last executing test programs: 6m51.92296044s ago: executing program 4 (id=49): setuid(0xee00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x4) 6m51.69952261s ago: executing program 4 (id=53): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) 6m51.52060897s ago: executing program 4 (id=58): r0 = eventfd2(0x10006, 0x800) io_setup(0xcb0, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x2}]) 6m51.143671268s ago: executing program 4 (id=64): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18) 6m50.89758816s ago: executing program 4 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x4) 6m50.368845077s ago: executing program 4 (id=74): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 6m49.828124334s ago: executing program 32 (id=74): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) 4m49.29881315s ago: executing program 0 (id=862): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, 0x0) 4m48.999459365s ago: executing program 0 (id=864): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 4m48.631090334s ago: executing program 0 (id=868): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x4000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 4m47.458757362s ago: executing program 0 (id=876): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4m46.119944559s ago: executing program 0 (id=882): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x4000000, &(0x7f0000000580)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @local}, 0x14) 2.265482597s ago: executing program 1 (id=2503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000001080)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e20, 0x0, @private1}, 0x1c) 2.20317202s ago: executing program 9 (id=2504): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2108c8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@usrjquota}, {@block_validity}, {@minixdf}, {@grpid}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.20255537s ago: executing program 2 (id=2514): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x0, 0x1000000b, 0xfffffffc, 0x10081, 0xffffffff}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 1.79357233s ago: executing program 8 (id=2505): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'macgaelic'}}, {}, {@uid}, {@nodecompose}, {@type={'type', 0x3d, "22219f18"}}, {@part={'part', 0x3d, 0x6}}]}, 0x20, 0x6f7, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200) 1.79264899s ago: executing program 2 (id=2516): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 1.79204523s ago: executing program 6 (id=2517): r0 = semget$private(0x0, 0x3, 0x1e9) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xd196, 0x1000}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)) 1.349314513s ago: executing program 9 (id=2506): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x40047f9, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xecc8d7afbea07913) 1.254256297s ago: executing program 8 (id=2507): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f0000000600)={[{@creator={'creator', 0x3d, "8d74db9c"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp855'}}, {@part={'part', 0x3d, 0xd7b}}, {}, {@uid}, {@gid}]}, 0x21, 0x6e8, &(0x7f0000001f80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380447b, 0x0, 0x0, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1.092992705s ago: executing program 1 (id=2508): unshare(0x6020400) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cgroup\x00') preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1000000000000252, 0x0, 0x0) 906.419455ms ago: executing program 9 (id=2509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)={0x400000000000030d}) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe170005"], 0x0) 820.629229ms ago: executing program 2 (id=2510): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') pread64(r0, &(0x7f0000000280)=""/142, 0x8e, 0x19a55d1a) pread64(r0, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) 805.76268ms ago: executing program 8 (id=2511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 683.261576ms ago: executing program 1 (id=2512): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) 490.718286ms ago: executing program 1 (id=2513): syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000000, &(0x7f0000000380), 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f0000000100)={0x8a0, 0x8, 0x7, 0x0, 0x68}) 381.714641ms ago: executing program 2 (id=2515): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x4000000, &(0x7f0000000580)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @local}, 0x14) 222.323529ms ago: executing program 6 (id=2518): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_mount_image$sysv(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRES32=r0, @ANYRES8, @ANYRES64, @ANYRES64], 0x0, 0x9eb7, &(0x7f000000c3c0)="$eJxEmnPw54j2tL8zO2vbtvdZ27Zt237W+4mNtW3btm3bNuat+d176z3/pJJKdfU53SeV6uSWAd46wNsGePsA7xjgnQO8a4B3D/CeAd47wPsGeP8AHxjggwN8aIAPD/CRAT46wMcG+PgAnxjgkwN8aoBPD/CZAT47wOcG+PwAXxjgiwN8aYAvD/CVAb46wNcG+PoA3xjgmwN8a4BvD/CdAb47wPcG+P4APxjghwP8aIAfD/CTAX46wM8G+PkAvxjglwP8aoBfD/CbAX47wO8G+P0AfxjgjwP8aYA/D/CXAf46wN8G+PsA/xjgnwP8a4B/D/CfAf47wJEDHApwWIDDAxwtwBEBjh7gGAGOGeBYAY4d4DgBjhvgeAGOH+AEAU4Y4EQBThzgJAFOGuBkAU4e4BQBThngVAFOHeA0AU4b4HQBTh/gDAHOGOBMAc4c4CwBzhrgbAHOHuAcAc4Z4FwBzh3gPAHOG+B8Ac4f4AIBLhjgQgES4MIBLhLgogEuFuDiAS4R4JIBLhXg0gEuE+CyAS4X4PIBrhDgigGuFODKAa4S4KoBrhbg6gGuEeCaAa4V4NoBrhPgugGuF+D6AW4Q4IYBbhTgxgFuEuCmAW4W4OYBbhHglgFuFeDWAW4T4LYBbhfg9gHuEOCOAe4U4M4B7hLgrgHuFuDuAe4R4J4B7hXg3gHuE+C+Ae4X4P4BHhDggQEeFODBwRgeEuChAR4W4OEBHhHgkQEeFeDRARrgMQEeG+BxAaON0v6EAE8M8KQATw5wEGAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgFzA0CvOUAE8N8LQATw/wjADPDPCsAM8O8JwAzw3wvADPD/CCAC8M8KIALw7wkgAvDfCyAC8P8IoArwzwqgCvDvCaAK8N8LoArw/whgBvDPCmAG8O8JYAbw3GGhoawtsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIdH7UE4NPToKG2/GPq/eiLAJ4MR/4f3dIDPjJrdf8rnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTATwP8LMDPA/wiwC8D/CrArwP8JsBvA/wuwO8D/CHAHwP8KcCfA/wlwF8D/C3A3wP8I8A/A/wrwL8D/CfAfwMcGeBQiMNCHB6O6htHhDh6iGOEOGaIY4U4dojjhDhuiOOFzD5+iBOEOGGIE4U4cYiThDhpiJOFOHmIU4Q4ZYhThTh1iNOEOG2I04U4/X9xZwxxphBnDnGWEGcNcbYQZw9xjhDnDHGuEOcOcZ4Q5w1xvhDnD3GBEBcMcaEQCXHhEBcJcdEQFwtx8RCXCHHJEJcKcekQlwlx2RCXC3H5EFcIccUQVwpx5RBXCXHVEFcLcfUQ1whxzRDXCnHtENcJcd0Q1wtx/RA3CHHDEDcKceMQNwlx0xA3C3HzELcIccsQtwpx6xC3CXHbELcLcfsQdwhxxxB3Gj40NEqHXULcNcTdQtw9xD1C3DPEvULcO8R9Qtw3xP1C3D/EA0I8MMSDQjw4xENCPDTEw0I8PMQjQjwyxKNCPDpEQzwmxGNDPC7E40M8IcQTQzwpxJNDHIQYhBiGGIX/3+dpiFmIeYhFiGWIVYh1iE2IbYhdiH2Ip4R4aoinhXh6iGeEeGaIZ4V4dojnhHhuiOeFeH6IF4R4YYgXhXhxiJeEeGmIl4V4eYhXhHhliFeFeHWI14R4bYjXhXh9iDeEeOMo7Tabd2jY0NDQLSHeGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iAyE+GOJDIT48yu9D+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X4fogfhPhhiB+F+HGIn4T4aYifhfh5iF+E+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hPhniH+F+HeI/4T4b4gjQxyKcFiEwyMcLcIREY4e4RgRjhnhWBGOHeE4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIREuHCES4S4aIRLhbh4hEuEeGSES4V4dIRLhPhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRERrhMREeG+FxER4f4QkRnhjhSRGeHOEgwiDCMMIowjjCJMI0wizCPMIiwjLCKsI6wibCNsIuwj7CUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbojG9NcLbIrw9wjsivDPCuyK8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLnInw+whcifDHClyJ8OcJXInw1wtcifD3CNyJ8M8K3Inw7wncifDfC9yJ8P8IPIvwwwo8i/DjCTyL8NMLPIvw8wi8i/DLCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcI/Ivwzwr8i/DvCfyL8N8KREQ7FOCzG4TGOFuOIGEePcYwYx4xxrBjHjnGcGMeNcbwYx49xghgnjHGiGCeOcZIYJ41xshgnj3GKGKeMcaoYp45xmhinjXG6GKePcYYYZ4xxphhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvviTCeePcYEYF4xxoRiJceEYF4lx0RgXi3HxGJeIcckYlxpjyKVjXCbGZWNcLsblY1whxhVjXCnGlWNcJcZVY1wtxtVjXCPGNWNcK8a1Y1wnxnVjXC/G9WPcIMYNY9woxo1j3CTGTWPcLMbNY9wixi1j3CrGrWPcJmbGbWPcLsbtY9whxh1j3CnGnWPcJcZdY9wtxt1j3CPGPWPcK8a9Y9wnxn1j3C/G/WM8IMYDYzwoxoNjPCTGQ2M8LMbDYzwixiNjPCrGo2M0xmNiPDbG42I8PsYTYjwxxpNiPDnGQYxBjGGMUYxxjEmMaYxZjHmMRYxljFWMdYxNjG2MXYx9jKfEeGqMp8V4eoxnxHhmjGfFeHaM58R4boznxXh+jBfEeGGMF8V4cYyXxHhpjJfFeHmMV8R4ZYxXxXh1jNfEeG2M18V4fYw3xHhjjDfFeHOMt8R4a4y3xXh7jHfEeGeMd8V4d4z3xHhvjPfFeH+MD8T4YIwPxfhwjI/E+GiMj8X4eIxPxPhkjE/F+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T45qh5D+HbMb4T47sxvhfj+zF+EOOHMX4U48cxfhLjpzF+FuPnMX4R45cxfhXj1zF+E+O3MX4X4/cx/hDjjzH+FOPPMf4S468x/hbj7zH+EeOfMf4V498x/hPjvzGOjHEowWEJDk9wtARHJDh6gmMkOGaCYyU4doLjJDhuguMlOH6CEyQ4YYITJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJTh9gjMkOGOCMyU4c4KzJDhrgrMlOHuCcyQ4Z4JzJTh3gvMkOG+C8yU4f4ILJLhgggslSIILJ7hIgosmuFiCiye4RIJLJrhUgksnuEyCyya4XILLJ7hCgismuFKCKye4SoKrJrhagqsnuEaCaya4VoJrJ7hOgusmuF6C6ye4QYIbJrhRghsnuEmCmya4WYKbJ7hFglsmuFWCWye4TYLbJrhdgtsnuEOCOya4U4I7J7hLgrsmuFuCuye4R4J7JrhXgnsnuE+C+ya4X4L7J3hAggcmeFCCByd4SIKHJnhYgocneESCRyZ4VIJHJ2iCxyR4bILHJXh8gickeGKCJyV4coKDBIMEwwSjBOMEkwTTBLME8wSLBMsEqwTrBJsE2wS7BPsET0nw1ARPS/D0BM9I8MwEz0rw7ATPSfDcBM9L8PwEL0jwwgQvSvDiBC8Z5cOhoaHLErw8wSsSvDLBqxK8OsFrErw2wesSvD7BGxK8McGbErw5wVsSvDXB2xK8PcE7ErwzwbsSvDvBexK8N8H7Erw/wQcSfDDBhxJ8OMFHEnw0wccSfDzBJxJ8MsGnEnw6wWcSfDbB5xJ8PsEXEnwxwZcSfDnBVxJ8NcHXEnw9wTcSfDPBtxJ8O8F3Enw3wfcSfD/BDxL8MMGPEvw4wU8S/DTBzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEvw1wd8S/D3BPxL8M8G/Evw7wX8S/DfBkQkOpTgsxeEpjpbiiBRHT3GMFMdMcawUx05xnBTHTXG8FMdPcYIUJ0xxohQnTnGSFCdNcbIUJ09xihSnTHGqFKdOcZoUp01xuhSnT3GGFGdMcaYUZ05xlhRnTXG2FGdPcY4U50xxrhTnTnGeFOdNcb4U509xgRQXTHGhFElx4RQXSXHRFBdLcfEUl0hxyRSXSnHpFJdJcdkUl0tx+RRXSHHFFFdKceUUV0lx1RRXS3H1FNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLFLdKcesUt0lx2xSTFLdPcYcUd0xxpxR3TnGXFHdNcbcUd09xjxT3THGvFPdOcZ8U901xvxT3T/GAFA9M8aAUD07xkBQPTfGwFA9P8YgUj0zxqBSPTtEUj0nx2BSPS/H4FE9I8cQUT0rx5BQHKQYphilGKcb/5ZummKWYp1ikWKZYpVin2KTYptil2Kd4SoqnpnhaiqeneEaKZ6Z4Vopnp3hOiuemeF6K56d4QYoXpnhRiheneEmKl6Z4WYqXp3hFilemeFWKV6d4TYrXpnhditeneEOKN6Z4U4o3p3hLiremeFuKt6d4R4p3pnhXineneE+K96Z4X4r3p/hAig+m+FCKD6f4SIqPpvhYio+n+ESKT6b4VIpPp/hMis+mOHLkyJHPp/hCii+m+FKKL6f4Soqvpvhaiq+n+EaKb6b4Vopvp/hOiu+m+F6K76f4QYofpvhRih+n+EmKn6b4WYqfp/hFil+m+FWKX6f4TYrfpvhdit+n+EOKP6b4U4o/p/hLir+m+FuKv6f4R4p/pvhXin+n+E+K/47in+JQhsMyHJ7haBmOyHD0DMfIcMwMx8pw7AzHyXDcDMfLcPwMJ8hwwgwnynDiDCfJcNIMJ8tw8gynyHDKDKfKcOoMp8lw2gyny3D6DGfIcMYMZ8pw5gxnGQ1nzXC2DGfPcI4M58yHhkbxmzvDeTKcN8P5Mpw/wwUyXDDDhTIkw4UzXCTDRTNcLMPFM1wiwyUzXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw7UzXCfDdTNcL8P1M9wgww0z3CjDjTPcJMNNM9xs1PXjhoa2yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AzN8JgMj83wuAyPz/CEDE/M8KQMT85wkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+F5GZ6f4QUZXpjhRRlD/8sbL83wsgwvz/CKDK/M8KqMkVdneE2G12Z4XYbXZ4wY5ZEbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDxzN8IsMnM3wqw6czfCbDZzN8LsPnM3whwxczfCnDlzN8JcNXM3wtw9czfCPDNzN8K8O3M3wnw3czfC/D9zP8IMMPM/wow48z/CTDP0f+pz7P8IsMv8zwqwy/zvCb7D/fIr7L8PsMf8jwxwx/yvDnDH/J8NcMf8vw9wz/GIWX4V8Z/p3hPxn+m+HIDIdyHJbj8BxHy3FEjqPnOEaOY+Y4Vo5j5zhOjuPmOF6O4+c4QY4T5jhRjhPnOEmOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4Rz5q/3GuHOfOcZ4c581xvhznz3GBHBfMcaEcyXHhHBfJcdEcF8tx8RyXyHHJHJfKcekcl8lx2RyXy3H5HFfIccUcV8px5RxXyXHVHFfLcfUc18hxzRzXynHtHNfJcd0c18tx/Rw3yHHDHDfKceMcN8lx0xw3y3HzHLfIccsct8px6xy3yXHbHLfLcfscd8hxxxx3ynHnHHfJcdccd8tx9xz3yHHPHPfKce8c98lx3xz3y3H/HA/I8cAcD8rx4BwPyfHQHA/L8fAcj8jxyByPyvHoHM3xmByPzfG4HI/P8YQcT8zxpBxPznGQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY5/jKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pvjfTnen+MDOT6Y40M5PpzjIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fvjHSD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/ynFooqGhX3L8Ncffcvw9xz9y/DPHv3L8O8d/cvw3x5Gj7i9wWIHDCxytwBEFjl7gGAWOWeBYBY5d4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgVS4MIFLlLgogUuVuDiBS5R4JIFLlXg0gUuUzA0qt/lCly+wBUKXLHAlQpcucBVCly1wNUKXL3ANQpcs8C1Cly7wHUKXLfA9Qpcv8ANCtywwI0K3LjATQrctMDNCty8wC0K3LLArQrcusBtCty2wO0K3L7AHQrcscCdCty5wF0K3LXA3QrcvcA9CtyzwL0K3LvAfQrct8D9Cty/wAMKPLDAgwo8uMBDCjy0wMMKPLzAI4r/vKOOHDny+KMLtMBjCjy2wOMKPL7AEwo8scCTCjy5wEGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYGnFHhqgacVeHqBZxR4ZoFnFXh2gecUeG6B5xV4foEXFHhhgRcVeHGBlxR4aYGXFXh5gVcUeGWBVxV4dYHXFHhtgdcVeH2BNxR4Y4E3FXhzgbcUeGuBtxV4e4F3FHhngXcVeHeB9xR4b4H3FXh/gQ8U+GCBDxX4cIGPFPhogY8V+HiBTxT4ZIFPFfh0gc8U+GyBzxX4fIEvFPhigS8V+HKBrxT4aoGvFfh6gW8U+GaBbxX4doHvFPhuge8V+H6BHxT4YYEfFfhxgZ8U+GmBnxX4eYFfFPhlgV8V+HWB3xT4bYHfFfh9gT8U+GOBPxX4c4G/FPhrgb8V+HuBfxT4Z4F/Ffh3gf8U+O8obxQ4VOKwEoeXOFqJI0ocvcQxShyzxLFKHLvEcUoct8TxShy/xAlKnLDEiUqcuMRJSpy0xMlKnLzEKUqcssSpSpy6xGlKnLbE6UqcvsQZSpyxxJlKnLnEWUqctcTZSpy9xDlKnLPEuUqcu8R5Spy3xPlKnL/EBUpcsMSFSqTEhUtcpMRFS1ysxMVLXKLEJUtcqsSlS1ymxGVLXK7E5UtcocQVS1ypxJVLXKXEVUtcrcTVS1yjxDVLXKvEtUtcp8R1S1yvxPVL3KDEDUvcqMSNS9ykxE1L3KzEzUvcosQtS9yqxK1L3KbEbUvcrsTtS9yhHOaOJe5U4s4l7lLiriXuVuLuJe5R4p4l7lXi3iXuU+K+Je5X4v4lHlDigSUeVOLBJR5S4qElHlbi4SUeUeKRJR5V4tElWuIxJR5b4nElHl/iCSWeWOJJJZ5c4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0r8sMSPSvy4xE9K/LTEz0r8vMQvSvyyxK9K/LrEb0r8tsTvSvy+xB9K/LHEn0r8ucRfSvy1xN9K/L3EP0r8s8S/Svy7xH9K/LfEkSUOVTiswuEVjlbhiApHr3CMCsescKwKx65wnArHrXC8CsevcIIKJ6xwogonrnCSCietcLIKJ69wigqnrHCqCqeucJoKp61wugqnr3CGCmesxhqaqcKZK5ylwlkrnK3C2Suco8I5K5yrwrkrnKfCeSucr8L5K1ygwgUrXKhCKly4wkUqXLTCxSpcvMIlKlyywqWGRgyN6nOZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67QCo+p8NgKj6vw+ApPqPDECk+q8OQKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1qN8MoRthV2FfYWnVHhqhadVeHqFZ1R4ZoVnVXh2hedUeG6F51V4foUXVHhhhRdVeHGFl1R4aYWXVXh5hVdUeGWFV1V4dYXXVHhthddVeH2FN1R4Y4U3VXhzhbdUeGuFt1V4e4V3VHhnhXdVeHeF91R4b4X3VXh/hQ9U+GCFD1X4cIWPVPhohY9V+HiFT1T4ZIVPVfh0hc9U+GyFI8ccGnq+whcqfLHClyp8ucJXKny1wtcqfL3CNyp8s8K3Kny7wncqfLfC9yp8v8IPKvywwo8q/LjCTyr8tMLPKvy8wi8q/LLCryr8usJvKvy2wu8q/L7CHyr8scKfKvy5wl8q/LXC3yr8vcI/Kvyzwr8q/LvCfyr8dxT/CodqHFbj8BpHq3FEjaPXOEaNY9Y4Vo1j1zhOjePWOF6N49c4QY0T1jhRjRPXOEmNk9Y4WY2T1zhFjVPWOFWNU9c4TY3T1jhdjdPXOEONM9Y4U40z1zhLjbPWOFuNs9c4R41z1jhXjXPXOE+N89Y4X43z17hAjQvWuFCNjOphaGhokRoXrXGxGhevcYkal6xxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GncfNuyEoSHcs8a9aty7xn1q3LfG/Wrcv8YDajywxoNqPLjGQ2o8tMbDajy8xiNqPLLGo2o8ukZrPKbGY2s8rsbjazyhxhNrPKnGk2sc1BjUGNYY1RjXmNSY1pjVmNdY1Iz4X05X19jU2NbY1djXeEqNp9Z4Wo2n13hGjWfWeFaNZ9d4To3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1nhVjVfXeE2N19Z4XY3X13hDjTfWeFONN9d4S4231sw0it/tNd5R45013lXj3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPnNX5R45f/3c2va/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxj9r/KvGv2v8p8Z/axxZ41CDwxoc3uBoDY5ocPQGx2hwzAbHanDsBsdpcNwGx2tw/AYnaHDCBidqcOIGJ2lw0gYna3DyBqdocMoGp2pW/q9VcNoGp2tw+gZnaHDGBmdqcOYGZ2lw1gZna3D2BudocM4G52pw7gbnaXDeBudrcP4GF2hwwQYXapAGF25wkQYXbXCxBhdvcIkGl2xwqQaXbnCZBpdtcLkGlx+F+QCu2OBKDa7c4CoNrtrgag2u3uAaDa7Z4FoNrt3gOg2u2+B6Da7f4AYNbtjgRg1u3OAmDW7a4GYNbt7gFg1u2eBWDW7d4DYNbtvgdg1u3+AODe7Y4E4N7tzgLg3u2uBuDe7e4B4N7tngXg3u3eA+De7b4H4N7t/gAQ0e2OBBDR7c4CENHtrgYQ0e3uARDR7Z4FENHt2gDR7T4LENHtfg8Q2e0OCJDZ7U4MkNDhoMGgwbjBqMG0waTBvMGswbLBosG6warBtsGmwbHPnXf8KGUxo8tcHTGjy9wTMa/F+wf3aD5zR4boPnNXh+gxc0eGGDFzV48Qi8pMFLG7yswcsbRv73J2SvavDqBq9p8NoGr2vw+gZvaBjzf8+jmxu8pcFbG7ytwdsbvKPBOxu8q8G7G7ynwXsbvK/B+xt8oMEHG3yowYcbfKTBRxt8rMHHG3yiwScbfKrBpxt8psFnG3yuwecbfKHBFxt8qcGXG3ylwVcbfK3B1xt8o8E3G3yrwbcbfKfBdxt8r8H3G/ygwQ8b/KjBjxv8pGH4qL38rMHPG/yiwS8b/KrBrxv8psFvG/yuwe8b/KHBHxv8qcGfG/ylwV8b/K3B3xv8o8E/G/yrwb8b/KfBf0cMOXKULi0Oa3F4i6O1OKLF0Vsco8UxWxxr1HHkhP+ZbovjtTh+ixOMHPl/5xO1OHGLk7Q4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztThzi7O0OGvL8FEazt7iHC3O2eJcLc7d4jwtztvifC3O3+ICLS7Y4kIt0uLCLS7S4qItLtbi4i0u0eKSLS7V4tItLtPisi0u1+LyLa7Q4ootrtTiyi2u0uKqLa7W4uotrtHimi2u1eLaLa7T4rotrtfi+i1u0OKGLW7U4sYtbtLipi1u1uLmLW7R4pYtbtXi1i1u0+K2LW7X4vYt7tDiji3u1OLOLe7S4q4t7tbi7i3u0eKeLe7V4t4t7tPivi3u1+L+LR7Q4oEtHtTiwS0e0uKhLR7W4uEtHtHikS0e1eLRLdriMS0e2+JxLR7f4gktntjiSS2e3OKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7FU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Wry7xXtavLfF+1q8v8UHWnywxYdafLjFR1p8tMXHWny8xSdafLLFp1p8usVnWny2xedafL7FF1p8scWXWny5xVdafLXF11p8vcU3WnyzxbdafLvFd1p8t8X3Wny/xQ9a/LDFj1r8uMVPWvy0xc9a/LzFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xZEtDnU4rMPhHY7W4YgOR+9wjA7H7HCsDsfucJwOx+1wvA7H73CCDifscKIOJ+5wkg4n7XCyDifvcIoOp+xwqg6n7nCaDqftcLoOp+9whg5n7HCmDmfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ7pcOEOF+lw0Q4X63DxDpfocMkOl+pw6Q6X6XDZDpfrcPkOV+hwxQ5X6nDlDlfpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNthQ27X4fYd7tDhjh3u1OHOHe7S4a4d7tbh7h3u0eGeHe7V4d4d7tPhvh3u1+H+HR7Q4YEdHtThwR0e0uGhHR7W4eEdHtHhkR0e1eHRHdrhMR0e2+FxHR7f4QkdntjhSR2e3OGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77DUzo8tcPTOjy9wzM6PLPDszo8u8NzOjy3w/M6PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDazq8tsPrOry+wxs6vLHDmzq8ucNbOry1w9s6vL3DOzq8s8O7Ory7w3s6vLfD+zq8v8MHOnyww4c6fLjDRzp8tMPHOny8wyc6fLLDpzp8usNnOny2w+c6fL7DFzp8scOXOny5w1c6fLXD1zp8vcM3Onyzw7c6fLvDdzp8t8P3Ony/ww86/LDDjzr8uMNPOvy0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzr8u8N/Ovy3w5EdDvU4rMfhPY7W44geR+9xjB7H7HGsHsfucZwex+1xvB7H73GCHifscaIeJ+5xkh4n7XGyHifvcYoep+xxqh6n7nGaHqftcboep+9xhh5n7HGmHmfucZYeZ+1xth5n73GOHufsca4e5+5xnh7n7XG+HufvcYEeF+xxoR4Zjgv3uEiPi/a4WI+L97hEj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uFqPq/e4Ro9r9rhWj2v3uE6P6/a4Xo/r97hBjxv2uFGPG/e4SY+b9rhZj5v3uEWPW/a4VY9b97hNj9vOhNv1uH2PO/S4Y4879bhzj7v0uGuPu/X8ObLHPXrcs8e9ety7x3163LfH/Xrcv8cDejxwjKGhURoe3OMhPR7a42E9Ht7jET0e2eNRPR7doz0e0+OxPR7X4/E9ntDjiT2e1OPJPQ56DHoMe4x6jHtMekx7zHrMeyx6LHuseqx7bHpse+x67Hs8pcdTezytx9N7PKPHM3s8q8ezezynx3N7PK/H83u8oMcLe7yox4t7vKTHS3u8rMfLe7yixyt7vKrHq3u8psdre7yux+t7vKHHG3u8qcebe7ylx1t7vK3H23u8o8c7e7yrx7t7vKfHe3u8r8f7e3ygxwd7fKjHh3t8pMdHe3ysx8d7fKLHJ3t8qsene3ymx2d7fK7H53t8occXh/6jw8s9vtLjqz2+1uPrPb7R45s9vtXj2z2+0+O7Pb7X4/s9ftDjhz1+1OPHPX7S46c9ftbj5z3/j6hzDhr8aNb27maz2Y1t28kV27Zt275im8/PxhPbtm3btrH7Vd7vPefM31M9PXN3Tffd1T3jFwP45QB+NYBfD+A3A/jtAH43gN8P4A8D+OMA/jSAPw/gLwP46wD+NoC/D+AfA/jnAP41gH8P4D8DOHoA/7WxIQEODXBYgGMFODzAsQMcEeA4AY4McFSA4wY4XoDjBzhBgBMGOFGAEwc4SYCTBjhZgJMHOEWAUwY4VYBTBzhNgNMGOF2A0wc4Q4AzBjhTgDMHjPxXh1kDnC3A2QOcI8A5A5wrwLkDnCfAeQOcL8D5A1wgwAUDXCjAhQMkwEUCXDTAxQJcPMAlAlwywKUCXDrAZQJcNsDlAlw+wBUCXDHAlQJcOcBVAlw1wNUCXD3ANQJcM8C1Alw7wHUCXDfA9QJcP8ANAtwwwI0C3DjATQLcNMDNAtw8wC0C3DLArQLcOsBtAtw2wO0C3D7AHQLcMcCdAtw5wF0C3DXA3QLcPcA9AtwzwL0C3DvAfQLcN8D9Atw/wAMCPDDAgwI8OMBDAjw0wMMCPDzAIwI8MjhxyFEBHh3gMQEa4LEBHhfg8QGeEOCJAZ4U4MkBnhLgqQGeFuDpAZ4R4JkBnhXg2QGeE+C5J/yXaQd4QYAXBnhRgBcHeEmAAwEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2AQ4GeGmAlwV4eYBXBHhlgFcFeHXA2P/D9a8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAO8K8O4A7wnw3gDvC/D+AB8I8MEAHwrw4QAfCfDRAB8L8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8JcHSAYwIcEuLQEIeFOFaIw0McO8QRIY4T4sgQR4U4bojjhTh+iBOEOGGIE4U4cYiThDhpiJOFOHmIU4Q4ZYhThTh1iNOEOG2I04U4fYgzhDhjiDOFOHOIs4Q4a4izhTh7iHOEOGeIc4U4d4jzhDhviPOFOH+IC4S4YIgLhbhwiIS4SIiLhrhYiIuHuESIS4a4VIhLh7hMiMuGuFw46n/zkSuGuFKIK4e4SoirhrhaiKuHuEaIa4a4Vohrh7hOiOuGuF6I64e4QYgbhrhRiBuHuEmIm4a4WYibh7hFiFuGuFWIW4e4TYjbhrhdiNuHuEOIO4a4U4g7h7hLiLuGuFuIu4e4R4h7hrhXiHuHuE+I+4a4X4j7h3hAiAeGeFCIB4d4SIiHhnhYiIeHeESIR4Z4VIhHh3hMiIZ4bIjHhXh8iCeEeGKIJ4V4coinhHhqiKeFeHqIZ4R4ZohnhXh2iOeEeG6I54V4fogXhHhhiBeFeHGIl4Q4EGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4mCIl4Z4WYiXh3hFiFeGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIQ553rDtCvDPEu0K8O8R7Qrw3xPtCvD/EB0J8MMSHQnw4xEdCfDTEx0J8PMQnQnwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE98L/3GV+EOKHIX4U4schfhLipyF+FuLn4VC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8JcXSIY/49nwiHRjgswrEiHB7h2BGOiHCcCEdGOCrCcSMcL8LxI5wgwgkjnCjCiSOcJMJJI5wswskjnCLCKSOcKsKpI5wmwmkjnC7C6SOcIcIZI5wpwpkjnCXCWSOcLcLZI5wjwjkjnCvCuSOcJ8J5I5wvwvkjXCDCBSNcKMKFIyTCRSJcNMLFIlw8wiUiXDLCpSJcOsJlIlw2wuUiXD7CFSJcMcKVIlw5wlUiXDXC1SJcPcI1IlwzwrUiXDvCdSJcN8L1Ilw/wg0i3DDCjSLcOMJNItw0ws0i3DzCLSLcMsKtItw6wm0i3DbC7SLcPsIdItwxwp0i3DnCXSLcNcLdItw9wj0i3DPCvSLcO8J9Itw3wv0i3D/CAyI8MMKDIjw4wkMiPDTCwyI8PMIjIjwywqMiPDrCYyI0wmMjPC7C4yM8IcITIzwpwpMjPCXCUyM8LcLTIzwjwjMjPCvCsyM8J8K/IjwvwvMjvCDCCyO8KMKLI7wkwoEIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wgHI7w0wssivDzCKyK8MsKrIrw6wmsivDbC6yK8PsIbIrwxwpsivDnCWyK8NcLbIrw9wjsivDPCuyK8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCx6IR//ETT0T4ZIRPRfh0hM9E+GyEz0X4fDTsP3NejPClCF+O8JUIX43wtQhfj/CNCN+M8K0I347wnQjfjfC9CN+P8IMIP4zwowg/jvCTCD+N8LMIP4/wiwi/jPCrCL+O8JsIv43wuwi/j/CHCH+M8KcIf47wlwh/jfC3CH+P8I8I//wvdn9H+E+EoyMcE+GQGIfGOCzGsWIcHuPYMY6IcZwYR8Y4KsZxYxwvxvFjnCDGCWOcKMaJY5wk/mDIpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjES4yIxLhrjYjEuHuMSMS4Z41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbh/jDjHuGONOMe4c4y4x7hrjbjHuHuMeMe4Z414x7h3jPjHuG+N+Me4f4wExHhjjQTEeHOMhMR4a42ExHh7jETEeGeNRMR4d4zExGuOxMR4X4/ExnhDjiTGeFOPJMZ4S46kxnhbj6TGeEeOZMZ4V49kxnhPjuTGeF+P5MV4Q44UxXhTjxTFeEuNAjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MgzFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjjQzE+HOMjMT4a42MxPh7jEzE+GeNTMT4d4zMxPhvjczE+H+MLMb4Y40sxvhzjKzG+GuNrMb4e4xsxvhnjWzG+HeM7Mb4b43sxvh/jBzF+GONHMX4c4ycxfhrjZzF+HuMXMX4Z41cxfh3jNzF+G+N3MX4f4w8x/hjjTzH+HOMvMf4a428x/h7jHzH+GeNfMf4d4z8xjo5xTIxDEhya4LAEx0pweIJjJzgiwXESHJngqATHTXC8ZJL/jZ0nTHCiBCdOcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF06QBBdJcNEEF0tw8QSXSHDJBJdKcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J0ASPTfC4BI9P8IQET0zwpARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQHEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTHEzw0gQvS/DyBK9I8MoEr0rw6gSvSfDaBK9L8PoEb0jwxgRvSvDmBG9J8NYEb0vw9gTvSPDOBO9K8O4E70nw3gTvS/D+BB9I8MEEH0rw4QQfSfDRBB9L8PEEn0jwyQSfSvDpBJ9J8NkEn0vw+QRfSP6vb/HlBF9J8NUEX0vw9QTfSPDNBN9K8O0E30nw3QTfS/D9BD9I8MMEP0rw4wQ/SfDTBD9L8PMEv0jwywS/SvDrBL9J8NsEv0vw+wR/SPDHBH9K8OcEf0nw1wR/S/D3BP9I8M8E/0