last executing test programs: 2m12.822311647s ago: executing program 2 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x44}}, 0x0) 2m12.779510099s ago: executing program 2 (id=758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x8}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x3}]}]}, 0x38}}, 0x0) 2m12.686092243s ago: executing program 2 (id=759): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffff7, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 2m12.51017771s ago: executing program 2 (id=763): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x14444, &(0x7f0000000fc0)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@noadinicb}, {@mode={'mode', 0x3d, 0xfff}}, {@uid_forget}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x2}}, {@noadinicb}, {@rootdir={'rootdir', 0x3d, 0x2}}, {@nostrict}]}, 0xfe, 0xc22, &(0x7f00000002c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) 2m12.06554013s ago: executing program 2 (id=767): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200050, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x1, 0x1513, &(0x7f0000003140)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 2m11.58170855s ago: executing program 2 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 2m11.455341276s ago: executing program 32 (id=772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 1m15.114467831s ago: executing program 0 (id=1335): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) 1m15.036655834s ago: executing program 0 (id=1336): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x14}, {0x4}, {0xfe9e}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) 1m14.982120976s ago: executing program 0 (id=1337): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') fcntl$notify(r0, 0x402, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x2, 0x200) 1m14.88067712s ago: executing program 0 (id=1338): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@type={'type', 0x3d, "e833026f"}}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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") mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 1m14.829189643s ago: executing program 0 (id=1339): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x7}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 1m14.452708489s ago: executing program 0 (id=1340): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x800, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m14.359275823s ago: executing program 33 (id=1340): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r0, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x800, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 56.866456753s ago: executing program 1 (id=1561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in6=@remote, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 56.824428544s ago: executing program 1 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b40)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="3e00330050040800080211000000080211000000ffffffffffff34"], 0x5c}}, 0x0) 56.791209996s ago: executing program 1 (id=1563): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x6) 56.718461459s ago: executing program 1 (id=1564): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1006019, &(0x7f0000000100)={[{@noblock_validity}, {@commit={'commit', 0x3d, 0x1}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x63e, &(0x7f00000003c0)="$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") syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0) 56.576248665s ago: executing program 1 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) 56.21659774s ago: executing program 1 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x29b3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) 56.093158306s ago: executing program 34 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x29b3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) 39.620189252s ago: executing program 6 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 39.482276627s ago: executing program 6 (id=1804): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() 38.583963666s ago: executing program 6 (id=1832): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1230023, &(0x7f0000000380)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) 38.474509051s ago: executing program 6 (id=1836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x4, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0xa8d02) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 38.126137226s ago: executing program 6 (id=1846): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x20000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000340)) 37.814290359s ago: executing program 6 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) 37.620416337s ago: executing program 35 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) 1.648443419s ago: executing program 3 (id=2422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x6004) 1.560978323s ago: executing program 3 (id=2425): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4c22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8004}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x8002}, 0x90) 1.441251328s ago: executing program 3 (id=2429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000200c}, 0x20004010) 1.423513349s ago: executing program 4 (id=2430): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000001a80)={[{@umask={'umask', 0x3d, 0xe}}, {@type={'type', 0x3d, "103683de"}}, {}, {}, {@nobarrier}, {@umask={'umask', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'cp862'}}]}, 0x44, 0x708, &(0x7f0000000c00)="$eJzs3U1sHGf5APBn1uu1N5XcbZq0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRht9Pmp13Zt6PZx7PvF7PJtoA/mctvhWT25HE4sU3t9Lthzv15sOd+mpRjoipiChFlNurSNYikk8jrkV7if9Ld+bdJfuN8/qjTz648OCjenurnC9Z/dKwdrtaQ0bYzpeYjYiJfD2m8n793Yg3Bvq7P1bXSSfuNGHni8TBSWsN2B6n+Qj3LfC0ux8xMbnH/lrEqYiYzt8HRD47lI45vEM31iwHAAAAT6eJgyo8/zgex1bMHE84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GxI2t8ZmORLqSjPRlJ8/38l35eqVE443uG+csDx928dUyAAAAAAAAAAcCQ+zj+4P/c4HsdWzBT7W0n2mf+r2caZ7PW5eDc2YinW41JsRSM2YzPWYz5icqarw8pWY3NzfX6w5a8jbdlqte7nLRciojbQcmGfQEuHfOIAAAAAAAAA8Gz6SSzGzEkHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3ZKIifYqW84U5VqUyhExHRGVtN52xJ+K8ufZn086AAAAADh61Xw9k/ynXWgl2d/8L2V/90/Hu7EWm7Ecm9GMpbiZPQto/9Vf+vt2vflwp76aLoMdf/tfY8WR9RgRE/HePiPPZTXOdlosxnfj+3ExZuN6rMdy/DAasRlLMRvV9CSiEUnUqu2nF7Uizr3jvdazdb0/tnN9269kkVTjVixnsV2KG5VoPzbJziEd85Wu0f5Qiegb8b00O8m3ciPm6GbXz+tX+XOZXOv5Efs4GrXszCc7GZlLc59n44XhuR/zOukfaT5KnWdQZ3ZHSTf7Rypy/oNxcn6qvZpOX37em/PDNuajtP5MLEQpv/oiXurN+Z0vPjjd2/jL//jL9dultZXbtzYuHuEpPYnZgypMFoX+TNS7MvHyXlff6a3dXrJMNNNMbI+eicn+HdOjtjxalTwb2VQ04mz5nazUiFe7LsF34mYsxZWYi/m4GnPxjViIeucKS5ezPXkt11d7c5Lda6XB+a06JPjzX+qq9IsDKh+vNC8vdOW1e6arZcfyPdd+GXNdV9/p4XPf2L8F0vH/Py+nY/y08xvnadCTiXxuLqJ7cXgmftNKXzeaayvrtxt3RhzvQr5Ob9v3e+fm344edf9v98OQXi/pjFvOtrKcVIvrJT32Yifa3nxV8k9c2u1KA8fOdo7VYiaW43v73qmV/D3cYE/tYy93H/vn7sxZyd/fFMd63uXEO9HM3oX0OXCqBuCYnXrtVKX6qPq36ofVn1VvV9+cfmPq6tQXKjH51/IfJ35f+l3pm8lr8WH8OGZOOlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWbNy9t9JoNpfWO4WY7t/zpIXKvmMNL0TpwDo7z43WYdQiho+V5IXK4Z778RSKn+bhdFjt76f4hqUn7fnjiBhSp/LEwSdjX2NjF9I8HEqHrVY7qdme1sQYzctFq73rlGNjOlYaSXmPO25q9y6I2kqj+e9WT/NqdN0ywDPu8ubqncsbd+99dXm18fbS20trC1evXL1S//r81y7fWm4uzbVfTzpK4Chs3L03scfugW+6BQAAAAAAAAAAAJ4e+b/+3/zM/5mhfECdyvrG3iOfO+5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6nFt+Kye1IYn7u0ly6/XCn3kyXorxbsxwRpYhIfhSRfBpxLdpL1Lq6S/Yb5/VHn3xw4cFH9d2+ykX90rB2o9nOl5iNiIl8fbCpPboZ7O9GV3/bnym8pHOGacLOF4mDk/bfAAAA//9l//QV") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5084, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.289695925s ago: executing program 3 (id=2432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x24, &(0x7f0000002d00)={@broadcast, @random="46a84d74094a", @void, {@llc={0x8864, {@llc={0x8e, 0x42, '*', "69889b002100fde9324ede64aafef2a12d95b6"}}}}}, 0x0) 1.233618177s ago: executing program 3 (id=2435): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) write$dsp(r0, &(0x7f0000000040)="b5c6547ab0c5e397", 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.15524406s ago: executing program 4 (id=2437): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x1, 0x0, 0x0) 1.126173241s ago: executing program 7 (id=2438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.112325922s ago: executing program 8 (id=2439): inotify_init1(0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.109107992s ago: executing program 5 (id=2440): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 995.608057ms ago: executing program 8 (id=2441): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 992.467577ms ago: executing program 5 (id=2442): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="0b040000000000000000475c00f6a13b85686c7f00000000", 0x18, 0x4000, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0xfd}, 0x14) 969.477228ms ago: executing program 4 (id=2443): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@grpjquota}, {@prjquota}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 904.390001ms ago: executing program 8 (id=2444): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004b00)=""/213, 0xd5}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x6}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 867.555543ms ago: executing program 5 (id=2445): r0 = socket(0x2000000000000021, 0x2, 0x2) unshare(0x28000600) shutdown(r0, 0x2) shutdown(r0, 0x2) 805.702825ms ago: executing program 8 (id=2446): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002b80)={0x2020}, 0x2020) pread64(r0, &(0x7f0000000780)=""/132, 0x84, 0xcdfb) read$hiddev(r0, &(0x7f0000000180)=""/38, 0x26) 766.692257ms ago: executing program 5 (id=2447): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 681.299571ms ago: executing program 7 (id=2448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 647.681602ms ago: executing program 8 (id=2449): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x19, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xda6121120c87204, 0xfffd, 0x0, 0x3}, {"db0cfddb9b"}}}}}}}, 0x0) 584.615305ms ago: executing program 3 (id=2450): syz_mount_image$xfs(&(0x7f0000009680), &(0x7f00000096c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x96a4, &(0x7f0000012d80)="$eJzs3QW4ZXXBeP87TNBDS8gIEtLdodLdJYggXVICKp2iCChlYJCClAoioCAigoogSIiJCiIo0t3xf4aZkXFcoL7/9/2hrrWe5865Z5+99/2e72efve+MPuxNV9lwhYGBCQZGNfPAuJ12whFzL7PfyteesttDE1+32CH3jF48+aiHEaOfjhg0+nG8gYGB8UbvZ/Sy4Xtecul4A0NeXf5aE0840aBJBwYWHv10udGPS4x6mGLrMeu9Mk7jDnTUDzl05HdHj/p6tclG/oiR32y9y9Ujl00+1vYjN7n6796otE2XX3WV16z+6jbSaujo78f+Gjbqa4rNBwam2HSAj4+x1x30JrylkT9zuX1PvfrKN+Fn/8e16fKrrj6O/8jP4uDRy5YY+Rkf9zNobNzj/JkTrzxh9BQOGj1nQ8b5rPxHtOnyq6w18Prn+YFJj91y8CujzpvjD4y6UEw4MDAw0ejz6yRvtkv9/2vDjdfebOT5fszz0exDxpwL6LiYfdUbDxt5aIw6Tww/d8y1oKqqqv4zWn6FRVaE6/8EY36vpev/Uuftd13X/6qqqv/cVl9+hUVGXuvHuf5P8kbX//1uW3PLUf/2v9wSo7Z6+c19E1VVVfUvtcrqeP2f/I2u/8ses/bxXf+rqqr+c9tg7Vev/5OMc/2f+o2u/7M+sPulo9cb83vDS2PtctBY/3vCC2MtHzzW8ufHWj50rP2Mvf6wsZY/O9by8Ue+ButPPjAwfM/Ry198bfHwQwcGBmYevfy5sZaf/tr/T2fEkLGWnzHW8mFjLT9z9FhHLh9/rOXnjLX+BG8w1VVVVf82bbDIKisOjPX/sx+9eLoxr9P1/8DLb5rhzRpvVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXVf2IvP3TFVa/d8/3ggbHuXf3Xe1iP/u8CDrro6ltuedMG+u/RoL//7yEe+maP6f9vI50nOH/mgYHdN36zh1JvQv8x96qv/5Pyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xr3P//+XGPG5x185bjF51qRWuGXr3a1uOGNh59HennXDE3Du/CWN/E/pvvf//wM6DBgZG+04+0nKd5TfYaM6BgYG7h16zwuIDf31tyZGvLTPl4IHBr24656t/Dh3xOnteetTDyINpYOq/7uOiV/e/+itnDB40ziDGaorLzj57p02fWXTcxzle/32MN+ab5+844KFXXnnllb9ZOLoJXmfjMfsf817GdR499jlHjn2BfXbbc4G999t/vp1323rH7XfcfveFF118icUXXnKpRRZbYIedd91+wVF/vs6czfzqn4P/mTmbZNw5e2j5seds3Pf2enM28xvP2at7nOCGBeYbM2dD/sU5G/zGczbzzqN/0IiBoQNbvTo1gwYGRgwZOrDvyCcLjT8wMGLo6HWnG7nuslOONzBw/GtvdOR34//1GBx06Mh1Nl1lwxVeG9nfv8O//5y+2uSjHsZM/ojRP2TEeKOGOPPAa4fi8D0vuXS8kXPxN9M88YQTDZp0YGDh0U+XG/241KiHySYds94r4zTuQEf9kJHnjkFHj/oatYORP2LkN09Pdd9sI8c7zvb/F/2Prv9/57XkoL9O1KDRX6PXGeW1/Kqrv/azXp2GkXM3ePSyJUaajDtn/5v93XhnHjLmYMDxrrL6CouMXDzO/I/ZBI+vow+Y6/pRx9ZyS4za6uX/MQqNd5I3GO/qy+N4J3mj8d48ywLjj9rV/9p4xznXrTXqxX/mXDfwxue6wbT99jeNGPdct+brD/FvPsdj5mj8cVZ6vXPd5DNddcjI/Q+88blurZFjH/o357rxBgZGDB5zrht54hs2dOD4kU8WHvlk/KED5458ssirTyYcuHrkk/m33WPX7UYumGDMnCw4cr/LTTnoVfc55zvunFdOeuWVIaPHcvrwvx3r6ONj5rGv58tPOWoyx2w7Zr8jVx2z3+WmGfXasNH7PeNf2O+YbWm8q0066rXxR+/3zHH2O/QN9jtm27/7PMw56K8nrtc536wyzvlm9O+4Y37c33wNG/U1xeYDA1NsSr7jrPsPz5n0+Z3gDca7/AqLrDhyfON8fv96ONLnd+g2ix40MDAw6aiPx/Bzx4z9X2zQ6413yBuPdwUY75A3Gu/0xx62zP/CeAfGGu/fHGdLjhh1rEww+jg75184fsdsO+55bOirr4467U/wz5zHZv6789hhg8cbZ7LH6vV+Z9sO1h/1/XR/3dvDw9e+f8zcDx1nv//od7ax3ssgOI9NPs7f5wbdftfAIJrzBc8etM3L/2DOhw787d8txsz5mG3faM7H/2fmfMY3nvN/9vfkOWcd9frQccY/9pxvtdie84yZ82Hj7Pcfzfn4b3zt+Ps5X25gKM35ekeOmrc3Op++3pyP2XbMnL/qP+WQgZUHBgZmGz3nw/6ZOZ/uf+c4nwjWH/X99n9ddNSGj8w7Zs7HneN/NOfD/tU5n/mvx/lsr742y3gDw4YN7Lv1PvvstdCoP8c8XXjUn3wuOvfwUfP8RtfS1zMas+0bfS6G/DNGk/9TRoP+kdEMQ17P6LWP1pZ3Prn///RcNORfNRrgc9EtF46atzf6vej15nzMtnQdnHqs7cf9e+gGa7/6e/ck41wHx2yC18Hb1p592zG7HL3ZS+MMc8x19YWxlg8ea/nzYy0fOtZ+xl5/2FjLnx1r+ci3MGys9cewTj7y77yjl7/42urDR/4ldebRy58ba/npr207Yqx/Mhh+xljLxzpFDj/ztUNjxFi/dg8/Z6z1X+9Qed3G/JvkzuOe5OufrX//d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Gvc///Q0c/Lnfe1ltuO/p2ckPvPXb4yW/2eN/k/qvv/z/a92/u/3/y8GPvHW/gr6+94f3ZR63zb3l/9iVGPUyx9Zj1xr0/+LgDHfVDXv/+7DvefNVu/4/uz/4/asxn9Z+4L17nf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+417n//9WjHw89fspLho2+EfrQ6W6Z4vk3e7xvcv/V9/8f7fs39/9/fopbphtv4K+vveH9/0et47j//9GnzTD83/n+/2M+q93/v/5B+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3kdAOrid5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL47v/z9o9OPA1asOu/jWkY8jn1+w14tnv9njfZP7b73//wTnzzwwsPvGb/ZQ6k2o87+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Oj7/w+Muv//mAYt13GBwf3//7N7Hf/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/z35Yxb/TfPHLP6b5Y9Z/N+bP2bx3zx/zOL/vvwxi/8W+WMW/y3zxyz+788fs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6Yxf8D+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOL/wfwxi/9e+WMW/73zxyz+++SPWfw/lD9m8f9w/pjF/yP5Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8f9o/pjF/8j8MYv/x/LHLP4fzx+z+B+VP2bx/0T+mMX/6Pwxi/8x+WMW/2Pzxyz+n8wfs/h/Kn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8T84fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+X84fs/iflT9m8T87f8zi/5X8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9q/pjF/2v5Yxb/r+ePWfwvzB+z+F+UP2bx/0b+mMX/4vwxi/8388cs/pfkj1n8L80fs/hflj9m8f9W/pjF/9v5Yxb/y/PHLP5X5I9Z/L+TP2bxvzJ/zOL/3fwxi/9V+WMW/+/lj1n8r84fs/h/P3/M4n9N/pjF/9r8MYv/D/LHLP4/zB+z+P8of8zif13+mMX/x/ljFv/r88cs/jfkj1n8f5I/ZvG/MX/M4n9T/pjF/6f5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvH/Wf6Yxf/2/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/6/zxyz+v8kfs/jfkT9m8f9t/pjF/3f5Yxb/3+ePWfzvzB+z+N+VP2bx/0P+mMX/7vwxi/8f88cs/vfkj1n8780fs/j/KX/M4v/n/DGL/335Yxb/v+SPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMS/1e/zf/vs/gPyh+z+I+XP2bxH5w/ZvEfkj9m8R+aP2bxH5Y/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/gPzx+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/N+SP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/t+aPWfxnzB+z+I/IH7P4vy1/zOI/U/6YxX/m/DGL/9vzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/jvwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8zi/878MYv/u/LHLP7vzh+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V9/5Hsd+mYN6t83i/8Gff4xi/+G+WMW/43+kf+Q/+Nx/Ztm8d+4zz9m8d8kf8zi/578MYv/pvljFv/N8scs/u/NH7P4b54/ZvF/X/6YxX+L/DGL/5b5Yxb/9+ePWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvHfJX/M4v+B/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvH/YP6YxX+v/DGL/975Yxb/ffLHLP4fyh+z+H84f8zi/5H8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+H80f8zif2T+mMX/Y/ljFv+P549Z/I/KH7P4fyJ/zOJ/dP6Yxf+Y/DGL/7H5Yxb/T+aPWfw/lT9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+J+ePWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/L+ePWfzPyh+z+J+dP2bx/0r+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+H81f8zi/7X8MYv/1/PHLP4X5o9Z/C/KH7P4fyN/zOJ/cf6Yxf+b+WMW/0vyxyz+l+aPWfwvyx+z+H8rf8zi/+38MYv/5fljFv8r8scs/t/JH7P4X5k/ZvH/bv6Yxf+q/DGL//fyxyz+V+ePWfy/nz9m8b8mf8zif23+mMX/B/lj4/j/50/R6/j/MH/M8vn/Uf6Yxf+6/DGL/4/zxyz+1+ePWfxvyB+z+P8kf8zif2P+mMX/pvwxi/9P88cs/jfnj1n8b8kfs/jfmj9m8b8tf8zi/7P8MYv/7fljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/H+TP2bxvyN/zOL/2/wxi//v8scs/r/PH7P435k/ZvG/K3/M4v+H/DGL/935Yxb/P+aPWfzvyR+z+N+bP2bx/1P+mMX/z/ljFv/78scs/n/JH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHJP6DB/LHLP6D8scs/uPlj1n8B+ePWfyH5I9Z/Ifmj1n8h+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP7D88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/7fkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/rfljFv8Z88cs/iPyxyz+b8sfs/jPlD9m8Z85f8zi//b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/i/I3/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4vzN/zOL/rvwxi/+788cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv/35I9Z/DfNH7P4b5Y/ZvF/b/6YxX/z/DGL//vyxyz+W+SPWfy3zB+z+L8/f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/D+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/wfzxyz+e+WPWfz3zh+z+O+TP2bx/1D+mMX/w/ljFv+P5I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/o/ljFv8j88cs/h/LH7P4fzx/zOJ/VP6Yxf8T+WMW/6Pzxyz+x+SPWfyPzR+z+H8yf8zi/6n8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8T85f8zi//n8MYv/F/LHLP5fzB+z+H8pf8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+H85f8zif1b+mMX/7Pwxi/9X8scs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/q/ljFv+v5Y9Z/L+eP2bxvzB/zOJ/Uf6Yxf8b+WMW/4vzxyz+38wfs/hfkj9m8b80f8zif1n+mMX/W/ljFv9v549Z/C/PH7P4X5E/ZvH/Tv6Yxf/K/DGL/3fzxyz+V+WPWfy/lz9m8b86f8zi//38MYv/NfljFv9r88cs/j/IH7P4/zB/zOL/o/wxi/91+WMW/x/nj1n8r88fs/jfkD9m8f9J/pjF/8b8MYv/TfljFv+f5o9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF/2f5Yxb/2/PHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP6/zh+z+P8mf8zif0f+mMX/t/ljFv/f5Y9Z/H+fP2bxvzN/zOJ/V/6Yxf8P+WMW/7vzxyz+f8wfs/jfkz9m8b83f8zi/6f8MYv/n/PHLP735Y9Z/P+SP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPSfyHDOSPWfwH5Y9Z/MfLH7P4D84fs/gPyR+z+A/NH7P4D8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfyH549Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/1PljFv9p8scs/m/JH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/W/PHLP4z5o9Z/Efkj1n835Y/ZvGfKX/M4j9z/pjF/+35Yxb/WfLHLP6z5o9Z/GfLH7P4z54/ZvF/R/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxf2f+mMX/XfljFv93549Z/JfLH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP7vyR+z+G+aP2bx3yx/zOL/3vwxi//m+WMW//flj1n8t8gfs/hvmT9m8X9//pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/13yxyz+H8gfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi/+e+WMW/w/mj1n898ofs/jvnT9m8d8nf8zi/6H8MYv/h/PHLP4fyR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/R/PHLP5H5o9Z/D+WP2bx/3j+mMX/qPwxi/8n8scs/kfnj1n8j8kfs/gfmz9m8f9k/pjF/1P5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4n9y/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8f9y/pjF/6z8MYv/2fljFv+v5I9Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/V/PHLP5fyx+z+H89f8zif2H+mMX/ovwxi/838scs/hfnj1n8v5k/ZvG/JH/M4n9p/pjF/7L8MYv/t/LHLP7fzh+z+F+eP2bxvyJ/zOL/nfwxi/+V+WMW/+/mj1n8r8ofs/h/L3/M4n91/pjF//v5Yxb/a/LHLP7X5o9Z/H+QP2bx/2H+mMX/R/ljFv/r8scs/j/OH7P4X58/ZvG/IX/M4v+T/DGL/435Yxb/m/LHLP4/zR+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/8/yxyz+t+ePWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8f9N/pjF/478MYv/b/PHLP6/yx+z+P8+f8zif