please wait. [ 295.243879][T10443] loop9: detected capacity change from 0 to 32768 [ 295.282792][T10434] XFS (loop8): Quotacheck: Done. [ 295.570771][T10443] UFO tlock:0xffffc9000287a288 [ 295.674372][T10485] non-latin1 character 0x637c found in JFS file name [ 295.708498][ T9560] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 295.722217][T10485] mount with iocharset=utf8 to access [ 296.053418][T10477] loop6: detected capacity change from 0 to 32768 [ 296.124510][T10477] JBD2: Ignoring recovery information on journal [ 296.327710][T10477] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 296.392376][T10493] loop5: detected capacity change from 0 to 8192 [ 296.477177][T10493] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 296.575216][T10493] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 296.587661][T10493] REISERFS (device loop5): using ordered data mode [ 296.594211][T10493] reiserfs: using flush barriers [ 296.602437][T10493] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.679436][T10493] REISERFS (device loop5): checking transaction log (loop5) [ 296.730536][ T28] audit: type=1800 audit(1770432713.087:322): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1215" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 296.992582][ T8728] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 297.052692][T10493] REISERFS (device loop5): Using tea hash to sort names [ 297.074618][ T8728] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 297.102965][T10493] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 297.138538][T10509] loop9: detected capacity change from 0 to 2048 [ 297.142185][ T8728] OCFS2: File system is now read-only. [ 297.187143][ T8728] (syz-executor,8728,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30 [ 297.225951][T10509] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.232821][ T8728] (syz-executor,8728,0):_ocfs2_free_clusters:2583 ERROR: status = -30 [ 297.278258][ T8728] (syz-executor,8728,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 297.308531][ T8728] (syz-executor,8728,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 297.346882][ T8728] (syz-executor,8728,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 297.618461][ T8728] ocfs2: Unmounting device (7,6) on (node local) [ 298.836621][ T787] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 299.048035][ T787] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.070558][ T787] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 299.107386][ T787] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 299.136508][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.167979][T10556] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.178821][ T787] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 299.303348][T10547] loop6: detected capacity change from 0 to 32768 [ 299.389669][T10547] XFS (loop6): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 299.682575][T10554] loop9: detected capacity change from 0 to 32768 [ 299.714550][T10547] XFS (loop6): Ending clean mount [ 299.841649][T10554] JBD2: Ignoring recovery information on journal [ 300.005187][T10554] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 300.173048][ T5851] usb 6-1: USB disconnect, device number 9 [ 300.219459][ T8728] XFS (loop6): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 300.272392][ T28] audit: type=1800 audit(1770432716.627:323): pid=10554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1224" name="file1" dev="loop9" ino=17059 res=0 errno=0 [ 300.701800][ T9796] ocfs2: Unmounting device (7,9) on (node local) [ 301.060543][T10597] loop5: detected capacity change from 0 to 1024 [ 301.716567][ T5851] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 301.789697][T10594] loop6: detected capacity change from 0 to 32768 [ 301.827294][T10594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1228 (10594) [ 301.907218][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 301.928435][ T5851] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 301.942521][T10594] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.972645][ T5851] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.997043][T10594] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 302.012279][ T5851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.026186][T10594] BTRFS info (device loop6): using free space tree [ 302.052313][ T5851] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.092123][ T5851] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.122312][ T5851] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 302.147819][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.208065][T10594] BTRFS info (device loop6): enabling ssd optimizations [ 302.253094][T10594] BTRFS info (device loop6): auto enabling async discard [ 302.405557][ T28] audit: type=1326 audit(1770432718.757:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.8.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69a599aeb9 code=0x7fc00000 [ 302.444274][ T5851] usb 6-1: GET_CAPABILITIES returned 0 [ 302.474106][ T5851] usbtmc 6-1:16.0: can't read capabilities [ 302.558146][T10648] loop9: detected capacity change from 0 to 256 [ 302.602133][T10648] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 302.648820][T10648] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 302.710639][ T8728] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.726068][T10648] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 302.849710][ T5867] usb 6-1: USB disconnect, device number 10 [ 302.860106][T10608] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 302.907007][T10654] usb 6-1: usbtmc_ioctl_clear_out_halt returned -19 [ 303.202207][ T6316] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop6 scanned by udevd (6316) [ 303.896348][T10685] loop5: detected capacity change from 0 to 256 [ 303.967766][T10685] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 304.042965][ T5760] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.086000][T10690] loop8: detected capacity change from 0 to 64 [ 304.204303][T10695] loop6: detected capacity change from 0 to 256 [ 304.243611][T10685] loop5: detected capacity change from 0 to 4096 [ 304.264231][T10695] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.316498][T10685] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 304.454987][T10685] ntfs3: loop5: Failed to load $Extend (-22). [ 304.474764][T10690] overlayfs: failed to resolve './file1': -2 [ 304.493894][T10685] ntfs3: loop5: Failed to initialize $Extend. [ 305.256633][ T5910] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 305.449822][ T5910] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.487375][ T5910] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 305.511654][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 305.529914][ T5910] usb 7-1: Product: syz [ 305.540250][ T5910] usb 7-1: Manufacturer: syz [ 305.548898][ T5910] usb 7-1: SerialNumber: syz [ 305.573918][T10697] loop9: detected capacity change from 0 to 40427 [ 305.598603][T10697] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 305.632890][T10697] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 305.665790][T10697] F2FS-fs (loop9): invalid crc value [ 305.686698][T10697] F2FS-fs (loop9): Found nat_bits in checkpoint [ 305.785713][ T5910] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 305.871820][T10697] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 305.899264][T10697] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 305.977886][ T28] audit: type=1800 audit(1770432722.327:325): pid=10697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1251" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 306.073286][ C0] usblp0: nonzero write bulk status received: -71 [ 306.076125][ T5910] usb 7-1: USB disconnect, device number 10 [ 306.130428][T10710] usblp0: removed [ 306.546532][ T5851] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 306.746485][ T5851] usb 9-1: Using ep0 maxpacket: 16 [ 306.761067][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.787778][ T5851] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.815535][ T5851] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 306.849772][T10753] netlink: 'syz.6.1261': attribute type 12 has an invalid length. [ 306.863237][ T5851] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 306.870769][T10753] netlink: 'syz.6.1261': attribute type 29 has an invalid length. [ 306.895829][ T5851] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.897256][T10753] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1261'. [ 306.921262][ T5851] usb 9-1: config 0 descriptor?? [ 306.964945][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1261'. [ 307.259279][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1263'. [ 307.368624][ T5851] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 307.427231][ T5851] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 307.457832][ T5851] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 307.485190][ T5851] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 307.520366][ T5851] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 307.540429][ T5851] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 307.560754][T10744] netlink: 'syz.8.1259': attribute type 2 has an invalid length. [ 307.585692][T10773] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ0xffffffffffffffff [ 307.595361][T10744] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1259'. [ 307.683440][ T5851] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 307.716862][ T5851] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.8-1/input0 [ 307.859440][ T5851] usb 9-1: USB disconnect, device number 5 [ 307.868338][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 307.916953][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 307.973762][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 308.023538][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 310.286762][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 310.448489][T10822] loop5: detected capacity change from 0 to 32768 [ 310.460208][T10822] XFS: noikeep mount option is deprecated. [ 310.469795][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 310.491590][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.516533][ T9739] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 310.528287][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.544446][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 310.562661][ T9] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 310.573524][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.592612][T10822] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.606140][ T9] usb 10-1: config 0 descriptor?? [ 310.707071][ T9739] usb 9-1: Using ep0 maxpacket: 16 [ 310.718425][ T9739] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.736509][ T9739] usb 9-1: config 0 interface 0 has no altsetting 0 [ 310.743292][ T9739] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 310.752912][ T9739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.767274][ T9739] usb 9-1: config 0 descriptor?? [ 310.788222][T10822] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 310.828204][T10824] loop6: detected capacity change from 0 to 40427 [ 310.841306][T10822] XFS (loop5): Starting recovery (logdev: internal) [ 310.869115][T10824] F2FS-fs (loop6): build fault injection attr: rate: 25, type: 0x7ffff [ 310.895727][T10824] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x7698c [ 310.920245][T10824] F2FS-fs (loop6): invalid crc value [ 310.939650][T10822] XFS (loop5): Ending recovery (logdev: internal) [ 310.945475][T10824] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 311.027600][T10824] F2FS-fs (loop6): Found nat_bits in checkpoint [ 311.083391][ T9] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 311.123024][ T9] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 311.163032][ T9] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 311.188488][T10824] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 311.205029][ T28] audit: type=1800 audit(1770432727.557:326): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1279" name="file2" dev="loop5" ino=4423 res=0 errno=0 [ 311.206782][ T9] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 311.231995][ T9739] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 311.250771][T10822] XFS (loop5): User initiated shutdown received. [ 311.277172][T10840] netlink: 'syz.9.1284': attribute type 2 has an invalid length. [ 311.280746][ T9739] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 311.292425][T10840] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1284'. [ 311.294366][ T9] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 311.310838][T10822] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 311.337486][T10824] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 311.345321][ T28] audit: type=1800 audit(1770432727.667:327): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1279" name="file2" dev="loop5" ino=4423 res=0 errno=0 [ 311.397713][T10822] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 311.412684][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 311.421336][ T9739] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 311.444037][ T9739] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 311.471849][ T9739] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 311.503739][T10824] F2FS-fs (loop6): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0 [ 311.528771][ T9739] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.8-1/input0 [ 311.555120][ T9] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 311.570169][ T9739] usb 9-1: USB disconnect, device number 6 [ 311.581144][T10824] F2FS-fs (loop6): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 311.617872][ T9] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.9-1/input0 [ 311.713003][ T8728] bio_check_eod: 24 callbacks suppressed [ 311.713018][ T8728] syz-executor: attempt to access beyond end of device [ 311.713018][ T8728] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.735023][ T5803] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 311.757620][ T8518] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 311.761877][ T9] usb 10-1: USB disconnect, device number 4 [ 311.786607][ T5803] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 311.826480][ T8728] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 311.845262][T10867] fido_id[10867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 311.860178][ T5803] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 311.903254][ T5803] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 313.105236][T10888] loop9: detected capacity change from 0 to 8192 [ 313.140221][T10888] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 313.186527][T10888] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 313.195950][T10888] REISERFS (device loop9): using ordered data mode [ 313.204583][T10888] reiserfs: using flush barriers [ 313.214561][T10888] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 313.232274][T10888] REISERFS (device loop9): checking transaction log (loop9) [ 313.435319][T10888] REISERFS (device loop9): Using tea hash to sort names [ 313.458508][T10888] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 314.387676][T10927] loop5: detected capacity change from 0 to 8 [ 314.745429][T10910] loop9: detected capacity change from 0 to 32768 [ 314.808814][T10910] JBD2: Ignoring recovery information on journal [ 314.937465][T10910] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 314.976541][ T9739] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 315.177537][ T9739] usb 9-1: Using ep0 maxpacket: 8 [ 315.211123][ T9739] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 315.240493][ T9739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.253997][ T28] audit: type=1800 audit(1770432731.607:328): pid=10910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1294" name="file1" dev="loop9" ino=17058 res=0 errno=0 [ 315.294885][ T9739] usb 9-1: Product: syz [ 315.309603][ T9739] usb 9-1: Manufacturer: syz [ 315.334728][ T9739] usb 9-1: SerialNumber: syz [ 315.357312][ T9739] usb 9-1: config 0 descriptor?? [ 315.388381][ T9739] gspca_main: sq930x-2.14.0 probing 2770:930c [ 315.418351][ T5851] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 315.437543][ T9796] OCFS2: ERROR (device loop9): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 315.460023][ T9796] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 315.470611][ T9796] OCFS2: File system is now read-only. [ 315.476140][ T9796] (syz-executor,9796,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30 [ 315.489714][ T9796] (syz-executor,9796,1):_ocfs2_free_clusters:2583 ERROR: status = -30 [ 315.501240][ T9796] (syz-executor,9796,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 315.512859][ T9796] (syz-executor,9796,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 315.523405][ T9796] (syz-executor,9796,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 315.561477][ T9796] ocfs2: Unmounting device (7,9) on (node local) [ 315.626661][ T5851] usb 7-1: Using ep0 maxpacket: 8 [ 315.639360][ T5851] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 315.648854][ T5851] usb 7-1: config 179 has no interface number 0 [ 315.655580][ T5851] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 315.726506][ T5851] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 315.778787][ T5851] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.804420][ T5851] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 315.820641][ T5851] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 315.855112][ T5851] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 315.875083][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.903417][T10943] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 316.261199][ T5851] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input22 [ 316.484456][ T5810] usb 7-1: USB disconnect, device number 11 [ 316.484484][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 316.500264][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 316.522707][ T5810] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 316.646638][ T9739] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 316.896503][ T9739] gspca_sq930x: Sensor ov9630 not yet treated [ 316.907366][ T9739] sq930x: probe of 9-1:0.0 failed with error -22 [ 316.930523][ T9739] usb 9-1: USB disconnect, device number 7 [ 317.029161][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.038855][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.781254][ T5830] hid-generic 0080:0003:0001.0012: unknown main item tag 0x0 [ 317.806547][ T5830] hid-generic 0080:0003:0001.0012: unknown main item tag 0x0 [ 317.842600][ T5830] hid-generic 0080:0003:0001.0012: hidraw0: HID v0.03 Device [syz0] on syz1 [ 317.945631][T10969] loop5: detected capacity change from 0 to 40427 [ 318.002014][T10969] F2FS-fs (loop5): invalid crc value [ 318.065280][T10969] F2FS-fs (loop5): Found nat_bits in checkpoint [ 318.120104][T10991] fido_id[10991]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.180181][T10995] loop9: detected capacity change from 0 to 2048 [ 318.229651][T10995] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 318.326596][T10999] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.329242][T10969] F2FS-fs (loop5): Start checkpoint disabled! [ 318.359561][T10111] udevd[10111]: incorrect nilfs2 checksum on /dev/loop9 [ 318.445224][T10969] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 318.617184][T10986] loop8: detected capacity change from 0 to 32768 [ 318.754002][T10986] JBD2: Ignoring recovery information on journal [ 318.942161][T10986] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 318.971579][T10984] loop6: detected capacity change from 0 to 32768 [ 319.083440][T10984] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 319.242386][T10984] XFS (loop6): Ending clean mount [ 319.286831][T10984] XFS (loop6): Quotacheck needed: Please wait. [ 319.352540][ T5830] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 319.398607][ T5830] XFS (loop6): Unmount and run xfs_repair [ 319.432847][ T5830] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 319.493823][ T5830] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 319.520875][ T5830] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 319.542678][ T9560] ocfs2: Unmounting device (7,8) on (node local) [ 319.574115][ T5830] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 319.619034][ T5830] 00000030: 00 00 00 00 ac 5e af fe 00 ff 07 0d 00 00 00 13 .....