rw7wT/SXB0gmMSHJLi0BSHpThWisNTHDvFESmOk+LIFEelOG6K46U4fooTpDhhihOlOHGK64wcMmTSFCdLcfIUp0hxyhSnSnHqFKdJcdoUp0tx+hRnSHHGFGdKceYUZ0lx1hRnGzHE2VOcI8U5U5wrxblTnCfFeVOcbwjOn+ICKS6Y4kIpLpwiKS6S4qIpLpbi4ikukeKSKS6V4tIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLa/+4xxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmRVM8NsXjUjw+xRNSPDHFk1I8OcVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSPDfF81I8P8ULUrwwxYtSvDjFS1IcSDFIMUwxSjFOMUkxTTFLMU+xSLFMsUqxTrFJsU2xS7FPcTDFS9PrvSzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8W7U7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8XRKY5JcUiGQzMcluFYGQ7PcOwMR2Q4ToYjMxyV4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhmS4SIZLprhYhkunuESGS6Z4VIZLp3hMhkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbtkJ7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGZrhsRkel+HxGZ6Q4YkZnpThyRmekuGpGZ6W4ekZnpHhmRmeleHZGZ6T4bkZnpfh+RlekOGFGV6U4cUZXpLhQIZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ9hoMZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/GY7OcEyGQ3IcmuOwHMfKcXiOY+c4Isdx8pUcmeOoHMfNcbwcx89xghwnzHGiHCfOcZIcJ81xshwnz3GKHKfMcaocp85xmhynzXG6HKfPcYYcZ8xxphxnznGWHGfNcbYcZ89xjhznzHGuHOfOcZ4c581xvhznz3GBHBfMcaEcF86RHBfJcdEcF8tx8RyXyHHJHJfKcekcl8lx2RyXy3H5HFfIccUcV8px5RxXyXHVHFfLcfUc18hxzRzXynHtHNfJcd0c18tx/Rw3yHHDHDfKceMcN8lx0xw3y3HznKH/LZB3qxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8ZgczfHYHI/L8fgcT8jxxBxPyvHkHE/J8dQcT8vx9BzPyPHMHM/KccyY0WPOyfHcHM/L8fwcL8jxwhwvyvHiHC/JcSDHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsfBHC/N8bIcL8/xihyvzPGqHK/O8Zocr83xuhyvz/GGHG/M8aYcb87xlhxvzfG2HG/P8Y4c78zxrhzvzvGeHO/N8b4c78/xgRwfzPGhHB/O8ZEcH83xsRwfz/GJHJ/M8akcn87xmRyfzfG5HJ/P8YUcX8zxpRxfzvGVHF/N8bUcX8/xjRzfzPGtHN/O8Z0c383xvRzfz/GDHD/M8aMcP87xkxw/zfGzHD/P8Yscv8zxqxy/zvGbHL/N8bscv8/xhxx/zPGnHH/O8Zccf83xtxx/z/GPHP/M8a8c/87xnxxH/4tpjkMKHFrgsALHKnB4gWMXOKLAcQocWeCoAsctcLwCxy9wggInLHCiAicucJICJy1wsgInL3CKAqcscKoCpy5wmgKnLXC6AqcvcIYCZyxwpgJnLnCWAmctcLYCZy9wjgLnLHCuAucucJ4C5y1wvgLnL3CBAhcscKECFy6QAhcpcNECFytw8QKXKHDJApcqcOkClylw2QKXK3D5AlcocMUCVypw5QJXKXDVAlcrcPUC1yhwzQLXKnDtAtcpcN0C1ytw/QI3KHDDAjcqcOMCNylw0wI3K3DzArcocMsCtypw6wK3KXDbArcrcPsCdyhwxwJ3Khj6P9xx1wJ3K3D3AvcocM8C9ypw7wL3KXDfAvcrcP8CDyjwwAIPKvDgAg8p8NACDyvw8AKPKPDIAo8q8OgCjynQAo8t8LgCjy/whAJPLPCkAk8u8JQCTy3wtAJPL/CMAs8s8KwCzy7wnALPLfC8As8v8IICLyzwogIvLvCSAgcKDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7AscLPDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8qGHZzgbcUeGuBtxV4e4F3FHhngXcVeHeB9xR4b4H3FXh/8f97x/4dDxX4cIGPFPhogY8V+HiBTxT4ZIFPFfh0gc8U+GyBzxX4fIEvFPhigS8V+HKBrxT4aoGvFfh6gW8U+GaBbxX4doHvFPhuge8V+H6BHxT4YYEfFfhxgZ8U+GmBnxX4eYFfFPhlgV8V+HWB3xT4bYHfFfh9gT8U+GOBPxX4c4G/FPhrgb8V+HuBfxT4Z4F/Ffh3gf8UOLrAMQUOKXFoicNKHKvE4SWOXeKIEscpcWSJo0oct8TxShy/xAlKnLDEiUqcuMRJSpy0xMlKnLzEKUqcssSpSpy6xGlKnHYUTlfi9CXOUOKMJc5U4swlzlLirCXOVuLsJc5R4pwlzlXi3CXOU+K8Jc5X4vwlLlDigiUuVOLCJVLiIiUuWuJiJS5e4hIlLlniUiUuXeIyJS5b4nIlLl/iCiWuWOJKJa5c4iolrlriaiWuXuIaJa5Z4lolrl3iOiWuW+J6Ja5f4gYlbljiRiVuXOImJW5a4mYlbl7iFiVuWeJWJW5d4jYlblvidiVuX+IOJe5Y4k4l7lziLiXuWuJuJe7+LwZDhgzZs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLEo0o8usRjSrTEY0s8rsTjSzyhxBNLPKnEk0s8pcRTSzytxNNLPKPEM0s8q8SzSzynxHNLPK/E80u8oMQLS7yoxItLvKTEgRKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7EgdLvLTEy0q8vMQrSryyxKtKvLrEa0q8tsTrSry+xBtKvLHEm8r/+6/g1hJvK/H2Eu8o8c4S7yrx7hLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8q8ekSnynx2RKfOxGfL/GFEl8s8aUSXy7xlRJfLfG1El8v8Y0S3yzxrRLfLvGdEt8t8b0S3y/xgxI/LPGjEj8u8ZMSPy3xsxI/L/GLEr8s8asSvy7xmxK/LfG7csyY/8nH/1jiTyX+XOIvJf5a4m8l/l7iHyX+WeJfJf5d4j8lji5xTIlDKhxa4bAKx6pweIVjVziiwnEqHFnhqArHrXC8CsevcIIKJ6xwogonrnCSCietcLIKJ69wigqnrHCqCqeucJoKp61wun/lDRkyZIYKZ6xwpgpnrnCWCmetcLYKZ69wjgrnrHCuCueucJ4K561wvgrnr3CBChescKEKF66QChepcNHq/78bu3iFS1S4ZIVLVbh0hctUuGyFy1W4fIUrVLhihStVuHKFq1S4aoWrVbh6hWtUuGaFa1W4doXrVLhuhetVuH6FG1S4YYUbVbhxhZtUuGmFm1W4eYVbVLhlhVtVuHWF21S4bYXbVbh9hTtUuGOFO1W4c4W7VLhrhbtVuHuFe1S4Z4V7Vbh3hftUuG+F+1W4f4UHVHhghQdVeHCFh1R4aIWHVXh4hUdUeGSFR1V4dIXHVGiFx1Z4XIXHV3hChSdWeFKFJ1d4SoWnVnhahadXeEaFZ1Z4VoVnV3hOhedWeF6F51d4QYUXVnhRhRdXeEmFAxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FQ5WeGmFl1V4eYVXVHhlhVdVeHWF11R4bYXXVXh9hTdUeGOFN1V4c4W3VHhrhbdVeHuFd1R4Z4V3VXh3hfdUeG+F91V4f4UPVPhghQ9V+HCFj1T4aIWPVfh4hU9U+GSFT1X4dIXPVPhshc9V+HyFL1T4YoUvVfhyha9U+GqFr1X4eoVvVPhmhW9V+HaF71T4boXvVfh+hR9U+GGFH1X4cYWfVPhphZ9V+HmFX1T4ZYVfVfh1hd9U+G2F31X4fYU/VPhjhT9V+HOFv1T4a4W/Vfh7hX9U+GeFf1X4d4X/VDi6wjEVDqlxaI3DahyrxuE1jl3jiBrHqXFkjaNqHLfG8Wocv8YJapywxolqnLjGSWqctMbJapy8xilqnLLGqWqcusZpapy2xulqnL7GGWqcscaZapy5xllqnLXG2WqcvcY5apyzxrlqnLvGeWqct8b5apy/xgVqXLDGhWpcuEZqXKTGRWtcrMbFa1yixiVrXKrGpWtcpsZla1yuxuVrXKHGFWtcqcaVa1ylxlVrXK3G1Wtco8Y1a1yrxrVrXKfGdWtcr8b1a9ygxg1r3KjGjWvcpMZNa9ysxs1r3KLGLWvcqsata9ymxm1r3K7G7WvcocYda9ypxp1r3KXGXWvcrcbda9yjxj1r3KvGvWvcp8Z9a9yvxv1rPKDGA2s8qMaDazykxkNrPKzGw2s8osYjazyqxqNrPKZGazy2xuNqPL7GE2o8scaTajy5xlNqPLXG02o8vcYzajyzxrNqPLvGc2o8t8bzajy/xgtqvLDGi2q8uMZLahyoMagxrFf6j1+Ka0xqTGvMasxrLGosa6xqrGtsamxr7Grsaxys8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckan6rx6RqfqfHZGp+r8fkaX6jxxRpfqvHlGl+p8dUaX6vx9RrfqPHNGt+q8e0a36nx3Rrfq/H9Gj+o8cMaP6rx4xo/qfHTGj+r8fMav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8a/6rx7xr/qXF0jWNqHNLg0AaHNThWg8MbHLvBEQ2O0+DIBkc1OG6D4zU4foMTNDhhgxM1OHGDkzQ4aYOTNTh5g1M0OGWDUzU4dYPTNDhtg9M1OH2DMzQ4Y4MzNThzg7M0OGuDszU4e4NzNDhng3M1OHeD8zQ4b4PzNTh/gws0uGCDCzW4cIM0uEiDiza4WIOLN7hEg0s24x6aTfr/46NlGly2weUaXL7BFRpcscGVGly5wVUaXLXB1RpcvcE1GlyzwbUaRq7d4DoNrtvgeg2u3+AGDW7Y4EYNbtzgJg1u2uBmDW7e4BYNbtngVg1u3eA2DQ4Zjts1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0aIPHNnhcg8c3eEKDJzZ4UoMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYMDDQYNhg1GDcYNJg2mcyZmDeYNFg2WDVYN1g02DbYNdg32DQ42eGmDlzV4eYNXNHhlg1c1eHWD1zR4bYPXNXh9gzc0eGODNzV4c4O3NHhrg7c1eHuDdzR4Z4N3NXj3sCFD/rX5exu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBzxv8osEvG/yqwa8b/KbBbxv8rsHvG/yhwR8b/KnBnxv8pcFfG/ytwd8b/KPBPxv8q8G/G/ynwdENjvnXJlsc2uKwFsdqcXiLY7c4osVxWhzZ4qgWx21xvBbHb3GCFidscaIWJ25xkhYnbXGyFidvcYoWpxxniFO1OHWL07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLtLhIi4u2uFiLi7e4RItLtrhUi0u3uEyLy7a4XIvLt7hCiyu2uFKLK7e4Sourtrhai6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi7Z4bIvHtXh8iye0eGKLJ7V4countHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7Q40GLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12Lf4mCLl7Z4WYuXt3hFi1e2eFWLV7d4TYvXtnhdi9e3eEOLN7Z4U4s3t3hLi7e2eFuLt7d4R4t3tnhXi3e3eE+L97Z4X4v3t/hAiw+2+FCLD7f4SIuPtvhYi4+3+ESLT7b4VItPt/hMi8+2+FyLz7f4QosvtvhSiy+3+EqLr7b4Wouvt/hGi2+2+FaLb7f4Tovvtvhei++3+EHLv7TYj1r8uMVPWvy0xc9a/LzFL9rhftniVy1+3eI3LX7b4nctft/iDy3+2OJPLf7c4i8t/triby3+3uIfLf7Z4l8t/t3iPy2ObnFMi0M6HNrhsA7H6nB4h2N3OKLDcToc2eGoDsftcLwOx+9wgg4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7hjyrw6zdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3SIeLdLhoh4t1uHj3fzn1pTpcusNl/rvOch0u3+EKHa7Y4UodrtzhKh2u2uFqHa7e4RodrtnhWh2u3eE6Ha7b4Xodrt/hBh1u2OFGHW7c4SYdbtrhZh1u3uEWHW7Z4VYdbt3hNh1u2+F2HW7f4Q4d7tjhTh3u3OEuHe7a4W4d7t7hHh3u2eFeHe7d4T4d7tvhfh3u3+EBHR7Y4UEdHtzhIR0e2uFhHR7e4REdHtnhUR0e3eExHdrhsR0e1+HxHZ7Q4YkdntThyR2e0uGpHZ7W4ekdntHhmR2e1eHZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhQIdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h4MdXtrhZR1e3uEVHV7Z4VUdXt3hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHd7a4W0d3t7hHR3e2Q3939rVezq8t8P7Ory/wwc6fLDDhzp8uMNHOny0w8c6fLzDJzp8ssOnOny6w2c6fLbD5zp8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386HN3hmA6H9Di0x2E9jtXj8B7H7nFEj+P0OLLHUT2O2+N4PY7f4wQ9TtjjRD1O3OMkPU7a42Q9Tt7jFD1O2eNUPU7d4zQ9TtvjdD1O3+MMPc7Y40z/lT9Lj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/dIj4v0uGiPi/W4eI9L9Lhkj0v1uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1uHGPm/S4aY+b9bh5j1v0uGWPW/W4dY/b9Lhtj9v1uH2PO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S4b4/79bh/jwf0eGCPB/V4cI+H9Hhoj4f1eHiPR/R4ZI9H9Xh0j8f0aI/H9nhcj8f3eEKPJ/Z4Uo8n93hKj6f2eFqPp/d4Ro9n9nhWj2f3eE6P5/Z4Xo/n93hBjxf2eFGPF/d4SY8DPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WPTY9tj12PfY9DvZ46X/xubzHK3q8sserery6x2t6vLbH63q8vscberyxx5t6vLnHW3q8tcfbery9xzt6vLPHu3q8u8d7ery3x/t6vL/HB3p8sMeHeny4x0d6fLTHx3p8vMcnenyyx6d6fLrHZ3p8tsfneny+xxd6fLHHl3p8ucdXeny1x9d6fL3HN3p8s8e3eny7x3d6fLfH93p8v8cPevywx496/LjHT3r8tMfPevy8xy96/LLHr3r8usdvevy2x+96/L7HH3r8scefevy5x196/LXH33r8vcc/evyzx796/LvHf3oc3eOYHocM4tBBHDaIYw3i8EEcexBHDOI4gzhyEEcN4riDON4gjj+IEwzihIM40SBOPIiTDOKkgzjZIE4++P+Iegfnz4+ga/u3wca2bV6xbdu27SvYjW1bHxvf2LZt28nGyb6V97nv5/kDZqa665yq6ZlzunGqAKcOcJoApw1wugCnD3CGAGcMcKYAZw5wlgBnDXC24P/2qR89Z4BzBTh3gPMEOG+A8wU4f4ALBLhggAsFuHCAiwS4aIAEuFiAiwe4RIBLBozxX1xLB7hMgMsGuFyAywe4QoArBrhSgCsHuEqAqwa4WoCrB7hGgGsGuFaAawe4ToDrBrhegOsHuEGAGwa4UYAbB7hJgJsGuFmAmwe4RYBbBrhVgFsHuE2A2wa4XYDbB7hDgDsGuFOAOwe4S4C7BrhbgLsHuEeAewa4V4B7B7hPgPsGuF+A+wd4QIAHBnhQgAcHeEiAhwZ4WICHB3hEgEcGeFSARwd4TIDHBnhcgAZ4fIAnBHhigCcFOCLAkQGeHOApAZ4a4GkBnh7gGQGeGeBZAZ4d4DkBnhvgeQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeA1AV4b4HUBXh/gDQHeGOBNAd4c4C0B3hpgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+AgwNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAnw8wCcCfDLApwJ8OsBnAnw2wOcCfD7AFwJ8McCXAnw5wFcCfDXA1wJ8PcA3AnwzwLcCfDvAdwJ8N8D3Anw/wA8C/DDAjwL8OMBPAvw0wM8C/DzALwL8MsCvAvw6wG8C/DbA7wL8PsAfAvwxwJ8C/DnAXwIcFeCvAf4W4O8B/hHgnwH+FeDfAf4T4L//cS7AoRCHhThGiGOGOFaIY4c4PMRxQhw3xPFCHD/ECUKcMMSJQpw4xElCnDTEyUKcPMQpQpwyxKlCnDrEaUKcNsTpQpw+xBlCnDHEmUKcOcRZQpw1xNlCnD3EOUKcM2Sv/+7tc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGSIiLhbh4iEuEuGSIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLjpqMlHjw5x8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L0RCPD/GEEE8M8aQQR4Q4MsSTQzwlxFNDPC3E00M8I8QzQzwrxLNDPCfEc0M8L8TzQ7wgxAtDvCjEi0O8JMRLQ7wsxMtDvCLEK0O8KsSrQ7wmxGtDvC7E60O8IcQbQ7wpxJtDvCXEW0MMQgxDjEKMQ0xCTEPMQsxDLEIsQ6xCrENsQmxD7ELsQxyEeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+G+FCID4f4SIiPhvhYiI+H+ESIT4b4VIhPh0M+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIX4W4uchfhHilyF+FeLXIX4T4rchfhfi9yH+EOKPIf4U4s8h/hLiqBB/DfG3EH8P8Y8Q/wzxrxD/DvGfEP8N8T/MDkU4LMIxIhwzwrEiHDvC4RGOE+G4EY4X4fgRThDhhBFOFOHEEU4S4aQRThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohES4WIRLh7hEhEuGeFSES4d4TIRLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBhFuGOFGEW4c4SYRbhrhZhFuHuEWEW4Z4VYRbh3hNhFuG+F2EW4f4Q4R7hjhThHuHOEuEe4a4W4R7h7hHhHuOXq0e0W4d4T7RLhvhPtFuH+EB0R4YIQHRXhwhIdEeGiEh0V4eIRHRHhkhEdFeHSEx0R4bITHRWiEx0d4QoQnRnhShCMiHBnhyRGeEuGpEZ4W4ekRnhHhmRGeFeHZEZ4T4bkRnhfh+RFeEOGFEV4U4cURXhLhpRFeFuHlEV4R4ZURXhXh1RFeE+G1EV4X4fUR3hDhjRHeFOHNEd4S4a0RBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hEOIrwtwtsjvCPCOyO8K8K7I7wnwnsjvC/C+yN8IMIHI3wowocjfCTCRyN8LMLHI3wiwicjfCrCpyN8JsJnI3wuwucjfCHCFyN8KcKXI3wlwlcjfC3C1yN8I8I3I3wrwrcjfCfCdyN873849kGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4SjIvw1wt8i/D3CPyL8M8K/Ivw7wn8i/DfC0REOxTgsxjFiHDPGsWIcO8bhMY4T47gxjhfj+DFOEOOEMU40NDT037pJYpw0xsliRk4e4xQxThnjVDFOHeM0MU4bM2zo/zy9OEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxkiMi8W4eIxLxLhkjEvFuHSMy8S4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybxbh5jFvEuGWMW8W4dYzbxLhtjNvFuH2MO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIfFeHiMR8R4ZIxHxXh0jMfEeGyMx8VojMfHeEL8/zSvI2IcGePJMZ4S46kxnhbj6TGeEeOZMZ4V49kxnhMP99wYz4vx/BgviPHCGC+K8eIYL4nx0hgvi/HyGK+I8coYr4rx6hivifHaGK+L8foYb4jxxhhvivHmGG+J8dYYg//wNzQ0FMUYx5jEmMaYxZjHWMRYxljFWMfYxNjG2MXYxziI8bYYb4/xjhjvjPGuGO+O8Z4Y743xvhjvj/GBGB+M8aEYH47xkRgfjfGxGB+P8YkYn4zxqRifjvGZGJ+N8bkYn4/xhRhfjPGlGF+O8ZUYX43xtRhfj/GNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxhHxfhrjL/F+HuMf8T4Z4x/xfh3jP/E+G+Mo8fCoQSHJThGgmMmOFaCYyc4PMFxEhw3wfESHD/BCRKcMMGJEpw4wUkSnDTByRKcPMEpEpwywakSnDrBaRKcNsHpEpw+wRkSnDHBmRKcOcFZEpw1wdkSnD3BORKcM8G5Epw7wXkSnDfB+RKcP8EFElwwwYUSXDjBRRJcNEESXCzBxRNcIuH4JRNcKsGlE1wmwWUTXC7B5RNcIcEVE1wpwZUTXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CzBzRPcIsEtE9wqwa0T3CbBbRPcLsHtE9whwR0T3CnBnRPcJcFdE9wtwd0T3CPBPRPcK8G9E9wnwX0T3C/B/RM8IMEDEzwowYMTPCTBQxM8LMHDEzwiwSMTPCrBoxM8JsFjEzwuQRM8PsETEjwxwZMSHJHgyARPTvCUBE9N8LQET0/wjATPTPCsBM9O8JwEz03wvATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTvCaBK9N8LoEr0/whgRvTPCmBG9O8JYEb00wSDBMMEowTjBJGP0/bQfNEywSLBOsEqwTbBJsE+wS7BMcJHhbgrcneEeCdyZ4V4J3J3hPgvcmeF+C9yf4QIIPJvhQgg8n+EiCjyb4WIKPJ/hEgk8m+FSCTyf4TILPJvhcgs8n+EKCLyb4UoIvJ/hKgq8m+FqCryf4RoJvJvhWgm8n+E6C7yb4XoLvJ/hBgh8m+FGCHyf4SYKfjj7JzxL8PMEvEvwywa8S/DrBbxL8NsHvEvw+wR8S/DHBnxL8OcFfEhyV4K8J/pbg7wn+keCfCf6V4N8J/pPgvwmOTnAoxWEpjpHimCmOleLYKQ5PcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNkRQXS3HxFJdIcckUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdWUYSNSXD3FNVJcM8W1Ulw7xXVSXDfF9VJcP8UNUtwwxY1S3DjFTVLcNMXNUtw8xS1S3DLFrVLcOsVtUtw2xe1S3D7FHVLcMcWdUtw5xV1S3DXF3VLcPcU9Utwzxb1S3DvFfVLcN8X9Utw/xQNSPDDFg1I8OMVDUjw0xcNSPDzFI1I8MsWjUjw6xWNSPDbF41I0xeNTPCHFE1M8KcX/4h6Z4skpnpLiqSmeluLpKZ6R4pkpnpXi2Smek+K5KZ6X4vkpXpDihSlelOLFKV6S4qUpXpbi5SlekeKVKV6V4tUpXpPitSlel+L1Kd6Q4o0p3pTizSneku434a0pBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp9ikOUrwtxdtTvCPFO1O8K8W7U7wnxXtTvC/F+1N8IMUHU3woxYdTfCTFR1N8LMXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc/TVYa+SPHLFL9K8esUv0nx2xS/S/H7FH9I8ccUf0rx5xR/SXFUir+m+FuKv6f4R4p/pvhXin+n+E+K/6Y4OsWhDIdlOEaGY2Y4VoZjZzg8w3EyHDfD8TIcP8MJMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJGLpzhIhkumiEZLpbh4hkukeGSGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6UMWzjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L0AyPz/CEDE/M8KQMR2Q4MsOTMzwlw1MzPC3D0zM8I8MzMzwrw7MzPCfDczM8L8PzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzMMMgwzjDKMM0wyTDPMMswzLDIsM6wyrDNsMmwz7DLsMxxkeFuGt2d4R4Z3ZnhXhndneE+G92Z4X/Z/aqAHMnwww4cyfDjDRzJ8NMPHMnw8wycyfDLDpzJ8OsNnMnw2w+cyfD7DFzJ8McOXMnw5w1cyfDXD1zJ8PcM3Mnwzw7cyfDvDdzJ8N8P3Mnw/ww8y/DDDjzL8OMNPMvw0w88y/DzDLzL8MsOvMvw6w28y/DbD7zL8PsMfMvwxw58y/DnDXzIcleGvGf6W4e8Z/pHhnxn+leHfGf6T4b8Zjs5wKMdhOY6R45g5jpXj2DkOz3GcHMfNcbwcx89xghwnzHGiHCfOcZIcJ81xshwnz3GKHKfMcaocp85xmhynzZl+vqEhp89xhhxnzHGmHGfOcZYcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNkRwXy3HxHJfIcckcl8px6RyXyXHZHJfLcfkcV8hxxRxXynHlHFfJcdUcV8tx9RzXyHHNHNfKce0c18lx3RzXy3H9HDfIccMcN8px4xw3yXHTHDfLcfMct8hxyxy3ynHrHLfJcdsct8tx+xx3yHHHHHfKceccd8lx1xx3y3H3HPfIcc8c98px7xz3yXHfHPfLcf8cD8jxwBwPyvHgHA/J8dAcD8vx8ByPyPHIHI/K8egcj8nx2ByPy9Ecj8/xhBxPzPGkHEfkODLHk3M8JcdTczwtx9NzPCPHM3M8K8ezczwnx3NzPC/H83O8IMcLc7wox4tzvCTHS3O8LMfLc7wixytzvCrHq3O8Jsdrc7wux+tzvCHHG3O8Kcebc7wlx1tzDHIMc4xyjHNMckxzzHLMcyxyLHOscqxzbHJsc+xy7HMc5HhbjrfneEeOd+Z4V45353hPjvfmeF+O9+f4QI4P5vhQjg/n+EiOj+b4WI6P5/hEjk/m+FSOT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E4+0ndzfC/H93P8IMcPc/wox49z/CTHT3P8LMfPc/wixy9z/CrHr3P8Jsdvc/wux+9z/CHHH3P8Kcefc/wlx1E5/prjbzn+nuMfOf6Z4185/p3jPzn+m+PoHIcKHFbgGAWOWeBYBY5d4PACxylw3ALHK3D8AicocMICJypw4gInKXDSAicrcPICpyhwygKnKnDqAqcpcNoCpytw+gJnKHDGAmcqcOYCZylw1gJnK3D2AucocM4C5ypw7gLnKXDeAucrcP4CFyhwwQIXKnDhAhcpcNECKXCxAhcfPXr0SQUuWeBSBS5d4DIFLlvgcgUuX+AKBa5Y4EoFrlzgKgWuWuBqBa5e4BoFrlngWgWuXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgyKGhof0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rkALPL7AEwo8scD/cjXiv70LPLnAUwo8tcDTCjy9wDMKPLPAswo8u8BzCjy3wPMKPL/ACwq8sMCLCry4wEsKvLTAywq8vMArCryywKsKvLrAawq8tsDrCry+wBsKvLHAm4px/q8279ahYQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFDgq8rcDbC7yjwDsLvKvAuwu8p8B7C7yvwPsLfKDABwt8qMCHC3ykwEcLfKzAxwt8osAnC3yqwKcLfKbAZwt8rsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwFEF/lrgbwX+XuAfBf5Z4F8F/l3gPwX+W+DoAodKHFbiGCWOWeJYJY5d4vASxylx3BLHK3H8EicoccISJypx4hInKXHSEicrcfISpyhxyhKnKnHqEqcpcdoSpytx+hJnKHHG8v95tGcpcdYSZytx9hLnKHHOEucqce4S5ylx3hLnK3H+EhcoccESFypx4RIXKXHREilxsRIXL3GJEpcscakSly5xmRKXLXG5EpcvcYUSVyxxpRJXLnGVElctcbUSVy9xjRLXLHGtEtcucZ0S1y1xvRLXL3GDEjcscaMSNy5xkxI3LXGzEjcvcYsStyxxqxK3LnGbErctcbsSty9xhxJ3LHGnEncucZcSdy1xtxJ3L3GPEvcsca8S9y5xnxL3LXG/Evcv8YASDyzxoBIPLvGQEg8t8bASDy/xiBKPLPGoEo8u8ZgSjy3xuBIt8fgSTyjxxBJPKnFEiSNLPLnEU0o8tcTTSjy9xDNKPLPEs0o8u8RzSjy3xPNKPL/EC0q8sMSLSry4xEtKvLTEy0q8vMQrSryyxKtKvLrEa0q8tsTrSry+xBtKvLHEm0q8ucRbSry1xKDEsMSoxLjEpMS0xKzEvMSixLL8X433CJsS2xK7EvsSByXeVuLtJd5R4p0l3lXi3SXeU+K9Jd5X4v0lPlDigyU+VOLDJT5S4qMlPlbi4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4sclflLipyV+VuLnJX5R4pclflXi1yV+U+K3JX5X4vcl/lDijyX+VOLPJf5S4qgSfy3xtxJ/L/GPEv8s8a8S/y7xnxL/LXF0iUMVDqtwjArHrHCsCseucHiF41Q4boXjVTh+hRNUw52wwokqnLjCSSqctMLJKpy8wikqnLLCqSqcusJpKpy2wukqnL7CGSqcscKZKpy5wlkqnLXC2SqcvcI5Kpzzf86fu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqXLRCKlyswsUrXKLCJStcqsKlK1ymwmUrXK7C5StcocIVK1ypwpUrXKXCVStcrcLVK1yjwjUrXKvCtStcp8J1K1yvwvUr3KDCDSvcqMKNK9ykwk0r3KzCzSvcosItK9yqwq0r3KbCbSvcrsLtK9yhwh0r3KnCnSvcpcJdK9ytwt0r3KPCPSvcq8K9K9ynwn0r3K/C/Ss8oMIDKzyowoMrPKTCQys8rMLDKzyiwiMrPKrCoys8psJjKzyuQis8vsITKjyxwpMqHFHhyApPrvCUCk+t8LQKT6/wjArPrPCsCs+u8JwKz63wvArPr/CCCi+s8KIKL67wkgovrfCyCi+vGPoPW1dWeFWFV1d4TYXXVnhdhddXeEOFN1Z4U4U3V3hLhbdWGFQYVhhVGFeYVJhWmFWYV1hUWFZYVVhX2FTYVthV2Fc4qPC2Cm+v8I4K76zwrgrvrvCeCu+t8L4K76/wgQofrPChCh+u8JEKH63wsQofr/CJCp+s8KkKn67wmQqfrfC5Cp+v8IUKX6zwpQpfrvCVCl+t8LUKX6/wjQrfrPCtCt+u8J0K363wvQrfr/CDCj+s8KMKP67wkwo/rfCzCj+v8IsKv6zwqwq/rvCbCr+t8LsKv6/whwp/rPCnCn+u8JcKR1X4a4W/Vfh7hX9U+GeFf1X4d4X/VPjvf3wfwqEah9U4Ro1j1jhWjWPXOLzGcWoct8bxahy/xglqnLDGiWqcuMZJapy0xslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWqctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFaly4xkVqXLRGalysxsVrXKLGJWtcqsala1ymxmVrXK7G5WtcocYVa1ypxpVrXKXGVWtcrcbVa1yjxjVrXKvGtWtcp8Z1a1yvxvVr3KDGDWvcqMaNa9ykxk1r3KzGzWvcosYta9yqxq1r3KbGbWvcrsbta9yhxh1r3KnGnWvcpcZda9ytxt3rddyjxj1r3KvGvWvcp8Z9a9yvxv1rPKDGA2s8qMaDazykxkNrPKzGw2s8osYjazyqxqNrPKbGY2s8rkZrPL7GE2o8scaTahxR48gaT67xlBpPrfG0Gk+v8Ywaz6zxrBrPrvGcGs+t8bwaz6/xghovrPGiGi+u8ZIaL63xshovr/GKGq+s8aoar67xmhqvrfG6Gq+v8YYab6zxphpvrvGWGm+tMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa9xUONtNd5e4x013lnjXTXeXeM9Nd5b43013l/jAzU+WONDNT5c4yM1PlrjYzU+XuMTNT5Z41M1Pl3jMzU+W+Nz0w0b+o87L9T4Yo0v1fhyja/U+GqNr9X4eo1v1PhmjW/V+HaN79T4bo3v1fh+jR/U+GGNH9X4cY2f1PhpjZ/V+HmNX9T4ZY1f1fh1jd/U+G2N39X4fY0/1PhjjT/V+HONv9Q4qsZfa/ytxt9r/KPGP2v8q8a/a/ynxn9rHF3jUIPDGhyjwTEbHKvBsRsc3uA4DY7b4HgNjt/gBA1O2OBEDU7c4CQNTtrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2iANLtbg4g0u0eCSDS7V4NINLtPgsg0u1+DyDa7Q4IoNrtTgyg2u0uCq/+Vg2NDQ6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e16ANHt/gCQ2e2OBJDY5ocGSDJzd4SoOnNnhag6c3eEaDZzZ4VoNnN3hOg+c2eF6D5zd4QYMXNnhRgxc3eEmDlzZ4WYOXN3hFg1c2eFWDVzd4TYPXNnhdg9c3eEODNzZ4U4M3N3hLw9CIoSGDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7BgcN3tbg7Q3e0eCdDd7V4N0N3tPgvQ3e1+D9DT7Q4IMNPtTgww0+0uCjDT7W4OMNPtHgkw0+1eDTDT7T4LMNPtfg8w2+0OCLDb7U4MsNvtLgqw2+1uDrDb7R4JsNvtXg2w2+0+C7Db7X4PsNftDghw1+1ODHDX7S4KcNftbg5w1+0eCXDX7V4NcNftPgtw1+1+D3Df7Q4I8N/tTgzw3+0uCoBn9t8LcGf2/wjwb/bPCvBv9u8J8G/21wdINDLQ5rcYwWx2xxrBbHbnF4+/97kv//On28FsdvcYIWJ2xxohYnbnGSFidtcbIWJ29xihanbHGqFqducZoWp21xuhanb3GGFmdscaYWZ25xlhZnbXG2FmdvcY4W52xxrhbnbnGe/x3V1+L8LS7Q4oItLtTiwi0u0uKiLdLiYi0u3uISLS7Z4lItLt3iMi0u2+JyLS7f4gotrtjiSi2u3OIqLa7a4motrt7iGi2u2eJaLa7d4jotrtviei2u3+IGLW7Y4kYtbtziJi1u2uJmLW7e4hYtbtniVi1u3eI2LW7b4nYtbt/iDi3u2OJOLe7c4i4t7tribi3u3uIeLe7Z4l4tjjM0NLRPi/u2uF+L+7d4QIsHtnhQiwe3eEiLh7bDhg5r8fAWj2jxyBaPavHoFo9p8dgWj2vRFo9v8YQWT2zxpBZHtDiyHW/o5BZPafHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2vx/BYvaPHCFi9q8eIWL2nx0hYva/HyFq9o8coWr2rx6havafHaFq9r8foWb2jxxhZvavHmFm9p8dYWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xYHLd7W4u0t3tHinS3e1eLdLd7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0+1uLjLT7R4pMtPtXi0y0+0+KzLT7X4vMtvtDiiy2+1OLLLb7S4qstvtbi6y2+0eKbLb7V4tstvtPiuy2+1+L7LX7Q4octftTixy1+0uKnLX7W4uctftHily1+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiqBZ/bfG3Fn9v8Y8W/2zxrxb/bvGfFv9tcXSLQx0O63CMDsfscKwOx+5weIfjdDhuh+N1OH6HE3Q4YYcTdThxh5N0OGmHk3U4eYdTdDhlh1N1OHWH03Q4bYfTdTh9hzN0OGOHM3U4c7fzBENDOGuHs3U4e4dzdDhnh3N1OHeH83Q4b4fzdTh/hwt0uGCHC3W4cIeLdLhoh3S4WIeLd7hEh0t2uFSHS3e4TIfLdrhch8t3uEKHK3a4Uocrd7hKh6t2uFqHq3e4RodrdrhWh2t3uE6H63a4Xofrd7hBhxt2uFGHG3e4SYebdrhZh5t3uEWHW3a4VYdbd7hNh9t2uF2H23e4Q4c7drhThzt3uEuHu3a4W4e7d7hHh3t2uFeHe3e4T4f7drhfh/t3eECHB3Z4UIcHd3hIh4d2eFiHh3d4RIdHdnhUh0d3eEyHx3Z4XId2eHyHJ3R4YocndTiiw5EdntzhKR2e2uFpHZ7e4RkdntnhWR2e3eE5HZ7b4Xkdnt/hBR1e2OFFHV7c4SUdXtrhZR1e3uEVHV7Z4VUdw/7D1TUdXtvhdR1e3+ENHd7Y4U0d3tzhLR3e2mHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4aDD2zq8vcM7Oryzw7s6vLvDezq8t8P7Ory/wwc6fLDDhzp8uMNHOny0w8c6fLzDJzp8ssOnOny6w2c6fLbD5zp8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOhzV4a8d/tbh7x3+0eGf3bAR//vH8k+H/3Y4usOhHof1OEaPY/Y4Vo9j9zi8x3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqcdwOcr8f5e1ygxwV7XKjHhXtcpMdFe6THxXpcvMclelyyx6V6XLrHZXpctsflely+xxV6XLHHlXpcucdVely1x9V6XL3HNXpcs8e1ely7x3V6XLfH9Xpcv8cNetywx4163LjHTXrctMfNety8xy163LLHrXrcusdtety2x+163L7HHXrcscedety5x1163LXH3Xrcvcc9etyzx7163LvHfXrct8f9ety/xwN6PLDHg3o8uMdDejy0x8N6PLzHI3o8ssejejy6x2N6PLbH43q0x+N7PKHHE3s8qccRPY7s8eQeT+nx1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/r8fweL+jxwh4v6vHiHi/p8dIeL+vx8h6v6PHKHq/q8eoer+nx2h6v6/H6Hm/o8cYeb+rx5h5v6fHWHoMewx6jHuMekx7THrMe8x6LHsseqx7rsYeG/sNw22PXY9/joMfbery9xzt6vLPHu3q8u8d7+v/jLbivx/t7fKDHB3t8qMeHe3ykx0d7fKzHx3t8oscne3yqx6d7fKbHZ3t8rsfne3yhxxd7fKnHl3t8pcdXe3ytx9d7fKPHN3t8q8e3e3ynx3d7fK/H93v8oMcPe/yox497/KTHT3v8rMfPe/yixy97/KrHr3v8psdve/yux+97/KHHH3v8qcefe/ylx1E9/trjbz3+3uMfPf7Z4189/t3jPz3+2+PoHocGOGyAYwxwzAGONcCxBzh8gOMMcNwBjjfA8Qc4wQAnHOBEA5x4gJMMcNIBTjbAyQc4xQCnHOBUA5x6gNMMcNoBTjfA6Qc4wwBnHOBMA5x5gLMMcNYBzjbA2Qc4xwDnHOBcA5x7gPMMcN4BzjfA+Qe4wAAXHOBCA1x4gIsMcNEBMsDFBrj4AJcY4JIDXGqASw/4/2g6p/Axrq9t/5K0TW3b1l3bblOmTm2bd9sktW3bbsdGbdu2jXxX3q//fbbP9jyYmTVrXc+4XIDLB7hCgCsGuFKAKwe4SoCrBrhagKsHuEaAawa4VoBrB7hOgOsGuF6A6we4QYAbBrhRgMMC3DjATQLcNMDNAtx81YGBsVgOD3DLALcKcOsAtwlw2wC3C3D7AEcEuEOAOwa4U4A7B7hLgLsGuFuAuwe4R4B7BrhXgHsHuE+A+wa4X4D7B3hAgAcGeFCABwd4SICHBnhYgIcHeESARwZ4VIBHB3hMgMcGaIDHBXh8gCcEODLAUQGODvDEAE8K8OQATwnw1ABPC/D0AM8I8MwAzwrw7ADPCfDc4P9nLY9dFwR4YYAXBXhxgJcEeGmAlwV4eYBXBHhlgFcFeHWA1wR4bYDXBXh9gDcEeGOANwV4c4C3BHhrgLcFeHuAdwR4Z4B3BXh3gPcEeG+A9wV4f8CYvwJ8MMCHAnw4wCDAcCy//50vCTANMPtPb0WAZYBVgHWATYBtgF2AfYCPBPhogI8F+HiATwT4ZIBPBfh0gM8E+GyAzwX4fIAvBPhigC8F+HKArwT4aoCvBfh6gG8E+GaAbwX4doDvBPhugO8F+H7wfz3MGQcP4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4Fic/g7wnwD/DXBMgAMhDgpxcIhDQhwnxHFDHC/EoSGOH+IEIU4Y4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGA6MP1OIM4c4S4izhjhbiLOHOEeIc4Y4V4hzhzhPiPOGOF+I84e4QIgLhrhQiAuHuEiIi4a4WIiLh0iIS4S4ZIhLhbh0iMuEuGyIy4W4fIgrhLhiiCuFuHKIq4S4aoirhbh6iGuEuGaIa4W4dojrhLhuiOuFuH6IG4S4YYgbhTgsxI1D3CTETUPcLMTNQ9wixOEhbhniViFuHeI2IW4b4nYhbh/iiBB3CHHHEHcKcecQdwlx1xB3C3H3EPcIcc8Q9wpx7xD3CXHfEPcLcf8QDwjxwBAPCvHgEA8J8dAQDwvx8BCPCPHIEI8K8egQjwnx2BAN8bgQjw/xhBBHhjgqxNEhnhjiSSGeHOIpIZ4a4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HGIQYhiOGTr2XTcOMQkxDTELMQ+xCLEMsQqxDrEJsQ2xC7EP8ZEQHw3xsRAfD/GJEJ8M8akQnw7xmRCfDfG5EJ8P8YUQXwzxpRBfDvGVEF8N8bUQXw/xjRDfDPGtCQYGxvrtnRDfDfG9EN8P8YMQPwzxoxA/DvGTED8N8bMQPw/xixC/DPGrEL8O8ZsQvw3xuxC/D/GHEH8M8acQfw7xlxB/DfG3EH8P8Y8Q/wzxrxD/DvGfEP8NcUyIAxEOinBwhEMiHCfCcSMcL8KhEY4f4QQRThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuGXEc4e4RwRzhnhWpPh3BHOE+G8Ec4X4fwRLhDhghEuFOHCES4S4aIRLhbh4hES4RIRLhnhUhEuHeEyES4b4XIRLh/hChGuGOFKEa4c4SoRrhrhahGuHuEaEa459gwRrh3hOhGuG+F6Ea4f4QYRbhjhRhEOi3DjCDeJcNMIN4tw8wi3iHB4hFtGuFWEW0e4TYTbRrhdhNtHOCLCHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDZCIzwuwuMjPCHCkRGOinB0hCdGeFKEJ0d4SoSnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6E50d4QYQXjtXLAF4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEd4d4T0R3hvhfRHeH+EDET4Y4UMRPhxhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH+EjET4a4WMRPh7hExE+GeFTET4d4TMRPhvhcxE+H+ELEb4Y4UsRvhzhKxG+GuFrEb4e4RsRvhnhWxG+HeE7Eb4b4XsRvh/hBxF+GOFHY302MDDwSYSfRvhZhJ9HDP7iP698FeHXEX4T4bcRfhfh9xH+EOGPEf4U4c8R/hLhrxH+FuHvEf4R4Z8R/hXh3xH+E+G/EY6JcCDGQTEOjnFIjOPEOG6M48U4NMbxY5wgxgljnCjGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcYZY5wpxpljnCXGWWOcLcbZY5wjxjljnCvGuWOcJ8Z5Y5wvxvljXCDGBWNcKMaFY1wkxkVjXCzGxWMkxiViXDLGpWJcOsZlYlw2xuViXD7GFWJcMcaVYlw5xlViXDXG1WJcPcY1YlwzxrViXDvGdWJcN8b1Ylw/xg1i3DDGjWIcFuPGMW4S46Yxbhbj5jFuEePwGLeMcasYt45xmxi3jXG7GLePcUSMO8S4Y4w7xbhzjLvEuGuMu8W4e4x7xLhnjHvFuHeM+8S4b4z7xbh/jAfEeGCMB8V4cIyHxHhojIeNLWxjPCLGI2M8KsajYzwmxmNjNMbjYjw+xhNiHBnjqBhHx3hijCfFeHKMp8R4aoynxXh6jGfEeGaMZ8V4doznxHhujOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljFfFeHWM18SMuDbG62K8PsYbYrwxxptivDnGW2K8NcbbYrw9xjtivDPGu2K8O8Z7Yrw3xvtivD9mYGDQgA/G+FCMD8cYxBjGGMUYx5jEmMaYxZjHWMRYxljFWMfYxNjG2MXYx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8b4XIzPx/hCjC/G+FKML8f4SoyvxvhajK/H+EaMb8b4Voxvx/hOjO/G+F6M78f4QYwfxvhRjB/H+EmMn8b4WYyfx/hFjF/G+FWMX8f4TYzfxvhdjN/H+EOMP8b4U4w/x/hLjL/G+FuMv8f4R4x/xvhXjH/H+E+M/8Y4JsaBBAclODjBIQlDx+7HTXC8BIcmOH6CEyQ4YYITJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJTh9gjMkOGOCMyU4c4KzJDhrgrMlOHuCcyQ4Z4JzJTh3gvMkOG+C8yU4f4ILJLhgggsluHCCiyS4aIKLJbh4giS4RIJLJrhUgksnuEyCyya4XILLJ7hCgismuFKCKye4SoKrJrhagqsnuEaCaya4VoJrJ7hOgusmuF6C6ye4QYIbJrhRgsMS3DjBTRLcNMHNEtw8wS0SHJ7glgluleDWCW6T4LYJbpfg9gmOSHCHBHdMcKcEd05wlwR3TXC3BHdPcI8E90xwrwT3TnCfBPdNcL8E90/wgAQPTPCgBA9O8JAED03wsAQPT/CIBI9M8KgEj07wmASPTdAEj0vw+ARPSHBkgqMSHJ3giQme9L/J7ARPTfC0BE9P8IwEz0zwrATPTvCcBM9N8LwEz0/wggQvTPCiBC9O8JIEL03wsgQvT/CKBK9M8KoEr07wmgSvTfC6BK9P8IYEb0zwpgRvTvCWBG9N8LYEb0/wjgTvTPCuBO9O8J4E703wvgTvT/CBBB9M8KEEH04wSDBMMEowTjBJME0wSzBPsEiwTLBKsE6wSbBNsEuwT/CRBB9N8LEEH0/wiQSfTPCpBJ9O8JkEn03wuQSfT/CFBF9M8KUEX07wlQRfTfC1BF9P8I0E30zwrQTfTvCdBN9N8L0E30/wgwQ/TPCjBD9O8JMEP03wswQ/T/CLBL9M8KsEv07wmwS/TfC7BL9P8IcEf0zwpwR/TvCXBH9N8LcEf0/wjwT/TPCvBP9O8J8E/01wTIIDKQ5KcXCKQ1IcJ8VxUxwvxaEpjp/iBClOmOJEKU6c4iQpTpriZClOnuIUKU6Z4lQpTp3iNClOm+J0KU6f4gwpzpjiTCnOnOIsKc6a4mwpzp7iHCljn1zOleLcKc6T4rwpzpfi/CkukOKCKS6U4sIpLpLioikuluLiKZLiEikumeJSKS6d4jIpLpvicikun+IKKa6Y4koprpziKimumuJqKa6e4hoprpniWimuneI6Ka6b4noprp/iBilumOJGKQ5LceMUN0lx0xQ3S3HzFLdIcXiKW6a4VYpbp7hNitumuF2K26c4IsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcOx3iPinum+J+Ke6f4gEpHpjiQSkenOIhKR6a4mEpHp7iESkemeJRKR6d4jEpHpuiKR6X4vEpnpDiyBRHpTg6xRNTPCnFk1M8JcVTUzwtxdNTPCPFM1M8K8WzUzwnxXNTPC/F81O8IMULU7woxYtTvCTFS1O8LMXLU7wixStTvCrFq1O8JsVrU7wuxetTvCHFG1O8KcWbU7wlxVtTvC3F21O8I8U7U7wrxbtTvCfFe1O8L8X7U3wgxQdTfCjFh1MMUgzTCf6v1xWnmKSYppilmKdYpFimWKVYp9ik2KbYpdin+EiKj6b4WIqPp/hEik+m+FSKT6f4TIrPpvhcis+n+EKKL6b4Uoovp/hKiq+m+FqKr6f4RopvpvhWim+n+E6K76b4Xorvp/hBih+m+FGKH6f4SYqfpvhZip+n+EWKX6b4VYpfp/hNit+m+F2K34/12X+37Z9S/DnFX1L8NcXfUvw9xT9S/DPFv1L8O8V/Uvw3xTEpDmQ4KMPBGQ7JcJwMx81wvAyHZjh+hhNkOGGGE2U4cYaTZDhphpNlOHmGU2Q4ZYZTZTh1htNkOG2G02U4fYYzZDhjhjNlOHOGs2Q4a4azZTh7hnNkOGeGc2U4d4bzZDhvhvNlOH+GC2S4YIYLZbhwhotkuGiGi2W4eIZkuESGS2a4VIZLZ7hMhstmuFyGy2e4QoYrZrhShitnuEqGq2a4WoarZ7hGhmtmk/+fZtbOcJ0M181wvQzXz3CDDDfMcKMMh2W4cYabZLhphptluHmGW2Q4PMMtM9wqw60z3CbDbTPcLsPtMxyR4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHvy/j/AZHpbh4RkekeGRGR6VMejoDI/J8NgMzfC4DI/P8IQMR2Y4KsPRGZ6Y4UkZnpzhKRmemuFpGZ6e4RkZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6ZDYy6KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7xvLG4DI/9LjsaHMnw4GzTOWA7DDKMM4wyTDNMMswzzDIsMywyrDOsMmwzbDLsM+wwfyfDRDB/L8PEMn8jwyQyfyvDpDJ/J8NkMn8vw+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8Mx2Q4kOOgHAfnOCTHcXIcN8fxchya4/g5TpDjhDlOlOPEOU6S46Q5TpYzZPIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hxny3H2HOfIcc4c58px7hznyXHeHOfLcf4cF8hxwRwXynHhHBfJcdEcF8tx8RzJcYkcl8xxqRyXznGZHJfNcbkcl89xhRxXzHGlHFfOcZUcV81xtRxXz3GNHNfMca0c185xnRzXzXG9HNfPcYMcN8xxoxyH5bhxjpvkuGmOm+W4eY5b5Dg8xy1z3CrHrXPcJsdtc9wux+1zHJHjDjnumONOOe6c4y457prjbjnunuMeOe6Z41457p3jPjnum+N+Oe6f4wE5HpjjQTkenOMhOR6a42E5Hp7jETkemeNROR6d4zE5HpujOR6X4/E5npDjyBxH5Tg6xxNzPCnHk3M8JcdTczwtx9NzPCPHM3M8K8ezczwnx3P/08v5OV6Q44U5XpTjxTlekuOlOV6W4+U5XpHjlTlelePVOV6T47U5Xpfj9TnekOONOd6U483jDgyM1eStOd6W4+053pHjnTnelePdOd6T47053pfj/Tk+kOODOT6U48M5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY59jk+kuOjOT6W4+M5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5fpPjtzl+l+P3Of6Q4485/pTjzzn+kuOvOf6W4+85/pHjnzn+lePfOf6T4785jslxoMBBBQ4ucEiB4xQ4boHjFTi0wPELnOC//UQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl4gBS5R4JIFLlXg0gUuU+CyBS5X4PIFrlDgisX/1Rn/N9O8SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEbFrhRgcMK3LjATQrctMDNCty8wC0KHF7glgVuVeDWBW5T4LYFblfg9gWOKHCHYQMDY3HfqcCdC9ylwF0L3K3A3Qvco8A9C9yrwL0L3KfAfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymwGMLtMDjCjy+wBMKHFngqAJHF3higScVeHKBpxR4aoGnFXh6gWcUeGaBZxV4doHnFHhugecVeH6BFxR4YYEXFXhxgZcUeGmBlxV4eYFXFHhlgVcVeHWB1xR4bYHXFXh9gTcUeGOBNxV4c4G3FHhrgbcVeHuBdxR4Z4F3FXh3gfcUeG+B9xV4f4EPFPhggQ8V+HCBQYHhf0SPxTkpMC0wKzAvsCiwLLAqsC6wKbAtsCuwL/CRAh8t8LECHy/wiQKfLPCpAp8u8JkCny3wuQKfL/CFAl8s8KUCXy7wlWKIrxb4WoGvF/hGgW8W+FaBbxf4ToHvFvhege8X+EGBHxb4UYEfF/hJgZ8W+FmBnxf4RYFfFvhVgV8X+E2B3xb4XYHfF/hDgT8W+FOBPxf4S4G/Fvhbgb8X+EeBfxb4V4F/F/hPgf8WOKbAgRIHlTi4xCEljlPiuCWOV+LQEscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcecS5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL5ESlyhxyRKXKnHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnFYiRuXuEmJm5a4WYmbl7hFicPLgcH/m7PcusRtSty2xO1K3L7EESXuUOKOJe7037XvUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBY4YMjOXu4BIPKfHQEg8r8fASjyjxyBKPKvHoEo8p8dgSLfG4Eo8v8YQSR5Y4qsTRJZ5Y4kklnlziKSWeWuJpJZ5e4hklnlniWSWeXeI5JZ5b4nklnl/iBSVeWOJFJV5c4iUlXlriZSVeXuIVJV5Z4lUlXl3iNSVeW+J1JV5f4g0l3ljiTSXeXOItJd5a4m0l3l7iHSXeWeJdJd5d4j0l/3O395f4QIkPlvhQiQ+XGJQYlhiVGJeYlJiWmJWYl1iUWJZYlViX2JTYltiV2Jf4SImPlvhYiY+X+ESJT5b4VIlPl/hMic+W+FyJz5f4QokvlvhSiS+X+EqJr5b4Womvl/hGiW+W+FaJb5f4Tonvlvheie+X+EGJH5b4UYkfl/hJiZ+W+FmJn5f4RYlflvhViV+X+E2J35b4XYnfl/hDiT+W+FOJP5f4S4m/lvhbib+X+EeJf5b4V4l/l/hPif+WOKbEgQoHVTi4wiEVjlPhuBWOV+HQCsevcIIKJ6xwogonrnCSCietcLIKJ69wigqnrHCqCqeucJoKp61wugqnr3CGCmescKYKZ65wlgpnrXC2CmevcI4K56xwrgrnrnCeCuetcL4K569wgQoXrHChCheucJEKF61wsQoXr5AKl6hwyQqXqnDpCpepcNkKl6tw+QpXqHDFCleqcOUKV6lw1QpXq3D1CteocM0K16pw7QrXqXDdCtercP0KN6hwwwo3qnBYhRtXuEmFm1a4WYWbV7hFhcMr3LLCrSrcusJtKty2wu0q3L7CERXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRVa4XEVHl/hCRWOrHBUhaMrPLHCkyo8ucJTKjy1wtMqPL3CM/7ntgrPrvCcCs+t8LwKz6/wggovrPCiCi+u8JIKL63wsgovr/CKCq+s8KoKr67wmgqvrfC6Cq+v8IYKb6zwpgpvrvCWCm+t8LYKb6/wjgrvrPCuCu+u8J4K763wvgrvr/CBCh+s8KEKH64wqDCsMKowrjCpMK0wqzCvsKiwrLCqsK6wqbCtsKuwr/CRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn62GP/Bchc9X+EKFL1b4UoUvV/hKha9W+FqFr1f4RoVvVvhWhW9X+E6F71b4XoXvV/hBhR9W+FGFH1f4SYWfVvhZhZ9X+EWFX1b4VYVfV/hNhd9W+F2F31f4Q4U/VvhThT9X+EuFv1b4W4W/V/hHhX9W+FeFf1f4T4X/VjimwoEaB9U4uMYhNY5T47g1jlfj0BrHr3GCGiescaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF6+RGpeocckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6pxWI0b17hJjZvWuFmNm9e4RY3Da9yyxq1q3LrGbWrctsbtaty+xhE17lDjjjXuVOPONe5S46417lbj7jXuUeOeNe5V49417lPjvjXuV+P+4+EBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNR5bozUeV+PxNZ5Q48gaR9U4usYTazypxpNrPKXGU2s8rcbTazyjxjNrPKvGs2s8p8ZzazyvxvNrvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrvKbGa2u8rsbra7yhxhtrvKnGm2u8pcZba7ytxttrvKPGO2u8q8a7a7ynxntrvK/G+2t8oMYHa3yoxodrDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gt8pMZHa3ysxsdrfKLGJ2t8qsana3ymxmdrfK7G52t8ocYXa3ypxpdrfKXGV2t8rcbXa3yjxjdrfKvGt2t8p8Z3a3yvxvdr/KDGD2v8qMaPa/ykxk9r/KzGz2v8osYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGP2v8q8a/a/ynxn9rHFPjQIODGhzc4JAGx2lw3AbHa3Bog+M3OEGDEzY4UYMTNzhJg5M2OFmDkzc4RYNTNjhVg1M3OE2D0zY4XYPTNzhDgzM2OFODMzc4S4OzNjhbg7M3OEeDczY4V4NzNzhPg/M2OF+D8ze4QIMLNrhQgws3uEiDiza4WIOLN0iDSzS4ZINLNbh0g8s0uGzDOMs1uHyDKzS4YoMrNbhyg6s0uGqDqzW4eoNrNLhmg2s1uHbDJGMxWbfB9Rpcv8ENGtywwY0aHNbgxg1u0uCmDW7W4OYNbtHg8Aa3bHCrBrducJsGt21wuwa3b3BEgzs0uGODOzW4c4O7NLhrg7s1uHuDezS4Z4N7Nbh3g/s0uG+D+zW4f4MHNHhggwc1eHCDhzR4aIOHNXh4g0c0eGSDRzV4dIPHNHhsgzZ4XIPHN3hCgyMbHNXg6AZPbPCkBk9u8JQGT23wtAZPb/CMBs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbPCqhqFXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3jHWK4GcGxNdXeD9zR4b4P3NXh/gw80+GCDDzX4cINBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g480+GiDjzX4eINPNPhkg081+HSDzzT4bIPPNfh8gy80+GKDLzX4coOvNPhqg681+HqDbzT4ZoNvNfh2g+80+G6D7zX4foMfNPhhgx81+HGDnzT4aYOfNfh5g180+GWDXzX4dYPfNPhtg981+H2DPzT4Y4M/Nfhzg780+GuDvzX4e4N/NPhng381+HeD/zT4b4NjGhxocVCLg1sc0uI4LY7b4ngtDm1x/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWaXGJFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZX/t8fiVpcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMVhLW7c4iYtbtriZi1u3uIWLQ5vccsWt2px6xa3aXHbFrdrcfsWR7S4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Zoi8e1eHyLJ7Q4ssVRLY5u8cQWT2rx5BZPafHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2vx/BYvaPHCFi9q8eIWL2nx0hYva/HyFq9o8coWr2oZfXWL17R4bYvXtXh9ize0eGOLN7V4c4u3tHhri7e1eHuLd7R4Z4t3tXh3i/e0eG+L97V4f4sPtPhgiw+1+HCLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYuPtPhoi4+1+HiLT7T4ZItPtfh0i8+0+GyLz7X4fIsvtPhiiy+1+HKLr7T4aouvtfh6i2+0+GaLb7X4dovvtPhui++1+H6LH7T4YYsftfhxi5+0+GmLn7X4eYtftPhli1+1+HWL37T4bYvftfh9iz+0+GOLP7X4c4u/tPhri7+1+HuLf7T4Z4t/tfh3i/+0+G+LY1oc6HBQh4M7HNLhOB2O2+F4HQ7tcPwOJ+hwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDulwiQ6X7HCpDpfucJkOl+1wuQ6X73CFDlfs/n+mxti1SjcwsGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3U4rMONO9ykw0073KzDzTvcosPhHW7Z4VYdbt3hNh1u2+F2HW7f4YgOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/o8MAOD+rw4A4P6fDQDg/r8PAOj+jwyA6P6vDoDo/p8NgO7fC4Do/v8IQOR3Y4qsPRHZ7Y4UkdntzhKR2e2uFpHZ7e4RkdntnhWR2e3eE5HZ7b4Xkdnt/hBR1e2OFFHV7c4SUdXtrhZR1e3uEVHV7Z4VUdXt3hNR1e2+F1HV7f4Q2rDnhjx//SXrylw1s7vK3D2zu8o8M7O7yrw7s7vKfDezu8r8P7O3ygwwc7fKjDhzsMOgw7jDqMO0w6TDvMOsw7LDosO6w6rDtsOmw77DrsO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzsc0+FAj4N6HNzjkB7H6XHcHsfrcWiP4/c4QY8T9jhRjxP3OEmPk/Y4WY+T9zhFj1P2OFWPU/c4TY/T9jhdj9P3OEOPM/Y4U48z9zhLj7P2OFuPs/c4R49z9jhXj3P3OE+P8/Y4X4/z97hAjwv2uFCPC/e4SI+L9rhYj4v3SI9L9Lhkj0v1uHSPy/S4bI/L9bh8jyv0uGKPK/W4co+r9Lhqj6v1uHqPa/S4Zo9r9bh2j+v0uG6P6/W4fo8b9Lhhjxv1OKzHjXvcpMdNe9ysx8173KLH4T1u2eNWPW7d4zY9btvjdj1u3+OIHnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd9xcL8e9+/xgB4P7PGgHg/u8ZDxBwbG8nhYj4f3eESPR/Z4VI9H93hMj8f2aI/H9Xh8jyf0OLLHUT2O7vHEHk/q8eQeT+nx1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/r8fweL+jxwh4v6vHiHi/p8dIeL+vx8h6v6PHKHq/q8eoer+nx2h6v6/H6Hm/o8cYeb+rx5h5v6fHWHm/r8fYe7+jxzh7v6vHuHu/p8d4e7+vx/h4f6PHBHh/q8eEe/18AAAD//1Pm7no=") truncate(&(0x7f0000000000)='./file0\x00', 0xea8c) 221.681149ms ago: executing program 8 (id=2519): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f00000002c0)) 741.9µs ago: executing program 8 (id=2520): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2108c8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@usrjquota}, {@block_validity}, {@minixdf}, {@grpid}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x82078, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=2530): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x6, 0xdee0, 0xfffffff9, 0xffffffffffffdcfb, 0x8, 0xffffffffffffffff}) kernel console output (not intermixed with test programs): vlan:0) [ 391.910182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.922589][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 391.935479][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 391.945463][ T26] audit: type=1326 audit(1774474107.469:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 391.948691][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.982316][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.995030][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 392.106273][ T26] audit: type=1326 audit(1774474107.469:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 392.128549][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.194941][ T5994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.255632][ T5994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 392.268792][ T26] audit: type=1326 audit(1774474107.469:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 392.331175][ T9393] loop2: detected capacity change from 0 to 2048 [ 392.347946][ T5994] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.377159][ T9394] sp0: Synchronizing with TNC [ 392.435162][ T26] audit: type=1326 audit(1774474107.479:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 392.457808][ T5994] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 392.489704][ T9393] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 392.515532][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.558091][ T5994] usb 2-1: config 0 descriptor?? [ 392.574734][ T26] audit: type=1326 audit(1774474107.479:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 392.597003][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.606993][ T9401] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.613165][ T9378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 392.701240][ T26] audit: type=1326 audit(1774474107.479:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.2.1648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 392.824191][ T9374] loop8: detected capacity change from 0 to 32768 [ 392.923231][ T9374] [ 392.923231][ T9374] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 392.923231][ T9374] [ 393.041536][ T9374] ERROR: (device loop8): dbReAlloc: the block is outside the filesystem [ 393.041536][ T9374] [ 393.069548][ T5994] elecom 0003:056E:00FD.0011: unknown global tag 0xe [ 393.084511][ T5994] elecom 0003:056E:00FD.0011: item 0 1 1 14 parsing failed [ 393.093040][ T5994] elecom: probe of 0003:056E:00FD.0011 failed with error -22 [ 393.104261][ T9374] ERROR: (device loop8): remounting filesystem as read-only [ 393.115162][ T9374] jfs_create: dtInsert returned -EIO [ 393.144504][ T9374] ERROR: (device loop8): jfs_create: [ 393.144504][ T9374] [ 393.271377][ T5994] usb 2-1: USB disconnect, device number 10 [ 393.662795][ T9420] loop2: detected capacity change from 0 to 136 [ 393.804337][ T9422] loop8: detected capacity change from 0 to 1024 [ 394.046134][ T9] hfsplus: b-tree write err: -5, ino 25 [ 394.057614][ T9] hfsplus: b-tree write err: -5, ino 4 [ 394.063939][ T9] hfsplus: b-tree write err: -5, ino 2 [ 394.446513][ T9432] loop8: detected capacity change from 0 to 1024 [ 394.596941][ T9432] hfsplus: bad catalog entry type [ 394.761347][ T9442] loop1: detected capacity change from 0 to 64 [ 394.818353][ T4347] hfsplus: b-tree write err: -5, ino 25 [ 394.824263][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 394.847602][ T4347] hfsplus: b-tree write err: -5, ino 2 [ 395.342253][ T9448] loop1: detected capacity change from 0 to 128 [ 395.409535][ T9448] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 395.472021][ T9450] netlink: 'syz.8.1669': attribute type 3 has an invalid length. [ 395.493523][ T9448] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 395.524339][ T9425] loop7: detected capacity change from 0 to 40427 [ 395.831335][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1671'. [ 395.876790][ T9425] F2FS-fs (loop7): Found nat_bits in checkpoint [ 395.899088][ T8065] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 396.142749][ T9425] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 396.217149][ T9425] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 396.566787][ T9473] loop2: detected capacity change from 0 to 128 [ 396.630622][ T9477] loop6: detected capacity change from 0 to 1024 [ 396.829417][ C1] net_ratelimit: 3590 callbacks suppressed [ 396.829440][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.840887][ T9473] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985 [ 396.847712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.848250][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.915564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.927977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.940464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 396.953480][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 396.965892][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.978286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.990824][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 397.028681][ T9473] ; already mounted read-only [ 397.034070][ T9473] hpfs: filesystem error: improperly stopped [ 397.118678][ T9473] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 397.158670][ T9473] hpfs: You really don't want any checks? You are crazy... [ 397.187990][ T9473] hpfs: hpfs_map_sector(): read error [ 397.206958][ T9] hfsplus: b-tree write err: -5, ino 25 [ 397.214721][ T9] hfsplus: b-tree write err: -5, ino 4 [ 397.248400][ T9473] hpfs: code page support is disabled [ 397.256930][ T9473] hpfs: hpfs_map_4sectors(): unaligned read [ 397.257773][ T9] hfsplus: b-tree write err: -5, ino 2 [ 397.276381][ T9473] hpfs: hpfs_map_4sectors(): unaligned read [ 397.298887][ T9] hfsplus: b-tree write err: -5, ino 26 [ 397.309024][ T9473] hpfs: filesystem error: unable to find root dir [ 397.623879][ T9484] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 397.638752][ T9484] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 397.930909][ T9501] trusted_key: encrypted_key: key trusted:s)’yz not found [ 398.002467][ T8957] EXT4-fs (loop8): unmounting filesystem. [ 398.087435][ T9505] set_capacity_and_notify: 2 callbacks suppressed [ 398.087463][ T9505] loop2: detected capacity change from 0 to 1024 [ 398.211220][ T9505] hfsplus: b-tree write err: -5, ino 2 [ 398.231413][ T9508] loop7: detected capacity change from 0 to 136 [ 398.390847][ T11] hfsplus: b-tree write err: -5, ino 25 [ 398.396654][ T11] hfsplus: b-tree write err: -5, ino 4 [ 398.418768][ T11] hfsplus: b-tree write err: -5, ino 2 [ 398.621673][ T9515] loop1: detected capacity change from 0 to 1024 [ 398.818653][ T9515] hfsplus: bad catalog entry type [ 398.922535][ T8065] hfsplus: b-tree write err: -5, ino 25 [ 398.943998][ T8065] hfsplus: b-tree write err: -5, ino 4 [ 398.960175][ T8065] hfsplus: b-tree write err: -5, ino 2 [ 398.974370][ T9526] loop6: detected capacity change from 0 to 16 [ 399.048943][ T9526] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 399.138934][ T4401] udevd[4401]: incorrect cramfs checksum on /dev/loop6 [ 399.187771][ T9530] netlink: 'syz.1.1702': attribute type 3 has an invalid length. [ 399.268363][ T4401] udevd[4401]: incorrect cramfs checksum on /dev/loop6 [ 399.365388][ T9532] loop7: detected capacity change from 0 to 256 [ 399.417418][ T9532] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 399.877253][ T9511] loop8: detected capacity change from 0 to 32768 [ 400.071029][ T9511] XFS (loop8): Mounting V5 Filesystem [ 400.159282][ T9561] loop6: detected capacity change from 0 to 136 [ 400.184621][ T9511] XFS (loop8): Ending clean mount [ 400.443490][ T9569] loop2: detected capacity change from 0 to 64 [ 400.612997][ T8957] XFS (loop8): Unmounting Filesystem [ 401.263779][ T9551] loop7: detected capacity change from 0 to 32768 [ 401.401376][ T9551] [ 401.401376][ T9551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.401376][ T9551] [ 401.472890][ T9551] ERROR: (device loop7): dbReAlloc: the block is outside the filesystem [ 401.472890][ T9551] [ 401.517062][ T9551] ERROR: (device loop7): remounting filesystem as read-only [ 401.525057][ T9551] jfs_create: dtInsert returned -EIO [ 401.558359][ T9551] ERROR: (device loop7): jfs_create: [ 401.558359][ T9551] [ 401.849057][ C1] net_ratelimit: 4312 callbacks suppressed [ 401.849076][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.868060][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.880387][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.892847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.905734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 401.918364][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.930709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.943124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 401.956149][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 401.968802][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.365486][ T9588] loop2: detected capacity change from 0 to 1024 [ 402.553025][ T9596] netlink: 'syz.7.1720': attribute type 3 has an invalid length. [ 402.634418][ T9588] hfsplus: bad catalog entry type [ 402.776477][ T9602] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 402.887276][ T4333] hfsplus: b-tree write err: -5, ino 25 [ 402.959373][ T4333] hfsplus: b-tree write err: -5, ino 4 [ 402.965016][ T4333] hfsplus: b-tree write err: -5, ino 2 [ 402.981838][ T9602] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 403.284230][ T9614] set_capacity_and_notify: 2 callbacks suppressed [ 403.284248][ T9614] loop2: detected capacity change from 0 to 256 [ 403.361412][ T9614] exfat: Deprecated parameter 'namecase' [ 403.379400][ T9614] exfat: Deprecated parameter 'namecase' [ 403.448857][ T9614] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 403.485076][ T9614] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 404.478478][ T9637] loop7: detected capacity change from 0 to 64 [ 404.616528][ T9608] loop1: detected capacity change from 0 to 32768 [ 404.787398][ T9619] loop6: detected capacity change from 0 to 32768 [ 404.887527][ T9619] [ 404.887527][ T9619] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 404.887527][ T9619] [ 404.903215][ T9608] XFS (loop1): Mounting V5 Filesystem [ 405.005721][ T9651] loop7: detected capacity change from 0 to 128 [ 405.017701][ T9608] XFS (loop1): Ending clean mount [ 405.092660][ T9619] ERROR: (device loop6): dbReAlloc: the block is outside the filesystem [ 405.092660][ T9619] [ 405.120031][ T9651] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.162750][ T9619] ERROR: (device loop6): remounting filesystem as read-only [ 405.170371][ T9619] jfs_create: dtInsert returned -EIO [ 405.175720][ T9619] ERROR: (device loop6): jfs_create: [ 405.175720][ T9619] [ 405.245647][ T9651] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 405.457841][ T9654] sp0: Synchronizing with TNC [ 405.509984][ T4268] XFS (loop1): Unmounting Filesystem [ 405.740090][ T8065] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 405.882441][ T9634] loop2: detected capacity change from 0 to 32768 [ 406.864554][ C1] net_ratelimit: 4718 callbacks suppressed [ 406.864573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 406.882903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.895213][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 406.907704][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.920007][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 406.932417][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 406.944758][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.957133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.969524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 406.982394][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 407.074651][ T9686] loop2: detected capacity change from 0 to 2048 [ 407.208915][ T9692] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.331485][ T9682] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1749'. [ 408.746207][ T9690] loop1: detected capacity change from 0 to 40427 [ 408.872496][ T9690] F2FS-fs (loop1): Found nat_bits in checkpoint [ 409.077601][ T9690] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 409.148873][ T9690] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 409.344165][ T9710] loop6: detected capacity change from 0 to 32768 [ 409.908798][ T4278] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 410.598571][ T9756] loop8: detected capacity change from 0 to 164 [ 411.048956][ T5997] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 411.241115][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 411.263375][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.305325][ T5997] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 411.335187][ T5997] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 411.365684][ T5997] usb 3-1: Manufacturer: syz [ 411.394610][ T5997] usb 3-1: config 0 descriptor?? [ 411.792576][ T9765] loop8: detected capacity change from 0 to 32768 [ 411.830896][ T5997] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 411.858551][ T5997] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 411.868729][ C1] net_ratelimit: 5159 callbacks suppressed [ 411.868748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 411.888073][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.900392][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.900973][ T5997] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 411.913038][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 411.952049][ T5997] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 411.952873][ T9765] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 411.968717][ T5997] cougar 0003:060B:700A.0012: unknown main item tag 0x0 [ 411.979223][ T5997] cougar 0003:060B:700A.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 412.071017][ T6895] usb 3-1: USB disconnect, device number 14 [ 412.089598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.102456][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.115329][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 412.128315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:56:97:dd:66:1c:db, vlan:0) [ 412.141000][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.153327][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.190424][ T9765] JBD2: Ignoring recovery information on journal [ 412.342298][ T9765] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 412.505316][ T9778] fido_id[9778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 412.653616][ T9770] loop6: detected capacity change from 0 to 40427 [ 412.665835][ T8957] ocfs2: Unmounting device (7,8) on (node local) [ 412.813725][ T9770] F2FS-fs (loop6): invalid crc value [ 412.849452][ T9770] F2FS-fs (loop6): Found nat_bits in checkpoint [ 413.046253][ T9770] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 413.715977][ T9783] loop7: detected capacity change from 0 to 32768 [ 413.819687][ T9783] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 413.859677][ T9783] JBD2: Ignoring recovery information on journal [ 414.065823][ T9783] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 414.360331][ T7196] ocfs2: Unmounting device (7,7) on (node local) [ 414.440859][ T9814] loop6: detected capacity change from 0 to 164 [ 415.108501][ T9801] loop2: detected capacity change from 0 to 40427 [ 415.146066][ T9801] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 415.174428][ T9801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 415.189062][ T48] Bluetooth: hci6: command 0x1003 tx timeout [ 415.198325][ T4278] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 415.323480][ T9801] F2FS-fs (loop2): invalid crc value [ 415.329867][ T9801] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 415.360492][ T9801] F2FS-fs (loop2): Found nat_bits in checkpoint [ 415.431840][ T9801] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 415.440833][ T9801] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 415.468230][ T9801] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 415.482090][ T9801] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 415.575964][ T33] device hsr_slave_0 left promiscuous mode [ 415.600101][ T33] device hsr_slave_1 left promiscuous mode [ 415.618023][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.628763][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.667047][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.686409][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.711921][ T4279] syz-executor: attempt to access beyond end of device [ 415.711921][ T4279] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 415.730106][ T33] device veth1_to_bridge left promiscuous mode [ 415.736508][ T33] bridge0: port 3(veth1_to_bridge) entered disabled state [ 415.785856][ T33] device bridge_slave_1 left promiscuous mode [ 415.805796][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.856712][ T33] device bridge_slave_0 left promiscuous mode [ 415.878865][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.939605][ T9836] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1792'. [ 416.057863][ T33] device veth1_macvtap left promiscuous mode [ 416.078092][ T33] device veth0_macvtap left promiscuous mode [ 416.088312][ T33] device veth1_vlan left promiscuous mode [ 416.104010][ T9840] loop6: detected capacity change from 0 to 256 [ 416.120878][ T33] device veth0_vlan left promiscuous mode [ 416.177710][ T9842] loop8: detected capacity change from 0 to 512 [ 416.256911][ T9844] loop1: detected capacity change from 0 to 512 [ 416.318023][ T9842] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.1795: Invalid inode bitmap blk 4 in block_group 0 [ 416.347690][ T9844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 416.380643][ T9842] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 416.434109][ T9844] EXT4-fs (loop1): 1 truncate cleaned up [ 416.449001][ T9844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 416.485375][ T8957] EXT4-fs (loop8): unmounting filesystem. [ 416.625153][ T9849] loop6: detected capacity change from 0 to 256 [ 416.707656][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 416.742511][ T9849] FAT-fs (loop6): Directory bread(block 64) failed [ 416.758229][ T9849] FAT-fs (loop6): Directory bread(block 65) failed [ 416.766128][ T9849] FAT-fs (loop6): Directory bread(block 66) failed [ 416.773142][ T9849] FAT-fs (loop6): Directory bread(block 67) failed [ 416.780686][ T9849] FAT-fs (loop6): Directory bread(block 68) failed [ 416.830961][ T9849] FAT-fs (loop6): Directory bread(block 69) failed [ 416.837686][ T9849] FAT-fs (loop6): Directory bread(block 70) failed [ 416.873846][ T9849] FAT-fs (loop6): Directory bread(block 71) failed [ 416.904886][ T9849] FAT-fs (loop6): Directory bread(block 72) failed [ 416.933715][ T9849] FAT-fs (loop6): Directory bread(block 73) failed [ 417.427385][ T9853] loop2: detected capacity change from 0 to 32768 [ 417.445828][ T9853] [ 417.445828][ T9853] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 417.445828][ T9853] [ 417.475428][ T9853] ERROR: (device loop2): dbReAlloc: the block is outside the filesystem [ 417.475428][ T9853] [ 417.501069][ T9853] ERROR: (device loop2): remounting filesystem as read-only [ 417.529488][ T9853] jfs_create: dtInsert returned -EIO [ 417.537628][ T9853] ERROR: (device loop2): jfs_create: [ 417.537628][ T9853] [ 418.057047][ T9855] Falling back ldisc for ptm0. [ 418.657862][ T33] team0 (unregistering): Port device team_slave_1 removed [ 418.834286][ T9860] loop7: detected capacity change from 0 to 40427 [ 418.866546][ T9860] F2FS-fs (loop7): Invalid segment/section count (31, 24 x 1) [ 418.882544][ T9863] loop6: detected capacity change from 0 to 40427 [ 418.895657][ T33] team0 (unregistering): Port device team_slave_0 removed [ 418.904484][ T9860] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 418.968146][ T9860] F2FS-fs (loop7): invalid crc value [ 418.976663][ T9860] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 419.003064][ T9863] F2FS-fs (loop6): Found nat_bits in checkpoint [ 419.078107][ T9860] F2FS-fs (loop7): Found nat_bits in checkpoint [ 419.122482][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.181042][ T9863] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 419.220254][ T9863] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 419.311783][ T9860] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 419.332464][ T9860] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 419.376154][ T9860] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 419.384786][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.388819][ T9860] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 419.654253][ T7196] syz-executor: attempt to access beyond end of device [ 419.654253][ T7196] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 419.708204][ T9888] loop2: detected capacity change from 0 to 512 [ 419.822298][ T9888] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1812: invalid indirect mapped block 4294967295 (level 1) [ 419.914426][ T9888] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1812: invalid indirect mapped block 4294967295 (level 1) [ 419.936961][ T9888] EXT4-fs (loop2): 2 truncates cleaned up [ 419.944045][ T9888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 420.096415][ T9892] ALSA: mixer_oss: invalid index 100000 [ 420.127194][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 420.389049][ T9825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 420.389272][ T4272] Bluetooth: hci6: command 0x1003 tx timeout [ 420.711024][ T9906] loop6: detected capacity change from 0 to 256 [ 420.732810][ T9906] exfat: Deprecated parameter 'namecase' [ 420.814765][ T9906] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 421.290973][ T33] bond0 (unregistering): Released all slaves [ 421.491532][ T9909] loop1: detected capacity change from 0 to 32768 [ 421.661626][ T9911] loop2: detected capacity change from 0 to 32768 [ 421.749298][ T9911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1820 (9911) [ 421.863202][ T9911] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 421.883927][ T9911] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 421.912246][ T9911] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 421.984082][ T9911] BTRFS info (device loop2): trying to use backup root at mount time [ 422.028706][ T9911] BTRFS info (device loop2): setting nodatasum [ 422.055389][ T9911] BTRFS info (device loop2): enabling ssd optimizations [ 422.079462][ T9911] BTRFS info (device loop2): using spread ssd allocation scheme [ 422.117919][ T9911] BTRFS info (device loop2): turning on flush-on-commit [ 422.138061][ T9911] BTRFS info (device loop2): using free space tree [ 422.251177][ T9913] loop6: detected capacity change from 0 to 32768 [ 422.257213][ T9922] loop7: detected capacity change from 0 to 512 [ 422.552034][ T9913] XFS (loop6): Mounting V5 Filesystem [ 422.637350][ T9913] XFS (loop6): Ending clean mount [ 422.796170][ T4279] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 422.825576][ T9952] ALSA: mixer_oss: invalid index 100000 [ 422.877313][ T7059] XFS (loop6): Unmounting Filesystem [ 423.299954][ T9915] loop8: detected capacity change from 0 to 40427 [ 423.397279][ T9915] F2FS-fs (loop8): invalid crc value [ 423.408527][ T9915] F2FS-fs (loop8): Found nat_bits in checkpoint [ 423.458331][ T4401] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4401) [ 423.631100][ T9915] F2FS-fs (loop8): Start checkpoint disabled! [ 423.659700][ T9915] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 424.576535][ T9961] loop7: detected capacity change from 0 to 32768 [ 424.638422][ T9961] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1831 (9961) [ 424.746569][ T9961] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 424.787020][ T9961] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 424.835571][ T9961] BTRFS info (device loop7): enabling auto defrag [ 424.867675][ T9961] BTRFS info (device loop7): use no compression [ 424.919875][ T9961] BTRFS info (device loop7): max_inline at 4096 [ 424.926231][ T9961] BTRFS info (device loop7): using free space tree [ 425.106404][ T9987] loop2: detected capacity change from 0 to 512 [ 425.238561][ T9974] loop8: detected capacity change from 0 to 32768 [ 425.333386][ T9961] BTRFS info (device loop7): enabling ssd optimizations [ 425.364960][ T9978] loop6: detected capacity change from 0 to 32768 [ 425.484547][ T9978] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 425.498346][ T9978] JBD2: Ignoring recovery information on journal [ 425.589172][ T9970] loop1: detected capacity change from 0 to 40427 [ 425.607015][ T9978] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 425.665364][ T9970] F2FS-fs (loop1): invalid crc value [ 425.682741][ T7196] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 425.710091][ T9970] F2FS-fs (loop1): Found nat_bits in checkpoint [ 425.799193][ T7059] ocfs2: Unmounting device (7,6) on (node local) [ 425.975723][ T9970] F2FS-fs (loop1): Start checkpoint disabled! [ 426.069100][ T9970] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 426.399540][T10016] sp0: Synchronizing with TNC [ 426.819300][T10021] loop2: detected capacity change from 0 to 256 [ 426.839369][T10021] exfat: Deprecated parameter 'namecase' [ 426.909217][T10021] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 427.203140][T10010] loop6: detected capacity change from 0 to 32768 [ 427.230911][T10010] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1854 (10010) [ 427.304096][T10010] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 427.348951][T10010] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 427.366122][T10014] loop8: detected capacity change from 0 to 32768 [ 427.380433][T10010] BTRFS info (device loop6): enabling auto defrag [ 427.386941][T10010] BTRFS info (device loop6): use no compression [ 427.395397][T10014] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 427.407195][T10010] BTRFS info (device loop6): max_inline at 4096 [ 427.415514][T10010] BTRFS info (device loop6): using free space tree [ 427.874018][T10010] BTRFS info (device loop6): enabling ssd optimizations [ 428.062288][ T4409] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 428.146832][ T7059] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 428.600918][ T4401] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop6 scanned by udevd (4401) [ 428.844668][T10029] loop2: detected capacity change from 0 to 40427 [ 428.928480][T10029] F2FS-fs (loop2): Found nat_bits in checkpoint [ 429.068531][T10076] loop8: detected capacity change from 0 to 256 [ 429.088738][ T4322] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 429.094982][T10029] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 429.115016][T10076] exfat: Deprecated parameter 'namecase' [ 429.134426][T10029] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 429.147223][T10051] loop7: detected capacity change from 0 to 32768 [ 429.173760][T10076] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 429.288678][ T4322] usb 7-1: Using ep0 maxpacket: 16 [ 429.295879][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 429.359069][ T4322] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.412619][ T4322] usb 7-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 429.494221][ T4322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.546845][ T4322] usb 7-1: config 0 descriptor?? [ 429.883018][T10080] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 429.983178][ T4322] uclogic 0003:28BD:0055.0013: interface is invalid, ignoring [ 430.017933][T10080] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 430.124395][ T26] audit: type=1800 audit(1774474145.809:85): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1865" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 430.207496][ T4322] usb 7-1: USB disconnect, device number 6 [ 431.219475][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1888'. [ 431.357572][T10092] set_capacity_and_notify: 1 callbacks suppressed [ 431.357587][T10092] loop8: detected capacity change from 0 to 32768 [ 431.388928][T10092] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 431.568013][T10101] loop6: detected capacity change from 0 to 32768 [ 431.623418][T10101] [ 431.623418][T10101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.623418][T10101] [ 431.695964][ T4401] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 431.779345][ T7059] [ 431.779345][ T7059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.779345][ T7059] [ 431.841185][ T7059] [ 431.841185][ T7059] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 431.841185][ T7059] [ 432.156883][T10110] loop2: detected capacity change from 0 to 32768 [ 432.355250][T10118] loop6: detected capacity change from 0 to 256 [ 432.481416][T10112] loop1: detected capacity change from 0 to 32768 [ 432.516190][T10118] FAT-fs (loop6): Directory bread(block 64) failed [ 432.538671][T10118] FAT-fs (loop6): Directory bread(block 65) failed [ 432.545370][T10118] FAT-fs (loop6): Directory bread(block 66) failed [ 432.552725][T10112] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 432.628039][T10118] FAT-fs (loop6): Directory bread(block 67) failed [ 432.672537][T10118] FAT-fs (loop6): Directory bread(block 68) failed [ 432.708895][T10118] FAT-fs (loop6): Directory bread(block 69) failed [ 432.767814][T10118] FAT-fs (loop6): Directory bread(block 70) failed [ 432.801430][T10118] FAT-fs (loop6): Directory bread(block 71) failed [ 432.839241][T10118] FAT-fs (loop6): Directory bread(block 72) failed [ 432.846039][T10118] FAT-fs (loop6): Directory bread(block 73) failed [ 433.080197][ T4482] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 433.932876][T10134] loop8: detected capacity change from 0 to 32768 [ 434.034135][T10134] XFS (loop8): Mounting V5 Filesystem [ 434.122077][T10134] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 434.159487][T10144] loop2: detected capacity change from 0 to 32768 [ 434.183759][T10144] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 434.217075][T10134] XFS (loop8): Starting recovery (logdev: internal) [ 434.305462][T10134] XFS (loop8): Ending recovery (logdev: internal) [ 434.503190][ T8957] XFS (loop8): Unmounting Filesystem [ 434.583598][ T4409] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 434.690022][T10167] loop2: detected capacity change from 0 to 4096 [ 434.762315][T10167] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 434.832850][T10167] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 434.906983][ T26] audit: type=1800 audit(1774474150.589:86): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1902" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 435.504156][T10184] loop8: detected capacity change from 0 to 256 [ 435.730481][T10186] loop6: detected capacity change from 0 to 512 [ 435.791126][T10186] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 435.820070][T10186] EXT4-fs (loop6): orphan cleanup on readonly fs [ 435.891147][T10186] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 435.902131][T10172] XFS (loop1): Mounting V5 Filesystem [ 435.948792][T10186] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 435.978798][T10186] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.1911: Failed to acquire dquot type 1 [ 436.029046][T10186] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1911: bg 0: block 40: padding at end of block bitmap is not set [ 436.049205][T10172] XFS (loop1): Ending clean mount [ 436.106906][T10186] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 436.158488][T10186] EXT4-fs (loop6): 1 truncate cleaned up [ 436.178891][T10186] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 436.275808][ T4268] XFS (loop1): Unmounting Filesystem [ 436.335394][T10186] EXT4-fs (loop6): unmounting filesystem. [ 436.687959][T10203] bridge0: port 3(bond0) entered blocking state [ 436.717371][T10203] bridge0: port 3(bond0) entered disabled state [ 436.738459][T10203] device bond0 entered promiscuous mode [ 436.774467][T10203] device bond_slave_0 entered promiscuous mode [ 436.802683][T10203] device bond_slave_1 entered promiscuous mode [ 436.822420][T10203] bridge0: port 3(bond0) entered blocking state [ 436.828875][T10203] bridge0: port 3(bond0) entered forwarding state [ 436.978698][ T8180] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 437.175629][ T8180] usb 7-1: string descriptor 0 read error: -22 [ 437.195782][ T8180] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 437.215687][ T8180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.230694][ T8180] usb 7-1: config 0 descriptor?? [ 437.253746][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1923'. [ 437.265760][ T8180] usbtest 7-1:0.0: FX2 device [ 437.283616][ T8180] usbtest 7-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 437.478562][ T8180] usb 7-1: USB disconnect, device number 7 [ 437.827728][T10210] set_capacity_and_notify: 1 callbacks suppressed [ 437.827745][T10210] loop2: detected capacity change from 0 to 32768 [ 437.851619][T10231] loop1: detected capacity change from 0 to 512 [ 437.886394][T10231] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 437.900195][T10231] EXT4-fs (loop1): orphan cleanup on readonly fs [ 437.948908][T10210] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1920 (10210) [ 437.968746][ T8180] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 437.995500][T10231] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 438.034361][T10210] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 438.055201][T10210] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 438.075568][T10210] BTRFS info (device loop2): using free space tree [ 438.088698][T10238] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1933'. [ 438.097987][T10231] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 438.108741][T10231] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.1930: Failed to acquire dquot type 1 [ 438.125317][T10238] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1933'. [ 438.161243][T10243] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1933'. [ 438.174622][T10231] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1930: bg 0: block 40: padding at end of block bitmap is not set [ 438.214654][T10231] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 438.223716][ T8180] usb 7-1: Using ep0 maxpacket: 8 [ 438.234771][ T8180] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 438.277819][ T8180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.308296][T10231] EXT4-fs (loop1): 1 truncate cleaned up [ 438.330679][T10231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 438.352256][ T8180] usb 7-1: Product: syz [ 438.356596][ T8180] usb 7-1: Manufacturer: syz [ 438.377479][ T8180] usb 7-1: SerialNumber: syz [ 438.382566][T10210] BTRFS info (device loop2): enabling ssd optimizations [ 438.400495][T10231] EXT4-fs (loop1): unmounting filesystem. [ 438.427921][ T8180] usb 7-1: config 0 descriptor?? [ 438.509950][ T8180] usbtest 7-1:0.0: FX2 device [ 438.514849][ T8180] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 438.707179][T10017] usb 7-1: USB disconnect, device number 8 [ 438.727050][ T4279] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 439.244870][T10263] loop2: detected capacity change from 0 to 4096 [ 439.303068][T10264] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.449142][T10266] bridge0: port 3(bond0) entered blocking state [ 439.455854][T10266] bridge0: port 3(bond0) entered disabled state [ 439.477517][T10266] device bond0 entered promiscuous mode [ 439.496064][T10266] device bond_slave_0 entered promiscuous mode [ 439.522857][T10266] device bond_slave_1 entered promiscuous mode [ 439.557020][T10266] bridge0: port 3(bond0) entered blocking state [ 439.563526][T10266] bridge0: port 3(bond0) entered forwarding state [ 439.679842][T10276] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 439.911196][ T26] audit: type=1326 audit(1774474155.599:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6759c799 code=0x7ffc0000 [ 439.991280][ T26] audit: type=1326 audit(1774474155.629:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feb6759c799 code=0x7ffc0000 [ 440.039971][ T26] audit: type=1326 audit(1774474155.629:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb6759c502 code=0x7ffc0000 [ 440.091792][ T26] audit: type=1326 audit(1774474155.629:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6759c799 code=0x7ffc0000 [ 440.132169][ T26] audit: type=1326 audit(1774474155.629:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7feb6759c799 code=0x7ffc0000 [ 440.164429][ T26] audit: type=1326 audit(1774474155.629:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.7.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6759c799 code=0x7ffc0000 [ 440.232113][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.238487][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.358375][T10295] loop6: detected capacity change from 0 to 1024 [ 440.520411][T10301] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1951'. [ 440.549287][T10301] netlink: 'syz.1.1951': attribute type 9 has an invalid length. [ 440.554951][ T4311] hfsplus: b-tree write err: -5, ino 25 [ 440.566359][T10301] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1951'. [ 440.590697][T10301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1951'. [ 440.598925][ T4311] hfsplus: b-tree write err: -5, ino 4 [ 440.605306][ T4311] hfsplus: b-tree write err: -5, ino 2 [ 440.802917][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 441.008678][ T5995] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 441.069500][T10318] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1970'. [ 441.083687][T10319] loop8: detected capacity change from 0 to 256 [ 441.107238][T10318] nbd: illegal input index -28 [ 441.160419][T10319] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 441.200325][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 441.200341][ T26] audit: type=1800 audit(1774474156.889:96): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1962" name="file1" dev="loop8" ino=1048831 res=0 errno=0 [ 441.238382][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.238420][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.238445][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.238486][ T5995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.238513][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.240493][ T5995] usb 7-1: config 0 descriptor?? [ 441.679035][ T5995] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 441.715777][ T5995] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 441.733823][T10325] loop7: detected capacity change from 0 to 4096 [ 441.758464][T10327] loop1: detected capacity change from 0 to 256 [ 441.776439][T10325] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 441.823428][T10327] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 441.845624][T10325] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 441.886984][ T5995] usb 7-1: USB disconnect, device number 9 [ 441.958390][ T26] audit: type=1800 audit(1774474157.639:97): pid=10325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1963" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 442.033782][T10316] loop2: detected capacity change from 0 to 32768 [ 442.170132][T10316] XFS (loop2): Mounting V5 Filesystem [ 442.314111][T10316] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 442.367944][T10330] fido_id[10330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 442.471674][T10316] XFS (loop2): Starting recovery (logdev: internal) [ 442.558784][T10316] XFS (loop2): Ending recovery (logdev: internal) [ 442.789955][T10354] loop7: detected capacity change from 0 to 256 [ 442.842160][ T4279] XFS (loop2): Unmounting Filesystem [ 443.522670][T10370] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 443.613889][ T8182] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 443.787794][T10359] loop1: detected capacity change from 0 to 32768 [ 443.818961][ T8182] usb 9-1: Using ep0 maxpacket: 16 [ 443.839462][ T8182] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.881353][ T8182] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.896508][ T8182] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 443.912876][ T8182] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 443.926245][ T8182] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.928443][T10385] loop6: detected capacity change from 0 to 256 [ 443.943440][ T26] audit: type=1326 audit(1774474159.629:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 443.969544][T10385] exfat: Deprecated parameter 'utf8' [ 443.974918][T10385] exfat: Deprecated parameter 'namecase' [ 443.999258][ T26] audit: type=1326 audit(1774474159.649:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 444.022944][ T26] audit: type=1326 audit(1774474159.679:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 444.041650][ T8182] usb 9-1: config 0 descriptor?? [ 444.050637][ T26] audit: type=1326 audit(1774474159.679:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f648359c502 code=0x7ffc0000 [ 444.059344][T10385] exfat: Deprecated parameter 'namecase' [ 444.073721][ T26] audit: type=1326 audit(1774474159.679:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 444.102740][T10385] exfat: Deprecated parameter 'utf8' [ 444.127815][T10385] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 444.154309][ T26] audit: type=1326 audit(1774474159.679:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 444.154885][T10359] XFS (loop1): Mounting V5 Filesystem [ 444.327141][ T26] audit: type=1326 audit(1774474159.679:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 444.427123][ T26] audit: type=1326 audit(1774474159.679:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.2.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648359c799 code=0x7ffc0000 [ 444.473191][T10359] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 444.563699][ T8182] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0015/input/input15 [ 444.623038][T10359] XFS (loop1): Starting recovery (logdev: internal) [ 444.666210][T10359] XFS (loop1): Ending recovery (logdev: internal) [ 444.683266][ T8182] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 444.829336][ T7357] usb 9-1: USB disconnect, device number 2 [ 444.960167][ T4268] XFS (loop1): Unmounting Filesystem [ 445.032606][T10402] fido_id[10402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 445.438000][T10399] loop6: detected capacity change from 0 to 32768 [ 445.477175][T10399] XFS (loop6): Mounting V5 Filesystem [ 445.508472][T10399] XFS (loop6): Ending clean mount [ 445.616280][ T7059] XFS (loop6): Unmounting Filesystem [ 445.685105][ T9825] Bluetooth: hci5: link tx timeout [ 445.691335][ T9825] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 445.905016][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 446.088375][T10425] netlink: 'syz.8.2000': attribute type 3 has an invalid length. [ 446.125799][T10427] loop2: detected capacity change from 0 to 256 [ 446.220944][T10427] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 446.343539][T10430] loop8: detected capacity change from 0 to 1024 [ 446.356302][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 446.356319][ T26] audit: type=1800 audit(1774474162.039:109): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1999" name="file1" dev="loop2" ino=1048838 res=0 errno=0 [ 446.546732][ T4311] hfsplus: b-tree write err: -5, ino 25 [ 446.565820][ T4311] hfsplus: b-tree write err: -5, ino 4 [ 446.579725][ T4311] hfsplus: b-tree write err: -5, ino 2 [ 446.785597][T10439] loop2: detected capacity change from 0 to 64 [ 446.841009][T10422] loop1: detected capacity change from 0 to 32768 [ 446.879799][T10422] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1998 (10422) [ 446.919078][T10422] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 446.950940][T10422] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 446.952693][T10439] Trying to free block not in datazone [ 446.995644][T10422] BTRFS info (device loop1): using free space tree [ 447.246549][T10422] BTRFS info (device loop1): enabling ssd optimizations [ 447.625737][ T4268] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 447.721757][T10472] loop7: detected capacity change from 0 to 4096 [ 447.753442][ T9825] Bluetooth: hci5: command 0x0406 tx timeout [ 447.777530][T10472] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 447.887666][T10478] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2014'. [ 447.923679][T10478] netlink: 'syz.2.2014': attribute type 9 has an invalid length. [ 447.950983][T10478] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2014'. [ 447.984003][T10478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2014'. [ 448.018792][T10472] ntfs3: loop7: failed to convert "076c" to cp857 [ 448.068357][T10472] ntfs3: loop7: ino=5, "/" directory corrupted [ 448.261896][ T4401] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4401) [ 448.403884][T10489] loop7: detected capacity change from 0 to 8 [ 449.406982][T10491] loop8: detected capacity change from 0 to 32768 [ 449.497460][T10491] XFS (loop8): Mounting V5 Filesystem [ 449.599124][T10491] XFS (loop8): Ending clean mount [ 449.750811][T10523] loop6: detected capacity change from 0 to 128 [ 449.826487][ T8957] XFS (loop8): Unmounting Filesystem [ 450.707677][T10527] loop1: detected capacity change from 0 to 32768 [ 450.927703][T10548] netlink: 'syz.2.2042': attribute type 3 has an invalid length. [ 450.937811][T10547] loop8: detected capacity change from 0 to 764 [ 451.708203][T10566] ALSA: mixer_oss: invalid OSS volume '' [ 452.227776][T10554] loop1: detected capacity change from 0 to 32768 [ 452.259816][T10554] XFS (loop1): Mounting V5 Filesystem [ 452.361080][T10554] XFS (loop1): Ending clean mount [ 452.536680][ T4268] XFS (loop1): Unmounting Filesystem [ 452.907014][T10607] loop8: detected capacity change from 0 to 128 [ 453.175303][T10609] loop6: detected capacity change from 0 to 16 [ 453.198808][T10609] erofs: (device loop6): mounted with root inode @ nid 36. [ 453.211685][T10609] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 453.221578][T10609] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 453.423611][T10617] loop2: detected capacity change from 0 to 512 [ 453.452908][T10617] EXT4-fs: Ignoring removed nobh option [ 453.518327][T10617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 453.593916][T10617] EXT4-fs (loop2): 1 truncate cleaned up [ 453.661677][T10617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 453.937271][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 454.224612][T10639] loop2: detected capacity change from 0 to 128 [ 454.628730][ T4272] Bluetooth: hci3: command 0x042e tx timeout [ 454.655783][T10651] loop1: detected capacity change from 0 to 4096 [ 454.670960][T10651] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 454.766386][T10651] ntfs3: loop1: failed to convert "076c" to cp857 [ 454.818288][T10651] ntfs3: loop1: ino=5, "/" directory corrupted [ 454.981550][T10657] loop2: detected capacity change from 0 to 64 [ 455.033396][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.059124][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.080757][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.120971][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.157490][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.185468][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.226901][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.260842][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.296944][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.325836][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.334519][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.342961][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.350837][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.358474][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.366669][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.375219][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.410030][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.419013][ T4322] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 455.431421][ T4322] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 455.459445][T10666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2097'. [ 455.475619][T10666] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2097'. [ 455.745732][T10667] fido_id[10667]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 456.719016][ T4272] Bluetooth: hci3: command 0x042e tx timeout [ 465.215348][ T4272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 465.235907][ T4272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 465.245382][ T4272] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 465.256823][ T4272] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 465.265256][ T4272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 465.276132][ T4272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 465.432388][T10683] chnl_net:caif_netlink_parms(): no params data found [ 465.489655][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.496953][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.505533][T10683] device bridge_slave_0 entered promiscuous mode [ 465.515787][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.523974][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.532583][T10683] device bridge_slave_1 entered promiscuous mode [ 465.555978][T10683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.568193][T10683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.597625][T10683] team0: Port device team_slave_0 added [ 465.611609][T10683] team0: Port device team_slave_1 added [ 465.633569][T10683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.640656][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.666860][T10683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.680355][T10683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.687360][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.714582][T10683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.752348][T10683] device hsr_slave_0 entered promiscuous mode [ 465.759756][T10683] device hsr_slave_1 entered promiscuous mode [ 465.766373][T10683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.774363][T10683] Cannot create hsr debugfs directory [ 465.906266][T10683] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 465.916737][T10683] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 465.927458][T10683] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 