2f+mMX/rvwxi/8f8scs/nfnj1n8/5g/ZvG/J3/M4n9v/pjF/0/5Yxb/P+ePWfzvyx+z+P8lf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfk/gPHcgfs/gPyh+z+I+XP2bxH5w/ZvEfkj9m8R+aP2bxH5Y/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/gPzx+z+E+WP2bxn1zkP+2/sK7FfwqR/7+SxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/N+SP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/t+aPWfxnzB+z+I/IH7P4vy1/zOI/U/6YxX/m/DGL/9vzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/jvwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8zi/878MYv/u/LHLP7vzh+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfzfkz9m8d80f8ziv1n+mMX/vfljFv/N88cs/u/LH7P4b5E/ZvHfMn/M4v/+/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8P5A/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/h/MH7P475U/ZvHfO3/M4r9P/pjF/0P5Yxb/D+ePWfw/kj9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/j+aPWfyPzB+z+H8sf8zi//H8MYv/UfljFv9P5I9Z/I/OH7P4H5M/ZvE/Nn/M4v/J/DGL/6fyxyz+x+WPWfyPzx+z+J+QP2bxPzH/v+tQkf9J+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/5Pzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/5fzxyz+Z+WPWfzPzh+z+H8lf8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfy/mj9m8f9a/pjF/+v5Yxb/C/PHLP4X5Y9Z/L+RP2bxvzh/zOL/zfwxi/8l+WMW/0vzxyz+l+WPWfy/lT9m8f92/pjF//L8MYv/FfljFv/v5I9Z/K/MH7P4fzd/zOJ/Vf6Yxf97+WMW/6vzxyz+388fs/hfkz9m8b82f8zi/4P8MYv/D/PHLP4/yh+z+F+XP2bx/3H+mMX/+vwxi/8N+WMW/5/kj1n8b8wfs/jflD9m8f9p/pjF/+b8MYv/LfljFv9b88cs/rflj1n8f5Y/ZvG/PX/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4v/r/DGL/2/yxyz+d+SPWfx/mz9m8f9d/pjF//f5Yxb/O/PHLP535Y9Z/P+QP2bxvzt/zOL/x/wxi/89+WMW/3vzxyz+f8ofs/j/OX/M4n9f/pjF/y/5Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6YxH/YQP6YxX9Q/pjFf7z8MYv/4Pwxi/+Q/DGL/9D8MYv/sPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX94/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8zi/5b8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/i/NX/M4j9j/pjFf0T+mMX/bfljFv+Z8scs/jPnj1n8354/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv935I9Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfyx/1L/8QfG8V80f+y/1P/VxvZfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8X9n/pjF/135Yxb/d+ePWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+78kfs/hvmj9m8d8sf8zi/978MYv/5vljFv/35Y9Z/LfIH7P4b5k/ZvF/f/6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/h/IH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv8P5o9Z/PfKH7P4750/ZvHfJ3/M4v+h/DGL/4fzxyz+H8kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/0fzxyz+R+aPWfw/lj9m8f94/pjF/6j8MYv/J/LHLP5H549Z/I/JH7P4H5s/ZvH/ZP6Yxf9T+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOJ/cv6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvH/cv6Yxf+s/DGL/9n5Yxb/r+SPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/1fzxyz+X8sfs/h/PX/M4n9h/pjF/6L8MYv/N/LHLP4X549Z/L+ZP2bxvyR/zOJ/af6Yxf+y/DGL/7fyxyz+384fs/hfnj9m8b8if8zi/538MYv/lfljFv/v5o9Z/K/KH7P4fy9/zOJ/df6Yxf/7+WMW/2vyxyz+1+aPWfx/kD9m8f9h/pjF/0f5Yxb/6/LHLP4/zh+z+F+fP2bxvyF/zOL/k/wxi/+N+WMW/5vyxyz+P80fs/jfnD9m8b8lf8zif2v+mMX/tvwxi//P8scs/rfnj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvH/Tf6Yxf+O/DGL/2/zxyz+v8sfs/j/Pn/M4n9n/pjF/678MYv/H/LHLP53549Z/P+YP2bxvyd/zOJ/b/6Yxf9P+WMW/z/nj1n878sfs/j/JX/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH5P4jz+QP2bxH5Q/ZvEfL3/M4j84f8ziPyR/zOI/NH/M4j8sf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxH54/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/lPnj1n8p8kfs/i/JX/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/m/NH7P4z5g/ZvEfkT9m8X9b/pjFf6b8MYv/zPljFv+3549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjF/x35Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf+d+WMW/3flj1n8350/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4vyd/zOK/af6YxX+z/DGL/3vzxyz+m+ePWfzflz9m8d8if8ziv2X+mMX//fljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfx3yR+z+H8gf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfw/mD9m8d8rf8ziv3f+mMV/n/wxi/+H8scs/h/OH7P4fyR/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/h/NH7P4H5k/ZvH/WP6Yxf/j+WMW/6Pyxyz+n8gfs/gfnT9m8T8mf8zif2z+mMX/k/ljFv9P5Y9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/yfljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/y/ljFv+z8scs/mfnj1n8v5I/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/l/NH7P4fy1/zOL/9fwxi/+F+WMW/4vyxyz+38gfs/hfnD9m8f9m/pjF/5L8MYv/pfljFv/L8scs/t/KH7P4fzt/zOJ/ef6Yxf+K/DGL/3fyxyz+V+aPWfy/mz9m8b8qf8zi/738MYv/1fljFv/v549Z/K/JH7P4X5s/ZvH/Qf6Yxf+H+WMW/x/lj1n8r8sfs/j/OH/M4n99/pjF/4b8MYv/T/LHLP435o9Z/G/KH7P4/zR/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP4/yx+z+N+eP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx/3X+mMX/N/ljFv878scs/r/NH7P4/y5/zOL/+/wxi/+d+WMW/7vyxyz+f8gfs/jfnT9m8f9j/pjF/578MYv/vfljFv8/5Y9Z/P+cP2bxvy9/zOL/l/wxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf0ziP8FA/pjFf1D+mMV/vPwxi//g/DGL/5D8MYv/0Pwxi/+w/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf3j+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOL/lvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+L81f8ziP2P+mMV/RP6Yxf9t+WMW/5nyxyz+M+ePWfzfnj9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/3fkj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv935o9Z/N+VP2bxf3f+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/578MYv/pvljFv/N8scs/u/NH7P4b54/ZvF/X/6YxX+L/DGL/5b5Yxb/9+ePWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvHfJX/M4v+B/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvH/YP6YxX+v/DGL/975Yxb/ffLHLP4fyh+z+H84f8zi/5H8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+H80f8zif2T+mMX/Y/ljFv+P549Z/I/KH7P4fyJ/zOJ/dP6Yxf+Y/DGL/7H5Yxb/T+aPWfw/lT9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+J+ePWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/L+ePWfzPyh+z+J+dP2bx/0r+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+H81f8zi/7X8MYv/1/PHLP4X5o9Z/C/KH7P4fyN/zOJ/cf6Yxf+b+WMW/0vyxyz+l+aPWfwvyx+z+H8rf8zi/+38MYv/5fljFv8r8scs/t/JH7P4X5k/ZvH/bv6Yxf+q/DGL//fyxyz+V+ePWfy/nz9m8b8mf8zif23+mMX/B/ljFv8f5o9Z/H+UP2bxvy5/zOL/4/wxi//1+WMW/xvyxyz+P8kfs/jfmD9m8b8pf8zi/9P8MYv/zfljFv9b8scs/rfmj1n8b8sfs/j/LH/M4n97/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/3+SPWfzvyB+z+P82f8zi/7v8MYv/7/PHLP535o9Z/O/KH7P4/yF/zOJ/d/6Yxf+P+WMW/3vyxyz+9+aPWfz/lD9m8f9z/pjF/778MYv/X/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGJ/4QD+WMW/0H5Yxb/8fLHLP6D88cs/kPyxyz+Q/PHLP7D8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/+H5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/W/LHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v/W/DGL/4z5Yxb/EfljFv+35Y9Z/GfKH7P4z5w/ZvF/e/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/N+RP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfzfmT9m8X9X/pjF/935Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/3vyxyz+m+aPWfw3yx+z+L83f8ziv3n+mMX/ffljFv8t8scs/lvmj1n8358/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/8H8scs/rvmj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMX/g/ljFv+98scs/nvnj1n898kfs/h/KH/M4v/h/DGL/0fyxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4v/R/DGL/5H5Yxb/j+WPWfw/nj9m8T8qf8zi/4n8MYv/0fljFv9j8scs/sfmj1n8P5k/ZvH/VP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4n5w/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8v5w/ZvE/K3/M4n92/pjF/yv5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/V/DGL/9fyxyz+X88fs/hfmD9m8b8of8zi/438MYv/xfljFv9v5o9Z/C/JH7P4X5o/ZvG/LH/M4v+t/DGL/7fzxyz+l+ePWfyvyB+z+H8nf8zif2X+mMX/u/ljFv+r8scs/t/LH7P4X50/ZvH/fv6Yxf+a/DGL/7X5Yxb/H+SPWfx/mD9m8f9R/pjF/7r8MYv/j/PHLP7X549Z/G/IH7P4/yR/zOJ/Y/6Yxf+m/DGL/0/zxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOL/s/wxi//t+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/1/nj1n8f5M/ZvG/I3/M4v/b/DGL/+/yxyz+v88fs/jfmT9m8b8rf8zi/4f8MYv/3fljFv8/5o9Z/O/JH7P435s/ZvH/U/6Yxf/P+WMW//vyxyz+f8kfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8sck/hMN5I9Z/Aflj1n8x8sfs/gPzh+z+A/JH7P4D80fs/gPyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/Ifnj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi//U+WMW/2nyxyz+b8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/9b88cs/jPmj1n8R+SPWfzflj9m8Z8pf8ziP3P+mMX/7fljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8X9H/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvF/Z/6Yxf9d+WMW/3fnj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/u/JH7P4b5o/ZvHfLH/M4v/e/DGL/+b5Yxb/9+WPWfy3yB+z+G+ZP2bxf3/+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP4fyB+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/D+aPWfz3yh+z+O+dP2bx3yd/zOL/ofwxi/+H88cs/h/JH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/9H88cs/kfmj1n8P5Y/ZvH/eP6Yxf+o/DGL/yfyxyz+R+ePWfyPyR+z+B+bP2bx/2T+mMX/U/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zif3L+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bx/3L+mMX/rPwxi//Z+WMW/6/kj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/9X88cs/l/LH7P4fz1/zOJ/Yf6Yxf+i/DGL/zfyxyz+F+ePWfy/mT9m8b8kf8zif2n+mMX/svwxi/+38scs/t/OH7P4X54/ZvG/In/M4v+d/DGL/5X5Yxb/7+aPWfyvyh+z+H8vf8zif3X+mMX/+/ljFv9r8scs/tfmj1n8f5A/ZvH/Yf6Yxf9H+WMW/+vyxyz+P84fs/hfnz9m8b8hf8zi/5P8MYv/jfljFv+b8scs/j/NH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/z/LHLP63549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/H+dP2bx/03+mMX/jvwxi/9v88cs/r/LH7P4/z5/zOJ/Z/6Yxf+u/DGL/x/yxyz+d+ePWfz/mD9m8b8nf8zif2/+mMX/T/ljFv8/549Z/O/LH7P4/yV/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+T+E88kD9m8R+UP2bxHy9/zOI/OH/M4j8kf8ziPzR/zOI/LH/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8R+eP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4vyV/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5vfV3/rf7fjOvfNIv/jH3+MYv/iPwxi//b8scs/jPlj1n8Z84fs/i/PX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/u/IH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7vzB+z+L8rf8zi/+78MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/z35Yxb/TfPHLP6b5Y9Z/N+bP2bx3zx/zOL/vvwxi/8W+WMW/y3zxyz+788fs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6Yxf8D+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOL/wfwxi/9e+WMW/73zxyz+++SPWfw/lD9m8f9w/pjF/yP5Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8f9o/pjF/8j8MYv/x/LHLP4fzx+z+B+VP2bx/0T+mMX/6Pwxi/8x+WMW/2Pzxyz+n8wfs/h/Kn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8T84fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+X84fs/iflT9m8T87f8zi/5X8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9q/pjF/2v5Yxb/r+ePWfwvzB+z+F+UP2bx/0b+mMX/4vwxi/8388cs/pfkj1n8L80fs/hflj9m8f9W/pjF/9v5Yxb/y/PHLP5X5I9Z/L+TP2bxvzJ/zOL/3fwxi/9V+WMW/+/lj1n8r84fs/h/P3/M4n9N/pjF/9r8MYv/D/LHLP4/zB+z+P8of8zif13+mMX/x/ljFv/r88cs/jfkj1n8f5I/ZvG/MX/M4n9T/pjF/6f5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvH/Wf6Yxf/2/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/6/zxyz+v8kfs/jfkT9m8f9t/pjF/3f5Yxb/3+ePWfzvzB+z+N+VP2bx/0P+mMX/7vwxi/8f88cs/vfkj1n8780fs/j/KX/M4v/n/DGL/335Yxb/v+SPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMS/0kG8scs/oPyxyz+4+WPWfwH549Z/Ifkj1n8h+aPWfyH5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/sPzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/t+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+t+WMW/xnzxyz+I/LHLP5vyx+z+M+UP2bxnzl/zOL/9vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+L8jf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/i/M3/M4v+u/DGL/7vzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW//fkj1n8N80fs/hvlj9m8X9v/pjFf/P8MYv/+/LHLP5b5I9Z/LfMH7P4vz9/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv8P5I9Z/HfNH7P475Y/ZvHfPX/M4r9H/pjFf8/8MYv/B/PHLP575Y9Z/PfOH7P475M/ZvH/UP6Yxf/D+WMW/4/kj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf+j+WMW/yPzxyz+H8sfs/h/PH/M4n9U/pjF/xP5Yxb/o/PHLP7H5I9Z/I/NH7P4fzJ/zOL/qfwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bx/3T+mMX/M/ljFv/P5o9Z/D+XP2bxPzl/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4fzl/zOJ/Vv6Yxf/s/DGL/1fyxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf+r+WMW/6/lj1n8v54/ZvG/MH/M4n9R/pjF/xv5Yxb/i/PHLP7fzB+z+F+SP2bxvzR/zOJ/Wf6Yxf9b+WMW/2/nj1n8L88fs/hfkT9m8f9O/pjF/8r8MYv/d/PHLP5X5Y9Z/L+XP2bxvzp/zOL//fwxi/81+WMW/2vzxyz+P8gfs/j/MH/M4v+j/DGL/3X5Yxb/H+ePWfyvzx+z+N+QP2bx/0n+mMX/xvwxi/9N+WMW/5/mj1n8b84fs/jfkj9m8b81f8zif1v+mMX/Z/ljFv/b88cs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4/yZ/zOJ/R/6Yxf+3+WMW/9/lj1n8f58/ZvG/M3/M4n9X/pjF/w/5Yxb/u/PHLP5/zB+z+N+TP2bxvzd/zOL/p/wxi/+f88cs/vflj1n8/5I/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9J/CcdyB+z+A/KH7P4j5c/ZvEfnD9m8R+SP2bxH5o/ZvEflj9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+A//h/6T/d+O6980i/9kff4xi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOL/lvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+L81f8ziP2P+mMV/RP6Yxf9t+WMW/5nyxyz+M+ePWfzfnj9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/3fkj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv935o9Z/N+VP2bxf3f+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/hvnD9m8d8kf8zi/578MYv/pvljFv/N8scs/u/NH7P4b54/ZvF/X/6YxX+L/DGL/5b5Yxb/9+ePWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvHfJX/M4v+B/DGL/675Yxb/3fLHLP67549Z/PfIH7P475k/ZvH/YP6YxX+v/DGL/975Yxb/ffLHLP4fyh+z+H84f8zi/5H8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+H80f8zif2T+mMX/Y/ljFv+P549Z/I/KH7P4fyJ/zOJ/dP6Yxf+Y/DGL/7H5Yxb/T+aP/df7nzXyN7+BST+VP/Zf7z+qSY/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/yfljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/y/ljFv+z8scs/mfnj1n8v5I/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/l/NH7P4fy1/zOL/9fwxi/+F+WMW/4vyxyz+38gfs/hfnD9m8f9m/pjF/5L8MYv/pfljFv/L8scs/t/KH7P4fzt/zOJ/ef6Yxf+K/DGL/3fyxyz+V+aPWfy/mz9m8b8qf8zi/738MYv/1fljFv/v549Z/K/JH7P4X5s/ZvH/Qf6Yxf+H+WMW/x/lj1n8r8sfs/j/OH/M4n99/pjF/4b8MYv/T/LHLP435o9Z/G/KH7P4/zR/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP4/yx+z+N+eP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx/3X+mMX/N/ljFv878scs/r/NH7P4/y5/zOL/+/wxi/+d+WMW/7vyxyz+f8gfs/jfnT9m8f9j/pjF/578MYv/vfljFv8/5Y9Z/P+cP2bxvy9/zOL/l/wxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf0ziP3wgf8ziPyh/zOI/Xv6YxX9w/pjFf0j+mMV/aP6YxX9Y/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziPzx/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvF/S/6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/N+aP2bxnzF/zOI/In/M4v+2/DGL/0z5Yxb/mfPHLP5vzx+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/zvyxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/8788cs/u/KH7P4vzt/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bxf0/+mMV/0/wxi/9m+WMW//fmj1n8N88fs/i/L3/M4r9F/pjFf8v8MYv/+/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8f9A/pjFf9f8MYv/bvljFv/d88cs/nvkj1n898wfs/h/MH/M4r9X/pjFf+/8MYv/PvljFv8P5Y9Z/D+cP2bx/0j+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/D+aP2bxPzJ/zOL/sfwxi//H88cs/kflj1n8P5E/ZvE/On/M4n9M/pjF/9j8MYv/J/PHLP6fyh+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/k/PHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/l/PHLP5n5Y9Z/M/OH7P4fyV/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/L+aP2bx/1r+mMX/6/ljFv8L88cs/hflj1n8v5E/ZvG/OH/M4v/N/DGL/yX5Yxb/S/PHLP6X5Y9Z/L+VP2bx/3b+mMX/8vwxi/8V+WMW/+/kj1n8r8wfs/h/N3/M4n9V/pjF/3v5Yxb/q/PHLP7fzx+z+F+TP2bxvzZ/zOL/g/wxi/8P88cs/j/KH7P4X5c/ZvH/cf6Yxf/6/DGL/w35Yxb/n+SPWfxvzB+z+N+UP2bx/2n+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfx/lj9m8b89f8zi//P8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/b/LHLP535I9Z/H+bP2bx/13+mMX/9/ljFv8788cs/nflj1n8/5A/ZvG/O3/M4v/H/DGL/z35Yxb/e/PHLP5/yh+z+P85f8zif1/+mMX/L/ljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjEf7KB/DGL/6D8MYv/ePljFv/B+WMW/yH5Yxb/ofljFv9h+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL//D8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMX/LfljFv9p88cs/tPlj1n8p88fs/jPkD9m8X9r/pjFf8b8MYv/iPwxi//b8scs/jPlj1n8Z84fs/i/PX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/u/IH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7vzB+z+L8rf8zi/+78MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/tj/xx49GApiAFAAq41f27atMWrbtm3btm3btu32bC3wJriXrJCW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iPWv4P9B+1/B/kP2r5P9h/1PJ/iP+o5f9Q/1HL/2H+o5b/w/1HLf9H+I9a/o/0H7X8H+U/avk/2n/U8n+M/6jl/1j/Ucv/cf6jlv/j/Uct/yf4j1r+T/Qftfyf5D9q+T/Zf9Tyf4r/qOX/VP9Ry/9p/qOW/9P9Ry3/Z/iPWv7P9B+1/J/lP2r5P9t/1PJ/jv+o5f9c/1HL/3n+o5b/8/1HLf8X+I9a/i/0H7X8X+Q/avm/2H/U8n+J/6jl/1L/Ucv/Zf6jlv/L/Uct/1f4j1r+r/Qftfxf5T9q+b/af9Tyf43/qOX/Wv9Ry/91/qOW/+v9Ry3/N/iPWv5v9B+1/N/kP2r5v9l/1PJ/i/+o5f9W/1HL/23+o5b/2/1HLf93+I9a/u/0H7X83+U/avm/23/U8n+P/6jl/17/Ucv/ff6jlv/7/Uct/w/4j1r+H/Qftfw/5D9q+X/Yf9Ty/4j/qOX/Uf9Ry/9j/qOW/8f9Ry3/T/iPWv6f9B+1/D/lP2r5f9p/1PL/jP+o5f9Z/1HL/3P+o5b/5/1HLf8v+I9a/l/0H7X8v+Q/avl/2X/U8v+K/6jl/1X/Ucv/a/6jlv/X/Uct/2/4j1r+3/Qftfy/5T9q+X/bf9Ty/47/qOX/Xf9Ry/97/qOW//f9Ry3/H/iPWv4/9B+1/H/kP2r5/9h/1PL/if+o5f9T/1HL/2f+o5b/z/1HLf9f+I9a/r/0H7X8f+U/avn/2n/U8v+N/6jl/1v/Ucv/d/6jlv/v/Uct/z/4j1r+f/Qftfz/5D9q+f/Zf9Ty/4v/qOX/V/9Ry/9v/qOW/9/9Ry3/f/iPWv7/9B+1/P/lP2r5/9t/1PL/j/+o5f9f/1HL/3/+o5b///1HLf+D/Ect/4P9Ry3/Q/xHLf9D/Uct/8P8Ry3/w/1HLf8j/Ect/yP9Ry3/o/xHLf+j/Uct/2P8Ry3/Y/1HLf/j/Ect/+P9Ry3/E/xHLf8T/Ucl/wNT+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/A/6jlv85/Ect/3P6j1r+5/IftfzP7T9q+Z/Hf9TyP6//qOV/Pv9Ry//8/qOW/wX8Ry3/C/qPWv4X8h+1/C/sP2r5X8R/1PK/qP+o5X8x/1HL/+L+o5b/JfxHLf9L+o9a/pfyH7X8L+0/avlfxn/U8r+s/6jlfzn/Ucv/8v6jlv8V/Ect/yv6j1r+V/Iftfyv7D9q+V/Ff9Tyv6r/qOV/Nf9Ry//q/qOW/zX8Ry3/a/qPWv7X8h+1/K/tP2r5X8d/1PK/rv+o5X89/1HL//r+o5b/DfxHLf8b+o9a/jfyH7X8b+w/avnfxH/U8r+p/6jlfzP/0WT3DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACT2Ln/GK/rAo7jnzu4O4QCESOk3kBQgeBxcscvQUUrmmfjrLD1axJMToGOVLwZIAtKLWpu6WTLWqT+QVqrNTZjrSZltsVsRU374dyCkn6MdWpFtsg694Xv97z7etz8vs/3mz94PP64+34+x+tzwPa8z+c7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw2mnvuLxnRN2AUyP6H4Sfd574PP/fH1q3Z8++8ZXP5S+/Z5BL1vc/6O3t7d024Re3lA+biqIofbfLysejqsel62/fP/Xs8ncv7rv7ttlLtyx/bPfGnjE/XbD9SMOJsw3F6uvWd3VeWF8UYURDsbl0MK+uKEJjQ3FX6aC1dNDUUDxUOmg7cXBW8aPSwdxrb+haWzrxim8NZ5z2jh3FiAHFFgN+GvTvf/v+S99b+TzEJStXG1mU+7/i+080VX2t4hT9V64f6qr7r/kPCJxSbf2veL7yeYhLvuL+3/q3jx0e7Gun7r9y/VCvf0hnkOf/AY1WP/dXPf9PG+SSffvmlsdHlfpfsvi+DeVTI1/N8//L1w8jqvuvH/D8X3qOH1l5/m8qitAwzL8OOKO0d3y6Z6j7/9D9j5xctanr3//WY4dWlfpv3vDJ58qnGmrsf+QQ9/+6J6t+r0Bt2jse6K26/9fQfzFzkEv29d9z69PHS/3/af8z5/f7Wi39N1T339K98caWm7dsbV6/cc31ndd3fqJ1/sJFC1sXX9S2oOXEI8HJj8P8W4Ezw/Du/8Xoqk1dUXT27S94buXOUv/T16/8bPnUqBr7bxzy/j/N/R8GNb2+aGwsNq/p7t407+THymHryY8nf9kg/dfw/n/GrPIvq7zvriuKSX37OTcuWF3q/8Fjn3u8fKqxxv6bhuz/ssL7fRiGYd7/11ZtBvR/dMXYZ0v9f+nhWd3lU7W+/x81ZP+H3f9hONo7qv6Fn9dYqf9Lxu7+e9w6nOWf/0E6Ofoff/zOq+LWYbT+IZ0c/X/k9plPxa3DGP1DOjn6/97ady6MW4fX6R/SydH/Pyf/9f64dXi9/iGdHP0fevY/U+LWYaz+IZ0c/e+66/0749ZhnP4hnRz9z9h25I64dThb/5BOjv7X1V81IW4dxusf0snR/7teWPXtuHU4R/+QTo7+x+3819K4dZigf0gnR/896+5+Mm4dztU/pJOj/69PXPKOuHV4g/4hnRz9f+GPc16MW4eJ+od0cvT/6Fd3bIhbhzfqH9LJ0f8PPzB2sP9P2KsQJukf0snR/7E5e/bGrcN5+od0cvT/u0MPj4tbh8n6h3Ry9H/PA1O/HLcOb9I/pJOj/5suv/WWuHV4s/4hnRz9L1n2y8Nx6xD0D+nk6H/izx5dFbcOU/QP6eTo/5rvbjgQtw5T9Q/p5Oh/8znfWh63DtP0D+nk6L+tq+mJuHV4i/4hnRz9T7134sa4dZiuf0gnR/9X//mR/8atwwz9Qzo5+t/X+NS5cevwVv1DOjn6/9/mTZ+JW4e36R/SydH/r+689uK4dXi7/iGdHP1/5R8Hvhm3DjP1D+nk6P/I0nf/JW4dZukf0snR/3eW99wUtw7n6x/SydH/bXtfPBi3DrP1D+nk6P/AwQ9+OG4d5ugf0snR/+yWtn1x63CB/iGdHP2ved+90+LWoVn/kE6O/lfs+fzX4tZhrv4hnRz9Nz49fVTcOrToH9LJ0f/eRbsa4tbhQv1DOjn6P96+7J64dZinf0gnR/+/eWRuc9w6tOof0snR/+7H7vhB3Dq06R/SydH/9hl/uDpuHebrH9LJ0f/8a678cdw6LNA/pJOj/0nf+Oi2uHVYqH9IJ0f/K3/7/NG4dVikf0gnR//NUz71YNw6LNY/pJOj/+tW/3pe3DpcpH9IJ0f/V+76yRfj1mGJ/iGdHP3XHb3hvLh1WKp/SCdH/8+MHvNC3DpcrH9IJ0f/D3XfvzpuHS7RP6STo//bd+z9fdw6XKp/SCdH/wf/P/mKuHVYpn9I5+YtWz++pqurc5MXXnjhRd+L0/2TCUjt5ehP9+8EAAAAAAAAAAAAAAA4lRz/OdHp/jMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BI7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDEgAAAABB/1+3I1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//1xCIEM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x16810, 