last executing test programs: 4.797651696s ago: executing program 0 (id=706): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000140)='./file1\x00', 0x80, &(0x7f0000000340), 0x1, 0x9831, &(0x7f0000009780)="$eJzs3QeYXHXBeP9NSGgBQUBFsSCgICpdqoUmRYpSBQXpTWkCKiBVUAQUUCyIBRCpShFpghSR3nvvvffe8n9CEsV4EvH/e98X9ZzzPNns3Llz9873M/fe3b2zM6sstsLCAwMTDoxs2oExe2SeMzbd6sFlBx1zyhqPzrjUZPOPmjzqBlOPujj1oFH/Dx4YGBg8ajmjpg27//gTBg8MeW363xo20cSDJh0YmGPUxQVH/T/PyP+mfGD0fMPHaMwVHfTXi4P2GPnvtSYb8SVGfDLXfs8vNDAwMPnrbj/iJrP9wx2VtspCiy/2N6u/uo2wGjrq89f/G3/kvynvGhiY8vYBfny8ft5Bb8JdGvE1J7/hmm1neRO+9n9cqyy0+JJj+I/YFscbNW2eEdv4mNugsTEf5ycdcfTjo4bwtcfbwMCIXdzfbSv/Ea2y0GJLD4x9Pz9w4bwvPjb8tf3msMcHBoY9MTAw7MmBgWFPDQwMe3pgYNgzb7ZL/b+10MJzLjxiex99eRT76Mfy5PS4eHaBD5wwMDAwwch5hr068ngxybSjjwlVVVX1791CC8+5CBz/JxzX8f/Ba/Z5quN/VVXVf25LLrTwnCOO42Mc/ycZ1/F/+l2HLj7yd/8LzjPyVq++uXeiqqqq/qUWWxKP/5OP6/i//i3j7d7xv6qq6j+35Zd57fg/yRjH/6nGdfwfOs2kd46ab/T3Da+8bpGvPX9s1PSXXjd9vNdNf/F104e+bjmvn3/8101//nXTJxwYGHb/qOkv/23ysMdH3OYflzPs2b89H2fqIa+b/tzrpo//uunPj1qnEdMneN30V143/4R/mz7JiA/Tjvq6L4xjqKuqqv5tWn7OxRYZeN3z7EdNHv3Efnxe6LnDV3z2zVrfqqqqqqqqqvrXe/WRU07/2998v3fgdX+7+te/YR31e4FBx555+eVv2or+ezToH38fstObvU7/r41wnvDIaQcGNl3pzV6VehP6j/lb9fpfKX93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yFzeW8/9//fv/3S5Y5dOjZp3vrKMGL/W3W049sNGozx6Z54xNN3oT1v1N6L/1/P/ARoMGBkb5Tj7CctmFll9xpoGBgaUGH3XW3AN/vW7eEdctMMV4r/0x58DATK99HDr1WJY86l0WXntzh6n+uoxjX1v+ksMPGm/QGCvxut564iGHbLjKc3ON+f+MY78ff31/ieemPGTa0X/LMniMmSYcy41HL3/0fRnTedS6zzRi3WfdapPNZ91ym20/utEma22w3gbrbTrnHPPMMe88s80335yzrr/RxuvNNvLjWMZs5FtXjPdGxmySMcfskYVeP2Zj3rexjdk/vqvH3y3itSUeNs90548esyH/4piNN+4xm3ajUV9o6oGhA2u+NjSDBgamHjJ0YOsRF2afYGBg6qGj5p16xLwfn2LwwMA+f7ujg0a92OjIeQbtNGKef7P3LZlv1IhsP3q+MV9nfcwV/WfvW3LTwodPN8b7lvxv9f/r+P8PXvMO+utAjX4DhFHzjPR6k99n4h/Wd9ohrx3kxra+43hdnNeix9eQeefd4X/qdXFofScZx/qO43X8xrq+C631yWNHLup/bH3H2NctPfLKN7KvGxj3vm48uv16l7xnzH3dUmNfxb/bjkeP0QRjzDS2fd31y52804jlD4x7X7f0RqNePOBv+7rBAwNTjzd6Xzdixzf+0IF9RlyYY8SFCYYOHD7iwpyvXZho4MwRF2ZZZ7ON1x302ssMjFrubCOWu+AUg15z32nmmfcdvu/w4UNGrcuzw/5+XUc9PqZ9/fF8oSlGDubo245e7ohZRy93tm1HXjf+qOU+9y8sd/RtaX2fX23kdROMWu7zYyx36DiWO/q2/7A9zDTo756oCvubN/V9jWj7nXAc6zuO1+HGx9uIaQdstfcl/wOvwz1obOs7ZNzrO7b3DRnr+u6y//x7/k+9bjg9zq6fceRjZcJRj7NX/oXH7+jbjrkfG/lCICN3+xO+kf3YtP+wH9t5vMFjDPbrGtv3bOvC/CM/n/qvS7tl18s/NHrsh46x3H/2Pdvr7ssg2I9NPsbPc4N2PHBgEI35PvsPWvvVfzLmQwf+/meL0WM++rbjGvMJ3siYv3vcY/5Gv0+eafqR1w8dY/1fP+aHDMx96ugxH3+M5f6zMZ9g3MeOfxzzgYGhNOaP3z1y3Ma1Px3bmI++7egxH/F1FphiyMCIH/JnGDXm47+RMZ/6f+ZxPjHMP/Lz9f46aYH77zh99JiPOcb/bMzH/xfHfIfb//o4n+G166YbPDD++ANbr7XVVlvMPvLj6ItzjPzI+6KTzxs5zuM6lo7NaPRtx7VdDHkjRpO/IaNB/8zoXUPGZvS3Teuc/Zc67f/vvmjIv2p0Ju+Ltj5u5LiN6/uisY356NvScXCq191+zJ9Dx/H6WXifRkzbeJpVDxq9yFE3ezNfP2v0z7v/ka+fNfp3khuNuZOvN1q//3eXv7v83eXvLn9xYzn/P+3o8/9377XC6qN+6Bx6/8qT3fFmr++b3H/1+f9Rvn93/v+OyVa+f8SPVqOuG+f52ZHz/Fuen51n5H9TPjB6vjHPD465ov/s/OxzNy0x5//R+dn/X43eVt/Az8Xt/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7ixnL+f7bRzwOYfpnTlxp1InTootuttO+bvb5vcv/V5/9H+f7d+f99V9pu0cEDf71unOf/R87jOP+/x3iLHPzvfP5/9Lba+f/6J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLGcv5/wdHPA7hq1oMOHf18gEPvn2XFN3t93+T+W8//9/7/3tr/u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MWNOv8/MMbbJH6uxwUG5///sxuL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4v/5/DGL/yr5Yxb/VfPHLP5fyB+z+H8xf8ziv1r+mMV/9fwxi/+X8scs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/3L+mMX/K/ljFv+N88cs/pvkj1n8N80fs/hvpvQf9k/nsPhvrvT/51n8v5o/ZvHfIn/M4r9l/pjFf6v8MYv/1/LHLP5fzx+z+H8jf8ziv3X+mMV/m/wxi/+2+WMW/2/mj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/2/lj1n8d8kfs/jvmj9m8f92/pjF/zv5Yxb/3fLHLP7fzR+z+O+eP2bx3yN/zOK/Z/6Yxf97+WMW/+/nj1n898ofs/jvnT9m8d8nf8zi/4P8MYv/D/PHLP775o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/PfLH7P4/yx/zOK/f/6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf+A/DGL/4H5Yxb/g/LHLP6/zh+z+B+cP2bx/03+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bx/23+mMX/d/ljFv+j8scs/kfnj1n8j8kfs/gfmz9m8f99/pjF/7j8MYv/H/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/4/5Yxb/U/LHLP6n5o9Z/P+UP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/P+ePWfzPyh+z+P8lf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/4fljEv9BA/ljFv9B+WMW/8H5Yxb/8fLHLP5D8scs/kPzxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX9Y/pjFf5L8MYv/pPljFv+35I9Z/CfLH7P4T54/ZvF/a/6YxX+K/DGL/5T5Yxb/qfLHLP5vyx+z+L89f8zi/478MYv/1PljFv935o9Z/N+VP2bxnyZ/zOL/7vwxi/978scs/u/NH7P4vy9/zOI/bf6Yxf/9+WMW/+nyxyz+0+ePWfxnyB+z+H8gf8zi/8H8MYv/jPljFv+Z8scs/h/KH7P4z5w/ZvH/cP6Yxf8j+WMW/4/mj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+H8sfs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+H88fs/h/In/M4v/J/DGL/6fyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6Yxf/T+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/0z+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfw/mz9m8f9c/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f98/pjFf5X8MYv/qvljFv8v5I9Z/L+YP2bxXy1/zOK/ev6Yxf9L+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4fzl/zOL/lfwxi//G+WMW/03c/u8b2xUW/03d/mPN4r9Z/pjFf/P8MYv/V/PHLP5b5I9Z/LfMH7P4b5U/ZvH/Wv6Yxf/r+WMW/2/kj1n8t84fs/hvkz9m8d82f8zi/838MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/638MYv/LvljFv9d88cs/t/OH7P4fyd/zOK/W/6Yxf+7+WMW/93zxyz+e+SPWfz3HMN/6P/1ev2bZvH/Xts/ZvH/fv6YxX+v/DGL/975Yxb/ffLH/uv9hw8f8XHQD/LH/uv9Rzboh/ljFv9988cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/vvlj1n8f5Y/ZvHfP3/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9A/pjF/8D8MYv/QfljFv9f549Z/A/OH7P4/yZ/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zZ/zOL/u/wxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+P8+f8zif1z+mMX/D/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/8f8MYv/KfljFv9T88cs/n/KH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/n/PHLP5n5Y9Z/P+SP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/8Pwxif9rn+b/j1n8B+WPWfwH549Z/MfLH7P4D8kfs/gPzR+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/YfljFv9J8scs/pPmj1n835I/ZvGfLH/M4j95/pjF/635Yxb/KfLHLP5T5o9Z/KfKH7P4vy1/zOL/9vwxi/878scs/lPnj1n835k/ZvF/V/6YxX+a/DGL/7vzxyz+78kfs/i/N3/M4v++/DGL/7T5Yxb/9+ePWfynyx+z+E+fP2bxnyF/zOL/gfwxi/8H88cs/jPmj1n8Z8ofs/h/KH/M4j9z/pjF/8P5Yxb/j+SPWfw/mj9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyp/acWBgQOH/sfwxy/Y/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv9P549Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/zP5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/bP6Yxf9z+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6Yxf/z+WMW/1Xyxyz+q+aPWfy/kD9m8f9i/pjFf7X8MYv/6vljFv8v5Y9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8zi/+X8MYv/V/LHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/6v5Yxb/LfLHLP5b5o9J/F8r/39M4j/4a/ljFv+v549Z/L+RP2bx3zp/zOK/Tf6YxX/b/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/7fyxyz+u+SPWfx3zR+z+H87f8zi/538MYv/bvljFv/v5o/9l/vvOPrT3fPH/sv9Rzd4j/wxi/+e+WMW/+/lj1n8v58/ZvHfK3/M4r93/pjFf5/8MYv/D/LHLP4/zB+z+O+bP2bx/1H+mMX/x/ljFv+f5I9Z/H+aP2bx3y9/zOL/s/wxi//++WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/wPyxyz+B+aPWfwPyh+z+P86f8zif3D+mMX/N/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/t/ljFv/f5Y9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF//f5Yxb/4/LHLP5/yB+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/P+aPWfxPyR+z+J+aP2bx/1P+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfz/nD9m8T8rf8zi/5f8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfyH549J/McbyB+z+A/KH7P4D84fs/iPlz9m8R+SP2bxH5o/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/sPyxyz+k+SPWfwnzR+z+L8lf8ziP1n+mMV/8vwxi/9b88cs/lPkj1n8p8wfs/hPlT9m8X9b/pjF/+35Yxb/d+SPWfynzh+z+L8zf8zi/678MYv/NPljFv93549Z/N+TP2bxf2/+mMX/ffljFv9p88cs/u/PH7P4T5c/ZvGfPn/M4j9D/pjF/wP5Yxb/D+aPWfxnzB+z+M+UP2bx/1D+mMV/5vwxi/+H88cs/h/JH7P4fzR/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/WP6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/p/OH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/Z/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/Z/DGL/+fyxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/LEx/cd/s1fo/7Wx+H8+f8yy/a+SP2bxXzV/zOL/hfwxi/8X88cs/qvlj1n8V88fs/h/KX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/y/nj1n8v5I/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/l/NH7P4b5E/ZvHfMn/M4r9V/pjF/2v5Yxb/r+ePWfy/kT9m8d86f8ziv03+mMV/2/wxi/8388cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+38scs/rvkj1n8d80fs/h/O3/M4v+d/DGL/275Yxb/7+aPWfx3zx+z+O+RP2bx3zN/zOL/vfwxi//388cs/nvlj1n8984fs/jvkz9m8f9B/pjF/4f5Yxb/ffPHLP4/yh+z+P84f8zi/5P8MYv/T/PHLP775Y9Z/H+WP2bx3z9/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/QP6Yxf/A/DGL/0H5Yxb/X+ePWfwPzh+z+P8mf8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+P82f8zi/7v8MYv/UfljFv+j88cs/sfkj1n8j80fs/j/Pn/M4n9c/pjF/w/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v/H/DGL/yn5Yxb/U/PHLP5/yh+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/5/zxyz+Z+WPWfz/kj9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL//D8MYn/kIH8MYv/oPwxi//g/DGL/3j5Yxb/IfljFv+h+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/LH/M4j9J/pjFf9L8MYv/W/LHLP6T5Y9Z/CfPH7P4vzV/zOI/Rf6YxX/K/DGL/1T5Yxb/t+WPWfzfnj9m8X9H/pjFf+r8MYv/O/PHLP7vyh+z+E+TP2bxf3f+mMX/PfljFv/35o9Z/N+XP2bxnzZ/zOL//vwxi/90+WMW/+nzxyz+M+SPWfw/kD9m8f9g/pjFf8b8MYv/TPljFv8P5Y9Z/GfOH7P4fzh/zOL/kfwxi/9H88cs/rPkj1n8Z80fs/jPZvZfaexXWfxnN/uPI4v/HPljFv8588cs/nPlj1n8P5Y/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/+n88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/5n8MYv/UvljFv+l88cs/svkj1n8l80fs/h/Nn/M4v+5/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4v/5/DGL/yr5Yxb/VfPHLP5fyB+z+H8xf8ziv1r+mMV/9fwxi/+X8scs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/3L+mMX/K/ljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8zi/9X8MYv/FvljFv8t88cs/lvlj1n8v5Y/ZvH/ev6Yxf8b+WMW/63zxyz+20yYP2Xx37btH7P4fzN/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P4fyt/zOK/S/6YxX/X/DGL/7fzxyz+38kfs/jvlj9m8f9u/pjFf/f8MYv/HvljFv8988cs/t/LH7P4fz9/zOK/V/6YxX/v/DGL/z75Yxb/H+SPWfx/mD9m8d83f8zi/6P8MYv/j/PHLP4/yR+z+P80f8ziv1/+mMX/Z/ljFv/988cs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/gfkj1n8D8wfs/gflD9m8f91/pjF/+D8MYv/b/LHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/b/PHLP6/yx+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/+81/ktM9K/MbfE/TuP/r2Xx/0P+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+P8xf8zif0r+mMX/1Pwxi/+f8scs/qflj1n8T88fs/ifkT9m8T8zf8zi/+f8MYv/WfljFv+/5I9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8ziPzx/TOI/dCB/zOI/KH/M4j84f8ziP17+mMV/SP6YxX9o/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/gPyx+z+E+SP2bxnzR/zOL/lvwxi/9k+WMW/8nzxyz+b80fs/hPkT9m8Z8yf8ziP1X+mMX/bfljFv+3549Z/N+RP2bxnzp/zOL/zvwxi/+78scs/tPkj1n8350/ZvF/T/6Yxf+9+WMW//flj1n8p80fs/i/P3/M4j9d/pjFf/r8MYv/DPljFv8P5I9Z/D+YP2bxnzF/zOI/U/6Yxf9D+WMW/5nzxyz+H84fs/h/JH/M4v/R/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/2P5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/h/On/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/p/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/Z/PHLP6fyx+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6fzx+z+K+SP2bxXzV/zOL/hfwxi/8X88cs/qvlj1n8V88fs/h/KX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/y/nj1n8v5I/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/l/NH7P4b5E/ZvHfMn/M4r9V/pjF/2v5Yxb/r+ePWfy/kT9m8d86f8ziv03+mMV/2/wxi/8388cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+38scs/rvkj1n8d80fs/h/O3/M4v+d/DGL/275Yxb/7+aPWfx3zx+z+O+RP2bx3zN/zOL/vfwxi//388cs/nvlj1n8984fs/jvkz9m8f9B/pjF/4f5Yxb/ffPHLP4/yh+z+P84f8zi/5P8MYv/T/PHLP775Y9Z/H+WP2bx3z9/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/QP6Yxf/A/DGL/0H5Yxb/X+ePWfwPzh+z+P8mf8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPdPkPfqMzWvx/6/J/w1n8f5c/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/f549Z/I/LH7P4/yF/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/P+YP2bxPyV/zOJ/av6Yxf9P+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bx/3P+mMX/rPwxi/9f8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxH54/JvEffyB/zOI/KH/M4j84f8ziP17+mMV/SP6YxX9o/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/gPyx+z+E+SP2bxnzR/zOL/lvwxi/9k+WMW/8nzxyz+b80fs/hPkT9m8Z8yf8ziP1X+mMX/bfljFv+3549Z/N+RP2bxnzp/zOL/zvwxi/+78scs/tPkj1n8350/ZvF/T/6Yxf+9+WMW//flj1n8p80fs/i/P3/M4j9d/pjFf/r8MYv/DPljFv8P5I9Z/D+YP2bxnzF/zOI/U/6Yxf9D+WMW/5nzxyz+H84fs/h/JH/M4v/R/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/2P5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/h/On/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/p/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/Z/PHLP6fyx+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6fzx+z+K+SP2bxXzV/zOL/hfwxi/8X88cs/qvlj1n8V88fs/h/KX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/y/nj1n8v5I/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/l/NH7P4b5E/ZvHfMn/M4r9V/pjF/2v5Yxb/r+ePWfy/kT9m8d86f8ziv03+mMV/2/wxi/8388cs/tvlj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+38scs/rvkj1n8d80fs/h/O3/M4v+d/DGL/275Yxb/7+aPWfx3zx+z+O+RP2bx3zN/zOL/vfwxi//388cs/nvlj1n8984fs/jvkz9m8f9B/pjF/4f5Yxb/ffPHLP4/yh+z+P84f8zi/5P8MYv/T/PHLP775Y9Z/H+WP2bx3z9/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/QP6Yxf/A/DGL/0H5Yxb/X+ePWfwPzh+z+P8mf8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+P82f8zi/7v8MYv/UfljFv+j88cs/sfkj1n8j80fs/j/Pn/M4n9c/pjF/w/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v/H/DGL/yn5Yxb/U/PHLP5/yh+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/5/zxyz+Z+WPWfz/kj9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL//D8MYn/BAP5Yxb/QfljFv/B+WMW//Hyxyz+Q/LHLP5D88cs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/WP6YxX+S/DGL/6T5Yxb/t+SPWfwnyx+z+E+eP2bxf2v+mMV/ivwxi/+U+WMW/6nyxyz+b8sfs/i/PX/M4v+O/DGL/9T5Yxb/d+aPWfzflT9m8Z8mf8zi/+78MYv/e/LHLP7vzR+z+L8vf8ziP23+mMX//fljFv/p8scs/tPnj1n8Z8gfs/h/IH/M4v/B/DGL/4z5Yxb/mfLHLP4fyh+z+M+cP2bx/3D+mMX/I/ljFv+P5o9Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/h/LH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMX/0/ljFv/F8scs/ovnj1n8l8gfs/gvmT9m8f9M/pjFf6n8MYv/0vljFv9l8scs/svmj1n8P5s/ZvH/XP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvH/fP6YxX+V/DGL/6r5Yxb/L+SPWfy/mD9m8V8tf8ziv3r+mMX/S/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+H85f8zi/5X8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8f9q/pjFf4v8MYv/lvljFv+t8scs/l/LH7P4fz1/zOL/jfwxi//W+WMW/23yxyz+2+aPWfy/mT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+O+ePWfy/lT9m8d8lf8ziv2v+mMX/2/ljFv/v5I9Z/HfLH7P4fzd/zOK/e/6YxX+P/DGL/575Yxb/7+WPWfy/nz9m8d8rf8ziv3f+mMV/n/wxi/8P8scs/j/MH7P475s/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvHfL3/M4v+z/DGL//75Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/A/LHLP4H5o9Z/A/KH7P4/zp/zOJ/cP6Yxf83+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+3+WMW/9/lj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/9/ljFv/j8scs/n/IH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv8/5o9Z/E/JH7P4n5o/ZvH/U/6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/P+cP2bxPyt/zOL/l/wxi//Z+WMW/3Pyxyz+52r9JxjntRb/87T+487if37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxH54/JvGfcCB/zOI/KH/M4j84f8ziP17+mMV/SP6YxX9o/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/gPyx+z+E+SP2bxnzR/zOL/lvwxi/9k+WMW/8nzxyz+b80fs/hPkT9m8Z8yf8ziP1X+mMX/bfljFv+3549Z/N+RP2bxnzp/zOL/zvwxi/+78scs/tPkj1n8350/ZvF/T/6Yxf+9+WMW//flj1n8p80fs/i/P3/M4j9d/pjFf/r8MYv/DPljFv8P5I9Z/D+YP2bxnzF/zOI/U/6Yxf9D+WMW/5nzxyz+H84fs/h/JH/M4v/R/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/2P5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/h/On/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/p/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/Z/PHLP6fyx+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6fzx+z+K+SP2bxXzV/zOL/hfwxi/8X88cs/qvlj1n8V88fs/h/KX/M4r9G/pjFf838sf9u/x1HT51wrfyx/27/vzbh2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/+XXf6D3+iMFv+vuPzfcBb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v/V/DGL/xb5Yxb/LfPHLP5b5Y9Z/L+WP2bx/3r+mMX/G/ljFv+t88cs/tvkj1n8t80fs/h/M3/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/h/K3/M4r9L/pjFf9f8MYv/t/PHLP7fyR+z+O+WP2bx/27+mMV/9/wxi/8e+WMW/z3zxyz+38sfs/h/P3/M4r9X/pjFf+/8MYv/PvljFv8f5I9Z/H+YP2bx3zd/zOL/o/wxi/+P88cs/j/JH7P4/zR/zOK/X/6Yxf9n+WMW//3zxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+B+SPWfwPzB+z+B+UP2bx/3X+mMX/4Pwxi/9v8scs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9v88cs/r/LH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/7/PHLP7H5Y9Z/P+QP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP5/zB+z+J+SP2bxPzV/zOL/p/wxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+P85f8zif1b+mMX/L/ljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+A/PH5P4TzSQP2bxH5Q/ZvEfnD9m8R8vf8ziPyR/zOI/NH/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8h+WPWfwnyR+z+E+aP2bxf0v+mMV/svwxi//k+WMW/7e6/V8YPnw4XmHxn8LtP9Ys/lPmj1n8p8ofs/i/LX/M4v/2/DGL/zvyxyz+U+ePWfzfmT9m8X9X/pjFf5r8MYv/u/PHLP7vyR+z+L83f8zi/778MYv/tPljFv/3549Z/KfLH7P4T58/ZvGfIX/M4v+B/DGL/wfzxyz+M+aPWfxnyh+z+H8of8ziP3P+mMX/w/ljFv+P5I9Z/D+aP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyx/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv9P549Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/zP5Yxb/pcbtP+R/fb3+TbP4L932j1n8l8kfs/gvmz9m8f9s/pjF/3P5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF//P5Yxb/VfLHLP6r5o9Z/L+QP2bx/2L+mMV/tfwxi//q+WMW/y/lj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/5fwxi/9X8scs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/q/ljFv8t8scs/lvmj1n8t8ofs/h/LX/M4v/1/DGL/zfyxyz+W+ePWfy3yR+z+G+bP2bx/2b+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx/1b+mMV/l/wxi/+u+WMW/2/nj1n8v5M/ZvHfLX/M4v/d/DGL/+75Yxb/PfLHLP575o9Z/L+XP2bx/37+mMV/r/wxi//e+WMW/33yxyz+P8gfs/j/MH/M4r9v/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjFf7/8MYv/z/LHLP77549Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/A/IH7P4H5g/ZvE/KH/M4v/r/DGL/8H5Yxb/3+SPWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/3+aPWfx/lz9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/9/nj1n8j8sfs/j/IX/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8/5g/ZvE/JX/M4n9q/pjF/0/5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvH/c/6Yxf+s/DGL/1/yxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvEfnj8m8Z94IH/M4j8of8ziPzh/zOI/Xv6YxX9I/pjFf2j+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+A/LH7P4T5I/ZvGfNH/M4v+W/DGL/2T5Yxb/yfPHLP5vzR+z+E+RP2bxnzJ/zOI/Vf6Yxf9t+WMW/7fnj1n835E/ZvGfOn/M4v/O/DGL/7vyxyz+0+SPWfzfnT9m8X9P/pjF/735Yxb/9+WPWfynzR+z+L8/f8ziP13+mMV/+vwxi/8M+WMW/w/kj1n8P5g/ZvGfMX/M4j9T/pjF/0P5Yxb/mfPHLP4fzh+z+H8kf8zi/9H8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/Y/ljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/4/ljFv9P5I9Z/D+ZP2bx/1T+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+H86f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+n8kfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9n88cs/p/LH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/p/PH7P4r5I/ZvFfNX/M4v+F/DGL/xfzxyz+q+WPWfxXzx+z+H8pf8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/L+ePWfy/kj9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+X80fs/hvkT9m8d8yf8ziv1X+mMX/a/ljFv+v549Z/L+RP2bx3zp/zOK/Tf6YxX/b/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/7fyxyz+u+SPWfx3zR+z+H87f8zi/538MYv/bvljFv/v5o9Z/HfPH7P475E/ZvHfM3/M4v+9/DGL//fzxyz+e+WPWfz3zh+z+O+TP2bx/0H+mMX/h/ljFv9988cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/vvlj1n8f5Y/ZvHfP3/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9A/pjF/8D8MYv/QfljFv9f549Z/A/OH7P4/yZ/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zZ/zOL/u7H6Dx/+f7Ni/55Z/I9q+8cs/kfnj1n8j8kfs/gfmz9m8f99/pjF/7j8MYv/H/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/4/5Yxb/U/LHLP6n5o9Z/P+UP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/P+ePWfzPyh+z+P8lf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/4fljEv9hA2P4D/0/Xq1/1yz+g9r+MYv/4Pwxi/94+WMW/yH5Yxb/ofljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziPyx/zOI/Sf6YxX/S/DGL/1vyxyz+k+WPWfwnzx+z+L81f8ziP0X+mMV/yvwxi/9U+WMW/7flj1n8354/ZvF/R/6YxX/q/DGL/zvzxyz+78ofs/hPkz9m8X93/pjF/z35Yxb/9+aPWfzflz9m8Z82f8zi//78MYv/dPljFv/p88cs/jPkj1n8P5A/ZvH/YP6YxX/G/DGL/0z5Yxb/D+WPWfxnzh+z+H84f8zi/5H8MYv/R/PHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+P5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8zi/+n8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/Jn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/p/NH7P4fy5/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4fz5/zOK/Sv6YxX/V/DGL/xfyxyz+X8wfs/ivlj9m8V89f8zi/6X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfy/nD9m8f9K/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/h/NX/M4r9F/tgY/v/5QzQW/y3zxyzb/1b5Yxb/r+WPWfy/nj9m8f9G/pjFf+v8MYv/NvljFv9t88cs/t/MH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/t/KH7P475I/ZvHfNX/M4v/t/DGL/3fyxyz+u+WPWfy/mz9m8d89f8ziv0f+mMV/z/wxi//38scs/t/PH7P475U/ZvHfO3/M4r9P/pjF/wf5Yxb/H+aPWfz3zR+z+P8of8zi/+P8MYv/T/LHLP4/zR+z+O+XP2bx/1n+mMV///wxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/8B+WMW/wPzxyz+B+WPWfx/nT9m8T84f8zi/5v8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zi/9v8MYv/7/LHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4v/7/DGL/3H5Yxb/P+SPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/x/zxyz+p+SPWfxPzR+z+P8pf8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+f84fs/iflT9m8f9L/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/N/rcFjXLb4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+A/PH5P4TzKQP2bxH5Q/ZvEfnD9m8R8vf8ziPyR/zOI/NH/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8h+WPWfwnyR+z+E+aP2bxf0v+mMV/svwxi//k+WMW/7fmj1n8p8gfs/hPmT9m8Z8qf8zi/7b8MYv/2/PHLP7vyB+z+E+dP2bxf2f+mMX/XfljFv9p8scs/u/OH7P4vyd/zOL/3vwxi//78scs/tPmj1n8358/ZvGfLn/M4j99/pjFf4b8MYv/B/LHLP4fzB+z+M+YP2bxnyl/zOL/ofwxi//M+WMW/w/n//omHP2Jxf8j+WMW/4/mj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+H8sfs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+H88fs/h/In/M4v/J/DGL/6fyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOK/aP6Yxf/T+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/0z+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfw/mz9m8f9c/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8f98/pjFf5X8MYv/qvljFv8v5I9Z/L+YP2bxXy1/zOK/ev6Yxf9L+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4fzl/zOL/lfwxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/2r+mMV/i/wxi/+W+WMW/63yxyz+X8sfs/h/PX/M4v+N/DGL/9b5Yxb/bfLHLP7b5o9Z/L+ZP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/L+VP2bx3yV/zOK/a/6Yxf/b+WMW/+/kj1n8d8sfs/h/N3/M4r97/pjFf4/8MYv/nvljFv/v5Y9Z/L+fP2bx3yt/zOK/d/6YxX+f/DGL/w/yxyz+P8wfs/jvmz9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8d8vf8zi/7P8MYv//vljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8D8scs/gfmj1n8D8ofs/j/On/M4n9w/pjF/zf5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/7f5Yxb/3+WPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf/3+WMW/+Pyxyz+f8gfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/z/mj1n8T8kfs/ifmj9m8f9T/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8/5w/ZvE/K3/M4v+X/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8h+ePSfwnHcgfs/gPyh+z+A/OH7P4j5c/ZvEfkj9m8R+aP2bxH9/iP+Rfm93iP4HF/1/M4j9h/pjFf6L8MYv/xPljFv9h+WMW/0nyxyz+k+aPWfzfkj9m8Z8sf8ziP3n+mMX/rfljFv8p8scs/lPmj1n8p8ofs/i/LX/M4v/2/DGL/zvyxyz+U+ePWfzfmT9m8X9X/pjFf5r8MYv/u/PHLP7vyR+z+L83f8zi/778MYv/tPljFv/3549Z/KfLH7P4T58/ZvGfIX/M4v+B/DGL/wfzxyz+M+aPWfxnyh+z+H8of8ziP3P+mMX/w/ljFv+P5I9Z/D+aP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyx/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4L+j0f3X48OHjnMHiv5DT/59m8V84f8ziv0j+mMV/0fwxi/+n88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/5n8MYv/UvljFv+l88cs/svkj1n8l80fs/h/Nn/M4v+5/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4v/5/DGL/yr5Yxb/VfPHLP5fyB+z+H8xf8ziv1r+mMV/9fwxi/+X8scs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/3L+mMX/K/ljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8zi/9X8MYv/FvljFv8t88cs/lvlj1n8v5Y/ZvH/ev6Yxf8b+WMW/63zxyz+2+SPWfy3zR+z+H8zf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+H8rf8ziv0v+mMV/1/wxi/+388cs/t/JH7P475Y/ZvH/bv6YxX/3/DGL/x75Yxb/PfPHLP7fyx+z+H8/f8ziv1f+mMV/7/wxi/8++WMW/x/kj1n8f5g/ZvHfN3/M4v+j/DGL/4/zxyz+P8kfs/j/VOc//A3dXYv/fjr/N5bF/2f5Yxb//fPHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP4H5I9Z/A/MH7P4H5Q/ZvH/df6Yxf/g/DGL/2/yxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/2/zxyz+v8sfs/gflT9m8T86f8zif0z+mMX/2Pwxi//v88cs/sflj1n8/5A/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/MH7P4n5I/ZvE/NX/M4v+n/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4/zl/zOJ/Vv6Yxf8v+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4D88fk/i/ZSB/zOI/KH/M4j84f8ziP17+mMV/SP6YxX9o/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/gPyx+z+E+SP2bxnzR/zOL/lvwxi/9k+WMW/8nzxyz+b80fs/hPkT9m8Z8yf8ziP1X+mMX/bfljFv+3549Z/N+RP2bxnzp/zOL/zvwxi/+78scs/tPkj1n8350/ZvF/T/6Yxf+9+WMW//flj1n8p80fs/i/P3/M4j9d/pjFf/r8MYv/DPljFv8P5I9Z/D+YP2bxnzF/zOI/U/6Yxf9D+WMW/5nzxyz+H84fs/h/JH/M4v/R/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j/XG/Ef/r+4Xv+mWfw/1vaPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/Bcfwf2X4yP6vV+/fLYv/Qm3/mMV/4fwxi/8i+WMW/0Xzxyz+n84fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9n8scs/kvlj1n8l84fs/gvkz9m8V82f8zi/9n8MYv/5/LHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/5/PHLP6r5I9Z/FfNH7P4fyF/zOL/xfwxi/9q+WMW/9Xzxyz+X8ofs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf/L+WMW/6/kj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/9X88cs/lvkj1n8t8wfs/hvlT9m8f9a/pjF/+v5Yxb/b+SPWfy3zh+z+G+TP2bx3zZ/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOL/rfwxi/8u+WMW/13zxyz+384fs/h/J3/M4r9b/pjF/7v5Yxb/3fPHLP575I9Z/PfMH7P4fy9/zOL//fwxi/9e+WMW/73zxyz+++SPWfx/kD9m8f9h/pjFf9/8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv/fvljFv+f5Y9Z/PfPH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4H5A/ZvE/MH/M4n9Q/pjF/9f5Yxb/g/PHLP6/yR+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP6/zR+z+P8uf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+v88fs/gflz9m8f9D/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/j/MX/M4n9K/pjF/9T8MYv/n/LHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4v/n/DGL/1n5Yxb/v+SPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4j88f0ziP9lA/pjFf1D+mMV/cP6YxX+8/DGL/5D8MYv/0Pwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxH5Y/ZvGfJP//jz16BgIEQYAoeprz4Iy1bdu2bdu2bdu2bdu2bXurNtzqZNLt9+KO+kct/QfqH7X0H6R/1NJ/sP5RS/8h+kct/f+mf9TS/+/6Ry39/6F/1NL/n/pHLf3/pX/U0v/f+kct/f+jf9TS/7/6Ry39/6d/1NL///pHLf2H0T9q6T+s/lFL/+H0j1r6D69/1NJ/BP2jlv4j6h+19B9J/6il/8j6Ry39R9E/auk/qv5RS//R9I9a+o+uf9TSfwz9o5b+Y+oftfQfS/+opf/Y+kct/cfRP2rpP67+UUv/8fSPWvqPr3/U0n8C/aOW/hPqH7X0n0j/qKX/xPpHLf0n0T9q6T+p/lFL/8n0j1r6T65/1NJ/Cv2jlv5T6h+19J9K/6il/9T6Ry39p9E/auk/rf5RS//p9I9a+k+vf9TSfwb9o5b+M+oftfSfSf+opf/M+kct/WfRP2rpP6v+UUv/2fSPWvrPrn/U0n8O/aOW/nPqH7X0n0v/qKX/3C39BwzdvKX/PC39h1JL/3n1j1r6z6d/1NJ/fv2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aum/iP5RS/9F9Y9a+i+mf9TSf3H9o5b+S+gftfRfUv+opf9S+kct/ZfWP2rpv4z+UUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0X1H/qKX/SvpHLf1X1j9q6b+K/lFL/1X1j1r6r6Z/1NJ/df2jlv5r6B+19F9T/6il/1r6Ry3919Y/aum/jv5RS/919Y9a+q+nf9TSf339o5b+G+gftfTfUP+opf9G+kct/TfWP2rpv4n+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/076Ry39d9Y/aum/i/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfTfU/+opf9e+kct/ffWP2rpv4/+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0P1D/qKX/QfpHLf0P1j9q6X+I/lFL/0P1j1r6H6Z/1NL/cP2jlv5H6B+19D9S/6il/1H6Ry39j9Y/aul/jP5RS/9j9Y9a+h+nf9TS/3j9o5b+J+gftfQ/Uf+opf9J+kct/U/WP2rpf4r+UUv/U/WPWvqfpn/U0v90/aOW/mfoH7X0P1P/qKX/WfpHLf3P1j9q6X+O/lFL/3P1j1r6n6d/1NL/fP2jlv4X6B+19L9Q/6il/0X6Ry39L9Y/aul/if5RS/9L9Y9a+l+mf9TS/3L9o5b+V+gftfS/Uv+opf9V+kct/a/WP2rpf43+UUv/a/WPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/dv2jlv536B+19L9T/6il/136Ry3979Y/aul/j/5RS/979Y9a+t+nf9TS/379o5b+D+gftfR/UP+opf9D+kct/R/WP2rp/4j+UUv/R/WPWvo/pn/U0v9x/aOW/k/oH7X0f1L/qKX/U/pHLf2f1j9q6f+M/lFL/2f1j1r6P6d/1NL/ef1/7qd7Wvq/oH/U0v9F/aOW/i/pH7X0f1n/qKX/K/pHLf1f1T9q6f+a/lFL/9f1j1r6v6F/1NL/Tf2jlv5v6R+19H9b/6il/zv6Ry3939U/aun/nv5RS//39Y9a+n+gf9TS/0P9o5b+H+kftfT/WP+opf8n+kct/T/VP2rp/5n+UUv/z/WPWvp/oX/U0v9L/aOW/l/pH7X0/1r/qKX/N/pHLf2/1T9q6f+d/lFL/+/1j1r6/6B/VNJ/yK/0j1r6/1r/qKX/b/SPWvr/Vv+opf/v9I9a+g/QP2rp/3v9o5b+f9A/aun/R/2jlv5/0j9q6f9n/aOW/n/RP2rp/1f9o5b+A/WPWvoP0j9q6T9Y/+gX1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JF9+4/xui7gOP65nygWoJC+pfgRlIcaHD+M40fJrNU4WcdI13QthcGJ2qEGt+KH0bFp6w82cbFmTSet3cwWa0znSKK0dDE3ppu00rJJOWM4nLaF9mNd+3Lf73H39bj5fV/vN3/wePxx9/18jtfngO3J53PjDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIadOWrV9d09XVudELL7zwYuDF2f6XCUjtdPRn+3cCAAAAAAAAAAAAAACcSY4fJzrbf0YAAAAAADjXtHdcc6KhbsiphsEHUw53nnp/1Ts33Nrb+8SFlfflD68Y5pL1gw/6+vr6dhx4Y3n5cExRFKXPNqF8fF71uHT9nv2r/tB/FIoTbb+6o/t4R93Pnrz5zZYV45c0nTrbVKy+5bauzrn1RREamorNpYN5dUURmpuKXaWD+aWDMU3Fj0sHC04dnF88VTqYs/bOrnWlE+/51HDOae/oKRqGFFsM+ddgcP89+x9+t/J+hEtWrtZYlPu/5PNP76r6WMUZ+q9cP9RV91/zHxA4o9r6f6yn8n6ES77n/j/pr9uvHe5jZ+6/cv1Qr39IZ5jn/yGNVj/3Vz3/Tx/mkgP7QzPaHin1v+2h5x4sn2p8P8//p68fGqr7rx/y/F96jm+sPP+PKYrQNMq/DjintHfsODHS/X/k/hsnV23qBvd/cMUPni31P61jUmP5VFON/TeOcP+v2/7U0N8rUJv2jh/2Vd3/a+i/aBnmkgP9T++d+E6p/6sn/Pu1QR+rpf+m6v5buzfc1bppy9bZt21Ys75zfecdC+a3zV/UNnfx4gWtpx4J+t+O8m8Fzg2ju/8XY6s2dUXRObD/5dFjS0v9bzpybHP51Hk19t884v3/Vfd/GNaM+qK5udi8prt747z+t5XD+f1v+3/ZMP3X8PX/zFnlX1b5urv0BfnA/sDCorfU/86Xr99SPtVcY/9jRur/W6c/LxBhlPf/dVWbIf1f/sI9r5T63/fWG9eVT9X69f95I/a/x/0fRqO9o+obfv7PSv2fPHkw8pttwvn+/w/SydH/y/U/fSJuHcbqH9LJ0f/9d48Z7vsE3odwgf4hnRz9b3pw7fNx6/AB/UM6Ofpf9JdDN8atwwf1D+nk6H/SxS/9LW4dxukf0snR/823bvxa3DqM1z+kk6P/Y/c8c3fcOkzQP6STo/8f/evO43HrcKH+IZ0c/d83bvv1cetwkf4hnRz9P3PX734dtw4T9Q/p5Oj/sl37ZsetwyT9Qzo5+t/w5uQDcevwIf1DOjn6v2byBZE/pxsu1j+kk6P/sev2fDduHS7RP6STo//uvXP+HLcOQf+QTo7+l7147/K4dbhU/5BOjv4ntuw+GbcOk/UP6eTo/4Ybl62OW4cP6x/SydH/kz//8n1x6/AR/UM6Ofp/+7dvXRq3DlP0D+nk6P+VBUcfiVuHqfqHdHL0/70vXDsvbh2m6R/SydH/Y8d3/iJuHabrH9LJ0f+7u1uuiFuHj+of0snR/5HVC3fHrcMM/UM6Ofp/eOpD9XHrMFP/kE6O/r/533+eiFuHj+kf0snR/8KeL26LW4eP6x/SydH/5O7PPhu3DpfpH9IZ6D9RWaX+V409dl3cOrToH9LJcf9v/c0tU+PWYZb+IZ0c/a87ePg7cetwuf4hnRz9L2//08K4dbhC/5BOjv4b2r6xJ24drtQ/pJOj/6O/n7gybh0+oX9IJ0f/P3l0/0tx6zBb/5BOjv6//ZVH18etwxz9Qzo5+j88s/7tuHVo1T+kk6P/rc8//p+4dZirf0gnR//z9k27PW4d5ukf0snR/5TPjTsStw7z9Q/p5Oj/S0t7PxO3Dgv0D+nk6P/xPz69N24drtI/pJOj/77e25fGrcMn9Q/p5Oj/xVXb7o1bh4X6h3Ry9P9A6wsT49ahTf+QTo7+X3/9ppvi1mGR/iGdHP3vfeAfh+LWYbH+IZ0c/e/oeu3rceuwRP+QTo7+n7to5atx67BU/5BOjv5n/f3K8XHr8Cn9Qzo5+l+7s+f7cevwaf1DOjn6X7n5/pa4dbha/5BOjv4bm5fsi1uHZfoHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+CgAA//+gpnbC") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file3\x00', 0x0) 4.32891283s ago: executing program 3 (id=710): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000002640)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noikeep}, {@logbufs={'logbufs', 0x3d, 0x7}}, {@dax}, {@inode32}]}, 0x1, 0x97f5, &(0x7f00000098c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x401c5820, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000d0"]) 3.269022171s ago: executing program 3 (id=719): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[], 0x1, 0x550f, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 3.198116177s ago: executing program 0 (id=720): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40286608, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 2.549729963s ago: executing program 0 (id=722): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80085504, &(0x7f0000002a40)) 2.502181503s ago: executing program 1 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000400)) 2.309943953s ago: executing program 1 (id=727): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x34, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) 2.246194149s ago: executing program 3 (id=728): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1, 0xec6, &(0x7f0000002d40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSEUCVapQT21PrXrrCfVCpSqVgnpoIyWuYr+33n32dNdjezbe/f2kb9++ebPzfeONnJnx7NsAjKzG6uPx4/NFCO9+9s6jLz9VfHJt2V3tNQ6tPhax1wohNDv6Rba9L+KCK5deOrVZW4Sjq4+pHx672H7tdAhhORwKn4dW+Ghx6asP33vk8MevT93y1vlnXtml3W/L9wMAAIbRhT8t/e2+f/zxgbnLFw6eDJPt5en4vBX70/G4/0g8UE7Hy43Q3S86otNEtt5YjEa23li23niWZ7wkXzPbTrNkvYke+cY6lm22nwAAALAXpfPaVigaC139RmNhYe28/5ovZieKhefOLp05N6BCAQAAgMr+/erqTbdCCCGEEEIIIYQY4liZHfQVCAAAAGDU5POFbbC8szN1tbfW6i//xYcbm78edkDd//7l31v5P3jNbxwAAKob1qPJtF/pODrNY5DPIziWvW6rx/+NbDvjW6yzbF7BvTLfYFmd+c/1elVW/1bfx0Epqz+fD/N6VVZ/Pk/n9aqs/sma66iqrP6pmuuoqqz+fTXXUVVZ/ftrrqOqsvqna66jqrL6Z2quo6qy+m+ouY6qyuo/UHMdVZXVv1duqy2rv1VzHVWV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwZ2/RzOJiNd54/5+d0e+UcDwAAAEbdf83/J4QQQgghhBBCDH28OugLEAAAAMDApc8FpE+9r0RpfKzH+Hjn+NT6Cmm82eP1Ez3GJ3uMAwAAACH89o0zt71drH/Of7vz4aV5o/aFT66GCvMY5fMRbjX/duc9227+vTJvGQAAAKOl+N7nV+9/9P0X5i5fOHiy4+z3ajzfTfOAjsdrA5/GfrovYCbrF+kc+mR3nkbJevn1gRvKtvf4NncUAAAARlg6f2+ForHQcd7dCo3GwsL6+fh8aBZnzi6dPhL76ftZ/jDbnLy2/KGa6wYAAAD6t36+v/n5f/oe3/kwUSw8d3bpzLm1/kx7ebPReV1gdn150XldoJUtP1qy/Fjsp+/v/MHsvtXlC6d+uPTUTu88AAAAjIhzL55/5smlpdM/8sQTTzxpPxn0byYAAGCnffnlO80fH5v53drn/9fnv0uf/z8U+604t9+f4wrpPoH0OYANn9d/ojvPbNl6z3ev18rWG4sxmdU91bGdsDrfYPfr5srytbq3M1GSbzrLN5Ply+cpGM/WT/kOZMvz+QnTerPZ8nwexvEsR5HlvzsAAABAucUXnn1+8dyL5x88++yTT59++vRzx46e+O6JE0ce+s5Di6v39S923t0PAAAA7EXrN/0OuhIAAAAAAAAAAAAAAAAAAAAYXXV8ndig9xEAAABG3b9eDSEsCyFE5ViZHHwNQgghhBBCiB6xspJ/0zwAAADA7rpy6aVTne0Gy8WO5mtvrbXWXI15Uzvz4F/nrkVa7eLD3ddL9u9oNYy6uv/9y7+38n/w2s7mn0pP+v791+jewMlqee9d/OV8Z/7bx/vMn+//49XyH87y3xv6y7/yfpb/iWr578vy7+8z/4b9f75a/vtj/vnYP3xPv/m73//J2Kb92Ndn/m9n+/9U6Dd/tv+tPhNmHoj5AWAUNQZdwC5JRwnpOHo69tP+xsPNkN/9sNXj/0a2nfFtV9693XQcdGvsp+OlmSxvstX6p7Pt3VCxztxeuaukrP6deh93W1n9zZrrqKqs/oma66iqrP7Jmuuoqqz+qZrrqKqs/n7PQwetrP69cl25rP7pmuuoqqz+mZrrqKqs/q3+Pz4oZfUfqLmOqsrqn625jqrK6q94Wa12ZfXP1VxHVWX131hzHVWV1X9TzXVUVVb/zTXXMSh3xLbsfDidf87GsdRvZf3JTX6Ww3ptAQAAAPaaf5r/TwghhBBCiJGP/6ysGXQdQojdi5WVQV+BYJB299PMAFyv/P4fbd7/0eb9H23ef/6fdA9/kfWTsR7j4z3Gmz3GJ7Lx/N/rZI/xm7LtrqTrmtHNPca/1mP8QI/xW3uMz/cYv63H+O09xu/oMQ4AAMBouCW2zg8BAABgeL38q0/f/M29T1yau3zh4MkwsWHe+SOxPxn/tv5G7Ofz3ifN+Df/n8T+L2L7+9j+PVvf/ScAAACw+9L3xPj7PwAAAAyv9D2lzv8BAABgeM3F1vk/AAAADK8bY+v8HwAAAIZYMbX54tim6wJ3x7bfef0AgOvf12N7Z2wPxvau2H4jtuk44J7YfrOm+gCAnfPz7//0xNvF+nz/x7LxK3F5ajdYXrtSUDS6Z/LfF9v9sf1Wn/Xk3wfQb/7kQJ95div/7DbzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDo7H6ePz4fBHCu5+98+jPJt78y7Vld7XXOLT6WMReK4TQbL8uja73fx1XvHLppVOd7dXYFuFoKELRXh4eu9jONB1CWA6HwuehFT5aXPrqw/ceOfzx61O3vHX+mVd28UfQtX8AAAAwjP4XAAD//3SeJ9w=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.224497271s