465.941467][T10683] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 465.968354][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.975541][T10683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.984895][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.992211][T10683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.073225][T10698] loop2: detected capacity change from 0 to 1024 [ 466.250576][ T33] hfsplus: b-tree write err: -5, ino 25 [ 466.256458][ T33] hfsplus: b-tree write err: -5, ino 4 [ 466.280964][ T33] hfsplus: b-tree write err: -5, ino 2 [ 466.332298][T10683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.393831][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.411389][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.452336][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 466.619638][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.634530][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.671992][T10683] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.693789][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.711239][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.765155][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.772418][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.833019][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.887139][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.907061][T10716] loop1: detected capacity change from 0 to 256 [ 466.915069][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.922311][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.934437][T10716] exfat: Deprecated parameter 'utf8' [ 466.974952][T10716] exfat: Deprecated parameter 'utf8' [ 466.988802][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.017457][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.042608][T10716] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 467.067085][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.107108][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.148114][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.179849][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.238009][T10683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.251680][T10720] loop6: detected capacity change from 0 to 64 [ 467.283866][T10683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.349240][ T9825] Bluetooth: hci6: command 0x0409 tx timeout [ 467.361720][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.398772][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.407517][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.417736][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.426789][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.466834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.684835][T10706] loop2: detected capacity change from 0 to 32768 [ 467.729073][T10706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2120 (10706) [ 467.814503][T10706] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 467.854460][T10706] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 467.885472][T10706] BTRFS info (device loop2): use no compression [ 467.903520][T10706] BTRFS info (device loop2): setting nodatasum [ 467.948753][T10706] BTRFS info (device loop2): using free space tree [ 468.161087][T10706] BTRFS info (device loop2): enabling ssd optimizations [ 468.345738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.363313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.414138][T10683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.488507][ T4279] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.746182][T10685] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (10685) [ 469.109494][ T5997] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 469.242720][T10779] device vlan2 entered promiscuous mode [ 469.248386][T10779] device bridge0 entered promiscuous mode [ 469.270553][T10779] bridge0: port 4(vlan2) entered blocking state [ 469.288729][ T5997] usb 7-1: Using ep0 maxpacket: 16 [ 469.295867][ T5997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.329066][ T5997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.378823][ T5997] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 469.387968][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.396369][T10779] bridge0: port 4(vlan2) entered disabled state [ 469.428927][ T9825] Bluetooth: hci6: command 0x041b tx timeout [ 469.453758][ T5997] usb 7-1: config 0 descriptor?? [ 469.927555][T10793] loop1: detected capacity change from 0 to 512 [ 469.929627][ T5997] hid-multitouch 0003:1FD2:6007.0017: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 469.980310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.993566][T10795] loop2: detected capacity change from 0 to 64 [ 470.013195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.070773][T10793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 470.091745][T10793] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.097947][T10683] device veth0_vlan entered promiscuous mode [ 470.122429][ T8182] usb 7-1: USB disconnect, device number 10 [ 470.193326][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 470.202208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.259912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.300160][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 470.306099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.338326][T10683] device veth1_vlan entered promiscuous mode [ 470.406708][T10798] fido_id[10798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 470.476624][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.517628][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.530484][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.546068][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.557912][T10683] device veth0_macvtap entered promiscuous mode [ 470.583402][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.602504][T10683] device veth1_macvtap entered promiscuous mode [ 470.650495][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.671929][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.692427][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.723591][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.742616][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.768199][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.779183][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.790358][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.805549][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.819722][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.832301][ T4315] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 470.851206][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.871109][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.890408][T10683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.906556][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.925178][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.957428][ T9825] Bluetooth: hci4: unknown advertising packet type: 0x63 [ 470.957531][ T9825] Bluetooth: hci4: Malformed LE Event: 0x02 [ 470.973963][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.011148][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.052827][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.064000][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.065025][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.088406][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.107101][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.119965][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.137733][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.148408][ T4315] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 471.173244][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.193601][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.206998][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.218776][T10821] loop8: detected capacity change from 0 to 2048 [ 471.219753][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.237079][ T4315] usb 2-1: config 0 descriptor?? [ 471.242455][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.259043][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.290925][T10821] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 471.305181][T10683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.342045][T10821] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 471.355738][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.367028][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.375626][T10821] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 471.388151][T10683] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.400853][T10683] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.410342][T10821] UDF-fs: Scanning with blocksize 512 failed [ 471.416480][T10683] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.430728][T10823] loop6: detected capacity change from 0 to 256 [ 471.438958][T10821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.458086][T10683] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.503846][T10823] exfat: Deprecated parameter 'utf8' [ 471.509638][ T9825] Bluetooth: hci6: command 0x040f tx timeout [ 471.554046][ T26] audit: type=1800 audit(1774474187.239:110): pid=10821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2149" name="file2" dev="loop8" ino=839 res=0 errno=0 [ 471.622044][T10823] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 471.821460][ T8065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.860597][ T8065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.883316][ T4315] hid-led: probe of 0003:27B8:01ED.0018 failed with error -71 [ 471.895727][ T8065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 471.914431][T10825] loop8: detected capacity change from 0 to 512 [ 471.926692][ T4315] usb 2-1: USB disconnect, device number 11 [ 471.972708][T10825] EXT4-fs: Ignoring removed nobh option [ 472.016126][ T8065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.034534][T10825] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 472.048786][ T8065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.086998][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.147706][T10825] EXT4-fs (loop8): 1 truncate cleaned up [ 472.198969][T10825] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 472.324242][T10834] loop9: detected capacity change from 0 to 128 [ 472.388329][ T8957] EXT4-fs (loop8): unmounting filesystem. [ 472.512450][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.524560][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.544918][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.577817][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.604973][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.631036][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.655722][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.680330][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.707083][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.737974][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.754960][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.774061][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.786118][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.801696][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.814941][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.835260][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.857296][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.874768][ T27] hid-generic 0003:0004:0000.0019: unknown main item tag 0x0 [ 472.896282][ T27] hid-generic 0003:0004:0000.0019: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 472.923924][T10848] loop1: detected capacity change from 0 to 64 [ 473.030604][ T9825] Bluetooth: hci3: command 0x0406 tx timeout [ 473.238775][ T8182] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 473.429456][ T8182] usb 9-1: Using ep0 maxpacket: 16 [ 473.437067][ T8182] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.518701][ T8182] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.578715][ T8182] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 473.588882][ T4272] Bluetooth: hci6: command 0x0419 tx timeout [ 473.658732][ T8182] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.736291][ T8182] usb 9-1: config 0 descriptor?? [ 473.783340][T10860] fido_id[10860]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 473.874665][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2168'. [ 473.901538][T10868] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2168'. [ 474.178440][ T8182] hid-multitouch 0003:1FD2:6007.001A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 474.337620][T10852] loop6: detected capacity change from 0 to 32768 [ 474.415210][ T8182] usb 9-1: USB disconnect, device number 3 [ 474.527200][T10852] XFS (loop6): Mounting V5 Filesystem [ 474.547078][T10878] fido_id[10878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 474.645461][T10886] loop2: detected capacity change from 0 to 4096 [ 474.684790][T10886] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 474.735407][T10852] XFS (loop6): Ending clean mount [ 474.930377][T10886] ntfs: volume version 3.1. [ 474.990663][ T7059] XFS (loop6): Unmounting Filesystem [ 475.111183][T10900] loop9: detected capacity change from 0 to 1024 [ 475.245192][ T8182] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 475.297819][ T8065] hfsplus: b-tree write err: -5, ino 25 [ 475.333621][ T8065] hfsplus: b-tree write err: -5, ino 4 [ 475.347690][ T8065] hfsplus: b-tree write err: -5, ino 2 [ 475.459313][ T8182] usb 2-1: Using ep0 maxpacket: 16 [ 475.466426][ T8182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.518335][ T8182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.538676][ T8182] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.567107][ T8182] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 475.586641][ T8182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.617579][ T8182] usb 2-1: config 0 descriptor?? [ 476.064799][ T8182] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001B/input/input16 [ 476.119777][ T8182] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 476.276903][ T8182] usb 2-1: USB disconnect, device number 12 [ 476.497564][T10928] loop9: detected capacity change from 0 to 4096 [ 476.516063][T10924] fido_id[10924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 476.658738][ T5997] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 476.669764][T10928] ntfs3: loop9: failed to convert "0080" to cp775 [ 476.705709][T10928] ntfs3: loop9: failed to convert name for inode 1e. [ 476.721462][T10932] loop8: detected capacity change from 0 to 512 [ 476.858759][ T5997] usb 3-1: Using ep0 maxpacket: 16 [ 476.874851][ T5997] usb 3-1: unable to get BOS descriptor or descriptor too short [ 476.910369][ T5997] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 476.974902][ T5997] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 477.009453][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.017810][ T5997] usb 3-1: Product: syz [ 477.066936][ T5997] usb 3-1: Manufacturer: syz [ 477.080746][ T5997] usb 3-1: SerialNumber: syz [ 477.225221][T10941] loop1: detected capacity change from 0 to 256 [ 477.249880][T10941] exfat: Deprecated parameter 'utf8' [ 477.275601][T10941] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 477.322999][ T5997] usb 3-1: MIDIStreaming interface descriptor not found [ 477.542283][ T5997] usb 3-1: USB disconnect, device number 15 [ 477.905286][ T9825] Bluetooth: hci5: unknown advertising packet type: 0x63 [ 477.905414][ T9825] Bluetooth: hci5: Malformed LE Event: 0x02 [ 478.005143][T10801] udevd[10801]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.906838][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2221'. [ 478.926808][T10993] loop6: detected capacity change from 0 to 256 [ 479.168240][T10997] loop1: detected capacity change from 0 to 256 [ 479.246275][T10997] FAT-fs (loop1): Directory bread(block 64) failed [ 479.278446][T10997] FAT-fs (loop1): Directory bread(block 65) failed [ 479.325160][T10997] FAT-fs (loop1): Directory bread(block 66) failed [ 479.345421][T10997] FAT-fs (loop1): Directory bread(block 67) failed [ 479.401903][T10997] FAT-fs (loop1): Directory bread(block 68) failed [ 479.408535][T10997] FAT-fs (loop1): Directory bread(block 69) failed [ 479.498908][T10997] FAT-fs (loop1): Directory bread(block 70) failed [ 479.505556][T10997] FAT-fs (loop1): Directory bread(block 71) failed [ 479.608760][T10997] FAT-fs (loop1): Directory bread(block 72) failed [ 479.666937][T10997] FAT-fs (loop1): Directory bread(block 73) failed [ 479.709435][T10976] loop2: detected capacity change from 0 to 40427 [ 479.758824][T10976] F2FS-fs (loop2): invalid crc value [ 479.764226][T10976] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 479.882509][T10976] F2FS-fs (loop2): Found nat_bits in checkpoint [ 479.930943][T11018] loop8: detected capacity change from 0 to 8 [ 479.999886][T11018] SQUASHFS error: Failed to read block 0x18e: -5 [ 480.006447][T11018] SQUASHFS error: Unable to read metadata cache entry [18c] [ 480.091713][T10976] F2FS-fs (loop2): recover fsync data on readonly fs [ 480.126241][T10976] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 480.175885][T10976] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 480.345162][T11027] loop8: detected capacity change from 0 to 256 [ 480.372275][T11027] FAT-fs (loop8): Directory bread(block 1285) failed [ 480.388877][T11027] FAT-fs (loop8): Directory bread(block 1286) failed [ 480.433715][T11027] FAT-fs (loop8): Directory bread(block 1287) failed [ 480.459129][T11027] FAT-fs (loop8): Directory bread(block 1288) failed [ 480.524810][T11027] FAT-fs (loop8): Directory bread(block 1285) failed [ 480.550953][T11027] FAT-fs (loop8): Directory bread(block 1286) failed [ 480.557748][T11027] FAT-fs (loop8): Directory bread(block 1287) failed [ 480.600638][T11027] FAT-fs (loop8): Directory bread(block 1288) failed [ 480.624509][T11028] FAT-fs (loop8): Directory bread(block 1285) failed [ 480.659640][T11028] FAT-fs (loop8): Directory bread(block 1286) failed [ 480.950561][T11033] [U]  [ 481.138309][T11022] loop1: detected capacity change from 0 to 32768 [ 481.165539][T11022] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 481.242853][ T5669] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 481.331960][T11044] loop2: detected capacity change from 0 to 512 [ 481.371489][T11044] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 481.377237][T11044] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 481.392545][T11044] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2246: inode #15: comm syz.2.2246: iget: illegal inode # [ 481.392965][T11044] EXT4-fs (loop2): Remounting filesystem read-only [ 481.392984][T11044] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2246: couldn't read orphan inode 15 (err -117) [ 481.393302][T11044] EXT4-fs (loop2): Remounting filesystem read-only [ 481.393331][T11044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 481.442090][ T5669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.570693][ T5669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.570739][ T5669] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 481.570767][ T5669] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.573461][ T5669] usb 9-1: config 0 descriptor?? [ 481.593573][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 481.709992][T10804] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 481.913995][T11058] loop9: detected capacity change from 0 to 512 [ 481.920893][T11056] device vlan2 entered promiscuous mode [ 481.926528][T11056] device bridge0 entered promiscuous mode [ 481.950327][T11056] bridge0: port 3(vlan2) entered blocking state [ 481.963845][T11056] bridge0: port 3(vlan2) entered disabled state [ 481.993762][T11058] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 482.050522][T11058] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.194636][ T5669] hid-led: probe of 0003:27B8:01ED.001C failed with error -71 [ 482.219891][ T5669] usb 9-1: USB disconnect, device number 4 [ 482.339088][T10683] EXT4-fs (loop9): unmounting filesystem. [ 482.566562][T11071] loop2: detected capacity change from 0 to 2048 [ 482.612178][T11071] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 482.651675][T11075] loop1: detected capacity change from 0 to 256 [ 482.671042][T11071] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 482.699493][T11071] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 482.709584][T11075] exfat: Deprecated parameter 'utf8' [ 482.741922][T11071] UDF-fs: Scanning with blocksize 512 failed [ 482.786030][T11071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.790134][T11075] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 482.881745][ T26] audit: type=1800 audit(1774474198.569:111): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2256" name="file2" dev="loop2" ino=839 res=0 errno=0 [ 483.010434][T11083] netlink: 'syz.8.2259': attribute type 3 has an invalid length. [ 483.610040][ T26] audit: type=1326 audit(1774474199.299:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 483.633391][T11104] device vlan2 entered promiscuous mode [ 483.659019][T11104] device bridge0 entered promiscuous mode [ 483.677818][T11104] bridge0: port 3(vlan2) entered blocking state [ 483.728820][ T26] audit: type=1326 audit(1774474199.299:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 483.736593][T11104] bridge0: port 3(vlan2) entered disabled state [ 483.806667][ T26] audit: type=1326 audit(1774474199.329:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 483.830107][ T26] audit: type=1326 audit(1774474199.329:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 483.920605][ T26] audit: type=1326 audit(1774474199.329:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 483.987902][ T26] audit: type=1326 audit(1774474199.329:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 484.083403][ T26] audit: type=1326 audit(1774474199.329:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 484.167343][ T26] audit: type=1326 audit(1774474199.329:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.9.