0x0, 0x20, 0x0, 0x0) 550.317146ms ago: executing program 5 (id=2451): r0 = userfaultfd(0x80801) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f00000001c0)=[{r1, 0x11}], 0x1, 0x0, 0x0, 0x0) 428.878471ms ago: executing program 5 (id=2452): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x4, &(0x7f0000000100), 0x2, 0xb8d, &(0x7f0000001b40)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x80f4, 0x1001f3) fallocate(r0, 0x8, 0x0, 0x10000) 423.772891ms ago: executing program 7 (id=2453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) recvmmsg(r0, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)=""/4100, 0x1004}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f0000000200)=""/241, 0xf1}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f00000003c0)=""/148, 0x94}], 0x5, 0x0, 0x37}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 383.331064ms ago: executing program 4 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000017c0)=""/141, 0x8d}, {&(0x7f0000002a00)=""/4099, 0x1003}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 229.98473ms ago: executing program 7 (id=2455): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x3c}}, 0x0) 140.664343ms ago: executing program 7 (id=2456): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{&(0x7f0000000100)=@can={0x1d, r2}, 0x80, 0x0}}], 0x2, 0x0) 112.866445ms ago: executing program 4 (id=2457): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 58.468708ms ago: executing program 8 (id=2458): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x10) 804.52µs ago: executing program 7 (id=2459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1}}], 0x2, 0x220, 0x0) 0s ago: executing program 4 (id=2460): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) kernel console output (not intermixed with test programs): .750093][ T4265] wlan1: Creating new IBSS network, BSSID 06:93:cc:72:f6:48 [ 216.770648][ T4908] device hsr_slave_0 left promiscuous mode [ 216.782281][ T8668] NILFS (loop3): invalid segment: Magic number mismatch [ 216.796653][ T26] audit: type=1800 audit(1763992177.394:44): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1610" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 216.819672][ T4908] device hsr_slave_1 left promiscuous mode [ 216.840864][ T8668] NILFS (loop3): trying rollback from an earlier position [ 216.851670][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.859115][ T4908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.887564][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.907822][ T4908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.909266][ T8668] NILFS (loop3): recovery complete [ 216.919262][ T8674] loop5: detected capacity change from 0 to 4096 [ 216.931436][ T4908] device bridge_slave_1 left promiscuous mode [ 216.937640][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.954639][ T4908] device bridge_slave_0 left promiscuous mode [ 216.965334][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.986077][ T8683] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.988672][ T8674] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 217.078964][ T8674] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 217.093202][ T8674] ntfs3: loop5: Failed to load $Extend. [ 217.122065][ T4908] device veth1_macvtap left promiscuous mode [ 217.128752][ T4908] device veth0_macvtap left promiscuous mode [ 217.143891][ T4908] device veth1_vlan left promiscuous mode [ 217.149726][ T4908] device veth0_vlan left promiscuous mode [ 217.467966][ T4908] bond0 (unregistering): (slave bond1): Releasing backup interface [ 217.498320][ T4908] bond1 (unregistering): Released all slaves [ 217.612744][ T4908] team0 (unregistering): Port device team_slave_1 removed [ 217.630821][ T4908] team0 (unregistering): Port device team_slave_0 removed [ 217.644444][ T4908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.659202][ T4908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.735219][ T4908] bond0 (unregistering): Released all slaves [ 217.792167][ T8694] netlink: 'syz.4.1616': attribute type 2 has an invalid length. [ 217.817314][ T8711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.825591][ T8711] bond0: (slave bond1): Enslaving as an active interface with an up link [ 217.924901][ T8577] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.959831][ T8720] program syz.5.1623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.963485][ T8577] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 217.998513][ T8577] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.027619][ T8577] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.064866][ T8724] loop5: detected capacity change from 0 to 2048 [ 218.136844][ T8724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.150332][ T5060] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 218.168282][ T8577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.206736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.232251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.256874][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.288864][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.306151][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.319049][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.326218][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.376344][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1627'. [ 218.393468][ T5060] usb 4-1: Using ep0 maxpacket: 8 [ 218.408947][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.427820][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.449433][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.469988][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.477139][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.502136][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.520545][ T5060] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 218.529038][ T8737] netlink: 'syz.6.1627': attribute type 15 has an invalid length. [ 218.546603][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1627'. [ 218.559755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.576646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.614843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.649724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.665468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.686859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.701481][ T5060] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 218.716299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.719921][ T5060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.738149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.746872][ T5060] usb 4-1: Product: syz [ 218.755819][ T5060] usb 4-1: Manufacturer: syz [ 218.763105][ T8577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.766208][ T5060] usb 4-1: SerialNumber: syz [ 218.779638][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 218.780982][ T5060] usb 4-1: config 0 descriptor?? [ 218.804639][ T8577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.821857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.831196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.849543][ T5060] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 218.876251][ T5060] usb 4-1: setting power ON [ 218.892606][ T5060] dvb-usb: bulk message failed: -22 (2/0) [ 218.912300][ T8753] loop6: detected capacity change from 0 to 128 [ 218.916451][ T5060] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.970607][ T5060] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 218.985279][ T5060] usb 4-1: media controller created [ 218.985713][ T5120] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 219.022768][ T5060] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.051370][ T8715] dvb-usb: bulk message failed: -22 (3/0) [ 219.070238][ T8715] dvb-usb: bulk message failed: -22 (5/0) [ 219.094533][ T8715] dvb-usb: bulk message failed: -22 (3/0) [ 219.110280][ T8715] dvb-usb: bulk message failed: -22 (3/0) [ 219.126599][ T5060] usb 4-1: selecting invalid altsetting 6 [ 219.140459][ T5060] usb 4-1: digital interface selection failed (-22) [ 219.170230][ T5060] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 219.197259][ T8762] netlink: 284 bytes leftover after parsing attributes in process `syz.6.1638'. [ 219.233439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.250268][ T5060] usb 4-1: setting power OFF [ 219.250542][ T5120] usb 6-1: Using ep0 maxpacket: 32 [ 219.254928][ T5060] dvb-usb: bulk message failed: -22 (2/0) [ 219.269019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.281887][ T5060] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 219.296686][ T8577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.311847][ T5060] (NULL device *): no alternate interface [ 219.334716][ T5060] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 219.355516][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1640'. [ 219.368613][ T5060] usb 4-1: USB disconnect, device number 16 [ 219.382604][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1640'. [ 219.400677][ T5120] usb 6-1: config 10 has an invalid interface number: 107 but max is 0 [ 219.419520][ T5120] usb 6-1: config 10 has no interface number 0 [ 219.439790][ T5120] usb 6-1: config 10 interface 107 altsetting 5 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.474074][ T5120] usb 6-1: config 10 interface 107 has no altsetting 0 [ 219.660345][ T5120] usb 6-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=8b.7d [ 219.669435][ T5120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.707052][ T5120] usb 6-1: Product: syz [ 219.722223][ T5120] usb 6-1: Manufacturer: syz [ 219.726876][ T5120] usb 6-1: SerialNumber: syz [ 219.853673][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.882080][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.903255][ T8794] program syz.3.1649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.920742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.935553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.951841][ T8577] device veth0_vlan entered promiscuous mode [ 219.966061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.975754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.994451][ T8577] device veth1_vlan entered promiscuous mode [ 220.059892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.075690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.083318][ T5120] HFC-S_USB: probe of 6-1:10.107 failed with error -5 [ 220.085661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.121442][ T5120] usb 6-1: USB disconnect, device number 5 [ 220.126012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.149472][ T8577] device veth0_macvtap entered promiscuous mode [ 220.169530][ T8577] device veth1_macvtap entered promiscuous mode [ 220.207098][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.228942][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.248914][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.259797][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.283128][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.298645][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.314950][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.325645][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.344474][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.357393][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.374164][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.395520][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.408345][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.429003][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.452419][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.452584][ T8811] loop6: detected capacity change from 0 to 64 [ 220.465871][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.485437][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.495495][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.514072][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.527468][ T8577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.556378][ T8577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.573612][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.587524][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.604315][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.622523][ T8811] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 220.645701][ T8577] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.663276][ T8811] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 220.676993][ T8577] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.699224][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 220.704345][ T8577] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.734020][ T26] audit: type=1800 audit(1763992181.334:45): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1656" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 220.765644][ T8577] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.840581][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 221.004563][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.020393][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 221.026308][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.093209][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.097992][ T8830] loop6: detected capacity change from 0 to 2048 [ 221.107708][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.116840][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.167703][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.174515][ T8835] loop4: detected capacity change from 0 to 256 [ 221.209413][ T8837] loop3: detected capacity change from 0 to 512 [ 221.281022][ T8840] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.292458][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 221.321343][ T8835] FAT-fs (loop4): Directory bread(block 64) failed [ 221.327925][ T8835] FAT-fs (loop4): Directory bread(block 65) failed [ 221.375952][ T8835] FAT-fs (loop4): Directory bread(block 66) failed [ 221.386047][ T8835] FAT-fs (loop4): Directory bread(block 67) failed [ 221.404826][ T8830] NILFS (loop6): error -2 truncating bmap (ino=16) [ 221.434263][ T8835] FAT-fs (loop4): Directory bread(block 68) failed [ 221.450319][ T23] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 221.455097][ T8835] FAT-fs (loop4): Directory bread(block 69) failed [ 221.479441][ T8835] FAT-fs (loop4): Directory bread(block 70) failed [ 221.489018][ T8830] syz.6.1665 (8830) used greatest stack depth: 18784 bytes left [ 221.502885][ T8835] FAT-fs (loop4): Directory bread(block 71) failed [ 221.515902][ T8835] FAT-fs (loop4): Directory bread(block 72) failed [ 221.533382][ T8835] FAT-fs (loop4): Directory bread(block 73) failed [ 221.620564][ T23] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 221.638138][ T8835] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1667'. [ 221.655676][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.674433][ T23] usb 6-1: Product: syz [ 221.679102][ T23] usb 6-1: Manufacturer: syz [ 221.690195][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 221.710346][ T23] usb 6-1: SerialNumber: syz [ 221.719756][ T8858] xt_hashlimit: size too large, truncated to 1048576 [ 221.738482][ T23] usb 6-1: config 0 descriptor?? [ 221.796004][ T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 221.813848][ T23] usb 6-1: setting power ON [ 221.832708][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 221.854298][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.891018][ T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 221.920458][ T23] usb 6-1: media controller created [ 221.952764][ T8870] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 221.984435][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.004259][ T8817] dvb-usb: bulk message failed: -22 (3/0) [ 222.018032][ T8817] dvb-usb: bulk message failed: -22 (5/0) [ 222.047454][ T8817] dvb-usb: bulk message failed: -22 (3/0) [ 222.075189][ T8817] dvb-usb: bulk message failed: -22 (3/0) [ 222.080290][ T13] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 222.098292][ T23] usb 6-1: selecting invalid altsetting 6 [ 222.109121][ T23] usb 6-1: digital interface selection failed (-22) [ 222.149806][ T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 222.210461][ T23] usb 6-1: setting power OFF [ 222.215107][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 222.243472][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 222.268022][ T23] (NULL device *): no alternate interface [ 222.330177][ T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 222.363673][ T23] usb 6-1: USB disconnect, device number 6 [ 222.451772][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.473260][ T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.504809][ T13] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 222.528156][ T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.571818][ T13] usb 8-1: config 0 descriptor?? [ 222.718390][ T8902] loop6: detected capacity change from 0 to 512 [ 222.720336][ T5060] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 222.778350][ T8902] EXT4-fs (loop6): Test dummy encryption mode enabled [ 222.805138][ T8902] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 222.845574][ T8902] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1685: bad orphan inode 131083 [ 222.866793][ T8902] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,nobarrier,noload,,errors=continue. Quota mode: none. [ 222.920427][ T5115] Bluetooth: hci3: command 0x0419 tx timeout [ 223.057991][ T13] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 223.080805][ T13] arvo 0003:1E7D:30D4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.7-1/input0 [ 223.100397][ T5060] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.118880][ T5060] usb 5-1: no configurations [ 223.136451][ T5060] usb 5-1: can't read configurations, error -22 [ 223.445903][ T8933] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 223.460408][ T8933] syzkaller1: linktype set to 774 [ 223.469343][ T5059] usb 8-1: USB disconnect, device number 2 [ 223.660877][ T8919] loop6: detected capacity change from 0 to 32768 [ 223.672392][ T8942] loop4: detected capacity change from 0 to 512 [ 223.748538][ T8942] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 223.763952][ T8942] EXT4-fs (loop4): inline encryption not supported [ 223.790733][ T8942] EXT4-fs (loop4): Test dummy encryption mode enabled [ 223.797571][ T8942] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 223.823371][ T8942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 223.864334][ T8942] EXT4-fs (loop4): 1 truncate cleaned up [ 223.870040][ T8942] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 223.990205][ T26] audit: type=1800 audit(1763992184.584:46): pid=8942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1693" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 224.340247][ T13] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 224.364406][ T8970] loop5: detected capacity change from 0 