^.......... [ 319.677869][ T5830] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 319.746651][ T5830] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 319.772406][T11028] loop9: detected capacity change from 0 to 1024 [ 319.798714][ T5830] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 319.819173][ T5830] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 319.829170][T11028] EXT4-fs: Ignoring removed nobh option [ 319.834779][T11028] EXT4-fs: Ignoring removed bh option [ 319.873859][ T141] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 319.927856][T11028] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 319.986484][T10984] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 320.060829][T11028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.177737][T11028] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4047: comm syz.9.1322: Allocating blocks 385-513 which overlap fs metadata [ 320.331324][T11027] EXT4-fs (loop9): pa ffff8880202040e8: logic 16, phys. 129, len 24 [ 320.340250][T11027] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 8 [ 320.498817][ T8728] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.561552][ T9796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.978428][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1328'. [ 322.111926][ T5776] Bluetooth: hci3: unexpected event 0x3c length: 10 > 7 [ 322.817381][T11115] input: syz1 as /devices/virtual/input/input23 [ 322.899404][T11117] netlink: 'syz.8.1346': attribute type 9 has an invalid length. [ 322.945504][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1346'. [ 323.011855][T11117] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.020851][T11117] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.029975][T11117] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.038832][T11117] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.102188][T11117] netlink: 'syz.8.1346': attribute type 9 has an invalid length. [ 323.152511][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1346'. [ 323.468875][T11128] netlink: 'syz.8.1348': attribute type 10 has an invalid length. [ 323.570410][T11128] team0: Device dummy0 failed to register rx_handler [ 323.591230][T11132] loop9: detected capacity change from 0 to 512 [ 323.664152][T11132] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.691937][T11132] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.764118][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1348'. [ 324.100604][ T9796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.218283][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 324.439131][T11149] loop9: detected capacity change from 0 to 2048 [ 324.475056][T11149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.491702][T11153] loop6: detected capacity change from 0 to 64 [ 324.533716][T11149] UDF-fs: warning (device loop9): udf_rmdir: empty directory has nlink != 2 (0) [ 324.586200][T11149] UDF-fs: warning (device loop9): udf_rmdir: parent dir link count too low (2) [ 325.188256][T11166] Invalid argument reading file caps for ./file0 [ 325.195660][T11167] "syz.6.1358" (11167) uses obsolete ecb(arc4) skcipher [ 325.296511][ T5851] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 325.465316][T11171] loop6: detected capacity change from 0 to 256 [ 325.502275][T11171] exfat: Deprecated parameter 'utf8' [ 325.519313][ T5851] usb 10-1: Using ep0 maxpacket: 32 [ 325.528353][T11171] exfat: Deprecated parameter 'utf8' [ 325.543674][T11171] exfat: Deprecated parameter 'utf8' [ 325.549381][ T5851] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 325.571082][ T5851] usb 10-1: config 0 has no interface number 0 [ 325.581610][T11141] loop8: detected capacity change from 0 to 40427 [ 325.594279][ T5851] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.612334][T11171] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 325.629853][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.647200][T11141] F2FS-fs (loop8): invalid crc value [ 325.663068][ T5851] usb 10-1: Product: syz [ 325.671979][ T5851] usb 10-1: Manufacturer: syz [ 325.684465][ T5851] usb 10-1: SerialNumber: syz [ 325.692816][ T5851] usb 10-1: config 0 descriptor?? [ 325.705196][T11141] F2FS-fs (loop8): Found nat_bits in checkpoint [ 325.741353][ T5851] smsc95xx v2.0.0 [ 325.776477][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 325.922922][T11141] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 325.983719][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.018374][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.065738][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.095365][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.123362][ T9560] syz-executor: attempt to access beyond end of device [ 326.123362][ T9560] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 326.156590][ T9] usb 6-1: Product: syz [ 326.160823][ T9] usb 6-1: Manufacturer: syz [ 326.165792][ T9] usb 6-1: SerialNumber: syz [ 326.211631][ T9560] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 326.407913][ T9] usb 6-1: 0:2 : does not exist [ 326.443314][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 326.534500][ T9] usb 6-1: USB disconnect, device number 11 [ 326.670880][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.953959][ T5851] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 326.986921][ T5851] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 327.005556][ T5851] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 327.033347][ T5851] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 327.082048][ T5851] usb 10-1: USB disconnect, device number 5 [ 327.311200][T11189] loop6: detected capacity change from 0 to 32768 [ 327.412210][T11189] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 327.481517][T11189] XFS (loop6): Ending clean mount [ 327.529271][T11189] XFS (loop6): Quotacheck needed: Please wait. [ 327.556524][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 327.679911][T11189] XFS (loop6): Quotacheck: Done. [ 327.766551][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 327.787965][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 327.796555][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.806323][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.817195][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.827819][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.841143][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.850514][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.101235][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 328.128498][ T9] usbtmc 9-1:16.0: can't read capabilities [ 328.140133][T11224] loop5: detected capacity change from 0 to 1024 [ 328.264572][T11224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.318266][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.327406][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.336484][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.345542][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.355105][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.364214][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.373322][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.382430][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.407130][ T8728] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 328.458680][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.467833][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.477627][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.486756][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.495842][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.504936][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.546061][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.555282][ C1] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 328.607575][ T9] usb 9-1: USB disconnect, device number 8 [ 328.750199][ T8518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.983480][T11217] loop9: detected capacity change from 0 to 32768 [ 329.122076][T11217] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 329.348788][T11217] XFS (loop9): Ending clean mount [ 329.689959][ T9796] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 329.765234][T11266] loop8: detected capacity change from 0 to 1024 [ 330.082594][ T1326] hfsplus: b-tree write err: -5, ino 4 [ 330.435408][T11283] netlink: 'syz.5.1383': attribute type 12 has an invalid length. [ 330.474274][T11285] loop9: detected capacity change from 0 to 128 [ 330.484641][T11283] netlink: 'syz.5.1383': attribute type 29 has an invalid length. [ 330.530420][T11283] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1383'. [ 330.570678][T11285] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 330.590724][T11283] netlink: 'syz.5.1383': attribute type 1 has an invalid length. [ 330.610951][T11283] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1383'. [ 330.667212][T11285] UDF-fs: error (device loop9): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 330.897090][T11293] loop5: detected capacity change from 0 to 512 [ 330.968716][T11293] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.138610][T11293] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 331.291982][ T8518] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 331.913878][T11325] loop9: detected capacity change from 0 to 256 [ 331.948940][T11325] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.984931][T11325] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 332.024236][T11325] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 332.126504][ T27] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 332.210212][T11298] loop6: detected capacity change from 0 to 40427 [ 332.241173][T11330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input24 [ 332.319351][T11298] F2FS-fs (loop6): Found nat_bits in checkpoint [ 332.338518][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 332.360981][ T27] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 332.394301][ T27] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 332.422058][ T27] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.437813][ T27] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.474195][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.506483][ T27] usb 9-1: Product: syz [ 332.510793][ T27] usb 9-1: Manufacturer: syz [ 332.526016][ T27] usb 9-1: SerialNumber: syz [ 332.546273][T11298] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 332.734514][T11331] f2fs_ckpt-7:6: attempt to access beyond end of device [ 332.734514][T11331] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 332.803652][ T27] usb 9-1: 0:2 : does not exist [ 332.811250][T11331] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 332.834473][T11331] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 332.858973][ T27] usb 9-1: USB disconnect, device number 9 [ 332.879852][T11331] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 332.942703][T11331] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 332.955693][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.999942][T11345] loop5: detected capacity change from 0 to 512 [ 333.058198][T11345] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.1398: inode has both inline data and extents flags [ 333.154832][T11345] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1398: couldn't read orphan inode 15 (err -117) [ 333.234131][T11345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.346313][ T28] audit: type=1804 audit(1770432749.687:329): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1398" name="/newroot/170/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 333.438750][ T28] audit: type=1800 audit(1770432749.697:330): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1398" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 333.515834][T11345] Invalid ELF header magic: != ELF [ 333.681495][ T8518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.729585][T11341] loop9: detected capacity change from 0 to 40427 [ 333.771246][T11341] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 333.793162][T11341] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 333.837616][T11341] F2FS-fs (loop9): invalid crc value [ 333.883316][T11341] F2FS-fs (loop9): Found nat_bits in checkpoint [ 334.076710][ T5867] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 334.086713][T11341] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 334.093849][T11341] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 334.286806][ T5867] usb 9-1: Using