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011b9c799 code=0x7ffc0000 [ 484.218703][ T5669] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 484.401921][ T5669] usb 10-1: Using ep0 maxpacket: 16 [ 484.417776][T11090] loop8: detected capacity change from 0 to 32768 [ 484.421036][ T5669] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 484.452155][ T5669] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 484.458324][T11090] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 484.478670][ T5669] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.506758][ T5669] usb 10-1: Product: syz [ 484.518932][ T5669] usb 10-1: Manufacturer: syz [ 484.528987][ T5669] usb 10-1: SerialNumber: syz [ 484.555331][ T5669] r8152-cfgselector 10-1: config 0 descriptor?? [ 484.801321][ T5669] r8152-cfgselector 10-1: Unknown version 0x0000 [ 484.843714][T10804] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 484.942795][T11107] loop2: detected capacity change from 0 to 40427 [ 484.974204][T11107] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 485.004129][T11107] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 485.025370][T11107] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 485.032750][ T5669] r8152-cfgselector 10-1: Unknown version 0x0000 [ 485.052806][ T5669] r8152-cfgselector 10-1: USB disconnect, device number 2 [ 485.087056][T11107] F2FS-fs (loop2): Found nat_bits in checkpoint [ 485.105716][T11114] loop1: detected capacity change from 0 to 32768 [ 485.118084][T11122] loop8: detected capacity change from 0 to 2048 [ 485.141230][T11122] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 485.238201][T11130] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 485.300496][T11107] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 485.307668][T11107] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 485.330258][T11114] XFS (loop1): Mounting V5 Filesystem [ 485.469956][T11114] XFS (loop1): Ending clean mount [ 485.723061][T11139] loop8: detected capacity change from 0 to 4096 [ 485.761596][T11139] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 485.788535][ T4268] XFS (loop1): Unmounting Filesystem [ 485.955477][T11139] ntfs: volume version 3.1. [ 486.811103][ T5997] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 487.032931][ T5997] usb 7-1: Using ep0 maxpacket: 16 [ 487.041417][ T5997] usb 7-1: unable to get BOS descriptor or descriptor too short [ 487.061023][ T5997] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 487.107986][ T5997] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 487.138408][T11158] loop9: detected capacity change from 0 to 32768 [ 487.156049][T11158] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10 [ 487.176514][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.196534][ T5997] usb 7-1: Product: syz [ 487.209008][ T5997] usb 7-1: Manufacturer: syz [ 487.213691][ T5997] usb 7-1: SerialNumber: syz [ 487.471009][ T5997] usb 7-1: MIDIStreaming interface descriptor not found [ 487.552800][ T5997] usb 7-1: USB disconnect, device number 11 [ 487.575577][T10685] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10 [ 487.596349][T11155] loop8: detected capacity change from 0 to 40427 [ 487.670170][T11155] F2FS-fs (loop8): invalid crc value [ 487.675567][T11155] F2FS-fs (loop8): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 487.765627][T11155] F2FS-fs (loop8): Found nat_bits in checkpoint [ 487.954884][T11155] F2FS-fs (loop8): recover fsync data on readonly fs [ 487.983776][T11155] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 488.031818][T11155] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 488.264699][T11179] loop2: detected capacity change from 0 to 512 [ 488.875767][T11171] loop9: detected capacity change from 0 to 32768 [ 488.936649][T11197] [U]  [ 488.969186][T11203] loop2: detected capacity change from 0 to 256 [ 488.977810][T11203] exfat: Deprecated parameter 'utf8' [ 489.003426][T11203] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 489.092501][T11171] XFS (loop9): Mounting V5 Filesystem [ 489.309254][T11171] XFS (loop9): Ending clean mount [ 489.394456][ T26] audit: type=1326 audit(1774474205.079:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c39c799 code=0x7ffc0000 [ 489.448887][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2312'. [ 489.518942][ T26] audit: type=1326 audit(1774474205.119:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f200c39c799 code=0x7ffc0000 [ 489.561681][T11219] loop2: detected capacity change from 0 to 256 [ 489.583791][ T26] audit: type=1326 audit(1774474205.119:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c39c799 code=0x7ffc0000 [ 489.620745][T10683] XFS (loop9): Unmounting Filesystem [ 489.717891][T11219] FAT-fs (loop2): Directory bread(block 64) failed [ 489.726992][T11219] FAT-fs (loop2): Directory bread(block 65) failed [ 489.728835][ T26] audit: type=1326 audit(1774474205.119:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c39c799 code=0x7ffc0000 [ 489.789794][T11219] FAT-fs (loop2): Directory bread(block 66) failed [ 489.797550][T11219] FAT-fs (loop2): Directory bread(block 67) failed [ 489.837591][T11219] FAT-fs (loop2): Directory bread(block 68) failed [ 489.875839][T11219] FAT-fs (loop2): Directory bread(block 69) failed [ 489.899061][T11219] FAT-fs (loop2): Directory bread(block 70) failed [ 489.905671][T11219] FAT-fs (loop2): Directory bread(block 71) failed [ 489.909470][ T26] audit: type=1326 audit(1774474205.119:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f200c39c799 code=0x7ffc0000 [ 489.947183][T11219] FAT-fs (loop2): Directory bread(block 72) failed [ 489.978898][ T26] audit: type=1326 audit(1774474205.119:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c39c799 code=0x7ffc0000 [ 489.987292][T11219] FAT-fs (loop2): Directory bread(block 73) failed [ 490.004685][ T26] audit: type=1326 audit(1774474205.119:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.1.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200c39c799 code=0x7ffc0000 [ 490.378719][ T5997] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 490.493720][T11237] netlink: 'syz.9.2323': attribute type 3 has an invalid length. [ 490.578712][ T5997] usb 7-1: Using ep0 maxpacket: 32 [ 490.581608][ T5997] usb 7-1: config 242 has an invalid interface number: 48 but max is 0 [ 490.581637][ T5997] usb 7-1: config 242 has no interface number 0 [ 490.581675][ T5997] usb 7-1: config 242 interface 48 altsetting 13 endpoint 0xE has an invalid bInterval 128, changing to 11 [ 490.581707][ T5997] usb 7-1: config 242 interface 48 has no altsetting 0 [ 490.583904][ T5997] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice=cc.72 [ 490.583936][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.583960][ T5997] usb 7-1: Product: â°Š [ 490.583978][ T5997] usb 7-1: SerialNumber: syz [ 490.805065][ T5997] asix: probe of 7-1:242.48 failed with error -22 [ 490.907806][ T5997] usb 7-1: USB disconnect, device number 12 [ 491.150418][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2332'. [ 491.257442][T11255] loop1: detected capacity change from 0 to 1024 [ 491.336123][T11255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 491.444017][ T26] audit: type=1800 audit(1774474207.129:127): pid=11255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2344" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 491.589326][T11268] loop2: detected capacity change from 0 to 1024 [ 491.626882][T11269] sp0: Synchronizing with TNC [ 491.644295][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 491.835099][ T4333] hfsplus: b-tree write err: -5, ino 25 [ 491.857442][ T4333] hfsplus: b-tree write err: -5, ino 4 [ 491.908915][ T4333] hfsplus: b-tree write err: -5, ino 2 [ 491.914574][ T4333] hfsplus: b-tree write err: -5, ino 26 [ 492.008969][T11275] trusted_key: encrypted_key: key trusted:s)’yz not found [ 492.141952][T11279] loop6: detected capacity change from 0 to 1024 [ 492.319605][T11279] hfsplus: b-tree write err: -5, ino 2 [ 492.496079][ T46] hfsplus: b-tree write err: -5, ino 25 [ 492.526628][ T46] hfsplus: b-tree write err: -5, ino 4 [ 492.536720][ T46] hfsplus: b-tree write err: -5, ino 2 [ 492.555151][T11291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2350'. [ 492.765990][T11265] loop8: detected capacity change from 0 to 40427 [ 492.831834][T11265] F2FS-fs (loop8): Found nat_bits in checkpoint [ 492.920493][T11265] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 492.938922][T11265] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 493.175841][T11302] loop6: detected capacity change from 0 to 128 [ 493.215573][T11302] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 493.266221][T11302] hpfs: filesystem error: improperly stopped [ 493.288680][T11302] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 493.314810][T11302] hpfs: You really don't want any checks? You are crazy... [ 493.369450][T11302] hpfs: hpfs_map_sector(): read error [ 493.375837][T11302] hpfs: code page support is disabled [ 493.431247][T11302] hpfs: hpfs_map_4sectors(): unaligned read [ 493.438076][T11302] hpfs: hpfs_map_4sectors(): unaligned read [ 493.494990][T11302] hpfs: filesystem error: unable to find root dir [ 493.593737][T11310] trusted_key: encrypted_key: key trusted:s)’yz not found [ 493.839671][T11312] loop1: detected capacity change from 0 to 512 [ 493.863614][T11300] loop2: detected capacity change from 0 to 32768 [ 494.026121][T11300] XFS (loop2): Mounting V5 Filesystem [ 494.124714][T11330] loop8: detected capacity change from 0 to 4096 [ 494.221475][T11300] XFS (loop2): Ending clean mount [ 494.259408][T11331] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.394456][ T4279] XFS (loop2): Unmounting Filesystem [ 494.451946][T11330] NILFS error (device loop8): nilfs_dotdot: directory #12 missing '.' [ 494.529332][T11330] Remounting filesystem read-only [ 494.622919][T11335] loop9: detected capacity change from 0 to 1024 [ 494.698383][T11335] hfsplus: b-tree write err: -5, ino 2 [ 494.809229][ T4347] hfsplus: b-tree write err: -5, ino 25 [ 494.815089][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 494.864195][T11337] loop1: detected capacity change from 0 to 16 [ 494.878721][ T4347] hfsplus: b-tree write err: -5, ino 2 [ 494.895883][T11337] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 494.944815][T10685] udevd[10685]: incorrect cramfs checksum on /dev/loop1 [ 495.104090][T10685] udevd[10685]: incorrect cramfs checksum on /dev/loop1 [ 495.407594][T11349] loop6: detected capacity change from 0 to 2048 [ 495.529851][T11354] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.759028][T11359] loop8: detected capacity change from 0 to 256 [ 495.811835][T11359] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 495.842127][T11356] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 495.863036][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.959891][T11362] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 496.014446][T11356] ntfs: volume version 3.1. [ 496.133838][ T26] audit: type=1800 audit(1774474211.819:128): pid=11362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2378" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 496.207144][T11370] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 496.250704][T11370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 496.297721][T11370] EXT4-fs (loop2): orphan cleanup on readonly fs [ 496.329837][T11370] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 496.390625][ T7059] EXT4-fs (loop6): unmounting filesystem. [ 496.432472][T11370] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 496.516945][T11370] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.2379: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 496.570541][T11376] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 496.607252][T11343] F2FS-fs (loop9): Found nat_bits in checkpoint [ 496.635880][T10804] udevd[10804]: incorrect cramfs checksum on /dev/loop8 [ 496.650602][T11370] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2379: couldn't read orphan inode 13 (err -117) [ 496.696015][T11370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 496.726360][T10804] udevd[10804]: incorrect cramfs checksum on /dev/loop8 [ 496.791280][T11370] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 496.830979][T11343] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2 [ 496.850985][T11370] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 496.868473][T11343] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 496.913942][T11370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002] [ 496.980857][T11370] System zones: 0-2, 18-18, 34-34 [ 496.987947][T11370] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 497.232022][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 497.319744][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2386'. [ 497.632192][T11396] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 497.722581][T11398] set_capacity_and_notify: 5 callbacks suppressed [ 497.722598][T11398] loop9: detected capacity change from 0 to 256 [ 497.778488][T11396] CIFS mount error: No usable UNC path provided in device string! [ 497.778488][T11396] [ 497.789954][T11402] loop2: detected capacity change from 0 to 64 [ 497.819398][T11398] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 497.825035][T11396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 497.887371][T11374] loop1: detected capacity change from 0 to 32768 [ 498.031163][T11374] XFS (loop1): Mounting V5 Filesystem [ 498.092394][T11412] loop2: detected capacity change from 0 to 1024 [ 498.138761][ T5997] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 498.165910][T11412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 498.174813][T11374] XFS (loop1): Ending clean mount [ 498.226456][T11374] XFS (loop1): Quotacheck needed: Please wait. [ 498.328853][ T5997] usb 7-1: Using ep0 maxpacket: 8 [ 498.337431][ T5997] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.409200][ T26] audit: type=1800 audit(1774474214.099:129): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2392" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 498.428889][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.439474][ T5997] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 498.469232][ T5997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.497437][ T5997] usb 7-1: Product: syz [ 498.528647][ T5997] usb 7-1: Manufacturer: syz [ 498.553667][ T5997] usb 7-1: SerialNumber: syz [ 498.575488][T11374] XFS (loop1): Quotacheck: Done. [ 498.586767][ T5997] usb 7-1: config 0 descriptor?? [ 498.609978][ T5997] cdc_phonet 7-1:0.0: skipping garbage [ 498.625816][ T5997] cdc_phonet 7-1:0.0: invalid descriptor buffer length [ 498.643578][ T5997] cdc_phonet: probe of 7-1:0.0 failed with error -22 [ 498.696931][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 498.752450][ T4268] XFS (loop1): Unmounting Filesystem [ 498.812277][ T5997] usb 7-1: USB disconnect, device number 13 [ 499.631894][T11423] loop8: detected capacity change from 0 to 40427 [ 499.700086][T11423] F2FS-fs (loop8): Found nat_bits in checkpoint [ 499.776889][T11442] loop1: detected capacity change from 0 to 2048 [ 499.833681][T11423] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 499.870311][T11423] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 499.889431][T11447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 499.952321][T11446] loop6: detected capacity change from 0 to 4096 [ 500.132378][T11432] loop9: detected capacity change from 0 to 32768 [ 500.136572][T11448] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.197101][T11432] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10 [ 500.273689][T11446] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.' [ 500.336560][T11446] Remounting filesystem read-only [ 500.516605][T11435] loop2: detected capacity change from 0 to 32768 [ 500.728167][T11435] XFS (loop2): Mounting V5 Filesystem [ 500.805566][T10786] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10 [ 500.869193][T11435] XFS (loop2): Ending clean mount [ 501.129526][ T4279] XFS (loop2): Unmounting Filesystem [ 501.399654][T11479] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 501.533771][T11481] loop9: detected capacity change from 0 to 2048 [ 501.620548][T11483] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.674340][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.680863][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.045611][T11494] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.166709][T11488] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 502.225138][T11488] Remounting filesystem read-only [ 502.658800][T11507] sp0: Synchronizing with TNC [ 503.113854][T11527] set_capacity_and_notify: 2 callbacks suppressed [ 503.113870][T11527] loop8: detected capacity change from 0 to 1024 [ 503.218760][T11533] loop9: detected capacity change from 0 to 64 [ 503.227966][T11527] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 2: comm syz.8.2439: lblock 2 mapped to illegal pblock 2 (length 1) [ 503.262291][T11530] loop1: detected capacity change from 0 to 1024 [ 503.296094][T11535] loop6: detected capacity change from 0 to 1024 [ 503.317315][T11527] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 503.369041][T11527] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 48: comm syz.8.2439: lblock 0 mapped to illegal pblock 48 (length 1) [ 503.393274][T11527] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 503.403829][T11527] EXT4-fs error (device loop8): ext4_acquire_dquot:6835: comm syz.8.2439: Failed to acquire dquot type 0 [ 503.440136][T11527] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 503.450648][T11527] EXT4-fs error (device loop8): ext4_evict_inode:279: inode #11: comm syz.8.2439: mark_inode_dirty error [ 503.471688][T11527] EXT4-fs warning (device loop8): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 503.501526][T11527] EXT4-fs (loop8): 1 orphan inode deleted [ 503.514985][T11527] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 503.534237][ T9] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 503.594883][ T11] hfsplus: b-tree write err: -5, ino 25 [ 503.601112][ T11] hfsplus: b-tree write err: -5, ino 4 [ 503.612404][ T9] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 503.632706][ T11] hfsplus: b-tree write err: -5, ino 2 [ 503.649027][ T9] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 503.691204][ T11] hfsplus: b-tree write err: -5, ino 26 [ 503.713472][ T4311] hfsplus: b-tree write err: -5, ino 25 [ 503.730444][ T4311] hfsplus: b-tree write err: -5, ino 4 [ 503.736117][ T4311] hfsplus: b-tree write err: -5, ino 2 [ 503.813806][ T8957] EXT4-fs (loop8): unmounting filesystem. [ 503.831572][ T4333] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 503.896223][ T4333] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 503.931387][ T4333] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 503.969715][ T8957] EXT4-fs error (device loop8): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 504.028000][ T8957] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 504.080640][ T8957] EXT4-fs error (device loop8): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 504.768764][ T5995] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 504.988807][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 504.996233][ T5995] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.027492][ T5995] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 505.040445][T11577] CIFS mount error: No usable UNC path provided in device string! [ 505.040445][T11577] [ 505.053252][ T5995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.063424][T11577] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 505.072793][ T5995] usb 3-1: Product: syz [ 505.077348][ T5995] usb 3-1: Manufacturer: syz [ 505.093256][ T5995] usb 3-1: SerialNumber: syz [ 505.117791][ T5995] usb 3-1: config 0 descriptor?? [ 505.135487][ T5995] cdc_phonet 3-1:0.0: skipping garbage [ 505.149037][ T5995] cdc_phonet 3-1:0.0: invalid descriptor buffer length [ 505.186031][ T5995] cdc_phonet: probe of 3-1:0.0 failed with error -22 [ 505.311316][T11568] loop9: detected capacity change from 0 to 