to 4096 [ 224.417958][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1701'. [ 224.444211][ T8976] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1701'. [ 224.600261][ T13] usb 8-1: Using ep0 maxpacket: 8 [ 224.730572][ T13] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 224.734803][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 224.779088][ T8970] ntfs3: loop5: failed to convert "0080" to koi8-ru [ 224.818688][ T8970] ntfs3: loop5: failed to convert name for inode 1e. [ 224.900466][ T13] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 224.925897][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.949425][ T8997] loop6: detected capacity change from 0 to 512 [ 224.950297][ T13] usb 8-1: Product: syz [ 224.982690][ T13] usb 8-1: Manufacturer: syz [ 224.987348][ T13] usb 8-1: SerialNumber: syz [ 225.011823][ T13] usb 8-1: config 0 descriptor?? [ 225.012556][ T8997] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 225.038807][ T8997] EXT4-fs (loop6): inline encryption not supported [ 225.062117][ T13] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 225.081730][ T8997] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.088630][ T8997] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 225.096331][ T13] usb 8-1: setting power ON [ 225.106297][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 225.128797][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.147009][ T8997] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 225.151170][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 225.170434][ T13] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 225.191448][ T13] usb 8-1: media controller created [ 225.246798][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.267777][ T8961] dvb-usb: bulk message failed: -22 (3/0) [ 225.279107][ T8961] dvb-usb: bulk message failed: -22 (5/0) [ 225.292336][ T8997] EXT4-fs (loop6): 1 truncate cleaned up [ 225.298460][ T9015] siw: device registration error -23 [ 225.301701][ T8961] dvb-usb: bulk message failed: -22 (3/0) [ 225.314632][ T8997] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 225.390754][ T8961] dvb-usb: bulk message failed: -22 (3/0) [ 225.420362][ T13] usb 8-1: selecting invalid altsetting 6 [ 225.426264][ T13] usb 8-1: digital interface selection failed (-22) [ 225.456006][ T13] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 225.495749][ T26] audit: type=1800 audit(1763992186.094:47): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1710" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 225.542564][ T13] usb 8-1: setting power OFF [ 225.548930][ T13] dvb-usb: bulk message failed: -22 (2/0) [ 225.591481][ T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 225.607536][ T13] (NULL device *): no alternate interface [ 225.646319][ T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 225.662879][ T5060] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 225.693018][ T13] usb 8-1: USB disconnect, device number 3 [ 225.835885][ T9040] loop6: detected capacity change from 0 to 256 [ 226.040532][ T5060] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.071404][ T5060] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.083733][ T9057] loop5: detected capacity change from 0 to 128 [ 226.120293][ T5060] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 226.158315][ T9064] loop7: detected capacity change from 0 to 256 [ 226.165048][ T5060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.187014][ T5060] usb 5-1: config 0 descriptor?? [ 226.195112][ T9066] loop6: detected capacity change from 0 to 512 [ 226.221798][ T9057] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.238029][ T9057] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.269834][ T9064] FAT-fs (loop7): Directory bread(block 64) failed [ 226.270067][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.297095][ T9064] FAT-fs (loop7): Directory bread(block 65) failed [ 226.314269][ T9066] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 226.334449][ T9057] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 226.342696][ T9076] loop3: detected capacity change from 0 to 512 [ 226.352418][ T9066] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #13: comm syz.6.1730: iget: bad i_size value: 12154757448730 [ 226.359202][ T9064] FAT-fs (loop7): Directory bread(block 66) failed [ 226.380209][ T9064] FAT-fs (loop7): Directory bread(block 67) failed [ 226.390523][ T9064] FAT-fs (loop7): Directory bread(block 68) failed [ 226.399468][ T9066] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1730: couldn't read orphan inode 13 (err -117) [ 226.411702][ T9064] FAT-fs (loop7): Directory bread(block 69) failed [ 226.418346][ T9064] FAT-fs (loop7): Directory bread(block 70) failed [ 226.426364][ T9064] FAT-fs (loop7): Directory bread(block 71) failed [ 226.433207][ T9066] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback. [ 226.453723][ T9076] EXT4-fs (loop3): Ignoring removed bh option [ 226.458138][ T9064] FAT-fs (loop7): Directory bread(block 72) failed [ 226.467320][ T9064] FAT-fs (loop7): Directory bread(block 73) failed [ 226.482953][ T9076] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 226.516186][ T9066] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 226.530876][ T5060] usbhid 5-1:0.0: can't add hid device: -71 [ 226.530961][ T5060] usbhid: probe of 5-1:0.0 failed with error -71 [ 226.532771][ T5060] usb 5-1: USB disconnect, device number 20 [ 226.544912][ T9076] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.605452][ T9083] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 226.795149][ T9091] loop3: detected capacity change from 0 to 512 [ 226.835518][ T26] audit: type=1326 audit(1763992187.434:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9094 comm="syz.7.1736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f026d483749 code=0x0 [ 226.871700][ T9091] EXT4-fs (loop3): Ignoring removed orlov option [ 226.890490][ T9091] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 226.934080][ T9091] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.1738: corrupted in-inode xattr [ 226.962790][ T9091] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1738: couldn't read orphan inode 15 (err -117) [ 227.029404][ T9091] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,sysvgroups,noload,nombcache,noblock_validity,init_itable=0x0000000000000051,nogrpid,,errors=continue. Quota mode: none. [ 227.135245][ T9111] program syz.6.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.376422][ T9121] Bluetooth: hci1: expected 2195 bytes, got 2 bytes [ 227.421061][ T9116] loop5: detected capacity change from 0 to 32768 [ 227.490300][ T9116] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1747 (9116) [ 227.518111][ T9125] loop3: detected capacity change from 0 to 2048 [ 227.529545][ T9116] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 227.539335][ T9116] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 227.549330][ T9116] BTRFS info (device loop5): use zstd compression, level 3 [ 227.557436][ T9116] BTRFS info (device loop5): using free space tree [ 227.564035][ T9116] BTRFS info (device loop5): has skinny extents [ 227.628124][ T9125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.682889][ T9149] input: syz0 as /devices/virtual/input/input28 [ 227.690304][ T9116] BTRFS info (device loop5): enabling ssd optimizations [ 227.974042][ T9162] loop7: detected capacity change from 0 to 256 [ 228.123172][ T9167] loop6: detected capacity change from 0 to 16 [ 228.279455][ T9167] erofs: (device loop6): mounted with root inode @ nid 36. [ 228.307000][ T9167] attempt to access beyond end of device [ 228.307000][ T9167] loop6: rw=0, want=24, limit=16 [ 228.396920][ T9167] attempt to access beyond end of device [ 228.396920][ T9167] loop6: rw=524288, want=32, limit=16 [ 228.426506][ T9167] attempt to access beyond end of device [ 228.426506][ T9167] loop6: rw=524288, want=24, limit=16 [ 228.474090][ T9171] loop5: detected capacity change from 0 to 4096 [ 228.526891][ T9158] loop3: detected capacity change from 0 to 32768 [ 228.539830][ T9164] loop4: detected capacity change from 0 to 32768 [ 228.543607][ T9171] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 228.598830][ T9158] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 228.598830][ T9158] [ 228.611226][ T9158] ERROR: (device loop3): remounting filesystem as read-only [ 228.618902][ T9158] jfs_create: dtInsert returned -EIO [ 228.629837][ T9158] ERROR: (device loop3): jfs_create: [ 228.629837][ T9158] [ 228.646996][ T9158] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 228.646996][ T9158] [ 228.657535][ T9158] ERROR: (device loop3): dbDiscardAG: -EIO [ 228.657535][ T9158] [ 228.665777][ T4239] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 228.890294][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1767'. [ 228.929504][ T9185] loop3: detected capacity change from 0 to 1024 [ 229.015798][ T9185] EXT4-fs (loop3): Ignoring removed orlov option [ 229.046886][ T9185] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 229.069948][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.100354][ T4239] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 229.117197][ T4239] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 229.139136][ T4239] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 229.152576][ T4239] usb 8-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 229.161776][ T4239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.179229][ T4239] usb 8-1: config 0 descriptor?? [ 229.210626][ T9169] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.435849][ T9209] loop4: detected capacity change from 0 to 1024 [ 229.540057][ T9218] netlink: 'syz.5.1781': attribute type 2 has an invalid length. [ 229.578940][ T9220] loop6: detected capacity change from 0 to 512 [ 229.625744][ T9224] program syz.5.1785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.658727][ T9220] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.676001][ T4239] wacom 0003:056A:00B3.0015: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 229.710931][ T4239] wacom 0003:056A:00B3.0015: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.7-1/input0 [ 229.726056][ T4239] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:00B3.0015/input/input29 [ 229.730260][ T13] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 229.757605][ T9226] loop4: detected capacity change from 0 to 4096 [ 229.768667][ T9220] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 229.785693][ T9220] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.863467][ T9226] ntfs: (device loop4): parse_options(): NLS character set is not found. Using previous one default. [ 229.875298][ T9226] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 229.879176][ T23] usb 8-1: USB disconnect, device number 4 [ 229.918153][ T9226] ntfs: volume version 3.1. [ 229.929954][ T9226] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default. You might want to try to use the mount option nls=utf8. [ 229.948134][ T9226] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 230.000912][ T9238] loop6: detected capacity change from 0 to 1024 [ 230.076105][ T9237] hfsplus: invalid extended attribute record [ 230.110601][ T9] hfsplus: b-tree write err: -5, ino 4 [ 230.110914][ T13] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.127397][ T13] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.137313][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 230.147307][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.190909][ T13] hub 4-1:4.0: USB hub found [ 230.412965][ T13] hub 4-1:4.0: 13 ports detected [ 230.417992][ T13] usb 4-1: selecting invalid altsetting 1 [ 230.434852][ T13] hub 4-1:4.0: Using single TT (err -22) [ 230.454756][ T9243] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1790'. [ 230.470314][ T13] hub 4-1:4.0: insufficient power available to use all downstream ports [ 230.505910][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1790'. [ 230.630307][ T13] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 230.640576][ T13] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 230.713893][ T13] usb 4-1: USB disconnect, device number 17 [ 230.818313][ T9265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1802'. [ 230.887379][ T26] audit: type=1326 audit(1763992191.484:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f03b94749 code=0x7ffc0000 [ 230.940805][ T26] audit: type=1326 audit(1763992191.484:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.6.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f8f03b94749 code=0x7ffc0000 [ 231.326175][ T9303] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1819'. [ 231.364173][ T9307] ALSA: mixer_oss: invalid OSS volume 'u' [ 231.376485][ T9309] loop3: detected capacity change from 0 to 256 [ 231.469373][ T9309] FAT-fs (loop3): Directory bread(block 64) failed [ 231.490207][ T9309] FAT-fs (loop3): Directory bread(block 65) failed [ 231.504503][ T9309] FAT-fs (loop3): Directory bread(block 66) failed [ 231.521561][ T9309] FAT-fs (loop3): Directory bread(block 67) failed [ 231.536353][ T9309] FAT-fs (loop3): Directory bread(block 68) failed [ 231.549752][ T9309] FAT-fs (loop3): Directory bread(block 69) failed [ 231.566765][ T9309] FAT-fs (loop3): Directory bread(block 70) failed [ 231.585075][ T9323] loop7: detected capacity change from 0 to 1024 [ 231.592732][ T9309] FAT-fs (loop3): Directory bread(block 71) failed [ 231.606991][ T9309] FAT-fs (loop3): Directory bread(block 72) failed [ 231.620937][ T9309] FAT-fs (loop3): Directory bread(block 73) failed [ 231.645082][ T9323] EXT4-fs (loop7): Ignoring removed orlov option [ 231.655146][ T9323] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 231.699995][ T9323] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 231.730077][ T9323] tmpfs: Bad value for 'uid' [ 231.876324][ T9337] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 231.876324][ T9337] [ 231.970560][ T9343] loop6: detected capacity change from 0 to 1024 [ 232.042149][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 232.075696][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1840'. [ 232.078766][ T9343] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.099492][ T9355] netlink: 'syz.5.1841': attribute type 1 has an invalid length. [ 232.109007][ T9355] netlink: 'syz.5.1841': attribute type 2 has an invalid length. [ 232.120515][ T5060] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 232.130788][ T26] audit: type=1800 audit(1763992192.734:51): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1836" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 232.171419][ T9358] netlink: 'syz.5.1841': attribute type 1 has an invalid length. [ 232.179191][ T9358] netlink: 'syz.5.1841': attribute type 2 has an invalid length. [ 232.335787][ T9372] block nbd5: NBD_DISCONNECT [ 232.390337][ T5060] usb 5-1: Using ep0 maxpacket: 16 [ 232.512657][ T5060] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.546454][ T5060] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.585614][ T5060] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.609749][ T5060] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 232.652511][ T5060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.674822][ T5060] usb 5-1: config 0 descriptor?? [ 232.723055][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.807483][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.916970][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.038543][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.098700][ T26] audit: type=1326 audit(1763992193.704:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 233.154642][ T9412] netlink: 'syz.7.1866': attribute type 15 has an invalid length. [ 233.213620][ T26] audit: type=1326 audit(1763992193.704:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 233.231490][ T5060] cougar 0003:060B:500A.0016: usage count exceeds max: fixing up report descriptor [ 233.243862][ T26] audit: type=1326 audit(1763992193.704:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.3.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 233.280384][ T13] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 233.289494][ T5060] cougar 0003:060B:500A.0016: unexpected long global item [ 233.330651][ T5060] cougar 0003:060B:500A.0016: parse failed [ 233.337405][ T5060] cougar: probe of 0003:060B:500A.0016 failed with error -22 [ 233.419250][ T1108] usb 5-1: USB disconnect, device number 21 [ 233.520286][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 233.583037][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 233.617100][ T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:1) [ 233.640472][ T13] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.657089][ T13] usb 6-1: config 0 has no interface number 0 [ 233.701594][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.709023][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.718133][ T9409] device bridge_slave_0 entered promiscuous mode [ 233.728450][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.736517][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.748319][ T9409] device bridge_slave_1 entered promiscuous mode [ 233.777368][ T9438] loop3: detected capacity change from 0 to 512 [ 233.791512][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.808697][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.820590][ T13] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 233.828696][ T9438] EXT4-fs (loop3): filesystem is read-only [ 233.837416][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.845967][ T13] usb 6-1: Product: syz [ 233.847064][ T9438] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 233.850870][ T13] usb 6-1: Manufacturer: syz [ 233.866282][ T13] usb 6-1: SerialNumber: syz [ 233.873487][ T13] usb 6-1: config 0 descriptor?? [ 233.875537][ T9438] EXT4-fs (loop3): filesystem is read-only [ 233.884763][ T5115] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 233.890608][ T9438] EXT4-fs (loop3): orphan cleanup on readonly fs [ 233.899063][ T9438] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #16: comm syz.3.1876: iget: bad i_size value: -504403158265486552 [ 233.912564][ T13] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 233.915980][ T9438] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1876: couldn't read orphan inode 16 (err -117) [ 233.928838][ T13] usb 6-1: selecting invalid altsetting 1 [ 233.935151][ T9438] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000004000000,max_batch_time=0x0000000000000003,noblock_validity,minixdf,nolazytime,grpid,noauto_da_alloc,,errors=continue. Quota mode: none. [ 233.939285][ T13] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 233.997431][ T13] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.029358][ T13] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 234.044621][ T13] usb 6-1: media controller created [ 234.069727][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.148005][ T9409] team0: Port device team_slave_0 added [ 234.156914][ T9409] team0: Port device team_slave_1 added [ 234.181726][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.188885][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.231949][ T9443] loop3: detected capacity change from 0 to 1024 [ 