ep0 maxpacket: 8 [ 334.324689][ T5867] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 334.366732][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.374792][ T5867] usb 9-1: Product: syz [ 334.416936][ T5867] usb 9-1: Manufacturer: syz [ 334.421607][ T5867] usb 9-1: SerialNumber: syz [ 334.516806][T11375] loop5: detected capacity change from 0 to 764 [ 334.527376][ T5867] usb 9-1: config 0 descriptor?? [ 334.619914][T11375] syzkaller1: entered promiscuous mode [ 334.638111][T11375] syzkaller1: entered allmulticast mode [ 334.738497][ T5867] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.989003][ T5867] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 335.013249][ T5867] usb 9-1: USB disconnect, device number 10 [ 335.426827][T11399] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 335.925940][ T9966] kernel read not supported for file /admmidi2 (pid: 9966 comm: kworker/1:8) [ 336.100887][T11423] loop6: detected capacity change from 0 to 7 [ 336.111719][T11423] Dev loop6: unable to read RDB block 7 [ 336.117735][T11423] loop6: AHDI p4 [ 336.121817][T11423] loop6: partition table partially beyond EOD, truncated [ 336.220406][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 336.416786][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 336.430244][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.450481][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 336.464476][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 336.487228][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.508266][ T9] usb 6-1: config 0 descriptor?? [ 336.675259][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e6ad400: rx timeout, send abort [ 336.926497][ T9739] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 336.961409][ T9] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 337.127610][ T9739] usb 10-1: Using ep0 maxpacket: 32 [ 337.158088][ T9739] usb 10-1: config index 0 descriptor too short (expected 122, got 121) [ 337.167414][ T9739] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.186143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e6ad400: abort rx timeout. Force session deactivation [ 337.197091][ T9739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.226696][ T9739] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 29 [ 337.276496][ T9739] usb 10-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 337.318309][ T9739] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.354695][ T9] usb 6-1: USB disconnect, device number 12 [ 337.367308][ T9739] usb 10-1: config 0 descriptor?? [ 337.370845][T11451] loop6: detected capacity change from 0 to 128 [ 337.790235][ T9739] wacom 0003:056A:00CC.0014: unknown main item tag 0x2 [ 337.829352][ T9739] wacom 0003:056A:00CC.0014: hidraw0: USB HID v10.00 Device [HID 056a:00cc] on usb-dummy_hcd.9-1/input0 [ 338.009963][ T9739] usb 10-1: USB disconnect, device number 6 [ 338.081498][T11463] fido_id[11463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 339.505439][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.549986][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.582331][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 339.993798][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.043188][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.219725][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.245560][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.432083][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 340.454172][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.505839][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.000704][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.019448][T11517] loop5: detected capacity change from 0 to 32768 [ 341.047492][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.068130][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.081495][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.108990][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.116506][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.223779][T11517] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 341.725284][T11517] XFS (loop5): Ending clean mount [ 342.016013][ T8518] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.908336][T11553] loop9: detected capacity change from 0 to 131072 [ 342.920804][T11553] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 342.929352][T11553] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 343.027189][T11553] F2FS-fs (loop9): invalid crc value [ 343.056148][T11553] F2FS-fs (loop9): Found nat_bits in checkpoint [ 343.114056][T11553] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 343.121309][T11553] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 343.168881][ T28] audit: type=1800 audit(1770432759.527:331): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1446" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 343.200792][ T51] Bluetooth: hci1: command tx timeout [ 343.997216][T11532] chnl_net:caif_netlink_parms(): no params data found [ 344.427686][T11580] loop5: detected capacity change from 0 to 32768 [ 344.438794][T11580] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1449 (11580) [ 344.463862][T11580] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 344.474560][T11580] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 344.483429][T11580] BTRFS info (device loop5): turning on flush-on-commit [ 344.490480][T11580] BTRFS info (device loop5): max_inline at 4096 [ 344.496794][T11580] BTRFS info (device loop5): enabling disk space caching [ 344.503851][T11580] BTRFS info (device loop5): enabling free space tree [ 344.510697][T11580] BTRFS info (device loop5): turning off barriers [ 344.517212][T11580] BTRFS info (device loop5): disabling tree log [ 344.523501][T11580] BTRFS info (device loop5): force clearing of disk cache [ 344.530676][T11580] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 344.540030][T11580] BTRFS info (device loop5): use lzo compression, level 0 [ 344.547523][T11580] BTRFS info (device loop5): max_inline at 0 [ 344.553541][T11580] BTRFS info (device loop5): using free space tree [ 344.745175][T11580] BTRFS info (device loop5): enabling ssd optimizations [ 344.757934][T11580] BTRFS info (device loop5): rebuilding free space tree [ 344.837962][ T28] audit: type=1800 audit(1770432761.197:332): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1449" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 345.198450][ T8518] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 345.269044][ T51] Bluetooth: hci1: command tx timeout [ 345.690200][T11532] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.738815][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.746212][T11532] bridge_slave_0: entered allmulticast mode [ 345.801342][T11532] bridge_slave_0: entered promiscuous mode [ 345.899324][T11532] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.941676][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.978741][T11532] bridge_slave_1: entered allmulticast mode [ 345.986132][T11532] bridge_slave_1: entered promiscuous mode [ 346.283705][ T12] hsr_slave_0: left promiscuous mode [ 346.336555][ T12] hsr_slave_1: left promiscuous mode [ 346.383461][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.417614][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.492562][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.525111][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.538343][T11615] loop9: detected capacity change from 0 to 64 [ 346.604578][ T12] bridge_slave_1: left allmulticast mode [ 346.638675][ T12] bridge_slave_1: left promiscuous mode [ 346.644584][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.739739][ T12] bridge_slave_0: left allmulticast mode [ 346.746575][T11618] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 346.777574][ T12] bridge_slave_0: left promiscuous mode [ 346.783362][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.097238][ T12] veth1_macvtap: left promiscuous mode [ 347.102910][ T12] veth0_macvtap: left promiscuous mode [ 347.118946][ T12] veth1_vlan: left promiscuous mode [ 347.135576][ T12] veth0_vlan: left promiscuous mode [ 347.276589][ T9966] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 347.341217][ T51] Bluetooth: hci1: command tx timeout [ 347.526442][ T9966] usb 10-1: Using ep0 maxpacket: 8 [ 347.548641][ T9966] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 347.584315][ T9966] usb 10-1: config 179 has no interface number 0 [ 347.614907][ T9966] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 347.656855][ T9966] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 347.689943][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1455'. [ 347.709662][ T9966] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 347.770700][ T9966] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 347.802642][ T9966] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 347.858418][ T9966] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 347.891968][ T9966] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.948911][T11630] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 348.315667][ T9966] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input28 [ 348.494121][ T5851] usb 10-1: USB disconnect, device number 7 [ 348.494192][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 348.508549][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 348.519823][ T5851] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 349.113053][ T28] audit: type=1326 audit(1770432765.467:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11646 comm="syz.6.1459" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f7819aeb9 code=0x0 [ 349.241677][T11650] loop9: detected capacity change from 0 to 128 [ 349.289718][T11650] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 349.367287][T11650] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.416715][ T51] Bluetooth: hci1: command tx timeout [ 349.550378][ T9796] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.947386][ T12] team0 (unregistering): Port device team_slave_1 removed [ 350.016708][ T5851] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 350.177252][ T12] team0 (unregistering): Port device team_slave_0 removed [ 350.216455][ T5851] usb 10-1: Using ep0 maxpacket: 16 [ 350.223936][ T5851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.267153][ T5851] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.296180][ T5851] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 350.357239][ T5851] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 350.378310][ T5851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.409875][ T5851] usb 10-1: config 0 descriptor?? [ 350.452477][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.705580][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.854791][ T5851] HID 045e:07da: Invalid code 65791 type 1 [ 350.901346][ T5851] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0015/input/input29 [ 350.943772][ T5851] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 