last executing test programs:

10m56.670357594s ago: executing program 2 (id=7372):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
writev(r0, &(0x7f0000000a40)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1)

10m56.144954025s ago: executing program 2 (id=7379):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x356, 0x3f, 0x6, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {0x0, 0x4}, {}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x6, 0x4000, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x2, 0xb})

10m55.980005694s ago: executing program 2 (id=7383):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x3, 0xc8, 0x9, 0x1100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

10m55.793603595s ago: executing program 2 (id=7387):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

10m55.273593745s ago: executing program 2 (id=7396):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[])

10m54.643912412s ago: executing program 2 (id=7403):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0)
fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8})

10m54.154926901s ago: executing program 32 (id=7403):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0)
fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8})

8m51.861230983s ago: executing program 3 (id=8900):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="20000000a54d24f15247474260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa1810000000319"})

8m51.650568805s ago: executing program 3 (id=8903):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)={0x0, 0xb, 0x4, "92102ef7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m49.848310749s ago: executing program 3 (id=8924):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574008000000c0007800800064000000000050005000a000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)

8m49.730530976s ago: executing program 3 (id=8927):
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@cruft}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x551, &(0x7f00000003c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

8m49.445820583s ago: executing program 3 (id=8930):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000007c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x3ff803, 0x3a, 'PB\xb7zE=\xfb\xd2\x1db\xa6\x87\x95{5\xe1\xb3\xbd\x0e\xba;h%\x12\xea\x13\xb2\xa5\\\xf4\xb8mU\xc2\nnQ\\Y\xb7yo\xdbSF\x8ag\xa4H\xd4\x86\x81xD\xcexY?\xbb\xa6\x18\xeeB\xfb\x81\x84{\xc7\x7fc\xe6\x99{\x12\vH\xfaQ\xf5\xd8j\xc5\x10\x9a^\xc53\xf7J~\xa1\xf5\xb4\x94\x8a\x1b\xf8\xd13p6\x17J-\x8b\xe5)\x93R,:5\xbf\x15;\xd9\x9f\x86\xadO\x93vdo\xbdH\xdb\xbf\xee\r\xcb\x8f\xb5>E\xd9\xc1\x17s\xe1\xd6\xfc_\xc8\xfc\xc6\xe5\xef\xdf\xfb\\x\xae\xea\xfe\xb3\xa3\xed\"\x05\\\xcf\x90\xb7\x8f\x06\xff^\xd7\x02[\xdf\x17`\x94Q\xdd~-\x10\f\xf4\x8c\xb5\xee;\xdd\x05\xb5\x81\x87B\xc9\xa9\x15\x0f]Y`\xe2\xb43\x195\x14\xaa\x1e\x7fg\xf43\xec\x1b[F\xeb\x18\x05f3\xcd\xe8\xecs\x80v\xe0\x9a\xbbu\xfa\xd0\xb6<f\xf2\xa5\x002\xcf\x90Hnt{\x0e\xf7I\xe1q0\xcc\xd1<\xda\xf9c\x8e\xfa\x94:\xcf\x1c\x11O\xc5<H@~\x00\xea5\xaa\xfb\xe3`\x1e]\xd1\x9c\x02s\xab\xbd\x7fc\xe2\x87\x06>\x06\x9c\x93n\xb2\x87:\x1dq\n\xd7\xd0\xe9>\xdb\xf9\xa4u\xc4\\.k\xbc\xb4\x81\xa9\xb3\xbd\xd0\xb1U\xa3\xc2\xcc\xe2\bE\x9a}x>\xb6\x92', 0x3a, '])(*', 0x3a, './file0'}, 0x179)

8m48.931798223s ago: executing program 3 (id=8935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x50, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x4800)

8m48.673302398s ago: executing program 33 (id=8935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x50, 0x0, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x4800)

2m27.866579259s ago: executing program 4 (id=14214):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'gre0\x00'}}, 0x1e)

2m27.751829706s ago: executing program 4 (id=14215):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

2m27.402927766s ago: executing program 4 (id=14220):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001500)={[{@grpjquota}]}, 0xfe, 0x556, &(0x7f0000000280)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x2)

2m26.967424521s ago: executing program 4 (id=14229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m26.826456359s ago: executing program 4 (id=14230):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m25.900702394s ago: executing program 4 (id=14239):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
lseek(r0, 0xfffff7fffffffffc, 0x1)

2m10.765523084s ago: executing program 34 (id=14239):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
lseek(r0, 0xfffff7fffffffffc, 0x1)

2.75714738s ago: executing program 1 (id=15972):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$netrom(r0, 0x0, &(0x7f0000000180))

2.598856639s ago: executing program 1 (id=15973):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}})

2.392645131s ago: executing program 1 (id=15978):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001200)={0x18, 0x7, 0xa, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x0, 0x4}, [@generic='W']}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x44800)

2.147656225s ago: executing program 1 (id=15982):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000880)={[{@barrier}, {@enospc_debug}, {@ssd}, {@discard_sync}, {@discard_sync}, {@discard}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

2.136629046s ago: executing program 5 (id=15983):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0xddc}, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffe01}], 0x38)

1.923984958s ago: executing program 5 (id=15985):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000020000000000000001000000850000001300000085000000a000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.808005995s ago: executing program 5 (id=15987):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]})

1.762169678s ago: executing program 6 (id=15988):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a", @ANYRES32], 0x54}}, 0x0)

1.655975074s ago: executing program 5 (id=15989):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xe, 0x4, @local}}}]}]}, 0x6c}}, 0xc0)

1.576969858s ago: executing program 5 (id=15990):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000740)={[{@filestreams}, {@uqnoenforce}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL")
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)

1.55597162s ago: executing program 6 (id=15991):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvtap0\x00', 0x10)

1.394929129s ago: executing program 0 (id=15992):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="120000003200", @ANYRES8], 0x18}], 0x1}, 0x0)

1.332015273s ago: executing program 6 (id=15993):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)

1.141901344s ago: executing program 0 (id=15994):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x8000000, 0x0, {{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xd}, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd25, 0x5}}]}, 0x148}}, 0x20000000)

995.938042ms ago: executing program 0 (id=15995):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x1000, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x71, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in6=@empty, {0x0, 0xfffffffffffffffc, 0x4}, {0x0, 0x2, 0x8000000000}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x2, 0x4}}, 0xf0}}, 0x0)

795.870914ms ago: executing program 0 (id=15996):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/338, 0x152}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f7", 0xa1}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)

775.549885ms ago: executing program 1 (id=15997):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x5, 0x4, {0x0, @sliced={0x2, [0x1, 0x7684, 0x1, 0x9, 0x243, 0x2, 0x1, 0x401, 0x8, 0x1, 0x2008, 0x37, 0x60, 0x401, 0x6, 0x5, 0x10, 0x7fff, 0x9000, 0x1ff, 0x9, 0x6, 0x3, 0x7, 0x4, 0x7, 0xcd, 0x1, 0x1, 0x0, 0x890, 0xf811, 0x2, 0xc478, 0x3, 0xa, 0x9, 0x2001, 0x1fd, 0xc4, 0xa457, 0x6, 0xf797, 0x4, 0xffff, 0xff, 0x2, 0x6], 0x5}}, 0x10004})

729.117568ms ago: executing program 0 (id=15998):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x16, 0x4, &(0x7f0000000880)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

468.005483ms ago: executing program 0 (id=15999):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")

352.16002ms ago: executing program 6 (id=16000):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x3aec, 0xa, 0x4})

269.978395ms ago: executing program 5 (id=16001):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}})

151.666372ms ago: executing program 6 (id=16002):
r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x7, @win={{0x8001, 0x8, 0xdf, 0x8}, 0x7, 0x7f, 0x0, 0xffffffff, 0x0, 0xc2}})

21.649689ms ago: executing program 6 (id=16003):
mq_open(&(0x7f0000000d00)='\xbd\x16 Iq\xee\"\xfbIv\xc3\x01Qh\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\x18\xffW-\x05\x99.\x1a\tGa\x15\xc7\xb9\x94\x9d\xf3W\xa3\x00\x00r\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Qw\x8b\xa27\xb6\xb7\x1c\xddD0\xaa)g\x1c.jL`\x1f~\xe9\xe4N@\xcfW\x13\x12\xe2ct\xe9\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x86Et\xf9T\xed\x90TS_\xf8m\a)\xd7\x9c-\x00\x00\x00\x00\xd0=\xb8k\xdf\x81,\x04\x00\x00\x00JpD7\xd4\x80G$<?\xc7\xd3\xfa\x8f\xd1\xaa\xa8\xf8\xf6{1\x13P\xe1\xfa\x03Z\xc3\xcd\x98\x8b\x9a\x19\xb4xP\x00-\xa1\x16J,\xe4\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xd6\f\"\x13$Q\xaf\x882q\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xc8M\b\x8f<e\x14*3\x10\xf7\x9eq\x10\xf3\xf8.\x9f\xc3\xb1\f\xf0\x84dg\xfb\xc6JUuK\xa3h\x16\xd5\xce\xca\x95\xe9\x97~t\x89\xef\xbb\x87h\xde\xad\xcb\x19\x85`\x1e^\x9dzg\xaf\x7f\x83\xed\tD\x11\xdd\xc9\x0f\xddF\xcf\xf5z*7\'7\xc3u\xd1\v\xd5NW\xaf\xac\xda\xf3\xb3\x02\xe3T\xbdPG\xad{\xfc$\xb3\fR7\t6\\^wX\x7f\x8c\xdfW\x9e\xd3!\t \xd1\xbc\x10=\x10\xfc\x8f\x15\x06\xabQ\x1b\xc87\xc8?W\x12\x1a\x1a\xef\x80\xd4b\xb3\b[\xb2\x8bX\f#\xad\xd7(\xde\xb6\xf2\xfbH\x8c', 0x40, 0x189, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

0s ago: executing program 1 (id=16004):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0x3000010, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d63706204a57f514155fd342c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c726f6469722c73686f72746e616d653d77696e6e742c696f636861727365743d63703733372c00eb965a26f5db18ce627b1c55bc0a8eeb9a8f6ee467cab1781407be613b6652cc76f1d698890bf595d9091a7bc887769b1eb067fd8a"], 0x89, 0x2b7, &(0x7f0000000840)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8042, 0x1fe)

kernel console output (not intermixed with test programs):

 rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma?
[ 1196.118780][T13763] netlink: 'syz.1.14474': attribute type 4 has an invalid length.
[ 1196.158396][T13767] tmpfs: Bad value for 'mpol'
[ 1196.247266][T13769] loop0: detected capacity change from 0 to 2048
[ 1196.291354][T13774] loop6: detected capacity change from 0 to 64
[ 1196.377114][T13769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1196.470420][T13769] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #12: block 2: comm syz.0.14476: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1196.587168][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1196.802095][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14492'.
[ 1197.188824][T13837] loop5: detected capacity change from 0 to 64
[ 1197.289134][T13840] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma?
[ 1197.301797][T13837] syz.5.14494: attempt to access beyond end of device
[ 1197.301797][T13837] loop5: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 1197.343805][T13837] Buffer I/O error on dev loop5, logical block 8388608, async page read
[ 1197.360724][T13845] dlm: Unknown command passed to DLM device : 11
[ 1197.360724][T13845] 
[ 1197.378419][T13837] syz.5.14494: attempt to access beyond end of device
[ 1197.378419][T13837] loop5: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 1197.434232][T13837] Buffer I/O error on dev loop5, logical block 8388608, async page read
[ 1197.584364][T13858] netlink: 'syz.1.14502': attribute type 13 has an invalid length.
[ 1197.644082][   T28] audit: type=1326 audit(1769251056.109:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.0.14499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x0
[ 1197.702116][T13865] loop6: detected capacity change from 0 to 764
[ 1198.140058][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14510'.
[ 1198.180367][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14510'.
[ 1198.254404][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14513'.
[ 1198.494475][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1198.858549][T13937] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[ 1198.882728][T13937] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1199.161764][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14533'.
[ 1199.427600][T13971] netlink: 'syz.0.14544': attribute type 13 has an invalid length.
[ 1199.508135][T13973] loop6: detected capacity change from 0 to 2048
[ 1199.585434][T13973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1199.610675][T13973] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #12: block 2: comm syz.6.14536: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1199.733185][T12766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1199.931581][T13994] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1200.082887][T14005] loop5: detected capacity change from 0 to 256
[ 1200.188897][T14015] loop6: detected capacity change from 0 to 64
[ 1200.242414][T14015] syz.6.14548: attempt to access beyond end of device
[ 1200.242414][T14015] loop6: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 1200.275771][T14015] Buffer I/O error on dev loop6, logical block 8388608, async page read
[ 1200.327034][T14015] syz.6.14548: attempt to access beyond end of device
[ 1200.327034][T14015] loop6: rw=0, sector=16777216, nr_sectors = 2 limit=64
[ 1200.394185][T14015] Buffer I/O error on dev loop6, logical block 8388608, async page read
[ 1200.415810][T15980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1200.570585][T14030] loop5: detected capacity change from 0 to 1024
[ 1200.614403][T14030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1200.670712][T14030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1200.721801][T14030] EXT4-fs warning (device loop5): empty_inline_dir:1856: bad inline directory (dir #12) - no `..'
[ 1200.832354][T14048] loop6: detected capacity change from 0 to 4096
[ 1200.913887][T26424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1201.312877][T14073] loop1: detected capacity change from 0 to 256
[ 1201.740493][T14099] loop6: detected capacity change from 0 to 1024
[ 1201.901521][T12734] hfsplus: b-tree write err: -5, ino 4
[ 1202.105501][T14127] loop1: detected capacity change from 0 to 256
[ 1202.116141][T14127] exfat: Deprecated parameter 'namecase'
[ 1202.121884][T14127] exfat: Deprecated parameter 'utf8'
[ 1202.228685][T14127] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1202.250597][   T28] audit: type=1326 audit(1769251060.719:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.0.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1202.273236][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1202.273379][T14136] netlink: 508 bytes leftover after parsing attributes in process `syz.6.14591'.
[ 1202.363443][   T28] audit: type=1326 audit(1769251060.719:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.0.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1202.446650][   T28] audit: type=1326 audit(1769251060.729:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.0.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1202.514233][   T28] audit: type=1326 audit(1769251060.729:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.0.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1202.599637][   T28] audit: type=1326 audit(1769251060.729:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.0.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1203.410240][T14185] loop1: detected capacity change from 0 to 2048
[ 1203.473971][T14185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1203.524859][T14191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14600'.
[ 1203.752923][T14170] loop5: detected capacity change from 0 to 32768
[ 1203.778500][T14203] erspan0: left allmulticast mode
[ 1203.794981][T14203] batadv0: left allmulticast mode
[ 1203.819537][T14203] 0·: left allmulticast mode
[ 1203.824583][T14203] hsr_slave_0: left allmulticast mode
[ 1203.837187][T14170] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1203.858794][T14203] hsr_slave_1: left allmulticast mode
[ 1203.876558][T14203] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[ 1203.884759][T14203] vlan1: left allmulticast mode
[ 1203.891255][T14203] veth0_vlan: left allmulticast mode
[ 1203.915674][T14203] ip6tnl3: left allmulticast mode
[ 1203.937178][T14216] loop6: detected capacity change from 0 to 256
[ 1203.943306][T14203] geneve0: left allmulticast mode
[ 1203.998332][T14203] bridge3: left allmulticast mode
[ 1204.054315][T14203] bond4: left allmulticast mode
[ 1204.074841][T14170] XFS (loop5): Ending clean mount
[ 1204.090102][T14203] bridge5: left allmulticast mode
[ 1204.105259][T14170] XFS (loop5): Quotacheck needed: Please wait.
[ 1204.262858][T14170] XFS (loop5): Quotacheck: Done.
[ 1204.324164][T22957] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1204.429262][T26424] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1204.474887][T12737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1204.524157][T22957] usb 2-1: Using ep0 maxpacket: 16
[ 1204.539186][T22957] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1204.592504][T22957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.622048][T22957] usb 2-1: Product: syz
[ 1204.675712][T22957] usb 2-1: Manufacturer: syz
[ 1204.680503][T22957] usb 2-1: SerialNumber: syz
[ 1204.711429][T22957] r8152-cfgselector 2-1: config 0 descriptor??
[ 1205.194173][T22957] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1205.204492][T22957] r8152-cfgselector 2-1: USB disconnect, device number 76
[ 1205.674362][T14298] loop6: detected capacity change from 0 to 1764
[ 1205.853460][   T28] audit: type=1326 audit(1769251064.319:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.0.14630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1205.951310][   T28] audit: type=1326 audit(1769251064.319:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.0.14630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1206.044108][   T28] audit: type=1326 audit(1769251064.319:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.0.14630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1206.080846][   T28] audit: type=1326 audit(1769251064.319:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.0.14630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1206.115898][   T28] audit: type=1326 audit(1769251064.319:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.0.14630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d99acb9 code=0x7ffc0000
[ 1206.182162][T12737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1206.379649][T14337] loop6: detected capacity change from 0 to 1024
[ 1206.440107][T14337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1206.550341][T14342] loop0: detected capacity change from 0 to 4096
[ 1206.751073][T14355] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1206.779803][T14342] NILFS error (device loop0): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[ 1206.847974][T14342] Remounting filesystem read-only
[ 1207.577195][T14391] netlink: 'syz.6.14654': attribute type 7 has an invalid length.
[ 1207.604186][T14391] netlink: 140 bytes leftover after parsing attributes in process `syz.6.14654'.
[ 1207.977977][T14384] loop5: detected capacity change from 0 to 32768
[ 1208.069393][T14384] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1208.193684][T14383] loop1: detected capacity change from 0 to 32768
[ 1208.285249][T14383] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1208.412943][T14384] XFS (loop5): Ending clean mount
[ 1208.450634][T14383] XFS (loop1): Ending clean mount
[ 1208.496991][T14384] XFS (loop5): Quotacheck needed: Please wait.
[ 1208.516375][T14383] XFS (loop1): Quotacheck needed: Please wait.
[ 1208.683382][T14383] XFS (loop1): Quotacheck: Done.
[ 1208.768300][T14413] loop0: detected capacity change from 0 to 32768
[ 1208.792885][T14384] XFS (loop5): Quotacheck: Done.
[ 1208.813954][T14413] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[ 1208.863479][T26424] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1208.951749][T14444] loop6: detected capacity change from 0 to 4096
[ 1208.954418][ T5765] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1209.127403][T14444] ntfs3: loop6: ino=3, Correct links count -> 2.
[ 1209.159742][T12783] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[ 1209.549223][T14460] loop0: detected capacity change from 0 to 4096
[ 1209.560017][T14463] netlink: 'syz.1.14665': attribute type 1 has an invalid length.
[ 1209.616424][T14463] netlink: 232 bytes leftover after parsing attributes in process `syz.1.14665'.
[ 1210.378100][T14498] loop0: detected capacity change from 0 to 256
[ 1210.425556][T14498] exfat: Deprecated parameter 'namecase'
[ 1210.431498][T14498] exfat: Deprecated parameter 'namecase'
[ 1210.565905][T14498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[ 1210.634256][T14506] Zero length message leads to an empty skb
[ 1210.849029][T14489] loop1: detected capacity change from 0 to 32768
[ 1211.086877][T14527] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.14684'.
[ 1211.518823][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14693'.
[ 1211.588987][T14560] netlink: 'syz.5.14694': attribute type 5 has an invalid length.
[ 1211.607810][T14560] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.14694'.
[ 1211.650972][T14567] loop1: detected capacity change from 0 to 256
[ 1211.726183][T14567] FAT-fs (loop1): Directory bread(block 64) failed
[ 1211.745115][T14567] FAT-fs (loop1): Directory bread(block 65) failed
[ 1211.751808][T14567] FAT-fs (loop1): Directory bread(block 66) failed
[ 1211.764459][T14567] FAT-fs (loop1): Directory bread(block 67) failed
[ 1211.771140][T14567] FAT-fs (loop1): Directory bread(block 68) failed
[ 1211.812154][T14567] FAT-fs (loop1): Directory bread(block 69) failed
[ 1211.841187][T14567] FAT-fs (loop1): Directory bread(block 70) failed
[ 1211.861170][T14567] FAT-fs (loop1): Directory bread(block 71) failed
[ 1211.884242][T14567] FAT-fs (loop1): Directory bread(block 72) failed
[ 1211.890939][T14567] FAT-fs (loop1): Directory bread(block 73) failed
[ 1211.952394][ T2959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1212.013520][T14576] loop0: detected capacity change from 0 to 4096
[ 1212.080738][T14576] ntfs3: loop0: ino=3, Correct links count -> 2.
[ 1213.432666][T14669] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.14727'.
[ 1213.461864][T14672] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[ 1213.476779][T14672] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms
[ 1213.573332][T14669] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1213.646315][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14730'.
[ 1213.965071][T14731] ptrace attach of "./syz-executor exec"[14734] was attempted by "./syz-executor exec"[14731]
[ 1214.216248][T14750] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14742'.
[ 1214.267248][T14750] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1214.456510][T14770] loop5: detected capacity change from 0 to 256
[ 1214.533271][T14770] FAT-fs (loop5): Directory bread(block 64) failed
[ 1214.554239][T14770] FAT-fs (loop5): Directory bread(block 65) failed
[ 1214.574503][T14770] FAT-fs (loop5): Directory bread(block 66) failed
[ 1214.603550][T14770] FAT-fs (loop5): Directory bread(block 67) failed
[ 1214.622539][T14770] FAT-fs (loop5): Directory bread(block 68) failed
[ 1214.641871][T14770] FAT-fs (loop5): Directory bread(block 69) failed
[ 1214.664380][T14770] FAT-fs (loop5): Directory bread(block 70) failed
[ 1214.684272][T14770] FAT-fs (loop5): Directory bread(block 71) failed
[ 1214.691068][T14770] FAT-fs (loop5): Directory bread(block 72) failed
[ 1214.744238][T14770] FAT-fs (loop5): Directory bread(block 73) failed
[ 1214.773796][T14784] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1214.798704][T14789] netlink: 'syz.6.14753': attribute type 5 has an invalid length.
[ 1214.834280][T14789] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.14753'.
[ 1214.916288][T14794] loop0: detected capacity change from 0 to 256
[ 1215.058172][T14794] FAT-fs (loop0): Directory bread(block 64) failed
[ 1215.084349][T14794] FAT-fs (loop0): Directory bread(block 65) failed
[ 1215.092869][T14794] FAT-fs (loop0): Directory bread(block 66) failed
[ 1215.144378][T14794] FAT-fs (loop0): Directory bread(block 67) failed
[ 1215.152425][T14794] FAT-fs (loop0): Directory bread(block 68) failed
[ 1215.162152][T14806] netlink: 'syz.5.14756': attribute type 3 has an invalid length.
[ 1215.169718][T14794] FAT-fs (loop0): Directory bread(block 69) failed
[ 1215.184225][T14794] FAT-fs (loop0): Directory bread(block 70) failed
[ 1215.190809][T14794] FAT-fs (loop0): Directory bread(block 71) failed
[ 1215.197840][T14794] FAT-fs (loop0): Directory bread(block 72) failed
[ 1215.199775][T14806] netlink: 201372 bytes leftover after parsing attributes in process `syz.5.14756'.
[ 1215.205006][T14794] FAT-fs (loop0): Directory bread(block 73) failed
[ 1215.467142][T14824] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14757'.
[ 1215.525426][T14824] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[ 1216.149620][T14822] loop1: detected capacity change from 0 to 32768
[ 1216.224556][T14822] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1216.294440][T14871] loop6: detected capacity change from 0 to 256
[ 1216.455628][T14822] XFS (loop1): Ending clean mount
[ 1216.484422][T14871] FAT-fs (loop6): Directory bread(block 64) failed
[ 1216.504815][T14871] FAT-fs (loop6): Directory bread(block 65) failed
[ 1216.511761][T14871] FAT-fs (loop6): Directory bread(block 66) failed
[ 1216.515986][T14822] XFS (loop1): Quotacheck needed: Please wait.
[ 1216.553440][T14871] FAT-fs (loop6): Directory bread(block 67) failed
[ 1216.560489][T14871] FAT-fs (loop6): Directory bread(block 68) failed
[ 1216.584220][T14871] FAT-fs (loop6): Directory bread(block 69) failed
[ 1216.604502][T14871] FAT-fs (loop6): Directory bread(block 70) failed
[ 1216.611208][T14871] FAT-fs (loop6): Directory bread(block 71) failed
[ 1216.623224][T14871] FAT-fs (loop6): Directory bread(block 72) failed
[ 1216.631744][T14871] FAT-fs (loop6): Directory bread(block 73) failed
[ 1216.716464][T14822] XFS (loop1): Quotacheck: Done.
[ 1216.832633][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1216.855241][T14849] loop5: detected capacity change from 0 to 32768
[ 1216.881692][T14884] loop0: detected capacity change from 0 to 256
[ 1216.920222][T14849] read_mapping_page failed!
[ 1217.008040][T14884] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1217.200432][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.254222][T14884] FAT-fs (loop0): Filesystem has been set read-only
[ 1217.261101][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.271778][T14895] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.14774'.
[ 1217.285694][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.322455][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.331571][T14895] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[ 1217.350093][T14895] CPU: 0 PID: 14895 Comm: syz.5.14774 Not tainted syzkaller #0