234.238413][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.265708][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.272996][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.306912][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.335013][ T9443] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 234.350571][ T5115] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.361279][ T5115] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 234.370523][ T5115] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 234.378601][ T9443] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.379929][ T5115] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.404436][ T5115] usb 8-1: config 0 descriptor?? [ 234.423521][ T9443] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.1878: Invalid inode table block 0 in block_group 0 [ 234.436918][ T9441] loop4: detected capacity change from 0 to 40427 [ 234.449053][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.458000][ T5115] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 234.465562][ T9443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 234.477125][ T5115] dvb-usb: bulk message failed: -22 (3/0) [ 234.487498][ T5115] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 234.495962][ T9441] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 234.497382][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.509832][ T9441] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 234.513235][ T9443] EXT4-fs error (device loop3): ext4_quota_write:6621: inode #3: comm syz.3.1878: mark_inode_dirty error [ 234.526241][ T9441] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 234.530938][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.536963][ T5115] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 234.549998][ T5115] usb 8-1: media controller created [ 234.554616][ T9409] device hsr_slave_0 entered promiscuous mode [ 234.556760][ T5115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.571589][ T9443] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1878: Failed to acquire dquot type 0 [ 234.577931][ T5115] dvb-usb: bulk message failed: -22 (6/0) [ 234.589281][ T9409] device hsr_slave_1 entered promiscuous mode [ 234.589962][ T5115] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 234.598286][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.609798][ T9409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.616496][ T9441] F2FS-fs (loop4): Found nat_bits in checkpoint [ 234.620607][ T9409] Cannot create hsr debugfs directory [ 234.630545][ T9443] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.1878: Invalid inode table block 0 in block_group 0 [ 234.648152][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.652179][ T5115] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 234.656504][ T9443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 234.668449][ T5115] dvb-usb: schedule remote query interval to 150 msecs. [ 234.683361][ T5115] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 234.694444][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.709437][ T9443] EXT4-fs error (device loop3): ext4_ext_truncate:4456: inode #15: comm syz.3.1878: mark_inode_dirty error [ 234.734642][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.747135][ T9443] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.1878: Invalid inode table block 0 in block_group 0 [ 234.774370][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.785607][ T9443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 234.826455][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.827266][ T9441] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 234.839965][ T9443] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 234.851187][ T9441] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 234.856796][ T5115] dvb-usb: bulk message failed: -22 (1/0) [ 234.876138][ T5115] dvb-usb: error while querying for an remote control event. [ 234.898258][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.907194][ T9443] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.1878: Invalid inode table block 0 in block_group 0 [ 234.938747][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.952157][ T9443] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 234.965967][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 234.973059][ T9443] EXT4-fs error (device loop3): ext4_truncate:4279: inode #15: comm syz.3.1878: mark_inode_dirty error [ 234.984823][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 235.020647][ T9443] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 235.039006][ T9] device hsr_slave_0 left promiscuous mode [ 235.045623][ T9] device hsr_slave_1 left promiscuous mode [ 235.051840][ T5115] dvb-usb: bulk message failed: -22 (1/0) [ 235.057694][ T5115] dvb-usb: error while querying for an remote control event. [ 235.065932][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.074419][ T9443] EXT4-fs (loop3): Remounting filesystem read-only [ 235.080494][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.099151][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.102892][ T9443] EXT4-fs (loop3): 1 truncate cleaned up [ 235.110487][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.129749][ T1108] usb 8-1: USB disconnect, device number 5 [ 235.135009][ T9443] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000013,stripe=0x0000000000000000,nolazytime,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback. [ 235.160666][ T9] device bridge_slave_1 left promiscuous mode [ 235.166924][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.175249][ T13] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 235.183572][ T13] zl10353_read_register: readreg error (reg=127, ret==-110) [ 235.208208][ T9443] EXT4-fs (loop3): shut down requested (1) [ 235.210956][ T9] device bridge_slave_0 left promiscuous mode [ 235.221009][ T13] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 235.230605][ T5115] Bluetooth: hci2: command 0x0409 tx timeout [ 235.237693][ T1108] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 235.253412][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.297383][ T9] device veth1_macvtap left promiscuous mode [ 235.308468][ T13] usb 6-1: USB disconnect, device number 7 [ 235.311376][ T9] device veth0_macvtap left promiscuous mode [ 235.321992][ T9] device veth1_vlan left promiscuous mode [ 235.327874][ T9] device veth0_vlan left promiscuous mode [ 235.667442][ T9] team0 (unregistering): Port device team_slave_1 removed [ 235.695329][ T9] team0 (unregistering): Port device team_slave_0 removed [ 235.745551][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.777948][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.842059][ T9459] loop7: detected capacity change from 0 to 1024 [ 235.959496][ T144] hfsplus: b-tree write err: -5, ino 4 [ 235.978665][ T9] bond0 (unregistering): Released all slaves [ 236.052687][ T9453] device macsec0 entered promiscuous mode [ 236.067786][ T9453] device macsec0 left promiscuous mode [ 236.087774][ T9455] loop4: detected capacity change from 0 to 32768 [ 236.158469][ T9455] add_index: next_index = 0. Resetting! [ 236.186476][ T9455] find_entry called with index >= next_index [ 236.189056][ T9409] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 236.203556][ T9409] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 236.206049][ T9455] find_entry called with index >= next_index [ 236.218930][ T9409] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 236.228797][ T9409] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 236.232517][ T9455] find_entry called with index >= next_index [ 236.255292][ T9455] find_entry called with index >= next_index [ 236.359370][ T9479] loop3: detected capacity change from 0 to 256 [ 236.421217][ T9479] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 236.466681][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.491384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.499806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.513016][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.524740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.534990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.545400][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.553279][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.577699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.592811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.608170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.618154][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.625302][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.634656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.675953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.703806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.745105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.786637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.802914][ T9485] loop4: detected capacity change from 0 to 2048 [ 236.821344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.832994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.851180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.863707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.905271][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.916881][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.918315][ T9490] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.972038][ T9409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 237.053567][ T9485] NILFS (loop4): error -2 truncating bmap (ino=16) [ 237.306691][ T9508] loop3: detected capacity change from 0 to 512 [ 237.313800][ T5059] Bluetooth: hci2: command 0x041b tx timeout [ 237.360905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.368382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.384675][ T9508] EXT4-fs (loop3): Ignoring removed orlov option [ 237.394007][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.414666][ T9508] EXT4-fs (loop3): bad block size 65536 [ 237.424475][ T9516] loop4: detected capacity change from 0 to 128 [ 237.489540][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1907'. [ 237.601521][ T9516] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 237.647237][ T9516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.834023][ T9533] loop3: detected capacity change from 0 to 2048 [ 237.845827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.867361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.920217][ T23] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 237.930219][ T9535] loop4: detected capacity change from 0 to 128 [ 237.931831][ T9536] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.966580][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.996074][ T9535] FAT-fs (loop4): Directory bread(block 414) failed [ 237.996433][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.019362][ T9535] FAT-fs (loop4): Directory bread(block 415) failed [ 238.036650][ T9535] FAT-fs (loop4): Directory bread(block 416) failed [ 238.036836][ T9533] NILFS (loop3): error -2 truncating bmap (ino=16) [ 238.051593][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.070571][ T9535] FAT-fs (loop4): Directory bread(block 417) failed [ 238.070630][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.087530][ T9535] FAT-fs (loop4): Directory bread(block 418) failed [ 238.107869][ T9535] FAT-fs (loop4): Directory bread(block 419) failed [ 238.122944][ T9409] device veth0_vlan entered promiscuous mode [ 238.143536][ T9535] FAT-fs (loop4): Directory bread(block 420) failed [ 238.154596][ T9409] device veth1_vlan entered promiscuous mode [ 238.170408][ T9535] FAT-fs (loop4): Directory bread(block 421) failed [ 238.203122][ T9535] FAT-fs (loop4): Directory bread(block 414) failed [ 238.206794][ T9523] loop7: detected capacity change from 0 to 32768 [ 238.217224][ T9535] FAT-fs (loop4): Directory bread(block 415) failed [ 238.256346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 238.268061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.287873][ T9523] [ 238.287873][ T9523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.287873][ T9523] [ 238.292095][ T9409] device veth0_macvtap entered promiscuous mode [ 238.321262][ T23] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 238.344568][ T23] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 238.357016][ T9409] device veth1_macvtap entered promiscuous mode [ 238.358672][ T9523] ERROR: (device loop7): diWrite: ixpxd invalid [ 238.358672][ T9523] [ 238.377674][ T23] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.386393][ T9539] loop3: detected capacity change from 0 to 2048 [ 238.407278][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.414722][ T9523] ERROR: (device loop7): txCommit: [ 238.414722][ T9523] [ 238.418372][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.440159][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.442349][ T9523] [ 238.442349][ T9523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.442349][ T9523] [ 238.469526][ T9523] [ 238.469526][ T9523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.469526][ T9523] [ 238.470231][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.490891][ T9527] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.497921][ T9527] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 238.545652][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.556288][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.575030][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.587036][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.604720][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.629995][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.643462][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.654475][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.665649][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.687056][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.705031][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.716051][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.726361][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.731156][ T9539] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.737262][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.759257][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.780578][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.798171][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.857525][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.872684][ T4246] usb 6-1: USB disconnect, device number 8 [ 238.900037][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.931214][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.961665][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.015565][ T9409] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.050176][ T9409] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.068971][ T9409] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.105479][ T9409] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.290423][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.315444][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.361215][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 239.376831][ T6351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.390426][ T5164] Bluetooth: hci2: command 0x040f tx timeout [ 239.426474][ T6351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.445410][ T9562] program syz.7.1923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.475273][ T6351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 240.110267][ T4239] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 240.380233][ T4239] usb 9-1: Using ep0 maxpacket: 16 [ 240.387287][ T9616] loop5: detected capacity change from 0 to 8192 [ 240.410255][ T4246] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 240.510550][ T4239] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.513471][ T5164] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 240.528692][ T4239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.550445][ T4239] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 240.562393][ T4239] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 240.572691][ T4239] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.660703][ T4239] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 240.675009][ T4239] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 240.684429][ T4239] usb 9-1: Manufacturer: syz [ 240.691592][ T4239] usb 9-1: config 0 descriptor?? [ 240.773880][ T4246] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.784694][ T5164] usb 5-1: Using ep0 maxpacket: 8 [ 240.800426][ T4246] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.900431][ T5164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 240.920199][ T5164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.940508][ T5164] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.958586][ T5164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 240.971579][ T5164] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 240.982583][ T5164] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 240.996410][ T4246] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.015456][ T4246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.030250][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.040393][ T4246] usb 8-1: Product: syz [ 241.040413][ T4246] usb 8-1: Manufacturer: syz [ 241.040431][ T4246] usb 8-1: SerialNumber: syz [ 241.058867][ T5164] usb 5-1: config 0 descriptor?? [ 241.077530][ T9608] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 241.100349][ T4239] rc_core: IR keymap rc-hauppauge not found [ 241.102605][ T9644] loop5: detected capacity change from 0 to 128 [ 241.106319][ T4239] Registered IR keymap rc-empty [ 241.106918][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.190460][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.231540][ T4239] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 241.232678][ T4239] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input33 [ 241.235778][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.267850][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.290339][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.336489][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.360413][ T4246] usb 8-1: 0:2 : does not exist [ 241.370415][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.374483][ T4194] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 241.374636][ T4194] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 241.374662][ T4194] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 241.374689][ T4194] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 241.374715][ T4194] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 241.386382][ T4246] usb 8-1: USB disconnect, device number 6 [ 241.411702][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.470741][ T5164] Bluetooth: hci2: command 0x0419 tx timeout [ 241.500681][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.540412][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.571342][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.577613][ T5164] usb 5-1: USB disconnect, device number 22 [ 241.610493][ T4239] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 241.652523][ T4239] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 241.652551][ T4239] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 241.734934][ T9658] loop5: detected capacity change from 0 to 4096 [ 241.780068][ T9658] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 241.825350][ T9658] ntfs3: loop5: Inode r=19 is not in use! [ 241.825444][ T9658] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 241.896628][ T9658] overlayfs: invalid redirect ((null)) [ 242.326329][ T9688] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 242.587557][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1987'. [ 242.873834][ T5115] usb 9-1: USB disconnect, device number 2 [ 242.955898][ T9718] loop3: detected capacity change from 0 to 32768 [ 242.987619][ T9726] input: syz1 as /devices/virtual/input/input34 [ 243.016303][ T9718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1995 (9718) [ 243.032570][ T4246] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 243.085559][ T9718] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 243.094403][ T9718] BTRFS info (device loop3): using free space tree [ 243.101158][ T9718] BTRFS info (device loop3): has skinny extents [ 243.149880][ T9718] BTRFS info (device loop3): enabling ssd optimizations [ 243.157535][ C0] Illegal XDP return value 16128, expect packet loss! [ 243.280359][ T4246] usb 6-1: Using ep0 maxpacket: 8 [ 243.440501][ T4246] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.556625][ T4246] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 243.556654][ T4246] usb 6-1: config 4 has no interface number 0 [ 243.556679][ T4246] usb 6-1: config 4 interface 30 has no altsetting 0 [ 243.833824][ T4246] usb 6-1: string descriptor 0 read error: -22 [ 243.854094][ T4246] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 243.869884][ T4246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.886681][ T9782] loop4: detected capacity change from 0 to 1024 [ 243.933780][ T4246] dw2102: su3000_identify_state [ 243.938866][ T4246] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 243.954415][ T9782] EXT4-fs (loop4): Ignoring removed bh option [ 243.964535][ T4246] dw2102: su3000_power_ctrl: 1, initialized 0 [ 243.974230][ T4246] dvb-usb: bulk message failed: -22 (2/0) [ 243.995066][ T9789] loop8: detected capacity change from 0 to 4096 [ 243.998107][ T4246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.023833][ T9782] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 244.030918][ T4246] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 244.070276][ T4246] usb 6-1: media controller created [ 244.075623][ T4246] dvb-usb: bulk message failed: -22 (6/0) [ 244.089635][ T4246] dw2102: i2c transfer failed. [ 244.095190][ T4246] dvb-usb: bulk message failed: -22 (6/0) [ 244.101717][ T4246] dw2102: i2c transfer failed. [ 244.106529][ T4246] dvb-usb: bulk message failed: -22 (6/0) [ 244.112973][ T4246] dw2102: i2c transfer failed. [ 244.117961][ T4246] dvb-usb: bulk message failed: -22 (6/0) [ 244.124095][ T4246] dw2102: i2c transfer failed. [ 244.129089][ T9798] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.140856][ T4246] dvb-usb: bulk message failed: -22 (6/0) [ 244.146762][ T4246] dw2102: i2c transfer failed. [ 244.160387][ T9709] dw2102: i2c rd: len=75 is too big! [ 244.160387][ T9709] [ 244.180224][ T5060] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 244.188145][ T4246] dvb-usb: bulk message failed: -22 (6/0) [ 244.208340][ T4246] dw2102: i2c transfer failed. [ 244.215061][ T4246] dvb-usb: MAC address: 02:02:02:02:02:02 [ 244.244489][ T4246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.261629][ T4246] dvb-usb: bulk message failed: -22 (3/0) [ 244.267510][ T4246] dw2102: command 0x0e transfer failed. [ 244.274423][ T4246] dvb-usb: bulk message failed: -22 (3/0) [ 244.280300][ T4246] dw2102: command 0x0e transfer failed. [ 244.301652][ T9800] loop3: detected capacity change from 0 to 1024 [ 244.560493][ T5060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.571829][ T5060] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.582889][ T5060] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 244.593079][ T5060] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.603419][ T4246] dvb-usb: bulk message failed: -22 (3/0) [ 244.609196][ T4246] dw2102: command 0x0e transfer failed. [ 244.617259][ T5060] usb 8-1: config 0 descriptor?? [ 244.624434][ T4246] dvb-usb: bulk message failed: -22 (3/0) [ 244.634284][ T4246] dw2102: command 0x0e transfer failed. [ 244.643362][ T4246] dvb-usb: bulk message failed: -22 (1/0) [ 244.649415][ T4246] dw2102: command 0x51 transfer failed. [ 244.659117][ T4246] dvb-usb: bulk message failed: -22 (5/0) [ 244.667868][ T4246] dw2102: i2c probe for address 0x68 failed. [ 244.688177][ T4246] dvb-usb: bulk message failed: -22 (5/0) [ 244.698016][ T4246] dw2102: i2c probe for address 0x69 failed. [ 244.729128][ T4246] dvb-usb: bulk message failed: -22 (5/0) [ 244.730124][ T9818] sctp: Trying to GSO but underlying device doesn't support it. [ 244.735486][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 244.738709][ T4246] dw2102: i2c probe for address 0x6a failed. [ 244.783395][ T9821] loop5: detected capacity change from 0 to 16 [ 244.789391][ T4246] dw2102: probing for demodulator failed. Is the external power switched on? [ 244.818034][ T4246] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 244.840902][ T9821] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 244.913201][ T9828] loop3: detected capacity change from 0 to 128 [ 244.961550][ T9828] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.972469][ T4246] rc_core: IR keymap rc-tt-1500 not found [ 244.973497][ T9828] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.978262][ T4246] Registered IR keymap rc-empty [ 244.978998][ T4246] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 245.025175][ T5060] usbhid 8-1:0.0: can't add hid device: -71 [ 245.040292][ T5060] usbhid: probe of 8-1:0.0 failed with error -71 [ 245.052137][ T5060] usb 8-1: USB disconnect, device number 7 [ 245.090295][ T9779] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 245.090767][ T4246] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input35 [ 245.138919][ T4246] dvb-usb: schedule remote query interval to 250 msecs. [ 245.146827][ T4246] dw2102: su3000_power_ctrl: 0, initialized 1 [ 245.156815][ T4246] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 245.176575][ T4246] usb 6-1: USB disconnect, device number 9 [ 245.256964][ T4246] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 245.326413][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 245.360341][ T9779] usb 9-1: Using ep0 maxpacket: 16 [ 245.389521][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 245.434482][ T9843] loop4: detected capacity change from 0 to 4096 [ 245.501630][ T9779] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 245.504616][ T9848] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2040'. [ 245.534238][ T9779] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.547753][ T9852] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.776261][ T9779] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.788689][ T9779] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.811586][ T9779] usb 9-1: Product: syz [ 245.816243][ T9779] usb 9-1: Manufacturer: syz [ 245.828978][ T9779] usb 9-1: SerialNumber: syz [ 245.904755][ T4246] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 246.123538][ T9880] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 246.169933][ T9882] loop5: detected capacity change from 0 to 16 [ 246.176691][ T4246] usb 4-1: Using ep0 maxpacket: 32 [ 246.220030][ T9886] loop4: detected capacity change from 0 to 1024 [ 246.227807][ T9882] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 246.319035][ T9886] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.335739][ T9779] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 246.356456][ T4246] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.452736][ T4246] usb 4-1: config 244 has an invalid interface number: 68 but max is 0 [ 246.471424][ T4246] usb 4-1: config 244 has no interface number 0 [ 246.491393][ T4246] usb 4-1: config 244 interface 68 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 246.517309][ T4246] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 246.536615][ T4246] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 246.549202][ T4246] usb 4-1: config 244 interface 68 has no altsetting 0 [ 246.645080][ T9907] loop7: detected capacity change from 0 to 512 [ 246.710738][ T4246] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 246.726450][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.735084][ T4246] usb 4-1: Product: syz [ 246.739396][ T4246] usb 4-1: Manufacturer: syz [ 246.751883][ T4265] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 246.762794][ T9907] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.769693][ T4246] usb 4-1: SerialNumber: syz [ 246.795393][ T9907] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 246.800838][ T9854] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 246.827984][ T9898] loop5: detected capacity change from 0 to 40427 [ 246.835006][ T9779] usb 9-1: USB disconnect, device number 3 [ 246.856514][ T9907] EXT4-fs (loop7): 1 truncate cleaned up [ 246.862421][ T9907] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 246.908433][ T9898] F2FS-fs (loop5): build fault injection attr: rate: 7, type: 0x1ffff [ 246.939435][ C0] F2FS-fs (loop5) : inject read IO error in f2fs_read_end_io of blk_update_request+0x876/0x1200 [ 246.981033][ T9898] F2FS-fs (loop5) : inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x455c/0x6f00 [ 247.000494][ T9898] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12) [ 247.176217][ T4246] comedi comedi5: Endpoint has wrong direction [ 247.196117][ T4246] dt9812 4-1:244.68: driver 'dt9812' failed to auto-configure device. [ 247.242280][ T4246] usb 4-1: USB disconnect, device number 18 [ 247.476795][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2077'. [ 247.493668][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2077'. [ 247.628977][ T9954] loop5: detected capacity change from 0 to 512 [ 247.696093][ T9954] EXT4-fs (loop5): Ignoring removed nobh option [ 247.708077][ T9954] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 247.735352][ T9964] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2087'. [ 247.752257][ T9968] netlink: 'syz.7.2088': attribute type 1 has an invalid length. [ 247.752355][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 247.791879][ T9968] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2088'. [ 247.810558][ T9954] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2082: iget: bad i_size value: 38620345925642 [ 247.817828][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 247.851127][ T9954] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2082: couldn't read orphan inode 15 (err -117) [ 247.869278][ T9954] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 247.897440][ T9954] ALSA: mixer_oss: invalid OSS volume 'ôF)/S®ù~ÛIÃñÞÜÛƒñðf´ºñëcj' [ 248.229059][ T9977] loop7: detected capacity change from 0 to 32768 [ 248.240197][ T9778] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 248.250553][ T13] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 248.297086][ T9977] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 248.319374][ T9977] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 248.357714][ T9977] (syz.7.2092,9977,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 248.413222][ T8577] ocfs2: Unmounting device (7,7) on (node local) [ 248.447177][ T9984] loop5: detected capacity change from 0 to 32768 [ 248.498168][ T9984] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2096 (9984) [ 248.555705][ T9984] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 248.573066][ T9984] BTRFS info (device loop5): using free space tree [ 248.579692][ T9984] BTRFS info (device loop5): has skinny extents [ 248.614629][ T9993] loop7: detected capacity change from 0 to 24 [ 248.621400][ T13] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 248.631419][ T13] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 248.659785][ T9984] BTRFS info (device loop5): enabling ssd optimizations [ 248.671427][ T9778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 248.704605][ T9778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.722989][T10010] loop4: detected capacity change from 0 to 1024 [ 248.730429][ T9778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 248.746633][ T9778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 248.759498][T10010] EXT4-fs (loop4): Ignoring removed oldalloc option [ 248.769989][T10010] EXT4-fs (loop4): Ignoring removed bh option [ 248.777872][T10010] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.778558][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 248.778574][ T26] audit: type=1800 audit(1763992209.384:56): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2096" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 248.800817][ T13] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 248.831054][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.839515][ T13] usb 9-1: Product: syz [ 248.844521][T10010] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 248.847588][ T13] usb 9-1: Manufacturer: syz [ 248.898631][ T13] usb 9-1: SerialNumber: syz [ 248.931972][ T13] usb 9-1: config 0 descriptor?? [ 248.950557][ T9980] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.958051][ T9980] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 248.980423][ T9778] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 248.989722][ T9778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.006790][ T9778] usb 4-1: Product: syz [ 249.020183][ T9778] usb 4-1: Manufacturer: syz [ 249.045201][ T9778] usb 4-1: SerialNumber: syz [ 249.058130][ T9778] usb 4-1: config 0 descriptor?? [ 249.135337][T10017] loop7: detected capacity change from 0 to 2048 [ 249.225025][ T9980] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 249.237702][T10017] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 249.249723][ T9980] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 249.266734][T10017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.382404][ T9778] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 249.501336][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2109'. [ 249.559829][T10042] netlink: 'syz.4.2112': attribute type 25 has an invalid length. [ 249.573741][ T4260] usb 4-1: USB disconnect, device number 19 [ 249.586254][T10042] netlink: 'syz.4.2112': attribute type 7 has an invalid length. [ 249.595560][T10042] netlink: 'syz.4.2112': attribute type 1 has an invalid length. [ 249.603670][T10042] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2112'. [ 249.613176][T10042] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.730385][ T13] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 249.950920][ T13] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 249.972019][T10072] loop4: detected capacity change from 0 to 1024 [ 249.980621][ T13] usb 9-1: USB disconnect, device number 4 [ 250.046739][T10072] hfsplus: bad catalog entry type [ 250.080402][ T144] hfsplus: b-tree write err: -5, ino 4 [ 250.099039][T10077] loop5: detected capacity change from 0 to 2048 [ 250.189674][T10077] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.617192][T10097] loop4: detected capacity change from 0 to 32768 [ 250.623934][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.667690][T10097] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2139 (10097) [ 250.707908][T10097] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 250.717346][T10097] BTRFS info (device loop4): enabling ssd optimizations [ 250.724393][T10097] BTRFS info (device loop4): turning on sync discard [ 250.731196][T10097] BTRFS info (device loop4): using free space tree [ 250.737782][T10097] BTRFS info (device loop4): has skinny extents [ 250.771622][T10121] loop8: detected capacity change from 0 to 1024 [ 250.889565][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 251.010306][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.030462][ T7] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 251.038794][ T7] usb 4-1: config 0 has no interface number 0 [ 251.045804][ T7] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 251.056552][ T7] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 251.184568][ T4265] hfsplus: b-tree write err: -5, ino 4 [ 251.221981][ T7] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 251.238314][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.285690][ T7] usb 4-1: Product: syz [ 251.298284][ T7] usb 4-1: Manufacturer: syz [ 251.313270][ T7] usb 4-1: SerialNumber: syz [ 251.341843][ T7] usb 4-1: config 0 descriptor?? [ 251.370493][T10082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.377896][T10082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.563987][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2157'. [ 251.614593][T10082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.636166][T10082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 251.760359][T10170] loop4: detected capacity change from 0 to 512 [ 251.826671][T10170] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.095597][ T7] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 252.106898][T10175] loop7: detected capacity change from 0 to 32768 [ 252.120350][ T7] asix: probe of 4-1:0.251 failed with error -524 [ 252.154194][T10175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2165 (10175) [ 252.196929][ T5120] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 252.208790][T10175] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 252.217874][T10175] BTRFS info (device loop7): turning on sync discard [ 252.231828][T10175] BTRFS info (device loop7): enabling disk space caching [ 252.239147][T10175] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 252.257667][T10175] BTRFS info (device loop7): trying to use backup root at mount time [ 252.266100][T10175] BTRFS info (device loop7): force clearing of disk cache [ 252.279425][T10175] BTRFS info (device loop7): disk space caching is enabled [ 252.287101][T10175] BTRFS info (device loop7): has skinny extents [ 252.300510][ T5164] usb 4-1: USB disconnect, device number 20 [ 252.336201][T10175] BTRFS info (device loop7): clearing free space tree [ 252.353718][T10175] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 252.373236][T10175] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.400169][ T7] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.476415][ T5120] usb 6-1: Using ep0 maxpacket: 8 [ 252.615946][ T5120] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 252.632191][ T5120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.702879][ T5120] pvrusb2: Hardware description: Terratec Grabster AV400 [ 252.710046][ T5120] pvrusb2: ********** [ 252.714238][ T5120] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 252.724856][ T5120] pvrusb2: Important functionality might not be entirely working. [ 252.747990][ T5120] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 252.763008][ T5120] pvrusb2: ********** [ 252.800454][ T7] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 