ago: executing program 0 (id=729): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.118370665s ago: executing program 1 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000120000000800090000000000180001801400020076657468305f746f5f6261746164760008000700"], 0x3c}}, 0x0) 2.040063639s ago: executing program 1 (id=733): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 1.993978586s ago: executing program 1 (id=734): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@jmp={0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b20, &(0x7f0000000000)={'wlan1\x00'}) 1.888456752s ago: executing program 1 (id=736): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022170000000000000024"], 0x0}, 0x0) 1.662685231s ago: executing program 3 (id=739): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x280000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r0, 0x0, 0x0, 0x4}, 0x20) 1.543988671s ago: executing program 4 (id=741): syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f00000000c0)='rdma') 1.539956129s ago: executing program 3 (id=742): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="080000000100000008"], 0xffa1) 1.406333169s ago: executing program 4 (id=743): bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000}, 0x0) 1.317651177s ago: executing program 4 (id=745): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c80)="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", 0x578}], 0x1, &(0x7f00000012c0)=ANY=[@ANYBLOB="14"], 0x18}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)="80534b20331f82d83c", 0x9}], 0x1, &(0x7f00000040c0)=ANY=[@ANYBLOB="1400000000000000290000003400000001000000000000005010"], 0x1068}}], 0x3, 0x4404c000) 1.106232127s ago: executing program 4 (id=748): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) 965.656568ms ago: executing program 4 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)={0x3c, r1, 0x1, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) 810.179665ms ago: executing program 4 (id=753): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) 524.418108ms ago: executing program 2 (id=758): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r0, 0x540b, 0x2) 405.965512ms ago: executing program 2 (id=759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 292.964428ms ago: executing program 2 (id=760): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x0, 0x0, 0x1}, {}]}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x0) 257.827289ms ago: executing program 3 (id=761): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 0x9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 182.42585ms ago: executing program 2 (id=762): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x24060400) connect$unix(r0, 0x0, 0x0) 182.217616ms ago: executing program 2 (id=763): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}}, 0x14}}, 0x0) 116.682425ms ago: executing program 2 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) 110.166619ms ago: executing program 0 (id=765): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) 0s ago: executing program 0 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 13792][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.663436][ T47] usb 2-1: config 0 descriptor?? [ 81.889135][ T5254] Bluetooth: hci0: command tx timeout [ 82.109679][ T47] hid (null): report_id 0 is invalid [ 82.121700][ T47] uclogic 0003:2179:0077.0004: interface is invalid, ignoring [ 82.203754][ T5738] loop2: detected capacity change from 0 to 32768 [ 82.263842][ T5738] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 82.314064][ T47] usb 2-1: USB disconnect, device number 5 [ 82.380573][ T5738] XFS (loop2): Ending clean mount [ 82.406919][ T5738] XFS (loop2): Quotacheck needed: Please wait. [ 82.428052][ T5740] loop4: detected capacity change from 0 to 32768 [ 82.438193][ T5740] XFS: ikeep mount option is deprecated. [ 82.511819][ T5738] XFS (loop2): Quotacheck: Done. [ 82.517167][ T5740] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 82.607271][ T5740] XFS (loop4): Ending clean mount [ 82.610367][ T5603] team0: Port device team_slave_0 added [ 82.615911][ T5740] XFS (loop4): Quotacheck needed: Please wait. [ 82.628496][ T5259] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 82.640598][ T5603] team0: Port device team_slave_1 added [ 82.717665][ T5740] XFS (loop4): Quotacheck: Done. [ 82.790318][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.861769][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.899444][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.942878][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.968137][ T5247] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 82.972740][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.019466][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.316848][ T5774] [U]  [ 83.419346][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.434272][ T5603] hsr_slave_0: entered promiscuous mode [ 83.527335][ T5603] hsr_slave_1: entered promiscuous mode [ 83.566086][ T5603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.577736][ T5603] Cannot create hsr debugfs directory [ 83.613185][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.628025][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.645427][ T47] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 83.670846][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.690943][ T47] usb 4-1: config 0 descriptor?? [ 83.740888][ T5301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.921430][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.969286][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.979254][ T5254] Bluetooth: hci0: command tx timeout [ 83.986336][ T5301] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 83.995518][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.010722][ T5301] usb 3-1: config 0 descriptor?? [ 84.139110][ T5250] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.148066][ T47] cypress 0003:04B4:DE61.0005: unknown main item tag 0x7 [ 84.168082][ T47] cypress 0003:04B4:DE61.0005: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 84.311984][ T5250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.331930][ T5250] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.352374][ T5250] usb 2-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 84.389760][ T8] usb 4-1: USB disconnect, device number 3 [ 84.407997][ T5250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.448342][ T5301] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 84.458409][ T5301] hid-led 0003:1D34:000A.0006: unbalanced delimiter at end of report description [ 84.468873][ T5250] usb 2-1: config 0 descriptor?? [ 84.527506][ T5301] hid-led 0003:1D34:000A.0006: probe with driver hid-led failed with error -22 [ 84.555721][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.575579][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.621810][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.650910][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.737507][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.770124][ T8] usb 3-1: USB disconnect, device number 2 [ 84.771229][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.787415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.794646][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.806816][ T5808] loop4: detected capacity change from 0 to 4096 [ 84.828454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.835649][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.847053][ T5808] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 84.901868][ T5808] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 84.922771][ T5250] wacom 0003:056A:009F.0007: unbalanced delimiter at end of report description [ 84.938866][ T5250] wacom 0003:056A:009F.0007: parse failed [ 84.949372][ T5250] wacom 0003:056A:009F.0007: probe with driver wacom failed with error -22 [ 85.105522][ T2496] ntfs3(loop4): ino=5, ntfs3_write_inode failed, -22. [ 85.124458][ T5816] loop3: detected capacity change from 0 to 256 [ 85.143725][ T5250] usb 2-1: USB disconnect, device number 6 [ 85.216831][ T5816] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.265533][ T5816] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.293055][ T5816] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 85.299223][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.309160][ T29] audit: type=1800 audit(1728984386.117:4): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.162" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 85.347474][ T5816] syz.3.162 (5816) used greatest stack depth: 19184 bytes left [ 85.445267][ T5603] veth0_vlan: entered promiscuous mode [ 85.467972][ T5603] veth1_vlan: entered promiscuous mode [ 85.509096][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.549588][ T5603] veth0_macvtap: entered promiscuous mode [ 85.580059][ T5603] veth1_macvtap: entered promiscuous mode [ 85.611365][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.633570][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.656879][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.669089][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 85.685922][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.701117][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.706959][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.722821][ T5291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.749066][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.759056][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.771591][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.791070][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.807796][ T8] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 85.817181][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.830652][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.841313][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.861889][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.876923][ T8] usb 5-1: config 0 descriptor?? [ 85.895731][ T5842] use of bytesused == 0 is deprecated and will be removed in the future, [ 85.903011][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.919001][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.933536][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.934815][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.959188][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.964782][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.993578][ T5842] use the actual size instead. [ 85.998466][ T5291] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 86.028761][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.028810][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.055860][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.068472][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.069329][ T5291] usb 4-1: config 0 descriptor?? [ 86.086268][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.182025][ T5603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.184516][ T5849] devtmpfs: Bad value for 'mpol' [ 86.214856][ T5603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.239740][ T5603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.248531][ T5603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.362594][ T8] shield 0003:0955:7214.0008: unexpected long global item [ 86.408606][ T8] shield 0003:0955:7214.0008: Parse failed [ 86.439469][ T8] shield 0003:0955:7214.0008: probe with driver shield failed with error -22 [ 86.515670][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.544159][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.570443][ T5291] microsoft 0003:045E:009D.0009: unbalanced delimiter at end of report description [ 86.583280][ T9] usb 5-1: USB disconnect, device number 4 [ 86.591526][ T5291] microsoft 0003:045E:009D.0009: parse failed [ 86.621685][ T5291] microsoft 0003:045E:009D.0009: probe with driver microsoft failed with error -22 [ 86.637605][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.663360][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.676710][ T5857] loop2: detected capacity change from 0 to 4096 [ 86.701835][ T5857] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 86.866170][ T5302] usb 4-1: USB disconnect, device number 4 [ 87.056609][ T5875] loop0: detected capacity change from 0 to 64 [ 87.787201][ T5853] loop1: detected capacity change from 0 to 40427 [ 87.823718][ T5853] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.859091][ T5853] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.932113][ T5853] F2FS-fs (loop1): invalid crc value [ 87.972362][ T5853] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.212152][ T5853] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.227276][ T5918] loop2: detected capacity change from 0 to 512 [ 88.239088][ T5853] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.272430][ T5918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.290005][ T5918] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.307182][ T5918] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.330556][ T5918] EXT4-fs (loop2): 1 truncate cleaned up [ 88.337220][ T5918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.391570][ T5259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.654104][ T5903] loop4: detected capacity change from 0 to 32768 [ 88.681227][ T5903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.182 (5903) [ 88.709458][ T2958] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 88.830005][ T2958] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 88.866419][ T5898] loop0: detected capacity change from 0 to 32768 [ 88.887221][ T5898] BTRFS: device /dev/loop0 (7:0) using temp-fsid f25dead7-7692-47db-bd59-c5613113d83b [ 88.897641][ T5898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.181 (5898) [ 88.967475][ T5903] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.989589][ T5898] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.026526][ T5903] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 89.055796][ T5898] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 89.078507][ T5903] BTRFS info (device loop4): using free-space-tree [ 89.099150][ T5898] BTRFS info (device loop0): using free-space-tree [ 89.114810][ T29] audit: type=1800 audit(1728984389.917:5): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.190" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 89.579467][ T5976] Bluetooth: MGMT ver 1.23 [ 89.631653][ T5980] loop3: detected capacity change from 0 to 8 [ 89.669699][ T5982] loop2: detected capacity change from 0 to 64 [ 89.706900][ T5980] squashfs image failed sanity check [ 89.746607][ T5903] BTRFS info (device loop4): rebuilding free space tree [ 89.755418][ T5980] loop3: detected capacity change from 0 to 8 [ 89.782531][ T5980] hpfs: hpfs_map_sector(): read error [ 89.982329][ T5993] loop2: detected capacity change from 0 to 1024 [ 90.028371][ T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 90.072362][ T5247] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.149255][ T5998] Bluetooth: MGMT ver 1.23 [ 90.181668][ T5603] BTRFS info (device loop0): last unmount of filesystem f25dead7-7692-47db-bd59-c5613113d83b [ 90.267179][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.319222][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.327085][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.422809][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.567105][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.599540][ T5993] hfsplus: request for non-existent node 16777216 in B*Tree [ 90.833093][ T29] audit: type=1800 audit(1728984391.487:6): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.200" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 91.088073][ T6012] sp0: Synchronizing with TNC [ 91.187590][ T5996] syz.3.202: vmalloc error: size 3874816, failed to allocated page array size 7568, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.207154][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.3.202 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0 [ 91.217277][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.227371][ T5996] Call Trace: [ 91.230697][ T5996] [ 91.233657][ T5996] dump_stack_lvl+0x241/0x360 [ 91.238469][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.243703][ T5996] ? __pfx__printk+0x10/0x10 [ 91.248340][ T5996] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 