351.100722][ T9966] usb 10-1: USB disconnect, device number 8 [ 351.131500][T11660] fido_id[11660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 351.620134][T11659] loop6: detected capacity change from 0 to 32768 [ 351.728407][T11659] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 352.252556][ T8728] (syz-executor,8728,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 352.369856][ T8728] ocfs2: Unmounting device (7,6) on (node local) [ 352.521001][T11664] loop9: detected capacity change from 0 to 32768 [ 352.589591][T11664] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 scanned by syz.9.1464 (11664) [ 352.661698][T11664] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 352.676143][T11664] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 352.692205][ T12] bond0 (unregistering): Released all slaves [ 352.728692][T11664] BTRFS info (device loop9): using free space tree [ 352.911164][T11664] BTRFS info (device loop9): enabling ssd optimizations [ 352.943581][T11664] BTRFS info (device loop9): auto enabling async discard [ 353.164753][T11532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.230954][T11532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.469379][T11532] team0: Port device team_slave_0 added [ 353.540103][T11532] team0: Port device team_slave_1 added [ 353.592403][ T9796] BTRFS info (device loop9): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 353.693953][T11532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.784138][ T6316] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop9 scanned by udevd (6316) [ 353.856694][T11532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.047215][T11532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.110231][T11532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.183208][T11680] loop6: detected capacity change from 0 to 32768 [ 354.190986][T11532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.355816][T11680] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 354.364715][T11532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.793829][T11680] XFS (loop6): Ending clean mount [ 354.886052][T11680] XFS (loop6): Quotacheck needed: Please wait. [ 355.161535][T11680] XFS (loop6): Quotacheck: Done. [ 355.551292][T11707] loop9: detected capacity change from 0 to 131072 [ 355.683977][T11707] XFS (loop9): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 355.736893][ T8728] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 356.030728][T11532] hsr_slave_0: entered promiscuous mode [ 356.107289][T11707] XFS (loop9): Starting recovery (logdev: internal) [ 356.142483][T11707] XFS (loop9): Ending recovery (logdev: internal) [ 356.175111][T11532] hsr_slave_1: entered promiscuous mode [ 356.236758][T11532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.245127][T11532] Cannot create hsr debugfs directory [ 356.363142][ T9796] XFS (loop9): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 356.709275][ T6316] I/O error, dev loop9, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 357.201794][T11738] loop6: detected capacity change from 0 to 16 [ 357.234073][T11738] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 357.299058][ T6316] udevd[6316]: incorrect cramfs checksum on /dev/loop6 [ 357.408805][ T6316] udevd[6316]: incorrect cramfs checksum on /dev/loop6 [ 358.076593][T11729] loop5: detected capacity change from 0 to 40427 [ 358.127314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 358.142755][T11729] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 358.166506][T11729] F2FS-fs (loop5): Image doesn't support compression [ 358.173391][T11729] F2FS-fs (loop5): Image doesn't support compression [ 358.199145][T11729] F2FS-fs (loop5): invalid crc value [ 358.252732][T11729] F2FS-fs (loop5): Found nat_bits in checkpoint [ 358.495559][T11729] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 358.704647][ T23] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 358.715793][T11756] syz.5.1472: attempt to access beyond end of device [ 358.715793][T11756] loop5: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 358.786931][T11729] syz.5.1472: attempt to access beyond end of device [ 358.786931][T11729] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 358.940363][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.993820][ T8518] syz-executor: attempt to access beyond end of device [ 358.993820][ T8518] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 359.010216][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.050830][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.098349][ T8518] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 359.111292][ T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.141045][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.198161][ T23] usb 7-1: config 0 descriptor?? [ 360.072275][T11532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.168944][T11532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.237044][T11532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.303721][T11532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.653257][T11768] loop9: detected capacity change from 0 to 131072 [ 360.661459][T11768] F2FS-fs (loop9): Invalid log sectorsize (67108873) [ 360.668287][T11768] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 360.678945][ T23] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 360.694260][ T23] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 360.706790][T11768] F2FS-fs (loop9): invalid crc value [ 360.749662][T11768] F2FS-fs (loop9): Found nat_bits in checkpoint [ 360.809283][T11768] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 360.816452][T11768] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 360.853916][ T28] audit: type=1800 audit(1770432777.197:334): pid=11768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1479" name="file1" dev="loop9" ino=7 res=0 errno=0 [ 361.024237][T11532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.141128][T11532] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.214406][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.221759][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.315395][T11559] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.322731][T11559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.420303][ T23] usb 7-1: USB disconnect, device number 12 [ 361.590320][T11532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.363387][T11795] loop5: detected capacity change from 0 to 32768 [ 362.380809][T11795] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 362.523363][T11798] loop6: detected capacity change from 0 to 1024 [ 362.567620][T11801] tls_set_device_offload_rx: netdev not found [ 362.657960][T11798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.767420][T11532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.827021][ T5760] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 362.887452][T11798] loop6: detected capacity change from 1024 to 64 [ 362.980718][T11532] veth0_vlan: entered promiscuous mode [ 363.048154][T11532] veth1_vlan: entered promiscuous mode [ 363.100942][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.171543][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.192952][T11532] veth0_macvtap: entered promiscuous mode [ 363.234723][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.251421][T11532] veth1_macvtap: entered promiscuous mode [ 363.304479][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.345183][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.378180][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.416711][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.439787][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.453536][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.486987][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.506012][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.546483][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.568146][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.597997][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.642916][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.664638][T11532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.692455][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.712863][ T8728] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 363.756770][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.796782][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.836405][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.846265][T11532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.907715][T11532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.947975][T11532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.021680][T11532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.039559][ T9880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.066756][T11532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.075585][T11532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.116760][T11532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.137659][T11802] kmmpd-loop6: attempt to access beyond end of device [ 364.137659][T11802] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 364.179376][T11802] buffer_io_error: 23 callbacks suppressed [ 364.179389][T11802] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 364.534023][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.552782][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.704088][T11560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.938478][T11560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.002265][T11559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.016946][T11559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.177251][T11560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.388787][T11560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.506831][T11826] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 366.151861][T11833] loop9: detected capacity change from 0 to 128 [ 366.196788][T11833] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 366.320834][T11833] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.420334][T11833] ext2 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.540439][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.559465][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.571190][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.582400][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.592558][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 366.600234][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.643925][T11844] loop5: detected capacity change from 0 to 512 [ 366.694081][ T9796] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.719920][T11844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 366.741875][T11844] System zones: 1-12 [ 366.808866][T11844] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1503: error while reading EA inode 32 err=-116 [ 366.912888][T11844] EXT4-fs (loop5): Remounting filesystem read-only [ 