252.815316][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 252.873339][T10207] loop8: detected capacity change from 0 to 4096 [ 252.933053][ T2427] pvrusb2: Invalid write control endpoint [ 252.938340][T10207] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 252.993559][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.016407][ T9409] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 253.020445][ T7] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 253.053700][ T2427] pvrusb2: Invalid write control endpoint [ 253.059940][ T2427] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 253.067174][T10209] loop3: detected capacity change from 0 to 8192 [ 253.070420][ T7] usb 5-1: Product: syz [ 253.080634][ T7] usb 5-1: Manufacturer: syz [ 253.085293][ T7] usb 5-1: SerialNumber: syz [ 253.108960][ T7] usb 5-1: config 0 descriptor?? [ 253.119811][ T2427] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 253.127876][ T2427] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 253.144969][ T2427] pvrusb2: Device being rendered inoperable [ 253.171567][ T7] usb 5-1: selecting invalid altsetting 0 [ 253.182984][T10209] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 253.197309][ T5120] usb 6-1: USB disconnect, device number 10 [ 253.204174][ T2427] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 253.212202][T10209] REISERFS (device loop3): using ordered data mode [ 253.218757][T10209] reiserfs: using flush barriers [ 253.239421][ T2427] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 253.250214][T10209] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.252553][ T2427] pvrusb2: Attached sub-driver cx25840 [ 253.272548][ T2427] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 253.283343][ T2427] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 253.293028][T10209] REISERFS (device loop3): checking transaction log (loop3) [ 253.337880][T10209] REISERFS (device loop3): Using r5 hash to sort names [ 253.351529][T10209] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 253.366134][ T26] audit: type=1800 audit(1763992213.964:57): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2173" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 253.470037][ T7] usb 5-1: USB disconnect, device number 23 [ 253.590218][T10226] loop8: detected capacity change from 0 to 1024 [ 253.604052][T10214] loop7: detected capacity change from 0 to 32768 [ 253.664492][T10214] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.2171 (10214) [ 253.687938][ T4285] hfsplus: b-tree write err: -5, ino 4 [ 253.737777][T10214] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 253.753494][T10228] "syz.5.2180" (10228) uses obsolete ecb(arc4) skcipher [ 253.786117][T10214] BTRFS info (device loop7): using free space tree [ 253.805875][T10214] BTRFS info (device loop7): has skinny extents [ 253.857335][T10214] BTRFS info (device loop7): enabling ssd optimizations [ 254.106887][T10255] loop8: detected capacity change from 0 to 128 [ 254.174122][T10232] loop5: detected capacity change from 0 to 40427 [ 254.212368][T10257] loop4: detected capacity change from 0 to 1024 [ 254.302640][T10255] attempt to access beyond end of device [ 254.302640][T10255] loop8: rw=1, want=222, limit=128 [ 254.311338][T10232] F2FS-fs (loop5): Found nat_bits in checkpoint [ 254.388022][T10232] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 254.396167][ T4908] hfsplus: b-tree write err: -5, ino 4 [ 254.491321][T10232] attempt to access beyond end of device [ 254.491321][T10232] loop5: rw=10241, want=45104, limit=40427 [ 254.574786][T10232] attempt to access beyond end of device [ 254.574786][T10232] loop5: rw=2049, want=45104, limit=40427 [ 254.690003][ T6209] attempt to access beyond end of device [ 254.690003][ T6209] loop5: rw=2049, want=45112, limit=40427 [ 254.987108][T10283] loop4: detected capacity change from 0 to 2048 [ 255.158679][T10283] UDF-fs: iocharset defauovrs not found [ 255.465218][T10279] loop7: detected capacity change from 0 to 32768 [ 255.475935][T10290] loop5: detected capacity change from 0 to 4096 [ 255.527768][T10288] loop8: detected capacity change from 0 to 32768 [ 255.553393][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.553802][T10283] schedule_timeout: wrong timeout value fffd0a900a742175 [ 255.560190][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.570824][T10283] CPU: 1 PID: 10283 Comm: syz.4.2194 Not tainted syzkaller #0 [ 255.580783][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.590859][T10283] Call Trace: [ 255.594154][T10283] [ 255.597119][T10283] dump_stack_lvl+0x168/0x230 [ 255.601828][T10283] ? print_unlock_imbalance_bug+0x160/0x160 [ 255.607744][T10283] ? show_regs_print_info+0x20/0x20 [ 255.612969][T10283] ? load_image+0x3b0/0x3b0 [ 255.617503][T10283] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 255.623503][T10283] ? lock_chain_count+0x20/0x20 [ 255.628381][T10283] schedule_timeout+0x20a/0x280 [ 255.633265][T10283] ? console_conditional_schedule+0x40/0x40 [ 255.639173][T10283] ? __local_bh_enable_ip+0x12a/0x1b0 [ 255.644577][T10283] ? _local_bh_enable+0xa0/0xa0 [ 255.649440][T10283] ? release_sock+0x2b/0x1b0 [ 255.654042][T10283] vsock_connect+0x3d0/0xcf0 [ 255.658658][T10283] ? vsock_auto_bind+0xf0/0xf0 [ 255.663543][T10283] ? aa_af_perm+0x2b0/0x2b0 [ 255.668069][T10283] ? init_wait_entry+0xd0/0xd0 [ 255.672883][T10283] ? bpf_lsm_socket_connect+0x5/0x10 [ 255.678195][T10283] ? security_socket_connect+0x7c/0xa0 [ 255.683656][T10283] ? vsock_auto_bind+0xf0/0xf0 [ 255.688448][T10283] __sys_connect+0x389/0x410 [ 255.693084][T10283] ? __sys_connect_file+0x170/0x170 [ 255.698370][T10283] ? vtime_user_exit+0x2dc/0x400 [ 255.703330][T10283] __x64_sys_connect+0x76/0x80 [ 255.708112][T10283] do_syscall_64+0x4c/0xa0 [ 255.712536][T10283] ? clear_bhb_loop+0x30/0x80 [ 255.717220][T10283] ? clear_bhb_loop+0x30/0x80 [ 255.721907][T10283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.727819][T10283] RIP: 0033:0x7fa955e49749 [ 255.732249][T10283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.751881][T10283] RSP: 002b:00007fa9540b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 255.760394][T10283] RAX: ffffffffffffffda RBX: 00007fa95609ffa0 RCX: 00007fa955e49749 [ 255.768365][T10283] RDX: 0000000000000010 RSI: 0000200000001240 RDI: 0000000000000003 [ 255.776344][T10283] RBP: 00007fa955ecdf91 R08: 0000000000000000 R09: 0000000000000000 [ 255.784432][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.792444][T10283] R13: 00007fa9560a0038 R14: 00007fa95609ffa0 R15: 00007ffc97a2e718 [ 255.800457][T10283] [ 255.826835][T10288] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 255.835538][T10288] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 255.880337][T10279] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 255.897686][T10288] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 255.949597][T10290] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 255.949612][ T26] audit: type=1326 audit(1763992216.544:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 255.966692][T10290] ntfs3: loop5: Failed to load $Extend. [ 255.988783][T10288] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 255.989114][T10279] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 256.043627][ T26] audit: type=1326 audit(1763992216.614:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.066466][ T26] audit: type=1326 audit(1763992216.614:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.090698][ T26] audit: type=1326 audit(1763992216.614:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.114004][ T26] audit: type=1326 audit(1763992216.624:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.136884][ T26] audit: type=1326 audit(1763992216.624:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.190620][ T26] audit: type=1326 audit(1763992216.624:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.320270][ T26] audit: type=1326 audit(1763992216.624:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.405009][ T26] audit: type=1326 audit(1763992216.624:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.502123][ T8577] ocfs2: Unmounting device (7,7) on (node local) [ 256.532721][ T26] audit: type=1326 audit(1763992216.624:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10298 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6ee8a749 code=0x7ffc0000 [ 256.737392][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2213'. [ 256.801039][T10330] loop4: detected capacity change from 0 to 1024 [ 256.894994][T10330] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 256.923506][T10330] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.939299][T10339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.980564][T10330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 257.006555][T10330] System zones: 0-1, 3-36 [ 257.051038][T10330] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 257.109438][T10341] loop8: detected capacity change from 0 to 4096 [ 257.235342][T10348] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.267540][T10347] loop7: detected capacity change from 0 to 128 [ 257.539522][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2222'. [ 258.176020][T10396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 258.314460][T10403] comedi comedi0: Minor 6 could not be opened [ 258.447118][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2251'. [ 258.456455][T10416] loop5: detected capacity change from 0 to 512 [ 258.518396][T10416] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 258.538537][T10416] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 258.605799][T10416] EXT4-fs (loop5): orphan cleanup on readonly fs [ 258.626959][T10416] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.2250: bad orphan inode 11 [ 258.655791][T10416] ext4_test_bit(bit=10, block=2) = 0 [ 258.666726][T10416] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000038b84894,noblock_validity,,errors=continue. Quota mode: none. [ 258.722467][T10432] loop4: detected capacity change from 0 to 1024 [ 258.731448][T10416] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: none. [ 258.868455][T10436] loop7: detected capacity change from 0 to 1024 [ 258.917962][T10436] hfsplus: invalid length 32517 has been corrected to 255 [ 259.137149][T10448] loop5: detected capacity change from 0 to 128 [ 259.207616][T10448] attempt to access beyond end of device [ 259.207616][T10448] loop5: rw=2051, want=689, limit=128 [ 259.273649][T10459] loop7: detected capacity change from 0 to 1024 [ 259.490293][ T5052] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 259.539839][T10475] loop8: detected capacity change from 0 to 256 [ 259.588335][T10475] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.622941][T10475] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 259.672556][T10475] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 259.850410][ T5052] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 259.880387][ T5052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.900686][ T5052] usb 5-1: config 0 descriptor?? [ 259.945903][T10493] loop8: detected capacity change from 0 to 256 [ 259.954525][ T5052] gspca_main: spca508-2.14.0 probing 8086:0110 [ 260.037117][T10480] loop7: detected capacity change from 0 to 32768 [ 260.112280][T10480] (syz.7.2275,10480,0):ocfs2_verify_userspace_stack:855 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 260.160709][ T5052] gspca_spca508: reg_read err -32 [ 260.167089][T10480] (syz.7.2275,10480,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 260.169483][T10502] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 260.200374][T10480] (syz.7.2275,10480,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 260.202703][ T5052] gspca_spca508: reg_read err -32 [ 260.303064][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.313080][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.320869][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.328558][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.336537][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.344638][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.352416][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.360398][ T5050] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 260.368765][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.379617][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.387392][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.395500][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.404126][T10261] hid-generic 00A0:0006:0003.0017: unknown main item tag 0x0 [ 260.420893][T10261] hid-generic 00A0:0006:0003.0017: hidraw0: HID v0.05 Device [syz1] on syz0 [ 260.470267][ T5052] gspca_spca508: reg_read err -71 [ 260.490279][ T5052] gspca_spca508: reg_read err -71 [ 260.520292][ T5052] gspca_spca508: reg write: error -71 [ 260.525918][ T5052] spca508: probe of 5-1:0.0 failed with error -71 [ 260.534376][ T5052] usb 5-1: USB disconnect, device number 24 [ 260.620257][ T5050] usb 4-1: Using ep0 maxpacket: 32 [ 260.633303][T10512] loop7: detected capacity change from 0 to 8 [ 260.693234][T10512] SQUASHFS error: Failed to read block 0x26067d: -5 [ 260.703368][T10512] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 260.712086][T10261] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 260.723683][T10512] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 260.740604][ T5050] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 260.760673][ T5050] usb 4-1: config 0 has no interface number 0 [ 260.775825][ T5050] usb 4-1: config 0 interface 184 has no altsetting 0 [ 260.852617][T10518] binder: 10517:10518 ioctl c018620c 200000000100 returned -1 [ 260.960561][ T5050] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 260.980263][ T5050] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.999088][ T5050] usb 4-1: Product: syz [ 261.003684][ T5050] usb 4-1: Manufacturer: syz [ 261.013561][ T5050] usb 4-1: SerialNumber: syz [ 261.039840][ T5050] usb 4-1: config 0 descriptor?? [ 261.071175][T10261] usb 9-1: config 0 has no interfaces? [ 261.076712][T10261] usb 9-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 261.091193][ T5050] smsc75xx v1.0.0 [ 261.104095][T10261] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.130973][T10261] usb 9-1: config 0 descriptor?? [ 261.164336][T10532] loop5: detected capacity change from 0 to 1024 [ 261.282577][T10532] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 261.387890][T10261] usb 9-1: USB disconnect, device number 5 [ 261.456438][T10545] tipc: Enabling of bearer rejected, already enabled [ 261.568506][T10549] loop4: detected capacity change from 0 to 256 [ 261.630354][T10549] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 261.761948][T10558] loop5: detected capacity change from 0 to 256 [ 261.825480][T10560] loop4: detected capacity change from 0 to 256 [ 261.836820][T10558] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 261.869224][T10558] exFAT-fs (loop5): hint_cluster is invalid (17) [ 261.886609][T10558] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 261.899125][T10558] exFAT-fs (loop5): Filesystem has been set read-only [ 261.934174][T10561] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 262.000816][ T5050] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 262.013047][ T5050] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.040355][ T5050] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 262.064399][ T5050] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 262.095733][ T5050] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 262.121553][ T5050] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 262.141912][T10573] netlink: 'syz.5.2321': attribute type 1 has an invalid length. [ 262.143087][ T5050] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 262.150961][T10573] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2321'. [ 262.187277][ T5050] usb 4-1: USB disconnect, device number 21 [ 262.216076][T10575] loop5: detected capacity change from 0 to 256 [ 262.260871][T10575] exfat: Deprecated parameter 'utf8' [ 262.266394][T10575] exfat: Deprecated parameter 'utf8' [ 262.271991][T10575] exfat: Deprecated parameter 'utf8' [ 262.288843][T10575] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 262.411497][T10567] loop4: detected capacity change from 0 to 40427 [ 262.454965][T10567] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 262.465745][T10567] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 262.525264][T10581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 262.532349][T10567] F2FS-fs (loop4): invalid crc value [ 262.559889][T10585] loop8: detected capacity change from 0 to 64 [ 262.572101][T10567] F2FS-fs (loop4): Found nat_bits in checkpoint [ 262.690319][T10567] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 262.707666][T10567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 262.729661][T10595] loop5: detected capacity change from 0 to 512 [ 262.795221][T10595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 262.825694][T10601] loop8: detected capacity change from 0 to 256 [ 262.854260][T10595] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.2330: bad orphan inode 131083 [ 262.859407][ T4198] attempt to access beyond end of device [ 262.859407][ T4198] loop4: rw=2049, want=40968, limit=40427 [ 262.875402][T10595] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 262.921092][T10601] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 262.975977][T10601] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 263.039600][T10601] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 263.047833][T10601] UDF-fs: Scanning with blocksize 512 failed [ 263.055993][T10601] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 263.074110][T10601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.170036][T10613] loop5: detected capacity change from 0 to 164 [ 263.560981][T10611] loop3: detected capacity change from 0 to 32768 [ 263.670924][T10635] loop4: detected capacity change from 0 to 2048 [ 263.725394][T10635] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 263.727637][T10643] loop8: detected capacity change from 0 to 512 [ 263.756996][T10644] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.796160][ T26] audit: type=1800 audit(1763992224.394:68): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2348" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 263.835313][T10643] EXT4-fs (loop8): Test dummy encryption mode enabled [ 263.854067][T10643] EXT4-fs (loop8): Test dummy encryption mode enabled [ 263.903666][T10643] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 263.933184][T10261] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 264.085627][T10643] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 264.104125][T10643] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #2: comm syz.8.2353: Directory hole found for htree leaf block 0 [ 264.120970][T10643] EXT4-fs (loop8): Remounting filesystem read-only [ 264.141257][T10654] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #2: comm syz.8.2353: Directory hole found for htree leaf block 0 [ 264.161946][T10665] loop3: detected capacity change from 0 to 512 [ 264.172142][T10654] EXT4-fs (loop8): Remounting filesystem read-only [ 264.215169][T10665] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 264.220400][T10261] usb 