91.254867][ T5996] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 91.261430][ T5996] warn_alloc+0x278/0x410 [ 91.265798][ T5996] ? __pfx_warn_alloc+0x10/0x10 [ 91.270691][ T5996] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 91.276888][ T5996] ? __get_vm_area_node+0x23d/0x270 [ 91.282127][ T5996] __vmalloc_node_range_noprof+0x691/0x13f0 [ 91.288078][ T5996] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 91.294101][ T5996] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.300127][ T6016] loop4: detected capacity change from 0 to 1024 [ 91.300437][ T5996] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 91.312938][ T5996] ? __get_vm_area_node+0x23d/0x270 [ 91.318184][ T5996] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 91.324121][ T5996] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 91.330319][ T5996] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 91.336093][ T5996] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.342450][ T5996] ? rcu_is_watching+0x15/0xb0 [ 91.347255][ T5996] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 91.352752][ T5996] ? __kvmalloc_node_noprof+0x72/0x190 [ 91.358239][ T5996] __kvmalloc_node_noprof+0x142/0x190 [ 91.363642][ T5996] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 91.369834][ T5996] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 91.375884][ T5996] ? tpg_update_mv_step+0x361/0x4f0 [ 91.381121][ T5996] vivid_update_format_cap+0x133c/0x2090 [ 91.386801][ T5996] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 91.392829][ T5996] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 91.398705][ T5996] __video_do_ioctl+0xc23/0xdd0 [ 91.403607][ T5996] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.409011][ T5996] ? __might_fault+0xc6/0x120 [ 91.413716][ T5996] video_usercopy+0x89b/0x1180 [ 91.418618][ T5996] ? __pfx___video_do_ioctl+0x10/0x10 [ 91.423989][ T5996] ? __pfx_video_usercopy+0x10/0x10 [ 91.429195][ T5996] ? __fget_files+0x28/0x430 [ 91.433796][ T5996] ? __fget_files+0x28/0x430 [ 91.438388][ T5996] v4l2_ioctl+0x189/0x1e0 [ 91.442717][ T5996] ? __pfx_v4l2_ioctl+0x10/0x10 [ 91.447568][ T5996] __se_sys_ioctl+0xf9/0x170 [ 91.452158][ T5996] do_syscall_64+0xf3/0x230 [ 91.456657][ T5996] ? clear_bhb_loop+0x35/0x90 [ 91.461342][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.467241][ T5996] RIP: 0033:0x7f6f24d7dff9 [ 91.471660][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.491273][ T5996] RSP: 002b:00007f6f25c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.499689][ T5996] RAX: ffffffffffffffda RBX: 00007f6f24f35f80 RCX: 00007f6f24d7dff9 [ 91.507745][ T5996] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 91.515721][ T5996] RBP: 00007f6f24df0296 R08: 0000000000000000 R09: 0000000000000000 [ 91.523702][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.531673][ T5996] R13: 0000000000000000 R14: 00007f6f24f35f80 R15: 00007ffd54cf5ab8 [ 91.539658][ T5996] [ 91.583187][ T5996] Mem-Info: [ 91.586483][ T5996] active_anon:5195 inactive_anon:0 isolated_anon:0 [ 91.586483][ T5996] active_file:1764 inactive_file:38204 isolated_file:0 [ 91.586483][ T5996] unevictable:768 dirty:675 writeback:0 [ 91.586483][ T5996] slab_reclaimable:8964 slab_unreclaimable:94899 [ 91.586483][ T5996] mapped:21828 shmem:1404 pagetables:819 [ 91.586483][ T5996] sec_pagetables:0 bounce:0 [ 91.586483][ T5996] kernel_misc_reclaimable:0 [ 91.586483][ T5996] free:1307062 free_pcp:277 free_cma:0 [ 91.632415][ T5996] Node 0 active_anon:20980kB inactive_anon:0kB active_file:7056kB inactive_file:152744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87312kB dirty:2700kB writeback:0kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10420kB pagetables:3476kB sec_pagetables:0kB all_unreclaimable? no [ 91.654240][ T6016] hfsplus: bad catalog entry type [ 91.674618][ T5996] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 91.719938][ T2958] hfsplus: b-tree write err: -5, ino 4 [ 91.965590][ T5996] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.997033][ T5996] lowmem_reserve[]: 0 2463 2464 0 0 [ 92.002412][ T5996] Node 0 DMA32 free:1280976kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:20040kB inactive_anon:0kB active_file:7056kB inactive_file:152188kB unevictable:1536kB writepending:2696kB present:3129332kB managed:2550464kB mlocked:0kB bounce:0kB free_pcp:1268kB local_pcp:424kB free_cma:0kB [ 92.033021][ T5996] lowmem_reserve[]: 0 0 0 0 0 [ 92.037813][ T5996] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:556kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 92.066030][ T5996] lowmem_reserve[]: 0 0 0 0 0 [ 92.076733][ T5996] Node 1 Normal free:3933240kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 92.121693][ T5996] lowmem_reserve[]: 0 0 0 0 0 [ 92.126497][ T5996] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.159049][ T5996] Node 0 DMA32: 132*4kB (UM) 142*8kB (UME) 192*16kB (UME) 188*32kB (UME) 162*64kB (UME) 79*128kB (UME) 22*256kB (UME) 11*512kB (UM) 16*1024kB (UME) 9*2048kB (UME) 294*4096kB (M) = 1281536kB [ 92.179607][ T5996] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 92.201916][ T5996] Node 1 Normal: 164*4kB (UME) 41*8kB (UME) 36*16kB (UME) 187*32kB (UME) 78*64kB (UME) 29*128kB (UME) 15*256kB (UME) 7*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 953*4096kB (M) = 3933304kB [ 92.233880][ T6039] loop0: detected capacity change from 0 to 512 [ 92.239189][ T5996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.266934][ T6039] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 92.319053][ T5996] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.328402][ T5996] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.338431][ T5996] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.349063][ T5996] 41279 total pagecache pages [ 92.353773][ T5996] 0 pages in swap cache [ 92.357946][ T5996] Free swap = 124532kB [ 92.377502][ T5996] Total swap = 124996kB [ 92.395390][ T5996] 2097051 pages RAM [ 92.399457][ T5996] 0 pages HighMem/MovableOnly [ 92.404301][ T5996] 427649 pages reserved [ 92.408641][ T5996] 0 pages cma reserved [ 92.471711][ T6039] EXT4-fs (loop0): 1 truncate cleaned up [ 92.478650][ T6039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.711517][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.743819][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.913456][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.927775][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.947867][ T47] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 92.959135][ T5302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.984458][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.001927][ T6040] loop1: detected capacity change from 0 to 32768 [ 93.015106][ T47] usb 5-1: config 0 descriptor?? [ 93.038696][ T6040] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.221 (6040) [ 93.085239][ T6040] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 93.111514][ T6040] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 93.133850][ T6040] BTRFS info (device loop1): disk space caching is enabled [ 93.145086][ T5302] usb 3-1: Using ep0 maxpacket: 8 [ 93.157250][ T6040] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 93.173900][ T5302] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.184714][ T5302] usb 3-1: config 0 has no interface number 0 [ 93.201951][ T5302] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.232388][ T5302] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.261511][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.301962][ T5302] usb 3-1: config 0 descriptor?? [ 93.375892][ T6040] BTRFS info (device loop1): rebuilding free space tree [ 93.431084][ T5302] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 93.439325][ T6051] loop0: detected capacity change from 0 to 32768 [ 93.461876][ T47] corsair-psu 0003:1B1C:1C0D.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0 [ 93.487333][ T6051] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.224 (6051) [ 93.512957][ T6040] BTRFS info (device loop1): disabling free space tree [ 93.526657][ T6051] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 93.542713][ T6040] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.555684][ T6051] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 93.578247][ T6040] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.584992][ T6051] BTRFS info (device loop0): using free-space-tree [ 93.620562][ T5302] usb 3-1: USB disconnect, device number 3 [ 93.652873][ T47] corsair-psu 0003:1B1C:1C0D.000A: unable to initialize device (-71) [ 93.701252][ T47] corsair-psu 0003:1B1C:1C0D.000A: probe with driver corsair-psu failed with error -71 [ 93.867128][ T47] usb 5-1: USB disconnect, device number 5 [ 93.959897][ T6040] BTRFS info (device loop1): balance: start -d -m [ 93.985174][ T6040] BTRFS info (device loop1): balance: canceled [ 94.252855][ T5244] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 94.298018][ T5603] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 94.630209][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'. [ 95.255154][ T6096] loop0: detected capacity change from 0 to 512 [ 95.290513][ T6096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.789803][ T6096] EXT4-fs (loop0): 1 truncate cleaned up [ 95.796425][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.910191][ T6090] loop4: detected capacity change from 0 to 32768 [ 95.931832][ T6090] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.229 (6090) [ 96.098753][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.122432][ T6110] loop1: detected capacity change from 0 to 128 [ 96.215028][ T6090] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 96.288136][ T6090] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 96.354044][ T6090] BTRFS info (device loop4): using free-space-tree [ 96.423704][ T6115] binder: 6113:6115 ioctl 4018620d 0 returned -22 [ 96.475085][ T6115] binder: 6113:6115 ioctl c0306201 20000680 returned -11 [ 96.760123][ T6131] program syz.3.238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.920793][ T5247] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 97.010226][ T6143] loop3: detected capacity change from 0 to 16 [ 97.017329][ T6143] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 97.042811][ T6116] loop0: detected capacity change from 0 to 8192 [ 97.074620][ T6141] loop1: detected capacity change from 0 to 2048 [ 97.097653][ T6116] loop0: AHDI p1 p2 p3 [ 97.102403][ T6116] loop0: p1 start 4278255615 is beyond EOD, truncated [ 97.134738][ T6116] loop0: p2 size 4164158976 extends beyond EOD, truncated [ 97.284302][ T6148] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.296677][ T6147] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.343083][ T6150] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.365507][ T5246] udevd[5246]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 97.380014][ T5256] udevd[5256]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 97.550836][ T6158] loop3: detected capacity change from 0 to 1024 [ 97.610792][ T6158] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 97.630755][ T6158] JBD2: no valid journal superblock found [ 97.636565][ T6158] EXT4-fs (loop3): Could not load journal inode [ 97.852239][ T6164] netlink: 64 bytes leftover after parsing attributes in process `syz.1.251'. [ 98.142599][ T6173] loop1: detected capacity change from 0 to 1024 [ 98.213318][ T6173] hfsplus: bad catalog entry type [ 98.294836][ T924] hfsplus: b-tree write err: -5, ino 4 [ 98.729342][ T6160] loop4: detected capacity change from 0 to 32768 [ 98.834137][ T6162] loop2: detected capacity change from 0 to 32768 [ 98.864611][ T6160] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 98.883104][ T6174] loop3: detected capacity change from 0 to 32768 [ 98.929400][ T29] audit: type=1800 audit(1728984399.747:7): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.257" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 98.971107][ T6162] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.010111][ T6167] loop0: detected capacity change from 0 to 32768 [ 99.022515][ T6194] netlink: 'syz.1.260': attribute type 20 has an invalid length. [ 99.077604][ T6160] XFS (loop4): Ending clean mount [ 99.108752][ T6160] XFS (loop4): Quotacheck needed: Please wait. [ 99.126450][ T6167] XFS (loop0): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 99.312578][ T6162] XFS (loop2): Ending clean mount [ 99.354070][ T6160] XFS (loop4): Quotacheck: Done. [ 99.464428][ T6167] XFS (loop0): Ending clean mount [ 99.469917][ T5247] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 99.480184][ T5259] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.542225][ T5603] XFS (loop0): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 99.679094][ T5250] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.732024][ T6223] loop2: detected capacity change from 0 to 512 [ 99.832256][ T6223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.867694][ T6223] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.116560][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.176755][ T6215] loop1: detected capacity change from 0 to 32768 [ 100.208035][ T6215] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.265 (6215) [ 100.235053][ T6215] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.245532][ T6215] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 100.254350][ T6215] BTRFS info (device loop1): using free-space-tree [ 100.262666][ T5250] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.273776][ T5250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.285985][ T5250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.296871][ T5250] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.310208][ T5250] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 100.313472][ T5259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.319591][ T5250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.353813][ T5250] usb 4-1: config 0 descriptor?? [ 100.559561][ T6248] loop2: detected capacity change from 0 to 2048 [ 100.681888][ T6248] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 100.722623][ T6259] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.801294][ T6248] Remounting filesystem read-only [ 100.888243][ T5250] nintendo 0003:057E:2009.000B: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0 [ 101.011473][ T5250] nintendo 0003:057E:2009.000B: Failed to get joycon info; ret=-38 [ 101.029012][ T5250] nintendo 0003:057E:2009.000B: Failed to retrieve controller info; ret=-38 [ 101.048320][ T5250] nintendo 0003:057E:2009.000B: Failed to initialize controller; ret=-38 [ 101.115693][ T5250] nintendo 0003:057E:2009.000B: probe - fail = -38 [ 101.152486][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 101.172341][ T5250] nintendo 0003:057E:2009.000B: probe with driver nintendo failed with error -38 [ 101.219486][ T5250] usb 4-1: USB disconnect, device number 5 [ 101.263633][ T5244] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.308899][ T6282] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 101.315721][ T6282] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.350028][ T6282] vhci_hcd vhci_hcd.0: Device attached [ 101.371892][ T6288] process 'syz.0.288' launched './file1' with NULL argv: empty string added [ 101.423664][ T6290] loop0: detected capacity change from 0 to 16 [ 101.448399][ T6290] erofs: (device loop0): mounted with root inode @ nid 36. [ 101.524107][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 205 @ nid 36 [ 101.569148][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 204 @ nid 36 [ 101.578680][ T6292] loop4: detected capacity change from 0 to 512 [ 101.585390][ T8] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 101.609636][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 197 @ nid 36 [ 101.618904][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 196 @ nid 36 [ 101.619775][ T6292] EXT4-fs: Ignoring removed nobh option [ 101.665998][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 192 @ nid 36 [ 101.715561][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 180 @ nid 36 [ 101.775842][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 172 @ nid 36 [ 101.826399][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 168 @ nid 36 [ 101.867086][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 160 @ nid 36 [ 101.903742][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 149 @ nid 36 [ 101.922947][ T6292] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.923713][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 148 @ nid 36 [ 101.959151][ T6292] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 101.977209][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 144 @ nid 36 [ 101.993006][ T6292] netlink: 104 bytes leftover after parsing attributes in process `syz.4.291'. [ 102.022584][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 