[ 1217.355127][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.357771][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1217.376427][T14895] Call Trace:
[ 1217.379735][T14895]  <TASK>
[ 1217.382694][T14895]  dump_stack_lvl+0x18c/0x250
[ 1217.387426][T14895]  ? show_regs_print_info+0x20/0x20
[ 1217.392683][T14895]  ? load_image+0x400/0x400
[ 1217.397251][T14895]  sysfs_warn_dup+0x8e/0xa0
[ 1217.401793][T14895]  sysfs_do_create_link_sd+0xc0/0x110
[ 1217.403088][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.407184][T14895]  device_add_class_symlinks+0x1cf/0x240
[ 1217.407222][T14895]  device_add+0x507/0xc20
[ 1217.407244][T14895]  wiphy_register+0x1dad/0x2ae0
[ 1217.407286][T14895]  ? cfg80211_event_work+0x40/0x40
[ 1217.407307][T14895]  ? minstrel_ht_alloc+0x88a/0x990
[ 1217.407341][T14895]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1217.407364][T14895]  ieee80211_register_hw+0x3464/0x4250
[ 1217.452483][T14895]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1217.455570][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.458157][T14895]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1217.458200][T14895]  ? __debug_object_init+0xec/0x450
[ 1217.458227][T14895]  ? __asan_memset+0x22/0x40
[ 1217.458250][T14895]  ? __hrtimer_init+0x186/0x270
[ 1217.477436][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.477928][T14895]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[ 1217.492849][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.495949][T14895]  ? mac80211_hwsim_free+0x220/0x220
[ 1217.495986][T14895]  ? rcu_is_watching+0x15/0xb0
[ 1217.496008][T14895]  ? kstrndup+0xbd/0x140
[ 1217.496037][T14895]  hwsim_new_radio_nl+0xdc9/0x1a90
[ 1217.496064][T14895]  ? __nla_validate+0x50/0x50
[ 1217.496101][T14895]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1217.496135][T14895]  ? __nla_parse+0x40/0x50
[ 1217.496163][T14895]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1217.496195][T14895]  genl_family_rcv_msg_doit+0x211/0x310
[ 1217.512365][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.515793][T14895]  ? end_current_label_crit_section+0x170/0x170
[ 1217.515829][T14895]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1217.515861][T14895]  ? bpf_lsm_capable+0x9/0x10
[ 1217.515884][T14895]  ? security_capable+0x89/0xb0
[ 1217.515910][T14895]  genl_rcv_msg+0x619/0x7a0
[ 1217.515937][T14895]  ? genl_bind+0x360/0x360
[ 1217.515957][T14895]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[ 1217.515984][T14895]  ? ref_tracker_free+0x690/0x840
[ 1217.516010][T14895]  netlink_rcv_skb+0x241/0x4d0
[ 1217.516032][T14895]  ? genl_bind+0x360/0x360
[ 1217.516054][T14895]  ? netlink_ack+0x1180/0x1180
[ 1217.516088][T14895]  ? __lock_acquire+0x7d40/0x7d40
[ 1217.516115][T14895]  ? down_read+0x1ac/0x2e0
[ 1217.516138][T14895]  genl_rcv+0x28/0x40
[ 1217.516161][T14895]  netlink_unicast+0x751/0x8d0
[ 1217.516196][T14895]  netlink_sendmsg+0x8d0/0xbf0
[ 1217.516228][T14895]  ? netlink_getsockopt+0x590/0x590
[ 1217.516255][T14895]  ? aa_sock_msg_perm+0x94/0x150
[ 1217.516278][T14895]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1217.516306][T14895]  ? security_socket_sendmsg+0x80/0xa0
[ 1217.516323][T14895]  ? netlink_getsockopt+0x590/0x590
[ 1217.516347][T14895]  ____sys_sendmsg+0x5ba/0x960
[ 1217.516384][T14895]  ? __asan_memset+0x22/0x40
[ 1217.516405][T14895]  ? __sys_sendmsg_sock+0x30/0x30
[ 1217.524733][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.525471][T14895]  ? __import_iovec+0x5f2/0x850
[ 1217.537717][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.541544][T14895]  ? import_iovec+0x73/0xa0
[ 1217.556504][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.557822][T14895]  ___sys_sendmsg+0x2a6/0x360
[ 1217.575703][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.578462][T14895]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1217.578539][T14895]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1217.583416][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.588066][T14895]  ? __x64_sys_sendmsg+0x80/0x80
[ 1217.588116][T14895]  ? lockdep_hardirqs_on+0x98/0x150
[ 1217.588138][T14895]  do_syscall_64+0x55/0xa0
[ 1217.588160][T14895]  ? clear_bhb_loop+0x40/0x90
[ 1217.588178][T14895]  ? clear_bhb_loop+0x40/0x90
[ 1217.588196][T14895]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1217.588212][T14895] RIP: 0033:0x7f392819acb9
[ 1217.588230][T14895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1217.588244][T14895] RSP: 002b:00007f39290ec028 EFLAGS: 00000246
[ 1217.605930][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.608538][T14895]  ORIG_RAX: 000000000000002e
[ 1217.608549][T14895] RAX: ffffffffffffffda RBX: 00007f3928415fa0 RCX: 00007f392819acb9
[ 1217.608563][T14895] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1217.613503][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.617748][T14895] RBP: 00007f3928208bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1217.617761][T14895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1217.617770][T14895] R13: 00007f3928416038 R14: 00007f3928415fa0 R15: 00007fff9a10d348
[ 1217.617796][T14895]  </TASK>
[ 1217.846138][  T632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1217.887094][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.958488][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1217.986138][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1218.014551][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1218.023147][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1218.084327][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1218.113538][T14884] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1218.147160][   T28] audit: type=1800 audit(1769251076.619:512): pid=14884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14781" name="file1" dev="loop0" ino=1048830 res=0 errno=0
[ 1218.708267][T14950] netlink: 'syz.0.14789': attribute type 3 has an invalid length.
[ 1219.070770][T14928] loop6: detected capacity change from 0 to 32768
[ 1219.138799][T14928] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1219.289029][T14928] XFS (loop6): Ending clean mount
[ 1219.396454][T14928] XFS (loop6): Quotacheck needed: Please wait.
[ 1219.575779][T15003] loop1: detected capacity change from 0 to 256
[ 1219.584334][T14928] XFS (loop6): Quotacheck: Done.
[ 1219.739278][T15007] loop5: detected capacity change from 0 to 1024
[ 1219.818844][T15009] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[ 1219.839276][T15007] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 1219.850190][T15007] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1219.867028][T12766] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1219.873657][T15007] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1219.927748][T15007] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1219.999447][T15007] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.14803: Inode bitmap for bg 0 marked uninitialized
[ 1220.088074][T15007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1220.207572][T15007] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (32298!=35945)
[ 1220.401409][T26424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1220.678053][T15050] netlink: 'syz.6.14816': attribute type 21 has an invalid length.
[ 1221.520179][T15082] loop1: detected capacity change from 0 to 32768
[ 1221.546054][T15075] loop0: detected capacity change from 0 to 32768
[ 1221.591362][T15080] loop5: detected capacity change from 0 to 32768
[ 1221.628061][T15075] read_mapping_page failed!
[ 1221.776119][T15080] UFO tlock:0xffffc9000283a048
[ 1222.462137][T15126] netlink: 'syz.5.14829': attribute type 10 has an invalid length.
[ 1222.480757][T15126] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14829'.
[ 1222.495451][T15126] netlink: 'syz.5.14829': attribute type 10 has an invalid length.
[ 1222.503410][T15126] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14829'.
[ 1222.515004][T15127] loop0: detected capacity change from 0 to 1024
[ 1222.539823][T15127] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 1222.570055][T15127] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1222.609380][T15127] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1222.654757][ T5774] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1222.664576][T15127] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1222.673405][T15127] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.14836: Inode bitmap for bg 0 marked uninitialized
[ 1222.688769][T15127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1222.812946][T15127] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (32298!=35945)
[ 1222.884269][ T5774] usb 2-1: Using ep0 maxpacket: 16
[ 1222.899548][ T5774] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1222.920877][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1222.939468][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1222.954177][ T5774] usb 2-1: Product: syz
[ 1222.958384][ T5774] usb 2-1: Manufacturer: syz
[ 1222.963016][ T5774] usb 2-1: SerialNumber: syz
[ 1223.015095][ T5774] usb 2-1: config 0 descriptor??
[ 1223.057927][ T5774] visor 2-1:0.0: Sony Clie 3.5 converter detected
[ 1223.291178][ T5774] usb 2-1: clie_3_5_startup: get config number bad return length: 0
[ 1223.310623][ T5774] visor: probe of 2-1:0.0 failed with error -5
[ 1223.461356][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1223.472871][T15181] netlink: 292 bytes leftover after parsing attributes in process `syz.0.14849'.
[ 1223.528805][T24820] usb 2-1: USB disconnect, device number 77
[ 1224.624940][T15251] loop5: detected capacity change from 0 to 128
[ 1224.670926][T15251] sysv_free_block: flc_count > flc_size
[ 1224.678861][T15251] sysv_free_block: flc_count > flc_size
[ 1224.690719][T15251] sysv_free_block: flc_count > flc_size
[ 1224.699957][T15251] sysv_free_block: flc_count > flc_size
[ 1224.710386][T15251] sysv_free_block: flc_count > flc_size
[ 1224.724187][T15251] sysv_free_block: flc_count > flc_size
[ 1224.729784][T15251] sysv_free_block: flc_count > flc_size
[ 1224.749446][T15251] sysv_free_block: flc_count > flc_size
[ 1224.759089][T15251] sysv_free_block: flc_count > flc_size
[ 1224.769075][T15251] sysv_free_block: flc_count > flc_size
[ 1224.779392][T15251] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1224.857837][T15222] loop0: detected capacity change from 0 to 32768
[ 1224.863637][T15252] loop6: detected capacity change from 0 to 8192
[ 1224.980582][T15222] UFO tlock:0xffffc9000283a0d8
[ 1225.079477][T15273] netlink: 'syz.1.14874': attribute type 10 has an invalid length.
[ 1225.123828][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14874'.
[ 1225.149884][T15273] netlink: 'syz.1.14874': attribute type 10 has an invalid length.
[ 1225.184428][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14874'.
[ 1225.821560][   T28] audit: type=1326 audit(1769251084.279:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.6.14888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1225.909592][   T28] audit: type=1326 audit(1769251084.289:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.6.14888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1225.974494][   T28] audit: type=1326 audit(1769251084.299:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.6.14888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1226.007330][   T28] audit: type=1326 audit(1769251084.299:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.6.14888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1226.022913][T15320] loop0: detected capacity change from 0 to 164
[ 1226.110300][   T28] audit: type=1326 audit(1769251084.299:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.6.14888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1227.004574][T15384] ipt_ECN: cannot use operation on non-tcp rule
[ 1227.710934][T15387] loop1: detected capacity change from 0 to 32768
[ 1227.754354][T15387] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1227.827721][T15387] XFS (loop1): Ending clean mount
[ 1227.866470][T15387] XFS (loop1): Quotacheck needed: Please wait.
[ 1227.964446][T15387] XFS (loop1): Quotacheck: Done.
[ 1228.124188][ T5765] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1228.364128][T15440] loop6: detected capacity change from 0 to 164
[ 1229.215248][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1229.470105][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1229.587854][T15474] loop6: detected capacity change from 0 to 32768
[ 1229.623464][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1229.713599][   T28] audit: type=1326 audit(1769251088.169:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.1.14919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb687b9acb9 code=0x7ffc0000
[ 1229.828817][T15474] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[ 1229.844677][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1229.869118][   T28] audit: type=1326 audit(1769251088.209:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.1.14919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb687b9acb9 code=0x7ffc0000
[ 1229.968767][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1230.010826][   T28] audit: type=1326 audit(1769251088.209:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.1.14919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fb687b9acb9 code=0x7ffc0000
[ 1230.098941][   T28] audit: type=1326 audit(1769251088.209:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.1.14919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb687b9acb9 code=0x7ffc0000
[ 1230.098993][   T28] audit: type=1326 audit(1769251088.209:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.1.14919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb687b9acb9 code=0x7ffc0000
[ 1230.271912][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1230.313752][T12766] ocfs2: Unmounting device (7,6) on (node local)
[ 1230.352453][T15535] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.14954'.
[ 1230.937733][T15532] loop5: detected capacity change from 0 to 32768
[ 1231.108704][T15566] loop0: detected capacity change from 0 to 1024
[ 1231.128001][T15569] IPVS: length: 225 != 8
[ 1231.329326][ T3505] hfsplus: b-tree write err: -5, ino 4
[ 1231.788376][T15608] loop5: detected capacity change from 0 to 512
[ 1231.805320][T15608] EXT4-fs: Ignoring removed nobh option
[ 1231.860737][T15608] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[ 1231.911223][T15608] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.14974: attempt to clear invalid blocks 1 len 1
[ 1231.962054][T15608] EXT4-fs (loop5): Remounting filesystem read-only
[ 1232.019119][T15608] EXT4-fs (loop5): 1 truncate cleaned up
[ 1232.047119][T15608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1232.048099][T15624] loop1: detected capacity change from 0 to 1024
[ 1232.178925][T26424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1232.233575][   T49] hfsplus: b-tree write err: -5, ino 4
[ 1232.479063][T15651] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1233.056186][  T632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1233.521221][T15677] loop0: detected capacity change from 0 to 32768
[ 1233.591823][T15677] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 1233.662433][T15723] loop1: detected capacity change from 0 to 512
[ 1233.796370][T15723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1233.904362][T15723] ext4 filesystem being mounted at /3884/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1234.008910][T15744] loop5: detected capacity change from 0 to 1764
[ 1234.032566][ T5769] ocfs2: Unmounting device (7,0) on (node local)
[ 1234.183414][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1235.396895][   T28] audit: type=1326 audit(1769251093.869:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15819 comm="syz.5.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1235.473966][   T28] audit: type=1326 audit(1769251093.899:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15819 comm="syz.5.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1235.573726][   T28] audit: type=1326 audit(1769251093.899:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15819 comm="syz.5.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1235.648880][   T28] audit: type=1326 audit(1769251093.909:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15819 comm="syz.5.15038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1235.778846][T15800] loop0: detected capacity change from 0 to 32768
[ 1235.801851][   T28] audit: type=1326 audit(1769251094.269:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.6.15043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1235.850507][T15808] loop1: detected capacity change from 0 to 32768