32768 [ 505.340017][T11568] XFS (loop9): Mounting V5 Filesystem [ 505.384557][T11568] XFS (loop9): Ending clean mount [ 505.423248][ T5669] usb 3-1: USB disconnect, device number 16 [ 505.497169][T10683] XFS (loop9): Unmounting Filesystem [ 506.070266][T11592] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 506.324887][T11605] loop8: detected capacity change from 0 to 128 [ 506.438804][T11605] VFS: Found a Xenix FS (block size = 512) on device loop8 [ 506.604974][ T8957] sysv_free_block: trying to free block not in datazone [ 506.659066][ T8957] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 506.675314][T11614] CIFS mount error: No usable UNC path provided in device string! [ 506.675314][T11614] [ 506.748779][T11614] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 506.893935][T11616] loop8: detected capacity change from 0 to 1024 [ 507.015786][T11616] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 507.128754][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 507.152042][ T26] audit: type=1800 audit(1774474222.839:130): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2474" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 507.285461][ T8957] EXT4-fs (loop8): unmounting filesystem. [ 507.368862][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 507.376480][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.412262][ T27] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 507.457005][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.468197][T11636] loop6: detected capacity change from 0 to 512 [ 507.499453][ T27] usb 2-1: Product: syz [ 507.503701][ T27] usb 2-1: Manufacturer: syz [ 507.540040][T11636] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 507.540541][ T27] usb 2-1: SerialNumber: syz [ 507.581485][T11636] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 507.591375][T11636] EXT4-fs (loop6): orphan cleanup on readonly fs [ 507.630945][T11636] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 507.647092][ T27] usb 2-1: config 0 descriptor?? [ 507.653204][T11636] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 507.660619][T11636] EXT4-fs error (device loop6): ext4_ext_check_inode:530: inode #13: comm syz.6.2495: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 507.679284][T11636] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2495: couldn't read orphan inode 13 (err -117) [ 507.700259][T11636] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 507.720597][ T27] cdc_phonet 2-1:0.0: skipping garbage [ 507.726284][ T27] cdc_phonet 2-1:0.0: invalid descriptor buffer length [ 507.746990][T11636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 507.769980][T11643] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 507.779014][T11636] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 507.790307][ T27] cdc_phonet: probe of 2-1:0.0 failed with error -22 [ 507.797382][T11636] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002] [ 507.855029][T11645] loop2: detected capacity change from 0 to 1024 [ 507.863888][T11636] System zones: 0-2, 18-18, 34-34 [ 507.870410][T11636] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 507.934066][ T4322] usb 2-1: USB disconnect, device number 13 [ 508.080471][ T7059] EXT4-fs (loop6): unmounting filesystem. [ 508.106590][ T4347] hfsplus: b-tree write err: -5, ino 25 [ 508.140210][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 508.145960][ T4347] hfsplus: b-tree write err: -5, ino 2 [ 508.391398][T11655] loop9: detected capacity change from 0 to 4096 [ 508.431405][T11655] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 508.583229][T11655] ntfs: volume version 3.1. [ 508.823867][T11668] loop6: detected capacity change from 0 to 1024 [ 508.900529][T11668] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 2: comm syz.6.2498: lblock 2 mapped to illegal pblock 2 (length 1) [ 508.925881][T11668] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 508.934771][T11668] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.2498: lblock 0 mapped to illegal pblock 48 (length 1) [ 509.058727][T11668] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 509.067597][T11668] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.2498: Failed to acquire dquot type 0 [ 509.140947][T11668] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 509.178149][T11668] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.2498: mark_inode_dirty error [ 509.209108][T11668] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 509.221423][T11680] loop9: detected capacity change from 0 to 512 [ 509.248308][T11668] EXT4-fs (loop6): 1 orphan inode deleted [ 509.261446][ T4333] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 509.287966][T11680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 509.311920][T11668] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 509.321512][T11680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 509.354713][ T4333] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 509.355545][T11680] EXT4-fs (loop9): orphan cleanup on readonly fs [ 509.371976][T11680] EXT4-fs warning (device loop9): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 509.394447][ T4333] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:7: Failed to release dquot type 0 [ 509.409128][T11680] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 509.464495][T11680] EXT4-fs error (device loop9): ext4_ext_check_inode:530: inode #13: comm syz.9.2504: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 509.513700][T11680] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2504: couldn't read orphan inode 13 (err -117) [ 509.528045][T11680] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 509.537870][ T7059] EXT4-fs (loop6): unmounting filesystem. [ 509.543965][ T9] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 509.591738][T11680] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 509.600644][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 509.607988][T11680] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 509.633150][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 509.643453][T11685] loop2: detected capacity change from 0 to 1024 [ 509.668765][T11680] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002] [ 509.685438][ T7059] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 509.709667][ T7059] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 509.720714][T11685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.2516: lblock 2 mapped to illegal pblock 2 (length 1) [ 509.740208][T11685] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 509.748476][T11685] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.2516: lblock 0 mapped to illegal pblock 48 (length 1) [ 509.767212][T11687] loop8: detected capacity change from 0 to 1024 [ 509.776037][T11680] System zones: 0-2, 18-18, 34-34 [ 509.781626][T11680] EXT4-fs warning (device loop9): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 509.807387][ T7059] EXT4-fs error (device loop6): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 509.927259][T11685] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 509.947104][T10683] EXT4-fs (loop9): unmounting filesystem. [ 509.982745][T11685] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.2516: Failed to acquire dquot type 0 [ 510.051462][T11685] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 510.064412][ T4347] hfsplus: b-tree write err: -5, ino 25 [ 510.075781][ T4347] hfsplus: b-tree write err: -5, ino 4 [ 510.092892][T11685] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.2516: mark_inode_dirty error [ 510.118697][ T4347] hfsplus: b-tree write err: -5, ino 2 [ 510.178746][T11685] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 510.217971][T11685] EXT4-fs (loop2): 1 orphan inode deleted [ 510.233327][ T33] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 510.246555][T11685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 510.314330][T11696] loop8: detected capacity change from 0 to 1024 [ 510.316527][ T33] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 510.357663][ T33] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 0 [ 510.474650][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 510.484815][ T33] hfsplus: b-tree write err: -5, ino 25 [ 510.491667][ T33] hfsplus: b-tree write err: -5, ino 4 [ 510.492024][ T4347] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 510.506447][ T33] hfsplus: b-tree write err: -5, ino 2 [ 510.540263][ T33] hfsplus: b-tree write err: -5, ino 26 [ 510.556526][ T4347] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 510.585801][ T4347] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 0 [ 510.637926][ T4279] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 510.669383][ T4279] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 510.698030][ T4279] EXT4-fs error (device loop2): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 510.818718][ T4322] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 511.008951][ T4322] usb 10-1: Using ep0 maxpacket: 8 [ 511.018184][ T4322] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.051606][ T4322] usb 10-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 511.104956][ T4322] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.134395][ T4322] usb 10-1: Product: syz [ 511.150579][ T4322] usb 10-1: Manufacturer: syz [ 511.165174][ T4322] usb 10-1: SerialNumber: syz [ 511.200064][ T4322] usb 10-1: config 0 descriptor?? [ 511.223129][ T4322] cdc_phonet 10-1:0.0: skipping garbage [ 511.233836][T11716] loop6: detected capacity change from 0 to 128 [ 511.245978][ T4322] cdc_phonet 10-1:0.0: invalid descriptor buffer length [ 511.268842][ T4322] cdc_phonet: probe of 10-1:0.0 failed with error -22 [ 511.269363][ T28] INFO: task syz-executor:4267 blocked for more than 143 seconds. [ 511.300633][T11716] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 511.342553][ T28] Not tainted syzkaller #0 [ 511.347580][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.400650][ T28] task:syz-executor state:D stack:22096 pid:4267 ppid:1 flags:0x00004004 [ 511.416591][T11719] loop8: detected capacity change from 0 to 512 [ 511.428655][ T28] Call Trace: [ 511.432230][ T28] [ 511.440213][ T28] __schedule+0x11d1/0x40e0 [ 511.444846][ T28] ? mark_lock+0x94/0x320 [ 511.462302][ T4322] usb 10-1: USB disconnect, device number 3 [ 511.497198][T11719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 511.507731][ T28] ? __sched_text_start+0x8/0x8 [ 511.537509][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 511.558677][ T28] ? lock_chain_count+0x20/0x20 [ 511.563647][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 511.579437][T11719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 511.632200][T11719] EXT4-fs (loop8): orphan cleanup on readonly fs [ 511.658676][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 511.665722][ T28] schedule+0xb9/0x180 [ 511.673011][T11719] EXT4-fs warning (device loop8): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 511.698692][ T28] io_schedule+0x7c/0xd0 [ 511.703047][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 511.718968][T11719] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 511.742628][ T28] ? folio_wait_bit+0x30/0x30 [ 511.747439][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 511.759507][T11719] EXT4-fs error (device loop8): ext4_ext_check_inode:530: inode #13: comm syz.8.2520: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 511.788893][ T28] ? __lock_acquire+0x7d10/0x7d10 [ 511.794634][T11719] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2520: couldn't read orphan inode 13 (err -117) [ 511.810295][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 511.815876][ T28] __filemap_get_folio+0x423/0xdb0 [ 511.822591][ T28] ? __filemap_get_folio+0x10f/0xdb0 [ 511.828188][T11719] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 511.838098][ T28] ? page_cache_prev_miss+0x380/0x380 [ 511.857102][ T28] ? mlock_page_drain_local+0x75/0x490 [ 511.871127][ T28] ? mlock_page_drain_local+0x289/0x490 [ 511.882500][ T28] truncate_inode_pages_range+0x402/0x1090 [ 511.895428][ T28] ? mapping_evict_folio+0x520/0x520 [ 511.905817][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 511.926271][T11719] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 511.941435][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 511.946852][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 511.958091][ T28] evict+0x4dc/0x8d0 [ 511.967345][T11719] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 511.977847][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 511.983469][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 511.989596][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 512.009878][T11719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002] [ 512.023739][ T28] evict_inodes+0x60c/0x6a0 [ 512.034040][ T28] ? clear_inode+0x150/0x150 [ 512.044543][ T28] generic_shutdown_super+0x93/0x340 [ 512.051894][T11719] System zones: 0-2, 18-18, 34-34 [ 512.063947][T11719] EXT4-fs warning (device loop8): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 512.083288][ T28] kill_block_super+0x7c/0xe0 [ 512.093803][ T28] deactivate_locked_super+0x93/0xf0 [ 512.105116][ T28] cleanup_mnt+0x42c/0x4b0 [ 512.111027][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 512.118523][ T28] task_work_run+0x1d0/0x260 [ 512.123782][ T28] ? task_work_cancel+0x220/0x220 [ 512.130796][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 512.136703][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 512.142555][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 512.151051][T11709] loop1: detected capacity change from 0 to 32768 [ 512.169137][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 512.178264][ T28] do_syscall_64+0x58/0xa0 [ 512.187201][ T28] ? clear_bhb_loop+0x60/0xb0 [ 512.196044][ T28] ? clear_bhb_loop+0x60/0xb0 [ 512.205326][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.211783][ T28] RIP: 0033:0x7f993b39d9d7 [ 512.217141][ T28] RSP: 002b:00007ffdf7631b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 512.226285][ T28] RAX: 0000000000000000 RBX: 00007f993b432050 RCX: 00007f993b39d9d7 [ 512.234876][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf7631bf0 [ 512.247083][ T28] RBP: 00007ffdf7631bf0 R08: 00007ffdf7632bf0 R09: 00000000ffffffff [ 512.255604][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf7632c80 [ 512.260593][T11709] XFS (loop1): Mounting V5 Filesystem [ 512.264974][ T28] R13: 00007f993b432050 R14: 0000000000055caa R15: 00007ffdf7632cc0 [ 512.281103][ T28] [ 512.292597][ T7059] sysv_free_block: trying to free block not in datazone [ 512.299917][ T28] [ 512.299917][ T28] Showing all locks held in the system: [ 512.308141][ T28] 5 locks held by kworker/u4:1/11: [ 512.315527][ T7059] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 512.350741][ T28] 1 lock held by rcu_tasks_kthre/12: [ 512.356324][ T28] #0: ffffffff8cb2df30 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 512.427567][T11709] XFS (loop1): Ending clean mount [ 512.434753][ T28] 1 lock held by rcu_tasks_trace/13: [ 512.449974][ T28] #0: ffffffff8cb2e750 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 512.486588][ T28] 1 lock held by khungtaskd/28: [ 512.491620][ T28] #0: ffffffff8cb2d5a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 512.525495][ T28] 2 locks held by getty/4025: [ 512.544619][ T28] #0: ffff88802f36b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 512.563323][ T28] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 512.575630][ T28] 1 lock held by syz-executor/4267: [ 512.581173][ T28] #0: ffff8880750de0e0 (&type->s_umount_key#105){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 512.592324][ T28] 1 lock held by syz-executor/4268: [ 512.597666][ T28] #0: ffffffff8cb33278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 512.608862][ T28] 2 locks held by kworker/0:12/5995: [ 512.614272][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 512.625015][ T28] #1: ffffc9000581fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 512.638072][ T28] 1 lock held by syz-executor/7196: [ 512.645419][ T28] #0: ffff88804fad40e0 (&type->s_umount_key#105){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 512.656547][ T28] 1 lock held by syz-executor/8957: [ 512.661921][ T28] #0: ffffffff8cb33278 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 512.673140][ T28] [ 512.675512][ T28] ============================================= [ 512.675512][ T28] [ 512.677767][ T8957] EXT4-fs (loop8): unmounting filesystem. [ 512.690134][ T28] NMI backtrace for cpu 1 [ 512.690149][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 512.690171][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.690184][ T28] Call Trace: [ 512.715381][ T28] [ 512.718443][ T28] dump_stack_lvl+0x188/0x24e [ 512.723297][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 512.728798][ T28] ? show_regs_print_info+0x12/0x12 [ 512.734224][ T28] ? load_image+0x400/0x400 [ 512.738840][ T28] ? vprintk_emit+0x59f/0x6a0 [ 512.743679][ T28] ? printk_sprint+0x460/0x460 [ 512.748532][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 512.753746][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 512.760148][ T28] ? _printk+0xda/0x130 [ 512.764384][ T28] ? load_image+0x400/0x400 [ 512.769073][ T28] ? load_image+0x400/0x400 [ 512.773647][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 512.779793][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 512.786190][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 512.792319][ T28] watchdog+0xeee/0xf30 [ 512.796608][ T28] ? watchdog+0x1ed/0xf30 [ 512.801065][ T28] kthread+0x29d/0x330 [ 512.805252][ T28] ? hungtask_pm_notify+0x40/0x40 [ 512.810328][ T28] ? kthread_blkcg+0xd0/0xd0 [ 512.814953][ T28] ret_from_fork+0x1f/0x30 [ 512.819453][ T28] [ 512.823443][ T28] Sending NMI from CPU 1 to CPUs 0: [ 512.828963][ C0] NMI backtrace for cpu 0 [ 512.828975][ C0] CPU: 0 PID: 4311 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 512.828994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.829005][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 512.829037][ C0] RIP: 0010:kfree+0x59/0x190 [ 512.829067][ C0] Code: ff 84 c0 74 79 48 83 fb 11 72 5d 48 89 df e8 fe f8 7e ff 48 c1 e8 06 48 83 e0 c0 48 ba 00 00 00 00 00 ea ff ff 48 8b 4c 10 08 c1 01 0f 85 16 01 00 00 48 01 d0 0f 1f 44 00 00 48 8b 48 08 f6 [ 512.829084][ C0] RSP: 0018:ffffc90004857a98 EFLAGS: 00000206 [ 512.829098][ C0] RAX: 0000000001439500 RBX: ffff888050e54000 RCX: ffffea0001439401 [ 512.829112][ C0] RDX: ffffea0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 512.829125][ C0] RBP: dffffc0000000000 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 512.829138][ C0] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: ffff888042ca643e [ 512.829152][ C0] R13: ffff888042ca63c0 R14: ffffffff882b00db R15: ffff888050e54000 [ 512.829166][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 512.829182][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.829195][ C0] CR2: 000055555a1d5a28 CR3: 000000007e756000 CR4: 00000000003506f0 [ 512.829211][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 512.829223][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 512.829234][ C0] Call Trace: [ 512.829242][ C0] [ 512.829249][ C0] skb_release_data+0x5db/0x7c0 [ 512.829281][ C0] consume_skb+0xa2/0x100 [ 512.829307][ C0] nsim_dev_trap_report_work+0x76b/0xaf0 [ 512.829342][ C0] ? process_one_work+0x7b0/0x1160 [ 512.829363][ C0] process_one_work+0x8a2/0x1160 [ 512.829391][ C0] ? worker_detach_from_pool+0x240/0x240 [ 512.829415][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 512.829434][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 512.829453][ C0] ? kthread_data+0x4b/0xc0 [ 512.829483][ C0] worker_thread+0xaa2/0x1270 [ 512.829516][ C0] kthread+0x29d/0x330 [ 512.829531][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 512.829552][ C0] ? kthread_blkcg+0xd0/0xd0 [ 512.829569][ C0] ret_from_fork+0x1f/0x30 [ 512.829600][ C0] [ 512.835174][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 512.840499][ T4268] XFS (loop1): Unmounting Filesystem [ 513.066425][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 513.073757][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.083880][ T28] Call Trace: [ 513.087822][ T28] [ 513.090896][ T28] dump_stack_lvl+0x188/0x24e [ 513.095648][ T28] ? memcpy+0x3c/0x60 [ 513.100221][ T28] ? show_regs_print_info+0x12/0x12 [ 513.105751][ T28] ? load_image+0x400/0x400 [ 513.110338][ T28] panic+0x2e5/0x730 [ 513.114287][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 513.119988][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 513.124576][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 513.130199][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 513.136439][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 513.142678][ T28] watchdog+0xf2d/0xf30 [ 513.146907][ T28] ? watchdog+0x1ed/0xf30 [ 513.151318][ T28] kthread+0x29d/0x330 [ 513.155539][ T28] ? hungtask_pm_notify+0x40/0x40 [ 513.160713][ T28] ? kthread_blkcg+0xd0/0xd0 [ 513.165463][ T28] ret_from_fork+0x1f/0x30 [ 513.170303][ T28] [ 513.174055][ T28] Kernel Offset: disabled [ 513.178409][ T28] Rebooting in 86400 seconds..