140 @ nid 36 [ 102.099406][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 92 @ nid 36 [ 102.108672][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 77 @ nid 36 [ 102.169611][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 102.182637][ T29] audit: type=1326 audit(1728984402.997:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe088d74fa7 code=0x7ffc0000 [ 102.249969][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 69 @ nid 36 [ 102.299036][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 68 @ nid 36 [ 102.319298][ T29] audit: type=1326 audit(1728984402.997:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe088d19959 code=0x7ffc0000 [ 102.343036][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 64 @ nid 36 [ 102.364230][ T6312] loop1: detected capacity change from 0 to 256 [ 102.389120][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 60 @ nid 36 [ 102.412760][ T29] audit: type=1326 audit(1728984402.997:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 102.449410][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 102.470690][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 102.499090][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 102.504985][ T29] audit: type=1326 audit(1728984402.997:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe088d74fa7 code=0x7ffc0000 [ 102.521660][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 102.574527][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 102.582946][ T29] audit: type=1326 audit(1728984402.997:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe088d19959 code=0x7ffc0000 [ 102.617398][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 102.636834][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 17 @ nid 36 [ 102.656818][ T29] audit: type=1326 audit(1728984402.997:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe088d74fa7 code=0x7ffc0000 [ 102.679402][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 102.688642][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 102.701823][ T6282] loop2: detected capacity change from 0 to 32768 [ 102.712761][ T6290] erofs: (device loop0): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 102.722149][ T29] audit: type=1326 audit(1728984402.997:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe088d19959 code=0x7ffc0000 [ 102.727496][ T6290] syz.0.290: attempt to access beyond end of device [ 102.727496][ T6290] loop0: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 102.765531][ T6290] syz.0.290: attempt to access beyond end of device [ 102.765531][ T6290] loop0: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 102.779930][ T6290] syz.0.290: attempt to access beyond end of device [ 102.779930][ T6290] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 102.794377][ T6290] syz.0.290: attempt to access beyond end of device [ 102.794377][ T6290] loop0: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 102.808827][ T6290] syz.0.290: attempt to access beyond end of device [ 102.808827][ T6290] loop0: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 102.819739][ T29] audit: type=1326 audit(1728984402.997:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 102.824884][ T6283] vhci_hcd: connection reset by peer [ 102.853121][ T6290] syz.0.290: attempt to access beyond end of device [ 102.853121][ T6290] loop0: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 102.871574][ T6290] syz.0.290: attempt to access beyond end of device [ 102.871574][ T6290] loop0: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 102.886215][ T924] vhci_hcd: stop threads [ 102.886832][ T6290] syz.0.290: attempt to access beyond end of device [ 102.886832][ T6290] loop0: rw=524288, sector=13478624040, nr_sectors = 16 limit=16 [ 102.895175][ T924] vhci_hcd: release socket [ 102.905866][ T6290] syz.0.290: attempt to access beyond end of device [ 102.905866][ T6290] loop0: rw=524288, sector=14550774152, nr_sectors = 16 limit=16 [ 102.925066][ T6290] syz.0.290: attempt to access beyond end of device [ 102.925066][ T6290] loop0: rw=524288, sector=14550774160, nr_sectors = 16 limit=16 [ 102.960399][ T924] vhci_hcd: disconnect device [ 102.984779][ T8] usb 13-1: device descriptor read/64, error -71 [ 103.000489][ T5250] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.054607][ T6307] loop3: detected capacity change from 0 to 32768 [ 103.071390][ T6307] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.296 (6307) [ 103.099169][ T6307] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 103.105036][ T6321] loop0: detected capacity change from 0 to 4096 [ 103.114695][ T6307] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.117135][ T6321] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 103.125806][ T6307] BTRFS info (device loop3): disk space caching is enabled [ 103.142260][ T6307] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 103.162142][ T5250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.175326][ T5250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.186941][ T5250] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 103.196101][ T5250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.198456][ T6321] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 103.206245][ T5250] usb 5-1: config 0 descriptor?? [ 103.216550][ T8] vhci_hcd: vhci_device speed not set [ 103.345932][ T6307] BTRFS info (device loop3): rebuilding free space tree [ 103.362955][ T6307] BTRFS info (device loop3): disabling free space tree [ 103.370368][ T6307] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.382399][ T6307] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.448349][ T6307] BTRFS info (device loop3): balance: start -susage=7,stripes=0..262144 [ 103.483041][ T6307] BTRFS info (device loop3): relocating block group 1048576 flags system [ 103.650539][ T6347] capability: warning: `syz.1.307' uses 32-bit capabilities (legacy support in use) [ 103.651085][ T5250] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 103.704703][ T5250] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 103.724669][ T5250] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 103.744635][ T5250] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 103.751140][ T6307] BTRFS info (device loop3): balance: ended with status: 0 [ 103.760193][ T5250] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 103.770686][ T5250] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 103.788202][ T5250] arvo 0003:1E7D:30D4.000C: unknown main item tag 0x0 [ 103.798489][ T5250] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 103.846670][ T5250] arvo 0003:1E7D:30D4.000C: couldn't init struct arvo_device [ 103.863091][ T5250] arvo 0003:1E7D:30D4.000C: couldn't install keyboard [ 103.880539][ T5250] arvo 0003:1E7D:30D4.000C: probe with driver arvo failed with error -71 [ 103.899402][ T5250] usb 5-1: USB disconnect, device number 6 [ 103.919119][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.947352][ T5245] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 104.096858][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 104.126532][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.158246][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.177097][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 104.204917][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.223845][ T47] usb 1-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00 [ 104.246801][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.282758][ T47] usb 1-1: config 0 descriptor?? [ 104.461484][ T6352] loop1: detected capacity change from 0 to 32768 [ 104.479172][ T6352] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.309 (6352) [ 104.516662][ T6352] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.536506][ T6371] ubi0: attaching mtd0 [ 104.536518][ T6352] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 104.550856][ T6352] BTRFS info (device loop1): using free-space-tree [ 104.553619][ T6371] ubi0: scanning is finished [ 104.562162][ T6371] ubi0: empty MTD device detected [ 104.632253][ T6389] loop2: detected capacity change from 0 to 256 [ 104.668011][ T6389] exfat: Deprecated parameter 'utf8' [ 104.673632][ T6389] exfat: Deprecated parameter 'namecase' [ 104.691426][ T6389] exfat: Deprecated parameter 'namecase' [ 104.697652][ T6371] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 104.705291][ T6371] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 104.714259][ T6389] exfat: Deprecated parameter 'namecase' [ 104.720736][ T6371] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 104.728915][ T5244] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.736408][ T6371] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 104.753603][ T6371] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 104.760797][ T5300] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.763338][ T6389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 104.792238][ T47] nzxt-smart2 0003:1E71:2006.000D: unknown main item tag 0x0 [ 104.805641][ T47] nzxt-smart2 0003:1E71:2006.000D: unknown main item tag 0x0 [ 104.841661][ T6371] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 104.849170][ T47] nzxt-smart2 0003:1E71:2006.000D: unknown main item tag 0x0 [ 104.851471][ T6371] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 269789608 [ 104.868359][ T6371] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 104.880734][ T6390] ubi0: background thread "ubi_bgt0d" started, PID 6390 [ 104.899274][ T47] nzxt-smart2 0003:1E71:2006.000D: unknown main item tag 0x0 [ 104.907633][ T47] nzxt-smart2 0003:1E71:2006.000D: unknown main item tag 0x0 [ 104.930842][ T47] nzxt-smart2 0003:1E71:2006.000D: hidraw0: USB HID v0.00 Device [HID 1e71:2006] on usb-dummy_hcd.0-1/input0 [ 105.017532][ T47] usb 1-1: USB disconnect, device number 3 [ 105.157969][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.169370][ T5300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.179561][ T5300] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 105.188624][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.196892][ T6404] loop1: detected capacity change from 0 to 256 [ 105.197578][ T6404] exfat: Deprecated parameter 'namecase' [ 105.222510][ T5300] usb 5-1: config 0 descriptor?? [ 105.244282][ T6404] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 105.380653][ T6408] loop2: detected capacity change from 0 to 512 [ 105.465502][ T6408] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.331: casefold flag without casefold feature [ 105.471753][ T6412] loop1: detected capacity change from 0 to 4096 [ 105.486201][ T6408] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.331: couldn't read orphan inode 15 (err -117) [ 105.492643][ T6412] NILFS (loop1): invalid segment: Checksum error in segment payload [ 105.515855][ T6412] NILFS (loop1): trying rollback from an earlier position [ 105.526850][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.557438][ T6412] NILFS (loop1): recovery complete [ 105.579074][ T6417] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.652875][ T5300] hid-thrustmaster 0003:044F:B65D.000E: item fetching failed at offset 5/7 [ 105.662786][ T5300] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 105.676113][ T5259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.686454][ T5300] hid-thrustmaster 0003:044F:B65D.000E: probe with driver hid-thrustmaster failed with error -22 [ 105.753749][ T6424] loop3: detected capacity change from 0 to 256 [ 105.789120][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 105.796877][ T6427] loop0: detected capacity change from 0 to 1024 [ 105.846102][ T6427] hfsplus: small file entry [ 105.872485][ T8] usb 5-1: USB disconnect, device number 7 [ 106.140449][ T6444] loop0: detected capacity change from 0 to 8 [ 106.266220][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 106.302459][ T6437] loop2: detected capacity change from 0 to 32768 [ 106.325769][ T6444] SQUASHFS error: xz decompression failed, data probably corrupt [ 106.345150][ T6437] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.365058][ T6444] SQUASHFS error: Failed to read block 0xa8: -5 [ 106.394406][ T6444] SQUASHFS error: xz decompression failed, data probably corrupt [ 106.409241][ T6444] SQUASHFS error: Failed to read block 0xa8: -5 [ 106.423706][ T29] audit: type=1800 audit(1728984407.237:16): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.345" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 106.433043][ T6444] syz.0.345 (6444) used greatest stack depth: 18928 bytes left [ 106.605769][ T6437] XFS (loop2): Ending clean mount [ 106.622017][ T6437] XFS (loop2): Quotacheck needed: Please wait. [ 106.676601][ T6437] XFS (loop2): Quotacheck: Done. [ 106.733432][ T6472] loop1: detected capacity change from 0 to 256 [ 106.777088][ T6472] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 106.882518][ T5259] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.925003][ T6479] loop4: detected capacity change from 0 to 1024 [ 106.937292][ T6480] loop3: detected capacity change from 0 to 1024 [ 106.981126][ T6480] hfsplus: bad catalog entry type [ 107.056575][ T6483] hfsplus: xattr exists yet [ 107.134639][ T2958] hfsplus: b-tree write err: -5, ino 4 [ 107.264587][ T6468] loop0: detected capacity change from 0 to 40427 [ 107.305757][ T6489] program syz.1.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.363521][ T6468] F2FS-fs (loop0): heap/no_heap options were deprecated [ 107.372282][ T6468] F2FS-fs (loop0): invalid crc value [ 107.395935][ T6468] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.477515][ T6497] loop4: detected capacity change from 0 to 1024 [ 107.514400][ T6468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.530980][ T6497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.584044][ T5300] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.677148][ T5603] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.698460][ T5247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.759142][ T5300] usb 4-1: Using ep0 maxpacket: 8 [ 107.766997][ T6493] loop1: detected capacity change from 0 to 32768 [ 107.775003][ T6493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.365 (6493) [ 107.780659][ T5300] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=8a.18 [ 107.790432][ T6493] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.807046][ T6493] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 107.815946][ T6493] BTRFS info (device loop1): using free-space-tree [ 107.819005][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.847863][ T5300] usb 4-1: config 0 descriptor?? [ 107.871335][ T5300] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 107.878481][ T5300] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 107.892438][ T6512] loop4: detected capacity change from 0 to 256 [ 107.919389][ T6512] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 107.936007][ T6512] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 107.952816][ T29] audit: type=1800 audit(1728984408.767:17): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.370" name="file2" dev="loop4" ino=1048636 res=0 errno=0 [ 107.974989][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.995214][ T6493] BTRFS warning (device loop1): can't set the incompat:0 feature bit while mounted [ 108.045550][ T5244] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.086270][ T5300] usb 4-1: USB disconnect, device number 6 [ 108.163620][ T47] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 108.182980][ T47] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 108.239481][ T47] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 108.289756][ T47] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 108.332873][ T47] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 108.345919][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.569252][ T47] ath6kl: Failed to submit usb control message: -71 [ 108.576711][ T47] ath6kl: unable to send the bmi data to the device: -71 [ 108.586691][ T47] ath6kl: Unable to send get target info: -71 [ 108.619583][ T47] ath6kl: Failed to init ath6kl core: -71 [ 108.651960][ T47] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 108.678598][ T47] usb 3-1: USB disconnect, device number 4 [ 108.725179][ T6540] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 109.006088][ T6561] loop3: detected capacity change from 0 to 128 [ 109.019593][ C1] sd 0:0:1:0: [sda] tag#3959 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 109.030106][ C1] sd 0:0:1:0: [sda] tag#3959 CDB: Read(6) 08 00 00 00 00 00 [ 109.167642][ T6572] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 109.184027][ T6571] loop2: detected capacity change from 0 to 2048 [ 109.254040][ T6571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.364196][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.397'. [ 109.403229][ T5259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.509152][ T6597] sp0: Synchronizing with TNC [ 109.589070][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.749334][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 109.756269][ T6611] loop4: detected capacity change from 0 to 2048 [ 109.768147][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.786782][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.798508][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 109.818717][ T6615] loop1: detected capacity change from 0 to 256 [ 109.825551][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.837319][ T6611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.850759][ T8] usb 1-1: config 0 descriptor?? [ 109.855937][ T6615] exfat: Deprecated parameter 'namecase' [ 109.884270][ T6615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 109.991377][ T5247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.306367][ T8] logitech 0003:046D:C20E.000F: rdesc size test failed for formula gp [ 110.331374][ T8] logitech 0003:046D:C20E.000F: unbalanced delimiter at end of report description [ 110.361575][ T8] logitech 0003:046D:C20E.000F: parse failed [ 110.378146][ T8] logitech 0003:046D:C20E.000F: probe with driver logitech failed with error -22 [ 110.418266][ T6617] loop2: detected capacity change from 0 to 32768 [ 110.459821][ T6617] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.494069][ T6631] loop3: detected capacity change from 0 to 8192 [ 110.538476][ T8] usb 1-1: USB disconnect, device number 4 [ 110.542622][ T6617] XFS (loop2): Ending clean mount [ 110.671688][ T6631] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 110.678514][ T6623] loop1: detected capacity change from 0 to 32768 [ 110.686900][ T6631] FAT-fs (loop3): Filesystem has been set read-only [ 110.731417][ T5259] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.827654][ T6645] loop3: detected capacity change from 0 to 256 [ 110.834912][ T6645] exfat: Deprecated parameter 'utf8' [ 110.848817][ T6645] exfat: Deprecated parameter 'utf8' [ 110.856587][ T6645] exfat: Deprecated parameter 'utf8' [ 110.868435][ T6645] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x20540bfc, utbl_chksum : 0xe619d30d) [ 110.963839][ T6647] netlink: 'syz.2.419': attribute type 2 has an invalid length. [ 111.057002][ T6651] loop3: detected capacity change from 0 to 1024 [ 111.075166][ T6651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.399292][ T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.465768][ T6670] loop4: detected capacity change from 0 to 136 [ 111.579377][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 111.586106][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 111.619071][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 111.643167][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.665105][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.687604][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 111.714306][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 111.734553][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 111.749339][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.767359][ T47] usb 3-1: config 0 descriptor?? [ 111.785441][ T6656] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.809329][ T5254] Bluetooth: hci5: urb ffff8880125ffa00 submission failed (90) [ 111.852148][ T6690] loop4: detected capacity change from 0 to 2048 [ 111.864703][ T6690] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.900624][ T6690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.939207][ T6696] program syz.0.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.039208][ T47] usb 3-1: USB disconnect, device number 5 [ 112.057846][ T29] audit: type=1326 audit(1728984412.867:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f24d7dff9 code=0x0 [ 112.091244][ T6702] loop0: detected capacity change from 0 to 512 [ 112.132731][ T5247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.202516][ T6702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.223090][ T6702] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.299785][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.547492][ T6723] loop0: detected capacity change from 0 to 4096 [ 112.566965][ T6723] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 112.591724][ T6723] ntfs3(loop0): mft corrupted [ 112.596460][ T6723] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 112.645734][ T6723] ntfs3(loop0): Failed to load $LogFile (-22). [ 112.914012][ T29] audit: type=1326 audit(1728984413.727:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4e57dff9 code=0x7ffc0000 [ 112.932468][ T6732] loop3: detected capacity change from 0 to 64 [ 112.997935][ T29] audit: type=1326 audit(1728984413.727:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4e57dff9 code=0x7ffc0000 [ 113.058431][ T29] audit: type=1326 audit(1728984413.757:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4e57dff9 code=0x7ffc0000 [ 113.133930][ T29] audit: type=1326 audit(1728984413.757:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4e57dff9 code=0x7ffc0000 [ 113.202628][ T6719] loop4: detected capacity change from 0 to 32768 [ 113.212119][ T29] audit: type=1326 audit(1728984413.757:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7efc4e57dff9 code=0x7ffc0000 [ 113.236966][ T6738] x_tables: ip_tables: udp match: only valid for protocol 17 [ 113.251600][ T29] audit: type=1326 audit(1728984413.767:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.2.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4e57dff9 code=0x7ffc0000 [ 113.275820][ T6719] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.453 (6719) [ 113.284870][ T6725] loop1: detected capacity change from 0 to 32768 [ 113.299741][ T6740] sit0: entered promiscuous mode [ 113.313346][ T6740] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 113.331000][ T6740] netlink: 1 bytes leftover after parsing attributes in process `syz.2.463'. [ 113.477854][ T6725] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.496461][ T6719] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.576811][ T6751] loop3: detected capacity change from 0 to 512 [ 113.596523][ T6751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.625257][ T6751] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 113.636969][ T6751] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 113.649852][ T6719] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 113.658548][ T6719] BTRFS info (device loop4): using free-space-tree [ 113.666692][ T6742] loop0: detected capacity change from 0 to 40427 [ 113.678657][ T6742] F2FS-fs (loop0): invalid crc value [ 113.696495][ T6751] EXT4-fs (loop3): 1 truncate cleaned up [ 113.703251][ T6751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.722256][ T6742] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.761717][ T6751] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 4: comm syz.3.467: lblock 0 mapped to illegal pblock 4 (length 1) [ 113.794027][ T6751] EXT4-fs (loop3): Remounting filesystem read-only [ 113.794073][ T6742] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.815008][ T5244] ocfs2: Unmounting device (7,1) on (node local) [ 113.825797][ T6742] F2FS-fs (loop0): Can't flush 0 in 0 for SEGS_PER_SEC 1 != 1 [ 113.978851][ T5245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.213583][ T6768] loop2: detected capacity change from 0 to 32768 [ 114.222005][ T5247] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.226046][ T6768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.468 (6768) [ 114.294218][ T6768] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.308585][ T6768] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 114.321211][ T6768] BTRFS info (device loop2): using free-space-tree [ 114.669126][ T8] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 114.776948][ T5259] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.836931][ T8] usb 2-1: config 0 has an invalid interface number: 245 but max is 0 [ 114.855680][ T8] usb 2-1: config 0 has no interface number 0 [ 114.865645][ T6790] loop0: detected capacity change from 0 to 32768 [ 114.877672][ T8] usb 2-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 114.878912][ T6790] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.474 (6790) [ 114.897253][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.920356][ T8] usb 2-1: Product: syz [ 114.938121][ T8] usb 2-1: Manufacturer: syz [ 114.949593][ T6790] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 114.955188][ T8] usb 2-1: SerialNumber: syz [ 114.967297][ T8] usb 2-1: config 0 descriptor?? [ 114.969583][ T6790] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 114.991441][ T6790] BTRFS info (device loop0): using free-space-tree [ 115.190469][ T8] usb 2-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 115.377459][ T5603] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 115.587445][ T6808] loop3: detected capacity change from 0 to 32768 [ 115.677686][ T6808] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 115.842190][ T8] ueagle-atm 2-1:0.245: usbatm_usb_probe: bind failed: -19! [ 115.861608][ T8] usb 2-1: USB disconnect, device number 7 [ 115.875557][ T5245] ocfs2: Unmounting device (7,3) on (node local) [ 116.009054][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.058213][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 116.179083][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 116.193981][ T8] usb 2-1: config 0 has an invalid interface number: 245 but max is 0 [ 116.207245][ T8] usb 2-1: config 0 has no interface number 0 [ 116.259264][ T8] usb 2-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 116.299122][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.307195][ T8] usb 2-1: Product: syz [ 116.321245][ T8] usb 2-1: Manufacturer: syz [ 116.339027][ T8] usb 2-1: SerialNumber: syz [ 116.350648][ T8] usb 2-1: config 0 descriptor?? [ 116.401824][ T6858] loop3: detected capacity change from 0 to 128 [ 116.441427][ T6858] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.470612][ T6858] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.516503][ T6858] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 116.609936][ T8] usb 2-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 116.640192][ T5245] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.905718][ T6873] loop0: detected capacity change from 0 to 164 [ 117.112733][ T6878] netlink: 108 bytes leftover after parsing attributes in process `syz.0.502'. [ 117.256167][ T6880] loop1: detected capacity change from 0 to 1024 [ 117.283430][ T6880] hfsplus: bad catalog entry type [ 117.374953][ T924] hfsplus: b-tree write err: -5, ino 4 [ 117.403438][ T8] ueagle-atm 2-1:0.245: usbatm_usb_probe: bind failed: -19! [ 117.429397][ T8] usb 2-1: USB disconnect, device number 8 [ 117.467411][ T6835] warn_alloc: 3 callbacks suppressed [ 117.467432][ T6835] syz.4.484: vmalloc error: size 3485696, failed to allocated page array size 6808, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 117.528833][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.4.484 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0 [ 117.538968][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.549053][ T6835] Call Trace: [ 117.552354][ T6835] [ 117.555304][ T6835] dump_stack_lvl+0x241/0x360 [ 117.560020][ T6835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.565243][ T6835] ? __pfx__printk+0x10/0x10 [ 117.569868][ T6835] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 117.576318][ T6835] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 117.582856][ T6835] warn_alloc+0x278/0x410 [ 117.587220][ T6835] ? __pfx_warn_alloc+0x10/0x10 [ 117.592100][ T6835] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 117.594990][ T6864] loop2: detected capacity change from 0 to 32768 [ 117.598257][ T6835] ? __get_vm_area_node+0x23d/0x270 [ 117.598287][ T6835] __vmalloc_node_range_noprof+0x691/0x13f0 [ 117.598331][ T6835] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 117.621808][ T6835] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.628162][ T6835] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 117.634354][ T6835] ? __get_vm_area_node+0x23d/0x270 [ 117.639584][ T6835] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 117.645510][ T6835] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 117.651779][ T6835] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 117.651828][ T6835] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.651848][ T6835] ? rcu_is_watching+0x15/0xb0 [ 117.651871][ T6835] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 117.651894][ T6835] ? __kvmalloc_node_noprof+0x72/0x190 [ 117.651917][ T6835] __kvmalloc_node_noprof+0x142/0x190 [ 117.651937][ T6835] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 117.691901][ T6835] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 117.697926][ T6835] ? tpg_update_mv_step+0x361/0x4f0 [ 117.703166][ T6835] vivid_update_format_cap+0x133c/0x2090 [ 117.708831][ T6835] ? v4l2_valid_dv_timings+0x3ab/0xf60 [ 117.714330][ T6835] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 117.720351][ T6835] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 117.726202][ T6835] __video_do_ioctl+0xc23/0xdd0 [ 117.731094][ T6835] ? __pfx___video_do_ioctl+0x10/0x10 [ 117.736498][ T6835] ? __might_fault+0xc6/0x120 [ 117.741203][ T6835] video_usercopy+0x89b/0x1180 [ 117.745997][ T6835] ? __pfx___video_do_ioctl+0x10/0x10 [ 117.751397][ T6835] ? __pfx_video_usercopy+0x10/0x10 [ 117.756634][ T6835] ? __fget_files+0x28/0x430 [ 117.761258][ T6835] ? __fget_files+0x28/0x430 [ 117.765880][ T6835] v4l2_ioctl+0x189/0x1e0 [ 117.770236][ T6835] ? __pfx_v4l2_ioctl+0x10/0x10 [ 117.775120][ T6835] __se_sys_ioctl+0xf9/0x170 [ 117.779734][ T6835] do_syscall_64+0xf3/0x230 [ 117.784273][ T6835] ? clear_bhb_loop+0x35/0x90 [ 117.788984][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.794909][ T6835] RIP: 0033:0x7fe26737dff9 [ 117.799354][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.817229][ T6876] loop3: detected capacity change from 0 to 32768 [ 117.818962][ T6835] RSP: 002b:00007fe26812e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.818989][ T6835] RAX: ffffffffffffffda RBX: 00007fe267535f80 RCX: 00007fe26737dff9 [ 117.819003][ T6835] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 117.819015][ T6835] RBP: 00007fe2673f0296 R08: 0000000000000000 R09: 0000000000000000 [ 117.819027][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.819039][ T6835] R13: 0000000000000000 R14: 00007fe267535f80 R15: 00007ffdd9a2a408 [ 117.819066][ T6835] [ 117.843275][ T6835] Mem-Info: [ 117.903251][ T6876] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.501 (6876) [ 117.914256][ T6835] active_anon:11787 inactive_anon:0 isolated_anon:0 [ 117.914256][ T6835] active_file:1764 inactive_file:38222 isolated_file:0 [ 117.914256][ T6835] unevictable:768 dirty:417 writeback:0 [ 117.914256][ T6835] slab_reclaimable:9645 slab_unreclaimable:93759 [ 117.914256][ T6835] mapped:21158 shmem:9421 pagetables:718 [ 117.914256][ T6835] sec_pagetables:0 bounce:0 [ 117.914256][ T6835] kernel_misc_reclaimable:0 [ 117.914256][ T6835] free:1306070 free_pcp:1123 free_cma:0 [ 117.972562][ T6835] Node 0 active_anon:47348kB inactive_anon:0kB active_file:7056kB inactive_file:152816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84632kB dirty:1668kB writeback:0kB shmem:36148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10276kB pagetables:2972kB sec_pagetables:0kB all_unreclaimable? no [ 118.004899][ T6876] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 118.004985][ T6876] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 118.005038][ T6876] BTRFS info (device loop3): using free-space-tree [ 118.036988][ T6835] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 118.069647][ T6864] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 118.092576][ T6835] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.124389][ T6864] (syz.2.494,6864,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 118.128124][ T6835] lowmem_reserve[]: [ 118.143218][ T6864] (syz.2.494,6864,1):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -2 [ 118.155903][ T6864] (syz.2.494,6864,1):ocfs2_rename:1482 ERROR: status = -2 [ 118.163580][ T6864] (syz.2.494,6864,1):ocfs2_rename:1698 ERROR: status = -2 [ 118.172254][ T6835] 0 2463 2464 0 0 [ 118.176183][ T6835] Node 0 DMA32 free:1278460kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:47204kB inactive_anon:0kB active_file:7056kB inactive_file:152288kB unevictable:1536kB writepending:1688kB present:3129332kB managed:2550464kB mlocked:0kB bounce:0kB free_pcp:832kB local_pcp:520kB free_cma:0kB [ 118.210557][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 118.217481][ T6835] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:556kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 