[ 1235.880786][   T28] audit: type=1326 audit(1769251094.269:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.6.15043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1235.962724][   T28] audit: type=1326 audit(1769251094.339:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.6.15043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1236.016363][T15808] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1236.042675][T15850] loop6: detected capacity change from 0 to 1764
[ 1236.068721][   T28] audit: type=1326 audit(1769251094.339:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.6.15043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1236.169792][   T28] audit: type=1326 audit(1769251094.339:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15834 comm="syz.6.15043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1236.193279][T15808] XFS (loop1): Ending clean mount
[ 1236.193426][T15842] loop5: detected capacity change from 0 to 4096
[ 1236.209540][T15842] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 1236.243347][T15842] ntfs: volume version 3.1.
[ 1236.260044][T15808] XFS (loop1): Quotacheck needed: Please wait.
[ 1236.512779][T15808] XFS (loop1): Quotacheck: Done.
[ 1236.778113][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1236.877737][T15892] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1237.835309][T22957] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1238.034193][T22957] usb 7-1: Using ep0 maxpacket: 16
[ 1238.071327][T22957] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1238.096154][T22957] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[ 1238.114554][T22957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.128420][T22957] usb 7-1: Product: syz
[ 1238.132626][T22957] usb 7-1: Manufacturer: syz
[ 1238.174657][T22957] usb 7-1: SerialNumber: syz
[ 1238.195347][T22957] usb 7-1: config 0 descriptor??
[ 1238.226764][T22957] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[ 1238.233064][T22957] gspca_stv06xx: st6422 sensor detected
[ 1238.310794][T15977] netlink: 'syz.0.15081': attribute type 10 has an invalid length.
[ 1238.327642][T15977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15081'.
[ 1238.426397][T15977] team0: Port device virt_wifi0 removed
[ 1238.433273][T15977] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1238.474099][T15977] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1238.515494][T15977] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active
[ 1238.560637][T15991] loop1: detected capacity change from 0 to 16
[ 1238.616712][T15991] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1238.631790][T15991] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1238.684340][T15991] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1238.738500][T22957] STV06xx: probe of 7-1:0.0 failed with error -71
[ 1238.767437][T22957] usb 7-1: USB disconnect, device number 2
[ 1238.854257][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15087'.
[ 1238.892258][T16007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15087'.
[ 1239.078816][T16019] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1239.133458][T15989] loop5: detected capacity change from 0 to 32768
[ 1239.209048][T15989] find_entry called with index >= next_index
[ 1239.254040][T15989] find_entry called with index >= next_index
[ 1239.260103][T15989] find_entry called with index >= next_index
[ 1239.268171][T16026] netlink: 'syz.1.15092': attribute type 1 has an invalid length.
[ 1239.284168][T15989] find_entry called with index >= next_index
[ 1239.290215][T15989] find_entry called with index >= next_index
[ 1239.296664][T16026] netlink: 'syz.1.15092': attribute type 3 has an invalid length.
[ 1239.344605][T16026] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15092'.
[ 1239.392711][T16026] NCSI netlink: No device for ifindex 0
[ 1239.459040][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.472287][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.168145][T16073] loop5: detected capacity change from 0 to 1024
[ 1240.190919][T16073] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1240.210759][T16077] loop0: detected capacity change from 0 to 512
[ 1240.265359][T16073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1240.331256][T26424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1240.341788][T16077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1240.418056][T16077] EXT4-fs error (device loop0): ext4_validate_block_bitmap:421: comm syz.0.15108: bg 0: bad block bitmap checksum
[ 1240.575346][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1240.723412][T16072] loop6: detected capacity change from 0 to 32768
[ 1240.791559][T16072] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1240.979160][T16072] XFS (loop6): Ending clean mount
[ 1241.000131][T16072] XFS (loop6): Quotacheck needed: Please wait.
[ 1241.214978][T16072] XFS (loop6): Quotacheck: Done.
[ 1241.361669][T12766] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1241.563757][T16144] loop0: detected capacity change from 0 to 4096
[ 1241.579767][T16144] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[ 1241.653797][T16144] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1241.665363][T16144] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update
[ 1241.692081][T15980] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[ 1242.897177][T16170] loop5: detected capacity change from 0 to 16
[ 1242.920467][T16172] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[ 1242.930380][T16170] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1242.943940][T16172] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[ 1242.964638][T16170] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1242.992290][T16170] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1243.180737][T16187] loop0: detected capacity change from 0 to 16
[ 1243.217026][T16190] netlink: 'syz.6.15132': attribute type 10 has an invalid length.
[ 1243.241506][T16190] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15132'.
[ 1243.253873][T16187] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1243.283950][T16190] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1243.286590][T16187] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1243.336502][T16190] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1243.357284][T16187] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[ 1243.404208][T16190] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1243.721139][T16210] loop0: detected capacity change from 0 to 164
[ 1243.775104][T16210] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1243.796893][T16215] loop1: detected capacity change from 0 to 64
[ 1243.935213][ T2959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1244.167485][T16184] loop5: detected capacity change from 0 to 32768
[ 1244.238707][T16184] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1244.390009][T16253] loop1: detected capacity change from 0 to 512
[ 1244.400253][T16256] loop0: detected capacity change from 0 to 164
[ 1244.417275][T16184] XFS (loop5): Ending clean mount
[ 1244.427618][T16184] XFS (loop5): Quotacheck needed: Please wait.
[ 1244.584307][T16253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1244.589658][T16184] XFS (loop5): Quotacheck: Done.
[ 1244.638487][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1244.736481][T16253] EXT4-fs error (device loop1): ext4_validate_block_bitmap:421: comm syz.1.15159: bg 0: bad block bitmap checksum
[ 1244.861033][T26424] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1244.905411][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1244.966060][T16276] loop6: detected capacity change from 0 to 164
[ 1244.983168][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1245.093130][T16276] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1245.163646][T16286] loop1: detected capacity change from 0 to 1024
[ 1245.206177][T16286] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 1245.254517][T16286] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[ 1245.308812][T16286] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1245.336819][T16286] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.15156: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0)
[ 1245.418506][T16286] EXT4-fs (loop1): no journal found
[ 1245.423774][T16286] EXT4-fs (loop1): can't get journal size
[ 1245.465368][T16286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1245.602247][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1245.638194][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1246.103241][T16325] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[ 1246.141979][T16330] netlink: 'syz.6.15169': attribute type 27 has an invalid length.
[ 1246.147557][T16325] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[ 1246.173570][T16330] netlink: 'syz.6.15169': attribute type 3 has an invalid length.
[ 1246.224675][T16330] netlink: 132 bytes leftover after parsing attributes in process `syz.6.15169'.
[ 1246.451026][T16336] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.15170: corrupted in-inode xattr: invalid ea_ino
[ 1246.546957][T16336] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.15170: couldn't read orphan inode 15 (err -117)
[ 1246.637525][T16315] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1246.650293][T16336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1246.679563][T16359] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[ 1246.690787][T16359] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[ 1246.785618][T22957] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1246.808334][T16315] XFS (loop0): Ending clean mount
[ 1246.831655][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1246.842502][T16315] XFS (loop0): Quotacheck needed: Please wait.
[ 1246.974375][T22957] usb 6-1: Using ep0 maxpacket: 16
[ 1246.983702][T22957] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[ 1247.040352][T22957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.065122][T22957] usb 6-1: Product: syz
[ 1247.069357][T22957] usb 6-1: Manufacturer: syz
[ 1247.078868][T16315] XFS (loop0): Quotacheck: Done.
[ 1247.105996][T16375] set_capacity_and_notify: 2 callbacks suppressed
[ 1247.106013][T16375] loop6: detected capacity change from 0 to 64
[ 1247.119028][T22957] usb 6-1: SerialNumber: syz
[ 1247.125945][T22957] usb 6-1: config 0 descriptor??
[ 1247.163309][T22957] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 1247.221221][T22957] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1
[ 1247.249901][T22957] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 1247.249901][T22957]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1247.301844][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1247.344700][T16379] loop1: detected capacity change from 0 to 4096
[ 1247.371786][T16379] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[ 1247.430210][T22957] usb 6-1: USB disconnect, device number 30
[ 1247.543878][T16379] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[ 1247.555485][T16379] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update
[ 1247.625420][T12737] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update
[ 1247.762581][T16407] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1247.872638][T16414] loop1: detected capacity change from 0 to 8
[ 1248.415880][T16476] loop5: detected capacity change from 0 to 256
[ 1248.620402][T16476] FAT-fs (loop5): Directory bread(block 64) failed
[ 1248.627525][T16476] FAT-fs (loop5): Directory bread(block 65) failed
[ 1248.685628][T16476] FAT-fs (loop5): Directory bread(block 66) failed
[ 1248.694228][T16476] FAT-fs (loop5): Directory bread(block 67) failed
[ 1248.700937][T16476] FAT-fs (loop5): Directory bread(block 68) failed
[ 1248.722590][T16476] FAT-fs (loop5): Directory bread(block 69) failed
[ 1248.730305][T16476] FAT-fs (loop5): Directory bread(block 70) failed
[ 1248.737504][T16476] FAT-fs (loop5): Directory bread(block 71) failed
[ 1248.744648][T16476] FAT-fs (loop5): Directory bread(block 72) failed
[ 1248.751687][T16476] FAT-fs (loop5): Directory bread(block 73) failed
[ 1249.426181][T16488] loop6: detected capacity change from 0 to 32768
[ 1249.498374][T16488] (syz.6.15194,16488,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1249.578756][T16488] (syz.6.15194,16488,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1249.604243][T16528] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[ 1249.669696][T16488] JBD2: Ignoring recovery information on journal
[ 1249.695531][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1249.759811][T16488] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1250.139274][T12766] ocfs2: Unmounting device (7,6) on (node local)
[ 1250.605893][T16571] loop6: detected capacity change from 0 to 8
[ 1250.662237][T16531] loop5: detected capacity change from 0 to 40427
[ 1250.704417][T16531] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 1250.742806][T16531] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1250.786713][T16531] F2FS-fs (loop5): invalid crc value
[ 1250.834337][T22967] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1250.843939][T16531] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1250.985409][T16531] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1251.023166][T16531] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1251.063826][T22967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.085154][T22967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1251.121974][T22967] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1251.154812][T22967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1251.178225][T22967] usb 1-1: SerialNumber: syz
[ 1251.456165][T22967] usb 1-1: 0:2 : does not exist
[ 1251.546441][T22967] usb 1-1: USB disconnect, device number 86
[ 1251.570454][T12753] udevd[12753]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1251.941860][T16592] loop1: detected capacity change from 0 to 40427
[ 1251.969727][T16592] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384)
[ 1251.981665][T16592] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1252.053205][T16592] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1252.164915][T16592] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1252.190849][T16592] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1252.517726][T16674] netlink: 'syz.5.15240': attribute type 6 has an invalid length.
[ 1252.942795][T16700] netlink: 'syz.1.15250': attribute type 6 has an invalid length.
[ 1253.114236][T22967] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1253.292389][T16752] No such timeout policy "syz1"
[ 1253.323768][T22967] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1253.344113][T22967] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1253.372119][T22967] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1253.404189][T22967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1253.419351][T22967] usb 6-1: SerialNumber: syz
[ 1253.672084][T22967] usb 6-1: 0:2 : does not exist
[ 1253.737039][T22967] usb 6-1: USB disconnect, device number 31
[ 1253.808629][T16789] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1253.819466][T12753] udevd[12753]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1254.430650][T16831] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1254.814498][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1255.154154][T22957] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1255.336002][T22957] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1255.355683][T22957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1255.386367][T22957] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1255.395745][T22957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1255.414241][T22957] usb 2-1: SerialNumber: syz
[ 1255.456612][T12737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1255.658303][T22957] usb 2-1: 0:2 : does not exist
[ 1255.752459][T22957] usb 2-1: USB disconnect, device number 78
[ 1255.797210][T12753] udevd[12753]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1256.086289][T16878] loop5: detected capacity change from 0 to 40427
[ 1256.124722][T16878] F2FS-fs (loop5): Wrong segment_count / block_count (64 > 16384)
[ 1256.132608][T16878] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1256.196781][T16878] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1256.246118][T16919] loop0: detected capacity change from 0 to 512
[ 1256.253491][T16919] EXT4-fs: Ignoring removed bh option
[ 1256.291108][T16878] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 1256.319575][T16878] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1256.369588][T16919] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1256.420693][T16919] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[ 1256.476400][T16919] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[ 1256.481906][T16919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[ 1256.625335][T16919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1256.829297][T16919] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1256.937822][T16953] loop6: detected capacity change from 0 to 64
[ 1256.972146][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1257.619961][T16986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15311'.