366.954786][T11844] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 367.013832][T11844] EXT4-fs warning (device loop5): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 367.054287][T11844] EXT4-fs (loop5): 1 orphan inode deleted [ 367.073078][T11844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.406888][ T8518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.050133][T11852] loop9: detected capacity change from 0 to 131072 [ 368.059295][T11852] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 368.067497][T11852] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 368.109489][T11852] F2FS-fs (loop9): invalid crc value [ 368.170825][T11852] F2FS-fs (loop9): Found nat_bits in checkpoint [ 368.225826][T11852] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 368.233238][T11852] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 368.698624][ T51] Bluetooth: hci3: command tx timeout [ 368.859478][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.024415][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.069730][T11871] loop5: detected capacity change from 0 to 256 [ 369.252291][T11871] FAT-fs (loop5): Directory bread(block 64) failed [ 369.303435][T11871] FAT-fs (loop5): Directory bread(block 65) failed [ 369.354243][T11871] FAT-fs (loop5): Directory bread(block 66) failed [ 369.366885][T11871] FAT-fs (loop5): Directory bread(block 67) failed [ 369.373571][T11871] FAT-fs (loop5): Directory bread(block 68) failed [ 369.400877][T11871] FAT-fs (loop5): Directory bread(block 69) failed [ 369.408040][T11871] FAT-fs (loop5): Directory bread(block 70) failed [ 369.414675][T11871] FAT-fs (loop5): Directory bread(block 71) failed [ 369.423745][T11871] FAT-fs (loop5): Directory bread(block 72) failed [ 369.434316][T11871] FAT-fs (loop5): Directory bread(block 73) failed [ 369.576865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.899100][T11839] chnl_net:caif_netlink_parms(): no params data found [ 370.064182][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.181096][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.190556][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.202206][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.787147][ T51] Bluetooth: hci3: command tx timeout [ 371.127489][T11839] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.134251][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.168797][T11839] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.199911][T11839] bridge_slave_0: entered allmulticast mode [ 371.226865][T11839] bridge_slave_0: entered promiscuous mode [ 371.333545][T11560] hsr_slave_0: left promiscuous mode [ 371.348281][T11560] hsr_slave_1: left promiscuous mode [ 371.369636][T11560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.391750][T11560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.470345][T11560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.496295][T11560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.567372][T11560] bridge_slave_1: left allmulticast mode [ 371.573079][T11560] bridge_slave_1: left promiscuous mode [ 371.604354][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.644233][T11924] loop0: detected capacity change from 0 to 256 [ 371.653225][T11560] bridge_slave_0: left allmulticast mode [ 371.687996][T11560] bridge_slave_0: left promiscuous mode [ 371.735692][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.777346][T11924] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 372.051531][T11560] veth1_macvtap: left promiscuous mode [ 372.079560][T11560] veth0_macvtap: left promiscuous mode [ 372.085345][T11560] veth1_vlan: left promiscuous mode [ 372.107404][T11560] veth0_vlan: left promiscuous mode [ 372.154097][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.871690][ T51] Bluetooth: hci3: command tx timeout [ 373.036283][T11949] Bluetooth: hci0: unsupported parameter 178 [ 373.086480][T11949] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 373.244340][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.626010][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.251686][T11971] loop9: detected capacity change from 0 to 1024 [ 374.307998][T11971] EXT4-fs: Ignoring removed bh option [ 374.336284][ T9739] net_ratelimit: 1 callbacks suppressed [ 374.336297][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.370942][T11971] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 374.474292][T11971] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.633734][ T9796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.940529][ T51] Bluetooth: hci3: command tx timeout [ 375.343544][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.440396][T11989] loop9: detected capacity change from 0 to 1024 [ 375.476538][T11989] EXT4-fs: inline encryption not supported [ 375.505585][T11989] EXT4-fs: Ignoring removed nobh option [ 375.525341][T11989] EXT4-fs: Ignoring removed bh option [ 375.551734][T11989] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.663662][T11989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.897430][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.908694][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.917711][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.926560][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.968098][ T9796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.977756][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.068264][T11560] team0 (unregistering): Port device team_slave_1 removed [ 376.243925][T11997] loop0: detected capacity change from 0 to 1764 [ 376.331100][T11560] team0 (unregistering): Port device team_slave_0 removed [ 376.393128][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.499629][T11560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.659734][T11560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.185908][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.434018][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.607962][T11560] bond0 (unregistering): Released all slaves [ 377.816776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.843674][T11839] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.863114][T11839] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.883474][T11839] bridge_slave_1: entered allmulticast mode [ 377.906072][T11839] bridge_slave_1: entered promiscuous mode [ 377.982231][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 378.018789][T12007] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 378.052973][T12007] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 378.263968][T11839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.360808][T11839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.464355][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.483566][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.575062][T11839] team0: Port device team_slave_0 added [ 378.598993][T11839] team0: Port device team_slave_1 added [ 378.632396][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 378.687568][T12014] delete_channel: no stack [ 378.827053][T11839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.834064][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.955096][T11839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.006055][T11839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.041176][T11839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.150169][T11839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.533510][ T23] net_ratelimit: 2 callbacks suppressed [ 379.533525][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.780724][T11839] hsr_slave_0: entered promiscuous mode [ 379.848943][T12039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.877830][T11839] hsr_slave_1: entered promiscuous mode [ 379.917267][T12039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.931083][T12039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.970686][T11839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.017445][T11839] Cannot create hsr debugfs directory [ 380.217313][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.519953][T12053] loop0: detected capacity change from 0 to 1024 [ 380.543539][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.557411][T12053] ext4: Unknown parameter 'nojournal' [ 380.986176][T12059] loop9: detected capacity change from 0 to 164 [ 381.077553][T12059] rock: directory entry would overflow storage [ 381.101026][T12059] rock: sig=0x5252, size=5, remaining=3 [ 381.148826][T12059] isofs_fill_super: root inode is not a directory. Corrupted media? [ 381.641672][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.663620][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 381.668198][T11560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.684050][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.696719][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.740672][T12071] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.749819][T12071] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.758809][T12071] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.767618][T12071] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.783753][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'. [ 383.394774][T11839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.447197][T11839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.517489][T11839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 383.565369][T11839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 383.987524][T11839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.068683][T11839] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.122472][T12096] loop9: detected capacity change from 0 to 32768 [ 384.142208][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.149431][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.224745][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.231974][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.250416][T12096] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 384.305752][T12126] loop5: detected capacity change from 0 to 8192 [ 384.594389][T12096] XFS (loop9): Ending clean mount [ 384.636006][T12096] XFS (loop9): Quotacheck needed: Please wait. [ 384.776921][ T5830] net_ratelimit: 2 callbacks suppressed [ 384.776935][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.790708][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.883779][T12096] XFS (loop9): Quotacheck: Done. [ 385.034689][T12152] loop0: detected capacity change from 0 to 512 [ 385.143474][ T9796] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 385.177519][T12152] EXT4-fs: Ignoring removed bh option [ 385.264654][T12152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.313917][T12162] loop5: detected capacity change from 0 to 1024 [ 385.354351][T12162] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 385.368729][T12152] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.391499][T11839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.536478][T12162] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #3: block 2: comm syz.5.1579: lblock 2 mapped to illegal pblock 2 (length 1) [ 385.654321][T12162] Quota error (device loop5): write_blk: dquota write failed [ 385.673076][T11532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.682804][T12162] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 385.692477][T12162] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 385.702722][T12162] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.1579: Failed to acquire dquot type 0 [ 385.736841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.750337][T11839] veth0_vlan: entered promiscuous mode [ 385.787598][T11839] veth1_vlan: entered promiscuous mode [ 385.814437][T12162] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 2: comm syz.5.1579: lblock 2 mapped to illegal pblock 2 (length 1) [ 385.836960][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.905460][T12162] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 385.931164][T12162] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.1579: Failed to acquire dquot type 0 [ 386.008076][T12162] EXT4-fs error (device loop5): ext4_free_blocks:6692: comm syz.5.1579: Freeing blocks not in datazone - block = 0, count = 4096 [ 386.038510][T11839] veth0_macvtap: entered promiscuous mode [ 386.093974][T11839] veth1_macvtap: entered promiscuous mode [ 386.155585][T12162] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #3: block 2: comm syz.5.1579: lblock 2 mapped to illegal pblock 2 (length 1) [ 386.221540][T12162] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 386.232898][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.257441][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.266921][T12162] EXT4-fs error (device loop5): ext4_acquire_dquot:6949: comm syz.5.1579: Failed to acquire dquot type 0 [ 386.274700][T12162] EXT4-fs (loop5): 1 orphan inode deleted [ 386.290235][T12162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.373964][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.397089][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.447120][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.499849][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.545388][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.610702][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.622622][T12161] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 386.691051][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.736386][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.794466][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.863248][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.865518][T11839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.938264][T11839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.965827][ T8518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.982337][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.040128][T11839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.084384][T11839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.123079][T11839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.167126][T11839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.417096][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.425249][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.434255][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.450997][ T9259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.516603][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 387.555513][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.590966][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.697303][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.705183][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.716505][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 387.742529][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.787327][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.832939][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 387.863876][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.899187][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.914340][ T23] usb 6-1: config 0 descriptor?? [ 387.934923][ T23] hub 6-1:0.0: USB hub found [ 388.149641][ T23] hub 6-1:0.0: 1 port detected [ 388.163358][T12179] loop9: detected capacity change from 0 to 32768 [ 388.266584][T12179] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 388.289431][T12197] loop0: detected capacity change from 0 to 1024 [ 388.348067][T12197] EXT4-fs: Ignoring removed orlov option [ 388.440481][T12197] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 388.553603][T12197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.650843][T12179] XFS (loop9): Ending clean mount [ 388.725739][ T28] audit: type=1804 audit(1770432805.077:335): pid=12179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1583" name="/newroot/132/file0/bus" dev="loop9" ino=9289 res=1 errno=0 [ 388.798531][ T23] hub 6-1:0.0: activate --> -90 [ 388.906178][ T9796] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 388.941545][T11532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.022967][ T9259] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 389.024758][ T5810] usb 6-1: USB disconnect, device number 13 [ 390.007412][ T23] net_ratelimit: 1 callbacks suppressed [ 390.007427][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.155995][T12208] loop2: detected capacity change from 0 to 40427 [ 390.316453][T12208] F2FS-fs (loop2): Found nat_bits in checkpoint [ 390.536967][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.586927][T12208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 390.716458][T12208] syz.2.1587: attempt to access beyond end of device [ 390.716458][T12208] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 390.977823][T11839] syz-executor: attempt to access beyond end of device [ 390.977823][T11839] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 391.026735][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1588'. [ 391.049559][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.066515][T11839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 391.093101][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1588'. [ 391.177895][T12232] loop0: detected capacity change from 0 to 32768 [ 391.258669][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.307672][T12232] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 391.552074][T12232] (syz.0.1592,12232,0):ocfs2_change_extent_flag:5208 ERROR: Owner 17058 tried to clear 1 flags on an extent that didn't have them [ 391.561522][T12229] loop5: detected capacity change from 0 to 32768 [ 391.623964][T12232] (syz.0.1592,12232,0):ocfs2_mark_extent_written:5272 ERROR: status = -5 [ 391.651538][T12232] (syz.0.1592,12232,0):ocfs2_write_cluster:1163 ERROR: status = -5 [ 391.690174][T12232] (syz.0.1592,12232,0):ocfs2_write_cluster_by_desc:1248 ERROR: status = -5 [ 391.726731][T12232] (syz.0.1592,12232,1):ocfs2_write_begin_nolock:1820 ERROR: status = -5 [ 391.742736][T12229] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 391.761975][T12232] (syz.0.1592,12232,1):ocfs2_write_begin:1907 ERROR: status = -5 [ 392.066839][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.154708][T11532] ocfs2: Unmounting device (7,0) on (node local) [ 392.287366][T12229] XFS (loop5): Ending clean mount [ 392.334480][T12229] XFS (loop5): Quotacheck needed: Please wait. [ 392.456309][ T23] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 392.487572][T12229] XFS (loop5): Quotacheck: Done. [ 392.668720][ T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.726446][ T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.748935][ T8518] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 392.766677][ T23] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.837155][ T23] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.869785][T12276] loop0: detected capacity change from 0 to 4096 [ 392.892169][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.906610][T12276] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 392.940281][ T23] usb 10-1: config 0 descriptor?? [ 393.040353][T12276] ntfs3: loop0: Inode r=19 is not in use! [ 393.084197][T12276] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 393.120630][T12276] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 393.130221][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.184448][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.194167][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.213459][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.384511][ T23] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xd [ 393.456634][ T23] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 393.505162][ T23] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 393.724784][ T23] usb 10-1: USB disconnect, device number 9 [ 393.817584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.855497][T12284] fido_id[12284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 394.605487][T12309] loop0: detected capacity change from 0 to 1024 [ 394.758588][T12309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.980996][T12311] loop5: detected capacity change from 0 to 8192 [ 394.989652][T12316] syz.5.1608: attempt to access beyond end of device [ 394.989652][T12316] loop11: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 395.063915][T12316] SQUASHFS error: Failed to read block 0x0: -5 [ 395.097519][ T9] net_ratelimit: 5 callbacks suppressed [ 395.097534][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.127735][T11532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.184382][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.199985][T12311] loop5: p1 < > p3[EZD] [ 395.246159][T12311] loop5: p3 start 3238002688 is beyond EOD, truncated [ 395.689152][ T6316] udevd[6316]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 395.827816][ T5918] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 396.060937][ T5918] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 396.092008][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.131716][ T5918] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 396.166563][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 396.232525][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.240877][ T5918] usb 6-1: SerialNumber: syz [ 396.441026][T12344] loop2: detected capacity change from 0 to 128 [ 396.498098][ T5918] usb 6-1: 0:2 : does not exist [ 396.562845][ T5918] usb 6-1: USB disconnect, device number 14 [ 396.570254][T12344] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.631039][T12344] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 396.696517][ T5776] Bluetooth: hci4: command 0x1003 tx timeout [ 396.706543][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 396.729487][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.856995][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.010312][T11839] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.122871][T12360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.207457][T12360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.215933][T12360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.263425][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.295025][T12366] loop2: detected capacity change from 0 to 128 [ 397.657953][ T29] INFO: task syz-executor:5769 blocked for more than 143 seconds. [ 397.665845][ T29] Not tainted syzkaller #0 [ 397.713740][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.747154][ T29] task:syz-executor state:D stack:20528 pid:5769 ppid:1 flags:0x00004002 [ 397.777278][ T29] Call Trace: [ 397.780678][ T29] [ 397.783712][ T29] __schedule+0x1553/0x45a0 [ 397.793321][T12383] loop2: detected capacity change from 0 to 128 [ 397.807772][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 397.838181][T12383] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 397.856454][ T29] ? lock_chain_count+0x20/0x20 [ 397.865142][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 397.875307][ T29] ? asan.module_dtor+0x20/0x20 [ 397.897978][ T29] ? _raw_spin_unlock+0x40/0x40 [ 397.922743][ T29] ? prepare_to_wait_event+0x3db/0x470 [ 397.960045][ T29] ? prepare_to_wait_event+0x434/0x470 [ 397.967583][ T49] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 397.976072][ T29] schedule+0xbd/0x170 [ 397.982614][ T29] wb_wait_for_completion+0x173/0x2a0 [ 397.988323][ T49] FAT-fs (loop2): Filesystem has been set read-only [ 398.001035][ T29] ? __bpf_trace_writeback_inode_template+0x100/0x100 [ 398.008330][ T49] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 398.026009][ T29] ? wake_bit_function+0x200/0x200 [ 398.047868][ T29] sync_inodes_sb+0x1c9/0xa10 [ 398.053671][T12383] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 398.090758][ T29] ? filemap_fdatawrite_range+0x160/0x160 [ 398.116619][T12383] FAT-fs (loop2): Filesystem has been set read-only [ 398.121409][ T29] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 398.147805][ T29] ? nilfs_put_super+0x150/0x150 [ 398.158471][ T29] ? get_nr_dirty_inodes+0x1d4/0x220 [ 398.170654][ T29] sync_filesystem+0x171/0x220 [ 398.185198][ T29] generic_shutdown_super+0x6f/0x2b0 [ 398.191091][ T29] kill_block_super+0x44/0x90 [ 398.195920][ T29] deactivate_locked_super+0x97/0x100 [ 398.210391][ T29] cleanup_mnt+0x43b/0x4d0 [ 398.234992][ T29] task_work_run+0x1d4/0x260 [ 398.257521][ T29] ? task_work_cancel+0x220/0x220 [ 398.272738][ T29] ? do_exit+0x955/0x2460 [ 398.283734][ T29] ? kmem_cache_free+0xf8/0x270 [ 398.304752][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.315415][ T29] do_exit+0x95a/0x2460 [ 398.341962][ T29] ? put_task_struct+0xc0/0xc0 [ 398.363219][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 398.388905][ T29] ? lock_chain_count+0x20/0x20 [ 398.403140][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 398.426696][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 398.442928][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 398.455803][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.475175][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 398.493383][ T29] do_group_exit+0x21b/0x2d0 [ 398.506370][ T29] __x64_sys_exit_group+0x3f/0x40 [ 398.511463][ T29] do_syscall_64+0x55/0xa0 [ 398.530769][ T29] ? clear_bhb_loop+0x40/0x90 [ 398.546438][ T29] ? clear_bhb_loop+0x40/0x90 [ 398.557437][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.570572][ T29] RIP: 0033:0x7f756e39aeb9 [ 398.576731][ T29] RSP: 002b:00007fff3c327128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 398.603117][ T29] RAX: ffffffffffffffda RBX: 00007f756e4047ae RCX: 00007f756e39aeb9 [ 398.621391][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 398.634768][ T29] RBP: 000000000000000c R08: 0000000000000000 R09: 00007f756e40471f [ 398.653042][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3c3283e0 [ 398.673267][ T29] R13: 00007f756e40471f R14: 00005555717f14e8 R15: 00007fff3c3294b0 [ 398.687304][ T29] [ 398.690456][ T29] [ 398.690456][ T29] Showing all locks held in the system: [ 398.718951][ T29] 1 lock held by ksoftirqd/0/16: [ 398.746822][ T29] 1 lock held by khungtaskd/29: [ 398.792621][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 398.833003][ T29] 6 locks held by kworker/u4:4/59: [ 398.841309][ T29] 2 locks held by kworker/u4:7/1333: [ 398.860496][ T29] #0: ffff888140068138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 398.877282][ T29] #1: ffffc90004fb7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 398.904315][ T29] 2 locks held by getty/5524: [ 398.918226][ T29] #0: ffff88802d2d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 398.939359][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.946541][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 398.979902][ T29] 2 locks held by syz-executor/5769: [ 398.992200][ T29] #0: ffff88801eaee0e0 (&type->s_umount_key#79){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 399.023017][ T29] #1: ffff8880218487d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1ad/0xa10 [ 399.045789][ T29] 2 locks held by kworker/1:5/5918: [ 399.059114][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 399.086303][ T29] #1: ffffc90004a5fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 399.122672][ T29] 2 locks held by syz.0.1624/12376: [ 399.143898][ T29] #0: ffffffff8e3c0188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 399.165876][ T29] #1: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 399.191074][ T29] 4 locks held by kvm-nx-lpage-re/12379: [ 399.202449][ T29] #0: ffffffff8d15ba48 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x26/0xe0 [ 399.224285][ T29] #1: ffffffff8cfcd210 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x30 [ 399.244514][ T29] #2: ffffffff8d15bc30 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x30/0xe0 [ 399.269662][ T29] #3: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 399.292033][ T29] 4 locks held by dhcpcd-run-hook/12397: [ 399.327832][ T29] [ 399.352088][ T29] ============================================= [ 399.352088][ T29] [ 399.395563][ T29] NMI backtrace for cpu 0 [ 399.399987][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 399.407216][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.417321][ T29] Call Trace: [ 399.420639][ T29] [ 399.423685][ T29] dump_stack_lvl+0x18c/0x250 [ 399.428408][ T29] ? show_regs_print_info+0x20/0x20 [ 399.433692][ T29] ? load_image+0x400/0x400 [ 399.438241][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 399.443405][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 399.449601][ T29] ? _printk+0xde/0x130 [ 399.453798][ T29] ? load_image+0x400/0x400 [ 399.458340][ T29] ? load_image+0x400/0x400 [ 399.462882][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 399.469008][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 399.475037][ T29] watchdog+0xf3d/0xf80 [ 399.479251][ T29] ? watchdog+0x1e1/0xf80 [ 399.483734][ T29] kthread+0x2fa/0x390 [ 399.487837][ T29] ? hungtask_pm_notify+0x90/0x90 [ 399.492899][ T29] ? kthread_blkcg+0xd0/0xd0 [ 399.497523][ T29] ret_from_fork+0x48/0x80 [ 399.501982][ T29] ? kthread_blkcg+0xd0/0xd0 [ 399.506603][ T29] ret_from_fork_asm+0x11/0x20 [ 399.511416][ T29] [ 399.515857][ T29] Sending NMI from CPU 0 to CPUs 1: [ 399.521312][ C1] NMI backtrace for cpu 1 [ 399.521321][ C1] CPU: 1 PID: 12397 Comm: rm Not tainted syzkaller #0 [ 399.521335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.521343][ C1] RIP: 0010:lock_acquire+0xa/0x420 [ 399.521362][ C1] Code: f3 0f 1e fa 65 8b 05 6d 94 9b 7e a9 00 ff ff 00 0f 95 c0 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 00 4c 89 4c 24 [ 399.521374][ C1] RSP: 0000:ffffc9000cb679c8 EFLAGS: 00000246 [ 399.521387][ C1] RAX: 0000000000000002 RBX: ffffffff81ea412d RCX: 0000000000000002 [ 399.521396][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d1320a0 [ 399.521404][ C1] RBP: ffffc9000cb679d0 R08: 0000000000000000 R09: 0000000000000000 [ 399.521413][ C1] R10: dffffc0000000000 R11: fffff9400008035f R12: dffffc0000000000 [ 399.521424][ C1] R13: 800000001006b025 R14: 000000000001006b R15: ffff88813fff9040 [ 399.521434][ C1] FS: 00007f912bd28c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 399.521446][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.521455][ C1] CR2: 00007f912bf82d71 CR3: 000000006108a000 CR4: 00000000003526e0 [ 399.521468][ C1] Call Trace: [ 399.521473][ C1] [ 399.521478][ C1] pfn_valid+0xe9/0x420 [ 399.521496][ C1] ? pfn_valid+0xcd/0x420 [ 399.521513][ C1] page_table_check_set+0x25/0x6e0 [ 399.521539][ C1] set_pte_range+0x674/0x6a0 [ 399.521556][ C1] filemap_map_pages+0xeca/0x1980 [ 399.521576][ C1] ? filemap_map_pages+0x18e/0x1980 [ 399.521592][ C1] ? filemap_read_folio+0x760/0x760 [ 399.521613][ C1] handle_mm_fault+0x3b05/0x4c00 [ 399.521627][ C1] ? handle_mm_fault+0xe7/0x4c00 [ 399.521645][ C1] ? lock_vma_under_rcu+0x549/0x680 [ 399.521658][ C1] ? numa_migrate_prep+0x350/0x350 [ 399.521676][ C1] ? __bpf_trace_rseq_ip_fixup+0x240/0x240 [ 399.521696][ C1] ? do_user_addr_fault+0x1c3/0x12c0 [ 399.521714][ C1] do_user_addr_fault+0xac8/0x12c0 [ 399.521733][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.521754][ C1] exc_page_fault+0x64/0x100 [ 399.521768][ C1] ? clear_bhb_loop+0x40/0x90 [ 399.521786][ C1] asm_exc_page_fault+0x26/0x30 [ 399.521799][ C1] RIP: 0033:0x7f912be920d1 [ 399.521810][ C1] Code: ff ff 48 89 d0 e9 93 fe ff ff 4b 8d 04 3e e9 a6 fe ff ff 66 0f 1f 44 00 00 41 57 41 56 41 55 41 54 55 53 48 81 ec 18 01 00 00 <0f> b6 1e 84 db 0f 84 cc 01 00 00 44 0f b6 e3 48 89 f5 44 89 e6 e8 [ 399.521822][ C1] RSP: 002b:00007ffd7539b4f0 EFLAGS: 00010206 [ 399.521832][ C1] RAX: 000055b3c4b672a0 RBX: 000055b3c4b672a0 RCX: 00007ffd7539b5bf [ 399.521842][ C1] RDX: 0000000000000008 RSI: 00007f912bf82d71 RDI: 00007f912bdbd3af [ 399.521850][ C1] RBP: 000055b3c4b672a0 R08: 0000000000000000 R09: 0000000000000000 [ 399.521858][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f912bdbd3ae [ 399.521867][ C1] R13: 00007f912bdbd3ae R14: 0000000000000001 R15: 0000000000000000 [ 399.521882][ C1] [ 399.838585][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 399.845495][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 399.852722][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.862796][ T29] Call Trace: [ 399.866091][ T29] [ 399.869076][ T29] dump_stack_lvl+0x18c/0x250 [ 399.873798][ T29] ? show_regs_print_info+0x20/0x20 [ 399.879038][ T29] ? load_image+0x400/0x400 [ 399.883645][ T29] panic+0x2dc/0x730 [ 399.887580][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 399.893249][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 399.897779][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 399.903382][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 399.909580][ T29] watchdog+0xf7c/0xf80 [ 399.913771][ T29] ? watchdog+0x1e1/0xf80 [ 399.918139][ T29] kthread+0x2fa/0x390 [ 399.922232][ T29] ? hungtask_pm_notify+0x90/0x90 [ 399.927293][ T29] ? kthread_blkcg+0xd0/0xd0 [ 399.931906][ T29] ret_from_fork+0x48/0x80 [ 399.936354][ T29] ? kthread_blkcg+0xd0/0xd0 [ 399.940978][ T29] ret_from_fork_asm+0x11/0x20 [ 399.945784][ T29] [ 399.949419][ T29] Kernel Offset: disabled [ 399.953747][ T29] Rebooting in 86400 seconds..