118.248557][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 118.258197][ T5259] ocfs2: Unmounting device (7,2) on (node local) [ 118.260801][ T6835] Node 1 Normal free:3933140kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 118.279084][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.306452][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 118.326381][ T6835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.340771][ T6835] Node 0 DMA32: 179*4kB (UME) 11*8kB (M) 10*16kB (UME) 16*32kB (UME) 6*64kB (E) 4*128kB (UE) 28*256kB (UME) 14*512kB (UME) 57*1024kB (UM) 9*2048kB (UME) 289*4096kB (M) = 1277252kB [ 118.374268][ T6835] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 118.386799][ T6835] Node 1 Normal: 91*4kB (UME) 41*8kB (UME) 36*16kB (UME) 187*32kB (UME) 80*64kB (UME) 29*128kB (UME) 15*256kB (UME) 7*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 953*4096kB (M) = 3933140kB [ 118.406609][ T6835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.416878][ T6835] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.426804][ T6835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.441587][ T6835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.452923][ T6835] 46125 total pagecache pages [ 118.457247][ T6876] BTRFS warning (device loop3): can't clear the default_subvol feature bit while mounted [ 118.457611][ T6835] 0 pages in swap cache [ 118.457623][ T6835] Free swap = 124548kB [ 118.457633][ T6835] Total swap = 124996kB [ 118.457644][ T6835] 2097051 pages RAM [ 118.485308][ T6835] 0 pages HighMem/MovableOnly [ 118.490325][ T6835] 427649 pages reserved [ 118.495293][ T6835] 0 pages cma reserved [ 118.499963][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.512598][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.522748][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 118.539290][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.554638][ T9] usb 1-1: config 0 descriptor?? [ 118.575997][ T5245] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 118.612490][ T6927] syz.2.514 (6927) used obsolete PPPIOCDETACH ioctl [ 119.019652][ T9] hid-steam 0003:28DE:1142.0010: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 119.109370][ T9] hid-steam 0003:28DE:1142.0010: Steam wireless receiver connected [ 119.177195][ T9] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 119.235861][ T9] usb 1-1: USB disconnect, device number 5 [ 119.268893][ T9] hid-steam 0003:28DE:1142.0010: Steam wireless receiver disconnected [ 119.619963][ T6950] loop1: detected capacity change from 0 to 512 [ 119.655474][ T6950] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 119.802204][ T6956] loop2: detected capacity change from 0 to 512 [ 119.846857][ T6956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.889383][ T6956] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.029257][ T6941] loop3: detected capacity change from 0 to 40427 [ 120.073516][ T6941] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 120.089458][ T6941] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.120485][ T6941] F2FS-fs (loop3): invalid crc value [ 120.142773][ T6941] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.325856][ T6941] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.357083][ T6941] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 120.687747][ T5259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.267191][ T6991] loop0: detected capacity change from 0 to 1024 [ 121.280233][ T6991] EXT4-fs: Ignoring removed orlov option [ 121.298600][ T6991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.346016][ T6991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.473130][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.337067][ T7011] loop0: detected capacity change from 0 to 256 [ 122.374530][ T7011] exfat: Deprecated parameter 'utf8' [ 122.440678][ T7011] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 123.015388][ T7009] loop3: detected capacity change from 0 to 32768 [ 123.113518][ T7007] loop2: detected capacity change from 0 to 32768 [ 123.267154][ T7018] loop0: detected capacity change from 0 to 32768 [ 123.302025][ T7007] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.319316][ T7007] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 123.341562][ T7009] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 123.384839][ T7007] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 123.428134][ T7047] loop1: detected capacity change from 0 to 2048 [ 123.431305][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 123.443139][ T7047] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 123.445916][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 123.471817][ T7047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.484958][ T7009] XFS (loop3): Ending clean mount [ 123.509652][ T7009] XFS (loop3): Quotacheck needed: Please wait. [ 123.602167][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 156ms [ 123.626776][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 123.639060][ T7009] XFS (loop3): Quotacheck: Done. [ 123.644932][ T7007] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 123.654402][ T7054] loop4: detected capacity change from 0 to 2048 [ 123.687449][ T7058] loop1: detected capacity change from 0 to 512 [ 123.721343][ T7058] EXT4-fs: Ignoring removed bh option [ 123.726883][ T7059] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.738326][ T5245] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 123.759746][ T7058] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.788449][ T29] audit: type=1800 audit(1728984424.597:25): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.567" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 123.847331][ T7058] EXT4-fs (loop1): 1 truncate cleaned up [ 123.858348][ T7058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.890382][ T29] audit: type=1800 audit(1728984424.697:26): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.568" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 124.208372][ T5244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.220285][ T7064] loop4: detected capacity change from 0 to 2048 [ 124.282777][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.318892][ T7064] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.390064][ T7076] loop1: detected capacity change from 0 to 256 [ 124.397153][ T7076] exfat: Deprecated parameter 'namecase' [ 124.465901][ T7077] fscrypt (loop4, inode 13): Error -61 getting encryption context [ 124.486909][ T7076] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 124.548206][ T5247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.590547][ T7085] loop0: detected capacity change from 0 to 256 [ 124.651979][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 124.673882][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 124.688201][ T7088] netlink: 'syz.2.580': attribute type 25 has an invalid length. [ 124.776438][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.582'. [ 124.834197][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 125.072033][ T7105] loop4: detected capacity change from 0 to 512 [ 125.080810][ T7081] loop3: detected capacity change from 0 to 32768 [ 125.088093][ T7081] XFS: ikeep mount option is deprecated. [ 125.098491][ T7105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.588: bg 0: block 5: invalid block bitmap [ 125.117162][ T7105] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 125.117298][ T7081] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.119987][ T5302] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.148264][ T7105] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.588: invalid indirect mapped block 3 (level 2) [ 125.192074][ T7116] loop0: detected capacity change from 0 to 256 [ 125.202334][ T7105] EXT4-fs (loop4): 1 orphan inode deleted [ 125.222375][ T7105] EXT4-fs (loop4): 1 truncate cleaned up [ 125.239143][ T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 125.239951][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.271621][ T7081] XFS (loop3): Ending clean mount [ 125.278739][ T7081] XFS (loop3): Quotacheck needed: Please wait. [ 125.313121][ T5302] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.339033][ T5302] usb 2-1: config 0 has no interface number 0 [ 125.349878][ T5302] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.361345][ T7081] XFS (loop3): Quotacheck: Done. [ 125.368397][ T5302] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.378457][ T5302] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 125.387692][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.396389][ T5247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.408054][ T5302] usb 2-1: config 0 descriptor?? [ 125.416619][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 125.431695][ T47] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 125.440960][ T47] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 125.462342][ T47] usb 3-1: config 1 has no interface number 1 [ 125.473203][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.489471][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.497678][ T47] usb 3-1: Product: syz [ 125.509999][ T47] usb 3-1: Manufacturer: syz [ 125.514817][ T47] usb 3-1: SerialNumber: syz [ 125.525077][ T5245] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.638792][ T7124] loop4: detected capacity change from 0 to 512 [ 125.669147][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.700390][ T7124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.735978][ T7124] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.761542][ T47] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 125.770402][ T47] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 125.778741][ T47] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 125.786533][ T47] usb 3-1: 2:1 : invalid channels 0 [ 125.814102][ T47] usb 3-1: USB disconnect, device number 6 [ 125.841727][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.864415][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.883550][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 125.892799][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.905623][ T9] usb 1-1: config 0 descriptor?? [ 125.914824][ T5302] asus 0003:048D:CE50.0012: unknown main item tag 0xd [ 125.932345][ T5247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.933717][ T5302] asus 0003:048D:CE50.0012: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input1 [ 125.974961][ T5302] asus 0003:048D:CE50.0012: Asus input not registered [ 125.984248][ T5302] asus 0003:048D:CE50.0012: probe with driver asus failed with error -12 [ 126.091905][ T7133] loop4: detected capacity change from 0 to 4096 [ 126.103159][ T7133] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 126.164816][ T47] usb 2-1: USB disconnect, device number 9 [ 126.325645][ T9] hid (null): usage index exceeded [ 126.332900][ T9] lg-g15 0003:046D:C222.0013: unknown main item tag 0x0 [ 126.345434][ T9] lg-g15 0003:046D:C222.0013: ignoring exceeding usage max [ 126.349152][ T5302] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 126.356331][ T9] lg-g15 0003:046D:C222.0013: ignoring exceeding usage max [ 126.370592][ T7142] netlink: 76 bytes leftover after parsing attributes in process `syz.4.601'. [ 126.379855][ T9] lg-g15 0003:046D:C222.0013: usage index exceeded [ 126.386401][ T9] lg-g15 0003:046D:C222.0013: item 0 0 2 2 parsing failed [ 126.397044][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 126.407175][ T9] lg-g15 0003:046D:C222.0013: probe with driver lg-g15 failed with error -22 [ 126.531434][ T7151] loop2: detected capacity change from 0 to 256 [ 126.548620][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.573406][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.575643][ T9] usb 1-1: USB disconnect, device number 6 [ 126.589545][ T7151] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 126.607453][ T5302] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 126.618550][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.632715][ T7151] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 126.647357][ T5302] usb 4-1: config 0 descriptor?? [ 126.692715][ T7155] loop4: detected capacity change from 0 to 1024 [ 127.070789][ T5302] dragonrise 0003:0079:0006.0014: unknown main item tag 0x0 [ 127.078343][ T5302] dragonrise 0003:0079:0006.0014: item fetching failed at offset 5/7 [ 127.087275][ T5302] dragonrise 0003:0079:0006.0014: parse failed [ 127.093813][ T5302] dragonrise 0003:0079:0006.0014: probe with driver dragonrise failed with error -22 [ 127.148667][ T7177] loop4: detected capacity change from 0 to 16 [ 127.159212][ T7177] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 127.179172][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.276928][ T7181] loop4: detected capacity change from 0 to 1024 [ 127.294714][ T7181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.301907][ T9] usb 4-1: USB disconnect, device number 7 [ 127.332747][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 127.344101][ T7181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.356875][ T25] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.378255][ T25] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.425822][ T25] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.483869][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 127.507730][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 127.530399][ T5247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.545005][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.569884][ T25] usb 2-1: config 0 descriptor?? [ 127.616065][ T7175] loop2: detected capacity change from 0 to 32768 [ 127.620536][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.623'. [ 127.682873][ T7175] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 127.703892][ T7198] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 127.751641][ T7175] XFS (loop2): Ending clean mount [ 127.804567][ T5259] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 127.919667][ T7209] loop0: detected capacity change from 0 to 128 [ 127.997270][ T25] hid-generic 0003:045E:05DA.0015: ignoring exceeding usage max [ 128.070855][ T25] hid-generic 0003:045E:05DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.1-1/input0 [ 128.208815][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.628'. [ 128.286632][ T8] usb 2-1: USB disconnect, device number 10 [ 128.494337][ T7212] loop3: detected capacity change from 0 to 32768 [ 128.507540][ T7212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.631 (7212) [ 128.528172][ T7212] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.541573][ T7212] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 128.550740][ T7212] BTRFS info (device loop3): using free-space-tree [ 128.693105][ T5245] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.709104][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.733673][ T5250] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.864775][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 128.880584][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.892127][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.909858][ T5250] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 128.923429][ T5250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 128.939402][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 128.955551][ T5250] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.976722][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.985959][ T5250] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 128.999932][ T9] usb 1-1: config 0 descriptor?? [ 129.006579][ T7255] loop1: detected capacity change from 0 to 1024 [ 129.013310][ T5250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.036136][ T5250] usb 5-1: config 0 descriptor?? [ 129.048354][ T5250] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 129.091605][ T7259] loop3: detected capacity change from 0 to 8 [ 129.098343][ T7259] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 129.127556][ T12] hfsplus: b-tree write err: -5, ino 4 [ 129.273049][ T25] usb 5-1: USB disconnect, device number 8 [ 129.447055][ T9] elecom 0003:056E:00FD.0016: item fetching failed at offset 5/9 [ 129.459731][ T9] elecom 0003:056E:00FD.0016: probe with driver elecom failed with error -22 [ 129.484995][ T7268] loop3: detected capacity change from 0 to 256 [ 129.501086][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 129.654200][ T5300] usb 1-1: USB disconnect, device number 7 [ 129.669068][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 129.676516][ T47] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.685062][ T47] usb 2-1: config 179 has no interface number 0 [ 129.692576][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.704524][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.716177][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.728717][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.747874][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 