[ 1257.724725][T16993] Unsupported ieee802154 address type: 0
[ 1257.863223][T17001] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15325'.
[ 1258.222957][T17027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1258.294937][T17032] Unsupported ieee802154 address type: 0
[ 1259.021008][T17071] loop6: detected capacity change from 0 to 512
[ 1259.063634][T17071] EXT4-fs: Ignoring removed bh option
[ 1259.106954][T17071] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1259.110966][T17082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15341'.
[ 1259.128454][T17071] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[ 1259.181466][T17071] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[ 1259.234638][T17071] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[ 1259.243685][T17071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1259.334479][T13156] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1259.353874][T17071] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1259.429527][T12766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1259.447054][T17045] loop5: detected capacity change from 0 to 40427
[ 1259.504779][T17045] F2FS-fs (loop5): heap/no_heap options were deprecated
[ 1259.526614][T13156] usb 2-1: Using ep0 maxpacket: 32
[ 1259.536694][T17045] F2FS-fs (loop5): invalid crc value
[ 1259.542051][T17045] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[ 1259.550701][T13156] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1259.581475][T13156] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1259.602658][T17045] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1259.623689][T17102] loop0: detected capacity change from 0 to 256
[ 1259.631642][T13156] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1259.657216][T13156] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1259.668744][T13156] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1259.702713][T13156] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1259.749188][T13156] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1259.758920][T13156] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1259.787527][T13156] usb 2-1: Product: syz
[ 1259.798043][T13156] usb 2-1: Manufacturer: syz
[ 1259.813811][T17045] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1259.831743][T13156] usb 2-1: SerialNumber: syz
[ 1259.868345][T13156] usb 2-1: config 0 descriptor??
[ 1259.889852][T13156] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1259.954490][T13156] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1260.103722][T17074] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90
[ 1260.126928][T17125] tmpfs: Bad value for 'mpol'
[ 1260.138510][T13156] usb 2-1: USB disconnect, device number 79
[ 1260.158440][T13156] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 1260.309084][T17132] loop0: detected capacity change from 0 to 4096
[ 1260.369289][T17132] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[ 1260.384199][T17132] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[ 1260.537538][T15980] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[ 1260.564518][ T5769] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[ 1260.575553][ T5769] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1260.593215][ T5769] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[ 1260.612118][T15980] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[ 1260.740842][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15355'.
[ 1260.818188][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15357'.
[ 1260.964920][T22957] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1261.133187][T17148] loop5: detected capacity change from 0 to 32768
[ 1261.171037][T17148] (syz.5.15350,17148,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1261.191512][T22957] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1261.203119][T17148] (syz.5.15350,17148,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1261.217219][T15980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1261.230792][T22957] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1261.241547][T22957] usb 7-1: Product: syz
[ 1261.254930][T22957] usb 7-1: SerialNumber: syz
[ 1261.269973][T22957] usb 7-1: config 0 descriptor??
[ 1261.299786][T17148] JBD2: Ignoring recovery information on journal
[ 1261.487630][T17148] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1261.537341][T22957] hso 7-1:0.0: Failed to find BULK IN ep
[ 1261.803184][T22957] usb 7-1: USB disconnect, device number 3
[ 1261.904742][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1261.926542][T17223] loop1: detected capacity change from 0 to 64
[ 1261.957482][T17223] syz.1.15373: attempt to access beyond end of device
[ 1261.957482][T17223] loop1: rw=0, sector=6106906642, nr_sectors = 2 limit=64
[ 1261.973733][T17223] Buffer I/O error on dev loop1, logical block 3053453321, async page read
[ 1261.984366][T26424] ocfs2: Unmounting device (7,5) on (node local)
[ 1262.039713][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1262.082704][T17223] Trying to free block not in datazone
[ 1262.578069][T17248] loop6: detected capacity change from 0 to 4096
[ 1262.652308][T17248] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[ 1262.691396][T17248] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[ 1262.874537][  T632] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22.
[ 1262.893887][T12766] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[ 1262.914138][T12766] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[ 1262.921199][T12766] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[ 1262.964204][  T632] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22.
[ 1263.004344][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15386'.
[ 1263.118029][T17278] loop6: detected capacity change from 0 to 256
[ 1263.208012][T17282] loop0: detected capacity change from 0 to 512
[ 1263.295417][T12783] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1263.633871][T17262] loop1: detected capacity change from 0 to 32768
[ 1263.698989][T17262] (syz.1.15380,17262,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1263.740159][T17262] (syz.1.15380,17262,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1263.809243][T17262] JBD2: Ignoring recovery information on journal
[ 1263.984603][T17262] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1264.391998][ T5765] ocfs2: Unmounting device (7,1) on (node local)
[ 1264.732307][T17350] xt_limit: Overflow, try lower: 65536/2147483648
[ 1264.893321][T17358] C: renamed from team_slave_0 (while UP)
[ 1264.944820][T17358] netlink: 'syz.6.15410': attribute type 3 has an invalid length.
[ 1264.973637][T17358] netlink: 152 bytes leftover after parsing attributes in process `syz.6.15410'.
[ 1264.994912][T17358] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1265.872552][T17418] loop6: detected capacity change from 0 to 512
[ 1265.921866][T17421] loop1: detected capacity change from 0 to 2048
[ 1265.983056][T17429] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1266.004849][T12753] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1266.252680][T17443] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1266.338582][T12737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1266.429426][T17453] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1266.814380][ T5774] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1266.934066][T22967] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1267.015214][ T5774] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1267.034270][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.042311][ T5774] usb 1-1: Product: syz
[ 1267.066038][ T5774] usb 1-1: Manufacturer: syz
[ 1267.074259][ T5774] usb 1-1: SerialNumber: syz
[ 1267.088243][ T5774] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1267.123567][T22957] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1267.128253][   T28] kauditd_printk_skb: 20 callbacks suppressed
[ 1267.128276][   T28] audit: type=1326 audit(1769251125.589:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1267.146759][T22967] usb 7-1: config 0 has an invalid interface number: 199 but max is 1
[ 1267.166304][   T28] audit: type=1326 audit(1769251125.589:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1267.231516][   T28] audit: type=1326 audit(1769251125.639:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1267.234317][T22967] usb 7-1: config 0 has no interface number 1
[ 1267.254531][   T28] audit: type=1326 audit(1769251125.649:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1267.291245][   T28] audit: type=1326 audit(1769251125.689:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f392815b58e code=0x7ffc0000
[ 1267.291391][T22967] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1267.333890][   T28] audit: type=1326 audit(1769251125.689:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f392815b58e code=0x7ffc0000
[ 1267.375555][   T28] audit: type=1326 audit(1769251125.689:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f392815b58e code=0x7ffc0000
[ 1267.405879][T22967] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1267.430215][   T28] audit: type=1326 audit(1769251125.689:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f392815b58e code=0x7ffc0000
[ 1267.456641][T22967] usb 7-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1267.465748][   T28] audit: type=1326 audit(1769251125.699:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f392815b58e code=0x7ffc0000
[ 1267.465794][   T28] audit: type=1326 audit(1769251125.729:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17501 comm="syz.5.15452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f392815b58e code=0x7ffc0000
[ 1267.513349][T22967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1267.521552][T22967] usb 7-1: SerialNumber: syz
[ 1267.541790][T22967] usb 7-1: config 0 descriptor??
[ 1267.560153][T22967] usb 7-1: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1267.568432][T22967] usb 7-1: No valid video chain found.
[ 1267.601657][ T5774] usb 1-1: USB disconnect, device number 87
[ 1267.739123][T17523] loop1: detected capacity change from 0 to 2048
[ 1267.773421][T24820] usb 7-1: USB disconnect, device number 4
[ 1267.798882][T17523] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[ 1267.831775][T17523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1267.880510][T17523] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[ 1268.010001][T17537] netlink: 'syz.1.15457': attribute type 3 has an invalid length.
[ 1268.027162][T17537] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15457'.
[ 1268.042959][T17537] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1268.254325][T22957] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 1268.261434][T22957] ath9k_htc: Failed to initialize the device
[ 1268.303295][ T5774] usb 1-1: ath9k_htc: USB layer deinitialized
[ 1268.478945][T17568] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1268.671052][T17579] loop6: detected capacity change from 0 to 2048
[ 1268.729158][T17585] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1269.335866][T17575] loop5: detected capacity change from 0 to 32768
[ 1269.373152][T17614] loop0: detected capacity change from 0 to 1024
[ 1269.434310][T17575] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[ 1269.470212][T17575] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1269.591090][T17614] hfsplus: keylen 65060 too large
[ 1269.705563][T17575] XFS (loop5): Ending clean mount
[ 1269.722685][T17575] XFS (loop5): Quotacheck needed: Please wait.
[ 1269.896928][T17575] XFS (loop5): Quotacheck: Done.
[ 1269.912833][T17648] loop0: detected capacity change from 0 to 2048
[ 1269.940608][T17650] bridge1: entered promiscuous mode
[ 1269.983410][T17656] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1270.101268][T26424] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1270.181544][T17660] loop6: detected capacity change from 0 to 128
[ 1270.237007][T17660] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1270.300842][T17660] ext4 filesystem being mounted at /320/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1270.457858][T12766] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1271.450911][T22957] IPVS: starting estimator thread 0...
[ 1271.554157][T17710] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1271.594579][T17719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15501'.
[ 1271.616473][T17718] loop5: detected capacity change from 0 to 2048
[ 1271.663759][T17725] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1272.094787][ T3505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1272.592400][T17787] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1272.728427][T17795] loop6: detected capacity change from 0 to 1764
[ 1272.771775][T22957] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1272.976590][T22957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1273.002727][T22957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1273.023532][T22957] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 1273.033312][T22957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.050301][T17815] loop1: detected capacity change from 0 to 512
[ 1273.058526][T22957] usb 1-1: config 0 descriptor??
[ 1273.175718][T17815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1273.205689][T17826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1273.213041][T17826] IPv6: NLM_F_CREATE should be set when creating new route
[ 1273.220465][T17826] IPv6: NLM_F_CREATE should be set when creating new route
[ 1273.244439][T17815] ext4 filesystem being mounted at /4010/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1273.277989][T22957] ath6kl: Failed to submit usb control message: -71
[ 1273.304393][T22957] ath6kl: unable to send the bmi data to the device: -71
[ 1273.311596][T22957] ath6kl: Unable to send get target info: -71
[ 1273.351166][T17815] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #12: block 32: comm syz.1.15532: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1
[ 1273.375849][T22957] ath6kl: Failed to init ath6kl core: -71
[ 1273.395181][T22957] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[ 1273.416653][T22957] usb 1-1: USB disconnect, device number 88
[ 1273.444188][T17815] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz.1.15532: directory missing '.'
[ 1273.537514][T17849] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1273.558603][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1273.634238][T22942] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1273.863037][T22942] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1273.880194][T22942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.889042][T22942] usb 7-1: Product: syz
[ 1273.893257][T22942] usb 7-1: Manufacturer: syz
[ 1273.898495][T22942] usb 7-1: SerialNumber: syz
[ 1273.909430][T22942] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1273.939839][T22957] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1274.114592][T17880] netlink: 5120 bytes leftover after parsing attributes in process `syz.5.15546'.
[ 1274.295489][T17885] veth3: entered promiscuous mode
[ 1274.321530][T17885] veth3: entered allmulticast mode
[ 1274.501311][T22967] usb 7-1: USB disconnect, device number 5
[ 1274.706468][T17921] loop5: detected capacity change from 0 to 1764
[ 1274.998783][T17942] loop1: detected capacity change from 0 to 128
[ 1275.063319][T22957] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1275.094838][T22957] ath9k_htc: Failed to initialize the device
[ 1275.103508][T22967] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1275.522252][T17980] loop1: detected capacity change from 0 to 164
[ 1275.613288][   T28] kauditd_printk_skb: 200 callbacks suppressed
[ 1275.613304][   T28] audit: type=1326 audit(1769251134.079:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.5.15571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1275.724895][   T28] audit: type=1326 audit(1769251134.119:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.5.15571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1275.812911][   T28] audit: type=1326 audit(1769251134.129:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.5.15571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1275.836462][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1275.883125][   T28] audit: type=1326 audit(1769251134.129:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.5.15571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1275.906144][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1276.024925][   T28] audit: type=1326 audit(1769251134.129:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17984 comm="syz.5.15571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f392819acb9 code=0x7ffc0000
[ 1276.347611][T18028] loop1: detected capacity change from 0 to 512
[ 1276.358176][T18028] EXT4-fs: Ignoring removed orlov option
[ 1276.420684][T18028] EXT4-fs: Ignoring removed nobh option