6-1: Using ep0 maxpacket: 32 [ 264.282306][T10665] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,grpquota,,errors=continue. Quota mode: writeback. [ 264.296504][T10665] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.364844][T10261] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 264.394130][T10261] usb 6-1: config 0 has no interface number 0 [ 264.494970][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 264.543061][T10668] loop4: detected capacity change from 0 to 32768 [ 264.561673][T10261] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 264.577869][T10261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.612357][T10261] usb 6-1: Product: syz [ 264.616574][T10261] usb 6-1: Manufacturer: syz [ 264.635223][T10261] usb 6-1: SerialNumber: syz [ 264.654061][T10261] usb 6-1: config 0 descriptor?? [ 264.691697][T10261] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 264.821525][T10693] device team_slave_0 entered promiscuous mode [ 264.828522][T10693] device team_slave_1 entered promiscuous mode [ 264.866642][T10697] loop7: detected capacity change from 0 to 16 [ 264.906468][T10261] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 264.917938][T10697] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 264.931810][T10261] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 265.179147][T10712] loop8: detected capacity change from 0 to 512 [ 265.311623][T10712] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.2380: inode has both inline data and extents flags [ 265.325982][T10712] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.2380: couldn't read orphan inode 15 (err -117) [ 265.338768][T10712] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 265.363212][ T5052] usb 6-1: USB disconnect, device number 11 [ 265.380188][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 265.390791][ T5052] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 265.404335][ T5052] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 265.416327][ T5052] quatech2 6-1:0.51: device disconnected [ 265.483937][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2385'. [ 265.520601][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2385'. [ 265.578380][T10714] loop4: detected capacity change from 0 to 32768 [ 265.649293][T10714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2368 (10714) [ 265.706249][T10729] loop8: detected capacity change from 0 to 8192 [ 265.723909][T10714] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 265.732829][T10714] BTRFS info (device loop4): allowing degraded mounts [ 265.739873][T10714] BTRFS info (device loop4): setting nodatasum [ 265.746963][T10714] BTRFS info (device loop4): disabling tree log [ 265.754429][T10714] BTRFS info (device loop4): using free space tree [ 265.762023][T10714] BTRFS info (device loop4): has skinny extents [ 265.776251][T10729] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 265.812865][T10729] REISERFS (device loop8): using ordered data mode [ 265.827839][T10738] loop3: detected capacity change from 0 to 1024 [ 265.836127][T10729] reiserfs: using flush barriers [ 265.842623][T10729] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 265.859827][T10729] REISERFS (device loop8): checking transaction log (loop8) [ 266.275069][T10729] REISERFS (device loop8): Using tea hash to sort names [ 266.289318][T10729] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 266.304930][T10729] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 266.444668][T10729] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 266.707533][T10762] kvm [10759]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xfffffffffffffff9, nop [ 267.012794][T10778] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2400'. [ 267.030628][T10778] device ip6gretap0 entered promiscuous mode [ 267.040843][T10778] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2400'. [ 267.246842][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2402'. [ 267.278086][T10761] loop3: detected capacity change from 0 to 40427 [ 267.358423][T10761] F2FS-fs (loop3): invalid crc value [ 267.385636][T10761] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.393185][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2403'. [ 267.419182][T10768] loop4: detected capacity change from 0 to 32768 [ 267.462440][T10777] loop5: detected capacity change from 0 to 32768 [ 267.477547][T10761] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 267.484506][T10761] F2FS-fs (loop3): Start checkpoint disabled! [ 267.500700][T10761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 267.565285][T10768] XFS (loop4): Mounting V5 Filesystem [ 267.572665][T10777] XFS (loop5): Mounting V5 Filesystem [ 267.608202][T10808] loop8: detected capacity change from 0 to 512 [ 267.663549][T10777] XFS (loop5): Ending clean mount [ 267.682293][T10777] XFS (loop5): Quotacheck needed: Please wait. [ 267.689677][T10768] XFS (loop4): Ending clean mount [ 267.700981][ T9] attempt to access beyond end of device [ 267.700981][ T9] loop3: rw=2049, want=40976, limit=40427 [ 267.717786][T10808] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 267.751515][T10768] XFS (loop4): Quotacheck needed: Please wait. [ 267.777777][T10777] XFS (loop5): Quotacheck: Done. [ 267.826653][ T26] audit: type=1800 audit(1763992228.434:69): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2399" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 267.828684][T10808] EXT4-fs (loop8): 1 truncate cleaned up [ 267.854098][T10808] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 267.868144][T10768] XFS (loop4): Quotacheck: Done. [ 267.887615][ T6209] XFS (loop5): Unmounting Filesystem [ 268.190284][T10814] loop8: detected capacity change from 0 to 2048 [ 268.198524][ T4198] XFS (loop4): Unmounting Filesystem [ 268.307705][T10814] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 268.411171][T10814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.499854][T10826] loop5: detected capacity change from 0 to 8 [ 268.626869][T10830] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.635827][T10826] SQUASHFS error: xz decompression failed, data probably corrupt [ 268.673555][T10834] binder: 10833:10834 ioctl 400c620e 0 returned -14 [ 268.680254][T10826] SQUASHFS error: Failed to read block 0x108: -5 [ 268.686608][T10826] SQUASHFS error: Unable to read metadata cache entry [106] [ 268.730730][T10826] SQUASHFS error: Unable to read inode 0x11f [ 268.901751][T10851] loop7: detected capacity change from 0 to 22 [ 268.961397][T10851] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 268.998007][T10859] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 269.020692][T10851] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 269.064372][T10860] loop4: detected capacity change from 0 to 1024 [ 269.188280][T10860] hfsplus: bad catalog entry type [ 269.230011][ T9] hfsplus: b-tree write err: -5, ino 4 [ 269.297607][ T26] audit: type=1326 audit(1763992229.894:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b34b51749 code=0x7ffc0000 [ 269.352615][ T26] audit: type=1326 audit(1763992229.934:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4b34b51749 code=0x7ffc0000 [ 269.432360][ T26] audit: type=1326 audit(1763992229.934:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b34b51783 code=0x7ffc0000 [ 269.482093][ T26] audit: type=1326 audit(1763992229.934:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b34b51783 code=0x7ffc0000 [ 269.531223][T10887] loop4: detected capacity change from 0 to 512 [ 269.543158][ T26] audit: type=1326 audit(1763992229.934:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b34b51749 code=0x7ffc0000 [ 269.578426][ T26] audit: type=1326 audit(1763992229.944:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b34b51749 code=0x7ffc0000 [ 269.627039][ T26] audit: type=1326 audit(1763992229.944:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4b34b51749 code=0x7ffc0000 [ 269.661289][T10887] EXT4-fs (loop4): Test dummy encryption mode enabled [ 269.686275][T10887] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 269.701406][ T26] audit: type=1326 audit(1763992229.944:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10878 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b34b51749 code=0x7ffc0000 [ 269.717273][T10887] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 269.741210][T10887] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,grpjquota=,prjquota,usrquota,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 270.158992][T10910] loop5: detected capacity change from 0 to 4096 [ 270.226590][T10910] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.342186][T10905] loop3: detected capacity change from 0 to 32768 [ 270.388733][T10910] [ 270.391098][T10910] ====================================================== [ 270.398123][T10910] WARNING: possible circular locking dependency detected [ 270.405158][T10910] syzkaller #0 Not tainted [ 270.409581][T10910] ------------------------------------------------------ [ 270.416613][T10910] syz.5.2452/10910 is trying to acquire lock: [ 270.422698][T10910] ffff88805f2f7ae8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 270.431953][T10910] [ 270.431953][T10910] but task is already holding lock: [ 270.439367][T10910] ffff88805bcb3450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 270.448718][T10910] [ 270.448718][T10910] which lock already depends on the new lock. [ 270.448718][T10910] [ 270.459130][T10910] [ 270.459130][T10910] the existing dependency chain (in reverse order) is: [ 270.465800][T10905] XFS (loop3): Mounting V5 Filesystem [ 270.468153][T10910] [ 270.468153][T10910] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 270.481354][T10910] down_write+0x38/0x60 [ 270.486063][T10910] ext4_map_blocks+0x8b2/0x1b30 [ 270.491453][T10910] ext4_getblk+0x16d/0x630 [ 270.496413][T10910] ext4_bread+0x26/0x180 [ 270.501191][T10910] ext4_quota_write+0x230/0x570 [ 270.506578][T10910] do_insert_tree+0x115c/0x1970 [ 270.511981][T10910] do_insert_tree+0x5b1/0x1970 [ 270.517285][T10910] do_insert_tree+0x5b1/0x1970 [ 270.518615][T10905] XFS (loop3): Starting recovery (logdev: internal) [ 270.522586][T10910] do_insert_tree+0x5b1/0x1970 [ 270.522611][T10910] qtree_write_dquot+0x361/0x4b0 [ 270.539948][T10910] v2_write_dquot+0x108/0x190 [ 270.544551][T10905] XFS (loop3): Ending recovery (logdev: internal) [ 270.545176][T10910] dquot_acquire+0x2d5/0x520 [ 270.545201][T10910] ext4_acquire_dquot+0x2d9/0x4a0 [ 270.562259][T10910] dqget+0x778/0xeb0 [ 270.566686][T10910] __dquot_initialize+0x328/0xcb0 [ 270.572241][T10910] ext4_file_open+0x2d1/0x6a0 [ 270.577452][T10910] do_dentry_open+0x7ff/0xf80 [ 270.580750][T10905] XFS (loop3): User initiated shutdown received. [ 270.582662][T10910] path_openat+0x2682/0x2f30 [ 270.582684][T10910] do_filp_open+0x1b3/0x3e0 [ 270.582700][T10910] do_sys_openat2+0x142/0x4a0 [ 270.589176][T10905] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 270.594153][T10910] __x64_sys_openat+0x135/0x160 [ 270.594176][T10910] do_syscall_64+0x4c/0xa0 [ 270.594193][T10910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.594231][T10910] [ 270.594231][T10910] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 270.594260][T10910] down_read+0x44/0x2e0 [ 270.594280][T10910] v2_read_dquot+0x4a/0x110 [ 270.594300][T10910] dquot_acquire+0x152/0x520 [ 270.594317][T10910] ext4_acquire_dquot+0x2d9/0x4a0 [ 270.594336][T10910] dqget+0x778/0xeb0 [ 270.594352][T10910] __dquot_initialize+0x3b6/0xcb0 [ 270.594371][T10910] ext4_set_acl+0x133/0x580 [ 270.604784][T10905] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 270.617777][T10910] posix_acl_xattr_set+0x36f/0x3e0 [ 270.617800][T10910] __vfs_setxattr+0x3e0/0x420 [ 270.617821][T10910] __vfs_setxattr_noperm+0x129/0x5e0 [ 270.617841][T10910] vfs_setxattr+0x168/0x2f0 [ 270.617859][T10910] setxattr+0x2da/0x300 [ 270.617874][T10910] path_setxattr+0x142/0x280 [ 270.617887][T10910] __x64_sys_setxattr+0xb7/0xd0 [ 270.617907][T10910] do_syscall_64+0x4c/0xa0 [ 270.617925][T10910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.617945][T10910] [ 270.617945][T10910] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 270.617983][T10910] __lock_acquire+0x2c33/0x7c60 [ 270.618004][T10910] lock_acquire+0x197/0x3f0 [ 270.618024][T10910] __mutex_lock_common+0x1eb/0x2390 [ 270.618044][T10910] mutex_lock_nested+0x17/0x20 [ 270.618063][T10910] dquot_commit+0x5a/0x410 [ 270.618081][T10910] ext4_write_dquot+0x1f0/0x360 [ 270.618101][T10910] mark_all_dquot_dirty+0xf9/0x400 [ 270.618120][T10910] __dquot_free_space+0x7ca/0xb90 [ 270.785496][T10910] ext4_free_blocks+0x1af5/0x2480 [ 270.791050][T10910] ext4_ext_remove_space+0x22c4/0x43a0 [ 270.797053][T10910] ext4_ext_truncate+0x192/0x240 [ 270.802508][T10910] ext4_truncate+0x9f1/0x10d0 [ 270.807722][T10910] ext4_setattr+0xffe/0x19e0 [ 270.812833][T10910] notify_change+0xbcd/0xee0 [ 270.817987][T10910] do_truncate+0x197/0x220 [ 270.822919][T10910] path_openat+0x28af/0x2f30 [ 270.828052][T10910] do_filp_open+0x1b3/0x3e0 [ 270.833065][T10910] do_sys_openat2+0x142/0x4a0 [ 270.838271][T10910] __x64_sys_open+0x11b/0x140 [ 270.843477][T10910] do_syscall_64+0x4c/0xa0 [ 270.848430][T10910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.854858][T10910] [ 270.854858][T10910] other info that might help us debug this: [ 270.854858][T10910] [ 270.865309][T10910] Chain exists of: [ 270.865309][T10910] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 270.865309][T10910] [ 270.878978][T10910] Possible unsafe locking scenario: [ 270.878978][T10910] [ 270.886420][T10910] CPU0 CPU1 [ 270.891795][T10910] ---- ---- [ 270.897187][T10910] lock(&ei->i_data_sem/2); [ 270.901808][T10910] lock(&s->s_dquot.dqio_sem); [ 270.909270][T10910] lock(&ei->i_data_sem/2); [ 270.916380][T10910] lock(&dquot->dq_lock); [ 270.920940][T10910] [ 270.920940][T10910] *** DEADLOCK *** [ 270.920940][T10910] [ 270.929551][T10910] 5 locks held by syz.5.2452/10910: [ 270.934854][T10910] #0: ffff888029f30460 (sb_writers#5){++++}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 270.944093][T10910] #1: ffff88805bcb35c8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 270.954423][T10910] #2: ffff88805bcb3768 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xdb6/0x19e0 [ 270.964599][T10910] #3: ffff88805bcb3450 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 270.974346][T10910] #4: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 270.983395][T10910] [ 270.983395][T10910] stack backtrace: [ 270.989296][T10910] CPU: 0 PID: 10910 Comm: syz.5.2452 Not tainted syzkaller #0 [ 270.996870][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.006929][T10910] Call Trace: [ 271.010204][T10910] [ 271.013130][T10910] dump_stack_lvl+0x168/0x230 [ 271.017815][T10910] ? load_image+0x3b0/0x3b0 [ 271.022337][T10910] ? show_regs_print_info+0x20/0x20 [ 271.027538][T10910] ? print_circular_bug+0x12b/0x1a0 [ 271.032733][T10910] check_noncircular+0x274/0x310 [ 271.037667][T10910] ? add_chain_block+0x940/0x940 [ 271.042597][T10910] ? lockdep_lock+0xdc/0x1e0 [ 271.047187][T10910] ? mark_lock+0x94/0x320 [ 271.051539][T10910] __lock_acquire+0x2c33/0x7c60 [ 271.056403][T10910] ? verify_lock_unused+0x140/0x140 [ 271.061605][T10910] ? mark_lock+0x94/0x320 [ 271.066044][T10910] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 271.072028][T10910] ? lock_chain_count+0x20/0x20 [ 271.076895][T10910] lock_acquire+0x197/0x3f0 [ 271.081409][T10910] ? dquot_commit+0x5a/0x410 [ 271.086016][T10910] ? finish_task_switch+0x12f/0x640 [ 271.091312][T10910] ? __might_sleep+0xf0/0xf0 [ 271.095939][T10910] ? read_lock_is_recursive+0x10/0x10 [ 271.101330][T10910] ? __schedule+0x11c3/0x4390 [ 271.106025][T10910] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 271.112018][T10910] ? dquot_commit+0x5a/0x410 [ 271.116606][T10910] __mutex_lock_common+0x1eb/0x2390 [ 271.121891][T10910] ? dquot_commit+0x5a/0x410 [ 271.126560][T10910] ? lockdep_hardirqs_on+0x94/0x140 [ 271.131755][T10910] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 271.137436][T10910] ? __might_sleep+0xf0/0xf0 [ 271.142043][T10910] ? mutex_lock_io_nested+0x60/0x60 [ 271.147255][T10910] ? preempt_schedule+0xa7/0xb0 [ 271.152103][T10910] mutex_lock_nested+0x17/0x20 [ 271.156858][T10910] dquot_commit+0x5a/0x410 [ 271.161287][T10910] ? __ext4_journal_start_sb+0x1bd/0x360 [ 271.166941][T10910] ext4_write_dquot+0x1f0/0x360 [ 271.171792][T10910] mark_all_dquot_dirty+0xf9/0x400 [ 271.176900][T10910] __dquot_free_space+0x7ca/0xb90 [ 271.181933][T10910] ext4_free_blocks+0x1af5/0x2480 [ 271.186956][T10910] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 271.194320][T10910] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 271.200388][T10910] ? do_raw_read_unlock+0x39/0x70 [ 271.205405][T10910] ? _raw_read_unlock+0x24/0x40 [ 271.210247][T10910] ? ext4_is_pending+0x176/0x1c0 [ 271.215190][T10910] ext4_ext_remove_space+0x22c4/0x43a0 [ 271.220646][T10910] ? rcu_is_watching+0x11/0xa0 [ 271.225418][T10910] ? ext4_ext_index_trans_blocks+0xf0/0xf0 [ 271.231227][T10910] ? ext4_es_remove_extent+0x24f/0x3e0 [ 271.236700][T10910] ext4_ext_truncate+0x192/0x240 [ 271.241643][T10910] ext4_truncate+0x9f1/0x10d0 [ 271.246335][T10910] ? clear_nonspinnable+0x60/0x60 [ 271.251378][T10910] ? preempt_count_add+0x8d/0x190 [ 271.256408][T10910] ? up_write+0x1bb/0x420 [ 271.260744][T10910] ? __ext4_mark_inode_dirty+0x700/0x700 [ 271.266393][T10910] ext4_setattr+0xffe/0x19e0 [ 271.271009][T10910] ? ext4_write_inode+0x5f0/0x5f0 [ 271.276034][T10910] notify_change+0xbcd/0xee0 [ 271.280719][T10910] do_truncate+0x197/0x220 [ 271.285143][T10910] ? aa_get_task_label+0x21c/0x2c0 [ 271.290255][T10910] ? rcu_lock_release+0x20/0x20 [ 271.295122][T10910] ? ima_bprm_check+0x1f0/0x1f0 [ 271.299989][T10910] ? bpf_lsm_path_truncate+0x5/0x10 [ 271.305191][T10910] path_openat+0x28af/0x2f30 [ 271.309806][T10910] ? do_filp_open+0x3e0/0x3e0 [ 271.314490][T10910] do_filp_open+0x1b3/0x3e0 [ 271.318993][T10910] ? vfs_tmpfile+0x300/0x300 [ 271.323588][T10910] ? _raw_spin_unlock+0x24/0x40 [ 271.328432][T10910] ? alloc_fd+0x598/0x630 [ 271.332771][T10910] do_sys_openat2+0x142/0x4a0 [ 271.337447][T10910] ? do_sys_open+0xe0/0xe0 [ 271.341883][T10910] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 271.347907][T10910] ? lock_chain_count+0x20/0x20 [ 271.352764][T10910] ? vtime_user_exit+0x2dc/0x400 [ 271.357719][T10910] __x64_sys_open+0x11b/0x140 [ 271.362402][T10910] do_syscall_64+0x4c/0xa0 [ 271.366820][T10910] ? clear_bhb_loop+0x30/0x80 [ 271.371492][T10910] ? clear_bhb_loop+0x30/0x80 [ 271.376164][T10910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.382063][T10910] RIP: 0033:0x7f4b34b51749 [ 271.386474][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.406073][T10910] RSP: 002b:00007f4b32db8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 271.414482][T10910] RAX: ffffffffffffffda RBX: 00007f4b34da7fa0 RCX: 00007f4b34b51749 [ 271.422446][T10910] RDX: 0000000000000006 RSI: 000000000014927e RDI: 00002000000000c0 [ 271.430411][T10910] RBP: 00007f4b34bd5f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.438376][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.446346][T10910] R13: 00007f4b34da8038 R14: 00007f4b34da7fa0 R15: 00007fff7e3517a8 [ 271.454331][T10910] [ 271.460339][ T4183] XFS (loop3): Unmounting Filesystem [ 277.776482][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)