[ 1276.437523][T18028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1276.494906][T18028] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.15584: bg 0: block 248: padding at end of block bitmap is not set
[ 1276.522389][T18028] Quota error (device loop1): write_blk: dquota write failed
[ 1276.530738][T18028] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1276.542196][T18028] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.15584: Failed to acquire dquot type 1
[ 1276.590305][T18028] EXT4-fs (loop1): 1 truncate cleaned up
[ 1276.605745][T18028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1276.620146][T18028] ext4 filesystem being mounted at /4025/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1276.681559][T18028] EXT4-fs: Ignoring removed orlov option
[ 1276.691372][T18028] EXT4-fs: Ignoring removed nobh option
[ 1276.698037][T18050] netlink: 'syz.5.15590': attribute type 1 has an invalid length.
[ 1276.714269][T18028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1276.729556][T18050] netlink: 232 bytes leftover after parsing attributes in process `syz.5.15590'.
[ 1276.759690][T18028] EXT4-fs error (device loop1): __ext4_remount:6752: comm syz.1.15584: Abort forced by user
[ 1276.779359][T18028] EXT4-fs (loop1): Remounting filesystem read-only
[ 1276.813322][T18028] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[ 1276.946814][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1277.805239][T24820] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[ 1277.858391][T18070] loop6: detected capacity change from 0 to 32768
[ 1277.864740][ T2959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1277.911151][T18070] (syz.6.15596,18070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1277.939764][T18070] (syz.6.15596,18070,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1278.000020][T18070] JBD2: Ignoring recovery information on journal
[ 1278.016909][T24820] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[ 1278.033114][T24820] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1278.045198][T24820] usb 2-1: config 8 has no interface number 0
[ 1278.051453][T24820] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1278.060098][T18122] netlink: 'syz.5.15609': attribute type 12 has an invalid length.
[ 1278.067382][T24820] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1278.086506][T24820] usb 2-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[ 1278.096053][T24820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.104364][T24820] usb 2-1: Product: syz
[ 1278.108565][T24820] usb 2-1: Manufacturer: syz
[ 1278.113277][T24820] usb 2-1: SerialNumber: syz
[ 1278.206075][T18070] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1278.369217][T24820] usb 2-1: USB disconnect, device number 80
[ 1278.520431][T12766] ocfs2: Unmounting device (7,6) on (node local)
[ 1278.845406][T18163] netlink: 'syz.6.15615': attribute type 5 has an invalid length.
[ 1278.878709][T18163] ip6erspan0: entered promiscuous mode
[ 1279.247623][T18188] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15628'.
[ 1279.286205][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15628'.
[ 1279.310945][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15628'.
[ 1279.542543][T18208] netlink: 'syz.1.15633': attribute type 12 has an invalid length.
[ 1279.910302][T18219] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1280.366784][T18289] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1280.574465][T18302] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15653'.
[ 1280.600619][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15655'.
[ 1280.604306][T18302] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15653'.
[ 1280.668583][T18299] loop5: detected capacity change from 0 to 4096
[ 1280.695354][T18299] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1280.778643][T18299] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[ 1280.812248][T18299] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1280.855938][T18299] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[ 1280.915182][T18299] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1280.988386][T18299] ntfs: volume version 3.1.
[ 1281.000491][T18299] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[ 1281.079353][T18299] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1281.092887][T18299] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[ 1281.122088][T18299] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[ 1281.160151][T18299] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[ 1281.532008][T18293] loop0: detected capacity change from 0 to 32768
[ 1281.568507][T18293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1281.584725][T18293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1281.632933][T18293] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 1281.671588][T22957] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1281.705059][T22957] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1281.868149][T22957] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 163ms
[ 1281.884385][T22957] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1281.890426][T18293] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1282.362594][T18340] loop5: detected capacity change from 0 to 32768
[ 1282.419271][T18340] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[ 1282.438513][T18340] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1282.531251][T18293] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1282.593311][T18340] XFS (loop5): Ending clean mount
[ 1282.609232][T18340] XFS (loop5): Quotacheck needed: Please wait.
[ 1282.846730][ T5769] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[ 1282.861656][ T5769] CPU: 0 PID: 5769 Comm: syz-executor Not tainted syzkaller #0
[ 1282.861874][T18340] XFS (loop5): Quotacheck: Done.
[ 1282.869227][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1282.869243][ T5769] Call Trace:
[ 1282.869252][ T5769]  <TASK>
[ 1282.869260][ T5769]  dump_stack_lvl+0x18c/0x250
[ 1282.869292][ T5769]  ? show_regs_print_info+0x20/0x20
[ 1282.869312][ T5769]  ? load_image+0x400/0x400
[ 1282.869333][ T5769]  ? do_raw_spin_unlock+0x121/0x230
[ 1282.869357][ T5769]  gfs2_assert_warn_i+0x193/0x2c0
[ 1282.869386][ T5769]  gfs2_qd_dispose+0x4aa/0x5b0
[ 1282.869406][ T5769]  gfs2_quota_cleanup+0x410/0x720
[ 1282.869425][ T5769]  ? spin_lock_bucket+0x150/0x150
[ 1282.930288][ T5769]  ? __might_sleep+0xe0/0xe0
[ 1282.934947][ T5769]  ? gfs2_ail_empty_tr+0x2f0/0x2f0
[ 1282.940089][ T5769]  ? gfs2_quota_sync+0x591/0x5a0
[ 1282.945067][ T5769]  gfs2_make_fs_ro+0x2aa/0x320
[ 1282.949862][ T5769]  ? gfs2_dinode_out+0xb10/0xb10
[ 1282.954826][ T5769]  ? __lock_acquire+0x7d40/0x7d40
[ 1282.959875][ T5769]  ? __rwlock_init+0x150/0x150
[ 1282.964666][ T5769]  ? do_raw_spin_unlock+0x121/0x230
[ 1282.969892][ T5769]  gfs2_put_super+0x224/0x930
[ 1282.974696][ T5769]  ? gfs2_evict_inode+0x1350/0x1350
[ 1282.979919][ T5769]  generic_shutdown_super+0x134/0x2b0
[ 1282.985324][ T5769]  kill_block_super+0x44/0x90
[ 1282.990035][ T5769]  deactivate_locked_super+0x97/0x100
[ 1282.995430][ T5769]  cleanup_mnt+0x43b/0x4d0
[ 1282.999879][ T5769]  task_work_run+0x1d4/0x260
[ 1283.004503][ T5769]  ? task_work_cancel+0x220/0x220
[ 1283.009558][ T5769]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1283.015061][ T5769]  exit_to_user_mode_loop+0xe6/0x110
[ 1283.020463][ T5769]  exit_to_user_mode_prepare+0xee/0x180
[ 1283.026038][ T5769]  syscall_exit_to_user_mode+0x1a/0x50
[ 1283.031533][ T5769]  do_syscall_64+0x61/0xa0
[ 1283.035997][ T5769]  ? clear_bhb_loop+0x40/0x90
[ 1283.040703][ T5769]  ? clear_bhb_loop+0x40/0x90
[ 1283.045417][ T5769]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1283.051346][ T5769] RIP: 0033:0x7f3f5d99bf17
[ 1283.055790][ T5769] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1283.075433][ T5769] RSP: 002b:00007ffffe7d32b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1283.083979][ T5769] RAX: 0000000000000000 RBX: 00007f3f5da0471f RCX: 00007f3f5d99bf17
[ 1283.091980][ T5769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffe7d3370
[ 1283.100200][ T5769] RBP: 00007ffffe7d3370 R08: 00007ffffe7d4370 R09: 00000000ffffffff
[ 1283.108219][ T5769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffe7d4400
[ 1283.116226][ T5769] R13: 00007f3f5da0471f R14: 0000000000139238 R15: 00007ffffe7d4440
[ 1283.124471][ T5769]  </TASK>
[ 1283.143111][T26424] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1283.494652][T18400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15678'.
[ 1283.615347][  T632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1284.297490][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1284.350665][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1284.780749][T18457] Cannot find add_set index 2 as target
[ 1284.798006][T18450] xt_CT: No such helper "pptp"
[ 1285.509768][T18484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15703'.
[ 1285.536464][T18484] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15703'.
[ 1285.590875][T18455] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1285.985879][T18505] loop0: detected capacity change from 0 to 1764
[ 1286.198478][T18516] overlay: Unknown parameter '\'
[ 1286.240276][T18520] loop6: detected capacity change from 0 to 512
[ 1286.305486][T18520] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1286.400755][T18520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1286.474134][T18520] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1286.537391][T18537] loop0: detected capacity change from 0 to 1024
[ 1286.574333][T18520] EXT4-fs error (device loop6): ext4_xattr_block_list:766: inode #15: comm syz.6.15714: corrupted xattr block 32: bad e_name length
[ 1286.638388][T18520] EXT4-fs (loop6): Remounting filesystem read-only
[ 1286.692549][T18504] loop5: detected capacity change from 0 to 32768
[ 1286.782992][T18504] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1286.816676][T12766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1287.039678][T24820] XFS (loop5): Metadata corruption detected at xfs_agf_verify+0x211/0x9b0, xfs_agf block 0x1 
[ 1287.076484][T24820] XFS (loop5): Unmount and run xfs_repair
[ 1287.082462][T24820] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1287.111600][T24820] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00  XAGF.......... .
[ 1287.137159][T24820] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01  ................
[ 1287.154511][T18571] netlink: 'syz.6.15722': attribute type 2 has an invalid length.
[ 1287.164594][T24820] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06  ................
[ 1287.187534][T24820] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00  ................
[ 1287.203631][T24820] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[ 1287.216786][T24820] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01  ................
[ 1287.244053][T24820] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1287.277186][T24820] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1287.292677][T18504] XFS (loop5): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 117
[ 1287.325128][T18504] XFS (loop5): Error -117 reserving per-AG metadata reserve pool.
[ 1287.333668][T18504] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592).  Shutting down filesystem.
[ 1287.360923][T18504] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[ 1287.382938][T18504] XFS (loop5): Ending clean mount
[ 1287.636978][T26424] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1287.658169][T18588] loop0: detected capacity change from 0 to 4096
[ 1287.669573][T18588] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 1287.791618][T18588] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[ 1287.824306][T18588] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing.
[ 1287.833245][T18588] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[ 1287.861169][T18588] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1287.891235][T18601] overlay: Unknown parameter '\'
[ 1288.051565][T18588] ntfs: volume version 3.1.
[ 1288.074351][T18588] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[ 1288.144766][T18588] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[ 1288.187958][T18588] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[ 1288.394725][T18588] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[ 1288.429040][T18588] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[ 1288.738505][T15980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1288.938932][T18648] loop5: detected capacity change from 0 to 512
[ 1288.963778][T18648] EXT4-fs: Ignoring removed oldalloc option
[ 1288.979646][T18648] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1289.063926][T18648] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.15747: invalid indirect mapped block 4294967295 (level 0)
[ 1289.080204][T18648] EXT4-fs (loop5): Remounting filesystem read-only
[ 1289.094470][T18648] EXT4-fs (loop5): 1 orphan inode deleted
[ 1289.100250][T18648] EXT4-fs (loop5): 1 truncate cleaned up
[ 1289.141981][T18648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1289.208065][T18626] loop1: detected capacity change from 0 to 32768
[ 1289.250384][T18626] (syz.1.15738,18626,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1289.274724][T22967] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1289.282006][T18626] (syz.1.15738,18626,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1289.300414][T26424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1289.440205][T18626] JBD2: Ignoring recovery information on journal
[ 1289.474411][T22967] usb 7-1: Using ep0 maxpacket: 16
[ 1289.483640][T18626] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1289.485085][T22967] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[ 1289.532057][T22967] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1289.614620][T22967] usb 7-1: config 0 has no interface number 0
[ 1289.649744][T22967] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1289.674143][T22967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1289.712762][T22967] usb 7-1: Product: syz
[ 1289.732599][T22967] usb 7-1: Manufacturer: syz
[ 1289.746915][T22967] usb 7-1: SerialNumber: syz
[ 1289.764966][T22967] usb 7-1: config 0 descriptor??
[ 1289.930348][ T5765] ocfs2: Unmounting device (7,1) on (node local)
[ 1290.015131][T22967] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[ 1290.034665][T22967] usb 7-1: No valid video chain found.
[ 1290.182513][T18708] binder: BC_ACQUIRE_RESULT not supported
[ 1290.189141][T18708] binder: 18707:18708 ioctl c0306201 200000000040 returned -22
[ 1290.217968][T13156] usb 7-1: USB disconnect, device number 6
[ 1290.283678][ T3011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1290.332585][T18724] binder: 18722:18724 ioctl c018620c 2000000002c0 returned -1
[ 1290.622034][T18740] loop1: detected capacity change from 0 to 1024
[ 1290.717516][T15980] hfsplus: b-tree write err: -5, ino 4
[ 1291.117589][T18772] netlink: 192436 bytes leftover after parsing attributes in process `syz.6.15779'.
[ 1291.154357][T18772] openvswitch: netlink: Message has 13056 unknown bytes.
[ 1291.210571][T18777] loop0: detected capacity change from 0 to 256
[ 1291.253875][T18781] netlink: 'syz.1.15782': attribute type 3 has an invalid length.
[ 1291.289376][T18781] netlink: 'syz.1.15782': attribute type 1 has an invalid length.
[ 1291.423033][T18789] sctp: [Deprecated]: syz.6.15784 (pid 18789) Use of int in max_burst socket option deprecated.
[ 1291.423033][T18789] Use struct sctp_assoc_value instead
[ 1292.189386][T18797] loop0: detected capacity change from 0 to 32768
[ 1292.218601][T18797] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.15793 (18797)
[ 1292.279370][T18797] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1292.353239][T18797] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1292.379904][T18797] BTRFS info (device loop0): setting nodatasum
[ 1292.387915][T18797] BTRFS info (device loop0): force clearing of disk cache
[ 1292.396323][T18797] BTRFS info (device loop0): enabling ssd optimizations
[ 1292.403453][T18797] BTRFS info (device loop0): allowing degraded mounts
[ 1292.412962][T18843] loop5: detected capacity change from 0 to 8
[ 1292.434198][T18797] BTRFS info (device loop0): enabling disk space caching
[ 1292.441304][T18797] BTRFS info (device loop0): disk space caching is enabled
[ 1292.517470][T18843] SQUASHFS error: Failed to read block 0x285: -5
[ 1292.526999][T18843] SQUASHFS error: Unable to read metadata cache entry [283]
[ 1292.569013][T18843] SQUASHFS error: Unable to read symlink [8f:60]
[ 1292.694900][T18797] BTRFS info (device loop0): auto enabling async discard
[ 1292.762405][T18797] BTRFS info (device loop0): rebuilding free space tree
[ 1292.866114][T18797] BTRFS info (device loop0): disabling free space tree
[ 1292.890549][T18797] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1292.920959][T18797] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1293.012537][T18797] BTRFS info (device loop0): balance: start -sprofiles=NONE,usage=0..511,drange=511..4294967295
[ 1293.056628][T18797] BTRFS info (device loop0): balance: ended with status: 0
[ 1293.130157][T18855] loop1: detected capacity change from 0 to 32768
[ 1293.160333][ T5769] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1293.222288][T18855] 
[ 1293.222288][T18855]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1293.222288][T18855] 
[ 1293.335192][T18855] read_mapping_page failed!
[ 1293.341392][T18855] ERROR: (device loop1): txCommit: 
[ 1293.341392][T18855] 
[ 1293.426001][T18855] ERROR: (device loop1): remounting filesystem as read-only
[ 1293.426956][T18852] loop6: detected capacity change from 0 to 32768
[ 1293.609209][T18852] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[ 1293.666347][T18889] netlink: 23 bytes leftover after parsing attributes in process `syz.0.15806'.
[ 1293.708089][T18852] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1293.964693][    C1] sd 0:0:1:0: [sda] tag#9877 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1293.975294][    C1] sd 0:0:1:0: [sda] tag#9877 CDB: Read(6) 08 00 9f d1 fe de
[ 1294.048819][T18904] loop1: detected capacity change from 0 to 256
[ 1294.107102][T18904] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1294.165905][T18909] loop5: detected capacity change from 0 to 16
[ 1294.189802][T12766] ocfs2: Unmounting device (7,6) on (node local)
[ 1294.207198][T18904] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[ 1294.220610][T18909] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1294.264959][T18904] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[ 1294.270341][T18916] loop0: detected capacity change from 0 to 512
[ 1294.272645][T18904] UDF-fs: Scanning with blocksize 512 failed
[ 1294.287750][T18909] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1294.313709][T18904] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1294.325031][T18916] EXT4-fs: Ignoring removed oldalloc option
[ 1294.334250][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1294.374140][T18916] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1294.384276][T18909] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1294.384314][T18909] erofs: (device loop5): z_erofs_readahead: readahead error at folio 3 @ nid 89
[ 1294.384334][T18909] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1294.384350][T18909] erofs: (device loop5): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1294.384366][T18909] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1294.384380][T18909] erofs: (device loop5): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1294.384397][T18909] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1294.384411][T18909] erofs: (device loop5): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1294.384439][T18909] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1294.384456][T18909] erofs: (device loop5): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1294.384470][T18909] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1294.395540][   T28] audit: type=1800 audit(1769251408.858:757): pid=18909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15813" name="file2" dev="loop5" ino=89 res=0 errno=0
[ 1294.538447][T12737] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1294.558018][T18904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1294.658807][T18924] loop6: detected capacity change from 0 to 512
[ 1294.669919][T18927] loop5: detected capacity change from 0 to 8
[ 1294.687465][T18924] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1294.726664][T18916] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.15814: invalid indirect mapped block 4294967295 (level 0)
[ 1294.752805][T18927] SQUASHFS error: Failed to read block 0x1ec: -5
[ 1294.771578][T18916] EXT4-fs (loop0): Remounting filesystem read-only
[ 1294.781760][T18927] SQUASHFS error: Unable to read metadata cache entry [1ea]
[ 1294.796801][T18916] EXT4-fs (loop0): 1 orphan inode deleted
[ 1294.851459][T18924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1294.852706][T18916] EXT4-fs (loop0): 1 truncate cleaned up
[ 1294.870760][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15816'.
[ 1294.880195][T18924] ext4 filesystem being mounted at /405/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1294.953207][T18916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1295.257790][T18924] EXT4-fs error (device loop6): __ext4_new_inode:1284: comm syz.6.15811: failed to insert inode 16: doubly allocated?
[ 1295.306555][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1295.439211][T12766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1295.466206][T18961] openvswitch: netlink: Message has 245 unknown bytes.
[ 1295.473176][T18961] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1295.953473][T18990] sctp: [Deprecated]: syz.5.15829 (pid 18990) Use of int in max_burst socket option deprecated.
[ 1295.953473][T18990] Use struct sctp_assoc_value instead
[ 1295.965447][T18989] EXT4-fs: Ignoring removed oldalloc option
[ 1296.005361][T18989] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1296.119353][T18989] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #16: comm syz.6.15830: invalid indirect mapped block 4294967295 (level 0)
[ 1296.161006][T18989] EXT4-fs (loop6): Remounting filesystem read-only
[ 1296.168453][T18989] EXT4-fs (loop6): 1 orphan inode deleted
[ 1296.174880][T18989] EXT4-fs (loop6): 1 truncate cleaned up
[ 1296.181794][T18989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1296.293578][T12766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1296.626863][T18982] set_capacity_and_notify: 3 callbacks suppressed
[ 1296.626881][T18982] loop0: detected capacity change from 0 to 32768
[ 1296.736478][T18982] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[ 1296.774194][T18982] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1296.806686][T19018] loop5: detected capacity change from 0 to 4096
[ 1296.822681][T19018] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[ 1296.948970][T19018] ntfs3: loop5: $AttrDef is corrupted.
[ 1297.084863][T18982] XFS (loop0): Ending clean mount
[ 1297.112251][T18982] XFS (loop0): Quotacheck needed: Please wait.
[ 1297.271886][T18982] XFS (loop0): Quotacheck: Done.
[ 1297.335867][T19010] loop6: detected capacity change from 0 to 32768
[ 1297.371763][T19010] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1297.548573][T19010] XFS (loop6): Ending clean mount
[ 1297.598814][ T5769] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1297.607862][T19010] XFS (loop6): Quotacheck needed: Please wait.
[ 1297.776435][T19010] XFS (loop6): Quotacheck: Done.
[ 1297.869781][T12766] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1297.909914][T19047] loop1: detected capacity change from 0 to 32768
[ 1298.154582][T19047] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1298.226984][T19043] loop5: detected capacity change from 0 to 32768
[ 1298.261789][T19043] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1298.303799][T19043] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1298.376360][T24820] XFS (loop1): Metadata corruption detected at xfs_agf_verify+0x211/0x9b0, xfs_agf block 0x1 
[ 1298.413531][T24820] XFS (loop1): Unmount and run xfs_repair
[ 1298.427310][T24820] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 1298.444877][T24820] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00  XAGF.......... .
[ 1298.458759][T19043] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 1298.464236][T24820] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01  ................
[ 1298.475862][T24820] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06  ................
[ 1298.480416][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1298.494149][T24820] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00  ................
[ 1298.498761][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1298.509424][T24820] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[ 1298.536771][T24820] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01  ................
[ 1298.555050][T24820] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1298.571606][T24820] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1298.581264][T19047] XFS (loop1): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 117
[ 1298.594475][T19047] XFS (loop1): Error -117 reserving per-AG metadata reserve pool.
[ 1298.603182][T19047] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592).  Shutting down filesystem.
[ 1298.648259][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 149ms
[ 1298.655442][T19047] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[ 1298.660697][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1298.683145][T19043] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1298.690464][T19047] XFS (loop1): Ending clean mount
[ 1298.893425][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1298.925382][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1298.929286][T19096] loop6: detected capacity change from 0 to 512
[ 1299.087638][T19096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1299.149929][T19096] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1299.302878][T19096] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #12: block 32: comm syz.6.15850: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1
[ 1299.342061][T19043] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1299.373281][T19096] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #12: comm syz.6.15850: directory missing '.'
[ 1299.544418][T19116] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.15852'.
[ 1299.573105][T12766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1299.660099][T19118] veth3: entered promiscuous mode
[ 1299.691927][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1299.700271][T19118] veth3: entered allmulticast mode
[ 1299.760045][T26424] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[ 1299.796981][T26424] CPU: 0 PID: 26424 Comm: syz-executor Not tainted syzkaller #0
[ 1299.804695][T26424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1299.814783][T26424] Call Trace:
[ 1299.818087][T26424]  <TASK>
[ 1299.821036][T26424]  dump_stack_lvl+0x18c/0x250
[ 1299.825751][T26424]  ? show_regs_print_info+0x20/0x20
[ 1299.830988][T26424]  ? load_image+0x400/0x400
[ 1299.835537][T26424]  ? do_raw_spin_unlock+0x121/0x230
[ 1299.840769][T26424]  gfs2_assert_warn_i+0x193/0x2c0
[ 1299.845840][T26424]  gfs2_qd_dispose+0x4aa/0x5b0
[ 1299.850635][T26424]  gfs2_quota_cleanup+0x410/0x720
[ 1299.855695][T26424]  ? spin_lock_bucket+0x150/0x150
[ 1299.860743][T26424]  ? __might_sleep+0xe0/0xe0
[ 1299.865378][T26424]  ? gfs2_ail_empty_tr+0x2f0/0x2f0
[ 1299.870520][T26424]  ? gfs2_quota_sync+0x591/0x5a0
[ 1299.875503][T26424]  gfs2_make_fs_ro+0x2aa/0x320
[ 1299.880320][T26424]  ? gfs2_dinode_out+0xb10/0xb10
[ 1299.885402][T26424]  ? __lock_acquire+0x7d40/0x7d40
[ 1299.890557][T26424]  ? __rwlock_init+0x150/0x150
[ 1299.895363][T26424]  ? do_raw_spin_unlock+0x121/0x230
[ 1299.900595][T26424]  gfs2_put_super+0x224/0x930
[ 1299.905310][T26424]  ? gfs2_evict_inode+0x1350/0x1350
[ 1299.910540][T26424]  generic_shutdown_super+0x134/0x2b0
[ 1299.915962][T26424]  kill_block_super+0x44/0x90
[ 1299.920678][T26424]  deactivate_locked_super+0x97/0x100
[ 1299.926102][T26424]  cleanup_mnt+0x43b/0x4d0
[ 1299.930556][T26424]  task_work_run+0x1d4/0x260
[ 1299.935181][T26424]  ? task_work_cancel+0x220/0x220
[ 1299.940240][T26424]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1299.945737][T26424]  exit_to_user_mode_loop+0xe6/0x110
[ 1299.951060][T26424]  exit_to_user_mode_prepare+0xee/0x180
[ 1299.956659][T26424]  syscall_exit_to_user_mode+0x1a/0x50
[ 1299.962153][T26424]  do_syscall_64+0x61/0xa0
[ 1299.966607][T26424]  ? clear_bhb_loop+0x40/0x90
[ 1299.971312][T26424]  ? clear_bhb_loop+0x40/0x90
[ 1299.976021][T26424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1299.981939][T26424] RIP: 0033:0x7f392819bf17
[ 1299.986373][T26424] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1300.006010][T26424] RSP: 002b:00007fff9a10c5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1300.014456][T26424] RAX: 0000000000000000 RBX: 00007f392820471f RCX: 00007f392819bf17
[ 1300.022453][T26424] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9a10c670
[ 1300.030458][T26424] RBP: 00007fff9a10c670 R08: 00007fff9a10d670 R09: 00000000ffffffff
[ 1300.038455][T26424] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9a10d700
[ 1300.046457][T26424] R13: 00007f392820471f R14: 000000000013d424 R15: 00007fff9a10d740
[ 1300.054475][T26424]  </TASK>
[ 1300.264625][   T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1300.703126][T19174] netlink: 'syz.1.15866': attribute type 5 has an invalid length.
[ 1300.901015][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.915311][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.951414][T19144] loop6: detected capacity change from 0 to 40427
[ 1300.966308][T19144] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[ 1300.975276][T19144] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1301.012238][T19144] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1301.041500][T19192] loop0: detected capacity change from 0 to 16
[ 1301.073359][T19192] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1301.109433][T19192] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1301.185745][T19192] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1301.206932][T19144] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1301.214700][T19192] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89
[ 1301.223867][T19144] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1301.234773][T19192] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1301.289809][T19192] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89
[ 1301.315822][T19192] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1301.341704][T19144] syz.6.15858: attempt to access beyond end of device
[ 1301.341704][T19144] loop6: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[ 1301.361078][T19192] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89
[ 1301.376007][T19192] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1301.405449][T19192] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89
[ 1301.434337][T19192] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1301.455447][T19192] erofs: (device loop0): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89
[ 1301.467363][T19192] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89
[ 1301.472599][T12766] syz-executor: attempt to access beyond end of device
[ 1301.472599][T12766] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1301.497734][   T28] audit: type=1800 audit(1769251415.968:758): pid=19192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15871" name="file2" dev="loop0" ino=89 res=0 errno=0
[ 1301.530262][T12766] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1301.553732][T19205] loop5: detected capacity change from 0 to 164
[ 1301.863644][T19215] veth3: entered promiscuous mode
[ 1301.878188][T19215] veth3: entered allmulticast mode
[ 1302.033889][T19195] loop1: detected capacity change from 0 to 32768
[ 1302.058209][T19195] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[ 1302.070085][T19195] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1302.161407][   T28] audit: type=1326 audit(1769251416.628:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19242 comm="syz.6.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1302.174275][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1302.244293][   T28] audit: type=1326 audit(1769251416.628:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19242 comm="syz.6.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1302.250132][T19195] XFS (loop1): Ending clean mount
[ 1302.312860][   T28] audit: type=1326 audit(1769251416.638:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19242 comm="syz.6.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1302.321625][T19195] XFS (loop1): Quotacheck needed: Please wait.
[ 1302.336087][   T28] audit: type=1326 audit(1769251416.638:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19242 comm="syz.6.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1302.371815][   T28] audit: type=1326 audit(1769251416.638:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19242 comm="syz.6.15874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80079acb9 code=0x7ffc0000
[ 1302.394255][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1302.571213][T19195] XFS (loop1): Quotacheck: Done.
[ 1302.838374][ T5765] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1303.042349][T19286] virtiofs: Unknown parameter 'always'
[ 1303.220268][T19298] loop6: detected capacity change from 0 to 256
[ 1303.250294][T19298] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1303.300513][T19298] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[ 1303.318804][T19298] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[ 1303.336118][T19298] UDF-fs: Scanning with blocksize 512 failed
[ 1303.355382][T19298] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1303.415782][T19298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1303.437588][T19308] xt_NFQUEUE: number of total queues is 0
[ 1303.770199][T19328] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1303.810961][T19328] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1304.114625][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15910'.
[ 1304.457679][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1305.153593][T19352] loop6: detected capacity change from 0 to 32768
[ 1305.164647][T19352] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.15911 (19352)
[ 1305.208640][T19352] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1305.227961][T19352] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1305.241384][T19352] BTRFS info (device loop6): setting nodatasum
[ 1305.248676][T19352] BTRFS info (device loop6): force clearing of disk cache
[ 1305.256155][T19352] BTRFS info (device loop6): enabling ssd optimizations
[ 1305.263218][T19352] BTRFS info (device loop6): allowing degraded mounts
[ 1305.263310][T19391] loop5: detected capacity change from 0 to 4096
[ 1305.270816][T19352] BTRFS info (device loop6): enabling disk space caching
[ 1305.270841][T19352] BTRFS info (device loop6): disk space caching is enabled
[ 1305.319723][T19391] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[ 1305.387726][T15980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1305.490714][T19352] BTRFS info (device loop6): auto enabling async discard
[ 1305.543208][T19352] BTRFS info (device loop6): rebuilding free space tree
[ 1305.555578][T19391] ntfs3: loop5: failed to convert "c46c" to iso8859-2
[ 1305.617848][T19352] BTRFS info (device loop6): disabling free space tree
[ 1305.642153][T19352] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1305.666286][T19352] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1305.854369][T19427] netlink: 'syz.1.15930': attribute type 28 has an invalid length.
[ 1305.893269][T19427] netlink: 'syz.1.15930': attribute type 29 has an invalid length.
[ 1305.922859][T19427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15930'.
[ 1305.935391][T19352] BTRFS info (device loop6): balance: start -sprofiles=NONE,usage=0..511,drange=511..4294967295
[ 1305.961628][T19352] BTRFS info (device loop6): balance: ended with status: 0
[ 1305.974933][T19432] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1306.116758][T12766] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1306.338732][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1306.572989][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1306.881376][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1307.080581][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1307.511687][T19481] netlink: 156 bytes leftover after parsing attributes in process `syz.5.15950'.
[ 1307.572582][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1308.102174][ T5771] Bluetooth: hci4: command 0x0406 tx timeout
[ 1308.580171][T19527] loop1: detected capacity change from 0 to 4096
[ 1309.045528][T19554] cgroup: release_agent respecified
[ 1309.220268][T19562] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1309.392652][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15978'.
[ 1309.698477][T19587] tmpfs: Bad value for 'mpol'
[ 1310.066974][T19602] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15988'.
[ 1310.495959][T19584] loop1: detected capacity change from 0 to 32768
[ 1310.534539][T19584] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.15982 (19584)
[ 1310.631783][T19584] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1310.653407][T19584] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1310.663350][T19584] BTRFS info (device loop1): enabling ssd optimizations
[ 1310.682825][T19584] BTRFS info (device loop1): turning on sync discard
[ 1310.690597][T19584] BTRFS info (device loop1): using free space tree
[ 1310.789192][T19605] loop5: detected capacity change from 0 to 32768
[ 1310.830352][T19605] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1310.938237][ T5765] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1310.961113][T19605] XFS (loop5): Ending clean mount
[ 1311.001157][T19605] XFS (loop5): Quotacheck needed: Please wait.
[ 1311.147769][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1311.159999][T12734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1311.197388][T19605] XFS (loop5): Quotacheck: Done.
[ 1311.368257][T19662] loop0: detected capacity change from 0 to 1024
[ 1311.415626][T19662] EXT4-fs: Ignoring removed bh option
[ 1311.422026][T19662] EXT4-fs: inline encryption not supported
[ 1311.456128][T19662] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1311.501392][T26424] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1311.529982][T19662] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[ 1311.594809][T19662] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.15999: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1311.728288][T19679] loop1: detected capacity change from 0 to 256
[ 1311.736196][T19662] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1311.744682][T19662] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.15999: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1311.794788][   T29] INFO: task syz-executor:28308 blocked for more than 143 seconds.
[ 1311.804868][T19662] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1311.826090][   T29]       Not tainted syzkaller #0
[ 1311.831090][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1311.846388][T19662] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.15999: Failed to acquire dquot type 0
[ 1311.861487][   T29] task:syz-executor    state:D stack:21704 pid:28308 ppid:1      flags:0x00004004
[ 1311.869839][T19662] EXT4-fs (loop0): ext4_process_orphan: deleting unreferenced inode 11
[ 1311.879695][T19662] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem
[ 1311.905894][   T29] Call Trace:
[ 1311.909250][   T29]  <TASK>
[ 1311.912498][T19662] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.15999: mark_inode_dirty error
[ 1311.922479][   T29]  __schedule+0x1553/0x45a0
[ 1311.944950][T19662] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117)
[ 1311.956420][   T29]  ? asan.module_dtor+0x20/0x20
[ 1311.961354][   T29]  ? mark_lock+0x94/0x320
[ 1311.967314][   T29]  ? lock_chain_count+0x20/0x20
[ 1311.972219][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1311.977762][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1311.982081][T19662] EXT4-fs (loop0): 1 orphan inode deleted
[ 1311.983335][   T29]  schedule+0xbd/0x170
[ 1311.994217][ T3505] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1311.999064][   T29]  io_schedule+0x80/0xd0
[ 1312.015830][T19662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1312.024101][   T29]  folio_wait_bit_common+0x714/0xfa0
[ 1312.035349][ T3505] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1312.045937][   T29]  ? folio_wait_bit+0x30/0x30
[ 1312.050674][   T29]  ? filemap_get_entry+0x379/0x3f0
[ 1312.067249][   T29]  ? _compound_head+0x120/0x120
[ 1312.070844][ T3505] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:12: Failed to release dquot type 0
[ 1312.072386][   T29]  ? find_lock_entries+0xc3e/0xfe0
[ 1312.110553][   T29]  __filemap_get_folio+0xbc/0xbb0
[ 1312.111412][T19662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1312.115760][   T29]  truncate_inode_pages_range+0x46b/0xfb0
[ 1312.134674][T19662] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.15999: Invalid inode table block 1 in block_group 0
[ 1312.135513][   T29]  ? mapping_evict_folio+0x510/0x510
[ 1312.148146][T19662] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem
[ 1312.153116][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1312.168149][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1312.173209][T19662] EXT4-fs error (device loop0): ext4_quota_off:7233: inode #3: comm syz.0.15999: mark_inode_dirty error
[ 1312.173371][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1312.190053][   T29]  evict+0x4dd/0x8d0
[ 1312.194242][   T29]  ? proc_nr_inodes+0x230/0x230
[ 1312.199120][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1312.204585][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1312.209824][   T29]  evict_inodes+0x606/0x6a0
[ 1312.214534][   T29]  ? clear_inode+0x150/0x150
[ 1312.219315][   T29]  generic_shutdown_super+0x97/0x2b0
[ 1312.224948][   T29]  kill_block_super+0x44/0x90
[ 1312.229731][   T29]  deactivate_locked_super+0x97/0x100
[ 1312.235469][   T29]  cleanup_mnt+0x43b/0x4d0
[ 1312.239959][   T29]  task_work_run+0x1d4/0x260
[ 1312.244897][   T29]  ? task_work_cancel+0x220/0x220
[ 1312.250052][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1312.255880][   T29]  exit_to_user_mode_loop+0xe6/0x110
[ 1312.261184][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1312.266926][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1312.272441][   T29]  do_syscall_64+0x61/0xa0
[ 1312.276990][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1312.281690][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1312.287379][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1312.293314][   T29] RIP: 0033:0x7fe0fd59bf17
[ 1312.297830][   T29] RSP: 002b:00007fff8319bdd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1312.308279][   T29] RAX: 0000000000000000 RBX: 00007fe0fd60471f RCX: 00007fe0fd59bf17
[ 1312.316339][   T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8319be90
[ 1312.324869][   T29] RBP: 00007fff8319be90 R08: 00007fff8319ce90 R09: 00000000ffffffff
[ 1312.332862][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8319cf20
[ 1312.341232][   T29] R13: 00007fe0fd60471f R14: 000000000011c9be R15: 00007fff8319cf60
[ 1312.349442][   T29]  </TASK>
[ 1312.373237][   T29] 
[ 1312.373237][   T29] Showing all locks held in the system:
[ 1312.381107][   T29] 1 lock held by ksoftirqd/0/16:
[ 1312.386359][   T29]  #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 1312.416227][   T29] 1 lock held by khungtaskd/29:
[ 1312.422978][   T29]  #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1312.465941][   T29] 2 locks held by getty/5527:
[ 1312.470686][   T29]  #0: ffff88802cf8b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1312.493862][   T29]  #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 1312.504971][ T5771] Bluetooth: hci4: command 0x0406 tx timeout
[ 1312.518784][   T29] 2 locks held by kworker/1:5/22967:
[ 1312.524641][   T29]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1312.541408][   T29]  #1: ffffc900039dfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1312.559659][   T29] 1 lock held by syz-executor/26424:
[ 1312.565127][   T29]  #0: ffff88802c87a0e0 (&type->s_umount_key#89){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[ 1312.581357][   T29] 1 lock held by syz-executor/28308:
[ 1312.586843][   T29]  #0: ffff88802602e0e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0
[ 1312.621480][   T29] 
[ 1312.623854][   T29] =============================================
[ 1312.623854][   T29] 
[ 1312.635442][   T29] NMI backtrace for cpu 1
[ 1312.639808][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1312.647392][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1312.657469][   T29] Call Trace:
[ 1312.660767][   T29]  <TASK>
[ 1312.663804][   T29]  dump_stack_lvl+0x18c/0x250
[ 1312.668494][   T29]  ? show_regs_print_info+0x20/0x20
[ 1312.673704][   T29]  ? load_image+0x400/0x400
[ 1312.678237][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1312.683185][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1312.689625][   T29]  ? _printk+0xde/0x130
[ 1312.693842][   T29]  ? load_image+0x400/0x400
[ 1312.698358][   T29]  ? load_image+0x400/0x400
[ 1312.702871][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1312.708933][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1312.714914][   T29]  watchdog+0xf3d/0xf80
[ 1312.719062][   T29]  ? watchdog+0x1e1/0xf80
[ 1312.723384][   T29]  kthread+0x2fa/0x390
[ 1312.727495][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1312.732598][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1312.737190][   T29]  ret_from_fork+0x48/0x80
[ 1312.741625][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1312.746225][   T29]  ret_from_fork_asm+0x11/0x20
[ 1312.751010][   T29]  </TASK>
[ 1312.754948][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 1312.760303][    C0] NMI backtrace for cpu 0
[ 1312.760316][    C0] CPU: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0
[ 1312.760332][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1312.760342][    C0] RIP: 0010:lock_is_held_type+0x129/0x190
[ 1312.760369][    C0] Code: e8 9c 12 00 00 b8 ff ff ff ff 65 0f c1 05 97 7a 7e 75 83 f8 01 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <75> 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 48
[ 1312.760382][    C0] RSP: 0018:ffffc900043df818 EFLAGS: 00000046
[ 1312.760396][    C0] RAX: 0000000000000001 RBX: ffff88802575da00 RCX: 06afe9965317a300
[ 1312.760408][    C0] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c80e0
[ 1312.760419][    C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: 1ffffffff2237cb8
[ 1312.760430][    C0] R10: dffffc0000000000 R11: fffffbfff2237cb9 R12: 0000000000000001
[ 1312.760442][    C0] R13: 0000000000000246 R14: ffffffff8d132040 R15: ffff88802575e508
[ 1312.760453][    C0] FS:  000055556638f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1312.760466][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1312.760477][    C0] CR2: 00007f3f5dbe1198 CR3: 000000001de52000 CR4: 00000000003506f0
[ 1312.760492][    C0] Call Trace:
[ 1312.760499][    C0]  <TASK>
[ 1312.760510][    C0]  __might_resched+0x9f/0x630
[ 1312.760535][    C0]  ? __might_sleep+0xe0/0xe0
[ 1312.760552][    C0]  ? read_lock_is_recursive+0x20/0x20
[ 1312.760577][    C0]  lock_sock_nested+0x5d/0x100
[ 1312.760601][    C0]  tcp_recvmsg+0x214/0x860
[ 1312.760625][    C0]  ? tcp_recv_timestamp+0x720/0x720
[ 1312.760646][    C0]  ? aa_sk_perm+0x83c/0x970
[ 1312.760670][    C0]  ? sock_rps_record_flow+0x19/0x3f0
[ 1312.760697][    C0]  inet_recvmsg+0x140/0x1f0
[ 1312.760715][    C0]  ? inet_splice_eof+0x2e0/0x2e0
[ 1312.760733][    C0]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1312.760753][    C0]  ? security_socket_recvmsg+0x89/0xb0
[ 1312.760772][    C0]  sock_read_iter+0x2d9/0x3e0
[ 1312.760788][    C0]  ? kernel_sock_ip_overhead+0x5a0/0x5a0
[ 1312.760809][    C0]  ? common_file_perm+0x198/0x1f0
[ 1312.760831][    C0]  vfs_read+0x46a/0x970
[ 1312.760856][    C0]  ? kernel_read+0x1e0/0x1e0
[ 1312.760873][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1312.760900][    C0]  ? __fdget_pos+0x1d8/0x330
[ 1312.760922][    C0]  ksys_read+0x150/0x260
[ 1312.760942][    C0]  ? vfs_write+0x990/0x990
[ 1312.760963][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1312.760980][    C0]  do_syscall_64+0x55/0xa0
[ 1312.760999][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1312.761017][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1312.761033][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1312.761049][    C0] RIP: 0033:0x7f92fc555ed7
[ 1312.761061][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1312.761074][    C0] RSP: 002b:00007ffff7bb2fe0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 1312.761089][    C0] RAX: ffffffffffffffda RBX: 000055556638f500 RCX: 00007f92fc555ed7
[ 1312.761100][    C0] RDX: 0000000000000004 RSI: 00007ffff7bb303c RDI: 0000000000000003
[ 1312.761110][    C0] RBP: 00007ffff7bb34e0 R08: 0000000000000000 R09: 0000000000000000
[ 1312.761120][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[ 1312.761129][    C0] R13: 00007ffff7bb303c R14: 00007ffff7bb30d0 R15: 0000000000000000
[ 1312.761146][    C0]  </TASK>
[ 1313.108234][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1313.115134][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1313.122364][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1313.132416][   T29] Call Trace:
[ 1313.135694][   T29]  <TASK>
[ 1313.138612][   T29]  dump_stack_lvl+0x18c/0x250
[ 1313.143298][   T29]  ? show_regs_print_info+0x20/0x20
[ 1313.148488][   T29]  ? load_image+0x400/0x400
[ 1313.152991][   T29]  panic+0x2dc/0x730
[ 1313.156879][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1313.162512][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1313.167009][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1313.172584][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1313.178736][   T29]  watchdog+0xf7c/0xf80
[ 1313.182892][   T29]  ? watchdog+0x1e1/0xf80
[ 1313.187237][   T29]  kthread+0x2fa/0x390
[ 1313.191306][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1313.196320][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1313.200895][   T29]  ret_from_fork+0x48/0x80
[ 1313.205301][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1313.209882][   T29]  ret_from_fork_asm+0x11/0x20
[ 1313.214646][   T29]  </TASK>
[ 1313.217970][   T29] Kernel Offset: disabled
[ 1313.222279][   T29] Rebooting in 86400 seconds..