129.763876][ T47] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.773027][ T7274] loop2: detected capacity change from 0 to 256 [ 129.784685][ T7274] exfat: Deprecated parameter 'utf8' [ 129.787424][ T47] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 129.790239][ T7274] exfat: Deprecated parameter 'utf8' [ 129.799716][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.816060][ T7265] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 129.817261][ T7274] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 129.899114][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.922370][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 129.931273][ T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.935936][ T7276] loop2: detected capacity change from 0 to 512 [ 129.939915][ T25] usb 5-1: config 0 has no interface number 0 [ 129.950076][ T7276] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.953793][ T25] usb 5-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0x54, changing to 0x4 [ 129.963863][ T7276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.970502][ T25] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 129.992705][ T25] usb 5-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.005184][ T7276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 130.006462][ T25] usb 5-1: config 0 interface 1 has no altsetting 0 [ 130.016366][ T7276] System zones: 1-12 [ 130.036236][ T7276] EXT4-fs (loop2): 1 truncate cleaned up [ 130.043522][ T7276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.043690][ T25] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 130.067510][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.072302][ T5300] usb 2-1: USB disconnect, device number 11 [ 130.076199][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.076242][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.083510][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.093595][ T5254] Bluetooth: Frame is too long (len 186, expected len 4) [ 130.100225][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.126690][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 130.137887][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 130.142508][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.159293][ T25] usb 5-1: config 0 descriptor?? [ 130.167729][ T25] hso 5-1:0.1: Failed to find BULK IN ep [ 130.192419][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.204830][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.214486][ T9] usb 4-1: Product: syz [ 130.218765][ T9] usb 4-1: Manufacturer: syz [ 130.227941][ T5259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.261900][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 130.267173][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 130.280269][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 130.304533][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 130.374032][ T7286] loop0: detected capacity change from 0 to 512 [ 130.381704][ T7286] EXT4-fs: Ignoring removed nobh option [ 130.391170][ T7286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.411696][ T5300] usb 5-1: USB disconnect, device number 9 [ 130.421395][ T7286] EXT4-fs (loop0): 1 truncate cleaned up [ 130.427963][ T7286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.444560][ T7286] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 31 (only 1 groups) [ 130.481230][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.544612][ T5301] usb 4-1: USB disconnect, device number 8 [ 130.560964][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.710283][ T7297] loop1: detected capacity change from 0 to 256 [ 130.715836][ T7299] loop0: detected capacity change from 0 to 256 [ 130.729216][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 130.737708][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.753057][ T7297] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 130.753547][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.775914][ T25] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 130.785020][ T7297] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 130.785090][ T7297] exFAT-fs (loop1): Filesystem has been set read-only [ 130.798212][ T7297] exFAT-fs (loop1): hint_cluster is invalid (1), rewind to the first cluster [ 130.804885][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.820087][ T7299] FAT-fs (loop0): Directory bread(block 64) failed [ 130.821275][ T25] usb 3-1: config 0 descriptor?? [ 130.832304][ T7299] FAT-fs (loop0): Directory bread(block 65) failed [ 130.847219][ T7297] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 130.849246][ T7299] FAT-fs (loop0): Directory bread(block 66) failed [ 130.856863][ T7297] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e2cc828 iblock : 9, err : -5) [ 130.863242][ T7299] FAT-fs (loop0): Directory bread(block 67) failed [ 130.879917][ T7299] FAT-fs (loop0): Directory bread(block 68) failed [ 130.880043][ T7297] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 130.886565][ T7299] FAT-fs (loop0): Directory bread(block 69) failed [ 130.901835][ T7299] FAT-fs (loop0): Directory bread(block 70) failed [ 130.902395][ T7297] bio_check_eod: 48 callbacks suppressed [ 130.902410][ T7297] syz.1.662: attempt to access beyond end of device [ 130.902410][ T7297] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 130.908494][ T7299] FAT-fs (loop0): Directory bread(block 71) failed [ 130.941385][ T7299] FAT-fs (loop0): Directory bread(block 72) failed [ 130.949083][ T7299] FAT-fs (loop0): Directory bread(block 73) failed [ 131.142756][ T7301] loop4: detected capacity change from 0 to 4096 [ 131.168287][ T29] audit: type=1326 audit(1728984431.977:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 131.191882][ T7301] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 131.216228][ T7301] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 131.262813][ T29] audit: type=1326 audit(1728984431.977:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 131.268686][ T25] kye 0003:0458:5005.0017: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 131.298197][ T29] audit: type=1326 audit(1728984431.987:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 131.372406][ T25] kye 0003:0458:5005.0017: unknown main item tag 0x0 [ 131.386801][ T25] kye 0003:0458:5005.0017: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 131.392973][ T29] audit: type=1326 audit(1728984431.987:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 131.409974][ T25] kye 0003:0458:5005.0017: tablet-enabling feature report not found [ 131.435281][ T25] kye 0003:0458:5005.0017: tablet enabling failed [ 131.466938][ T25] usb 3-1: USB disconnect, device number 7 [ 131.469053][ T29] audit: type=1326 audit(1728984431.987:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 131.565565][ T29] audit: type=1326 audit(1728984431.987:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 131.625631][ T29] audit: type=1326 audit(1728984431.987:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7304 comm="syz.1.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe088d7dff9 code=0x7ffc0000 [ 131.989921][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.150968][ T7337] loop1: detected capacity change from 0 to 256 [ 132.169110][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 132.183963][ T7316] loop0: detected capacity change from 0 to 32768 [ 132.191187][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.218330][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.243474][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 132.263148][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.296084][ T25] usb 5-1: config 0 descriptor?? [ 132.313610][ T7322] loop3: detected capacity change from 0 to 40427 [ 132.363434][ T7322] F2FS-fs (loop3): heap/no_heap options were deprecated [ 132.373370][ T7322] F2FS-fs (loop3): invalid crc value [ 132.382733][ T7322] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.500067][ T7322] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 132.626678][ T5245] syz-executor: attempt to access beyond end of device [ 132.626678][ T5245] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.649953][ T5245] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 132.694605][ T7357] program syz.0.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.732460][ T25] hid-led 0003:04D8:F372.0018: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 132.748212][ T7355] loop2: detected capacity change from 0 to 4096 [ 132.818150][ T25] hid-led 0003:04D8:F372.0018: Greynut Luxafor initialized [ 132.873926][ T7361] loop0: detected capacity change from 0 to 1024 [ 132.895084][ T7361] hfsplus: bad catalog entry type [ 132.927042][ T25] usb 5-1: USB disconnect, device number 10 [ 132.953870][ T47] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 132.973615][ T924] hfsplus: b-tree write err: -5, ino 4 [ 132.988328][ T47] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 133.019598][ T47] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 133.040937][ T5300] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 133.060874][ T5300] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 133.091899][ T47] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 133.092842][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.106634][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.109648][ T47] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 133.173453][ T47] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 133.204309][ T47] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 133.234712][ T47] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 133.266330][ T5300] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 133.294736][ T5300] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 133.318871][ T5300] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 133.348485][ T5300] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 133.405204][ T5300] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 133.438824][ T5300] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 133.489225][ T5300] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 133.522374][ T5300] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 133.583341][ T7386] loop3: detected capacity change from 0 to 256 [ 133.648759][ T7386] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.999184][ T5301] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.188532][ T7367] loop1: detected capacity change from 0 to 40427 [ 134.189046][ T5301] usb 5-1: Using ep0 maxpacket: 32 [ 134.221074][ T7367] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 134.222159][ T5301] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.237593][ T7367] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 134.265875][ T7367] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.279036][ T5301] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 134.319029][ T5301] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 134.352541][ T5301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.382975][ T5301] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 134.414584][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.416129][ T7367] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 134.445961][ T5301] usb 5-1: config 0 descriptor?? [ 134.448989][ T7367] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.691397][ T7398] loop3: detected capacity change from 0 to 32768 [ 134.698590][ T7398] XFS: noikeep mount option is deprecated. [ 134.743748][ T5244] syz-executor: attempt to access beyond end of device [ 134.743748][ T5244] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.760775][ T5244] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 134.792825][ T7398] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 134.810398][ T7389] loop0: detected capacity change from 0 to 32768 [ 134.817042][ T7398] XFS (loop3): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 134.871313][ T5301] hid-thrustmaster 0003:044F:B65D.0019: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 134.914900][ T7389] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 134.965598][ T7398] XFS (loop3): Ending clean mount [ 135.004037][ T7389] XFS (loop0): Ending clean mount [ 135.048485][ T5245] XFS (loop3): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 135.069390][ T5301] hid-thrustmaster 0003:044F:B65D.0019: setup data couldn't be sent [ 135.089509][ C0] hid-thrustmaster 0003:044F:B65D.0019: URB to get model id failed with error -71 [ 135.139100][ T5301] usb 5-1: USB disconnect, device number 11 [ 135.145429][ T5603] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 135.341815][ T7433] loop1: detected capacity change from 0 to 2048 [ 135.565290][ T7438] loop0: detected capacity change from 0 to 512 [ 135.579966][ T7438] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 135.605007][ T7438] EXT4-fs (loop0): invalid journal inode [ 135.612325][ T7437] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.635129][ T7438] EXT4-fs (loop0): can't get journal size [ 135.645427][ T7438] EXT4-fs (loop0): 1 truncate cleaned up [ 135.658551][ T7438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.680260][ T7438] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 135.755980][ T7435] loop3: detected capacity change from 0 to 40427 [ 135.786690][ T7435] F2FS-fs (loop3): invalid crc value [ 135.791201][ T7442] loop4: detected capacity change from 0 to 16 [ 135.804000][ T7442] erofs: (device loop4): mounted with root inode @ nid 36. [ 135.804592][ T7435] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.829520][ T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.865795][ T5603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.923838][ T7448] netlink: 56 bytes leftover after parsing attributes in process `syz.4.724'. [ 135.944314][ T7435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.011308][ T7454] usb usb8: usbfs: process 7454 (syz.0.722) did not claim interface 0 before use [ 136.025381][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.049140][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 136.070254][ T5245] syz-executor: attempt to access beyond end of device [ 136.070254][ T5245] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.092670][ T47] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 136.102638][ T5245] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 136.112754][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.139001][ T47] usb 3-1: SerialNumber: syz [ 136.150000][ T47] usb 3-1: config 0 descriptor?? [ 136.156902][ T47] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 136.254213][ T7465] loop4: detected capacity change from 0 to 256 [ 136.263114][ T7465] exfat: Deprecated parameter 'utf8' [ 136.268734][ T7465] exfat: Deprecated parameter 'namecase' [ 136.276941][ T7465] exfat: Deprecated parameter 'utf8' [ 136.291572][ T7465] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 136.374245][ T47] usb 3-1: USB disconnect, device number 8 [ 136.450185][ T5250] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.471262][ T7472] loop4: detected capacity change from 0 to 64 [ 136.596824][ T7476] loop3: detected capacity change from 0 to 4096 [ 136.625951][ T7480] loop4: detected capacity change from 0 to 1024 [ 136.632942][ T7481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.644726][ T5250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.667106][ T7480] hfsplus: bad catalog entry type [ 136.672619][ T5250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.689623][ T5250] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 136.703677][ T53] hfsplus: b-tree write err: -5, ino 4 [ 136.722390][ T5250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.733629][ T5250] usb 1-1: config 0 descriptor?? [ 136.749223][ T5301] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 136.868617][ T7487] smb3: Unknown parameter 'rdmas' [ 136.905816][ T5301] usb 2-1: Using ep0 maxpacket: 16 [ 136.921271][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.949191][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.976072][ T5301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 137.009140][ T5301] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 137.040044][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.102380][ T7498] loop2: detected capacity change from 0 to 64 [ 137.365512][ T7490] loop3: detected capacity change from 0 to 40427 [ 137.375847][ T5301] usb 2-1: config 0 descriptor?? [ 137.380159][ T7490] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 137.383563][ T5250] elo 0003:04E7:0030.001A: unknown main item tag 0xd [ 137.399171][ T5250] elo 0003:04E7:0030.001A: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 137.414657][ T5250] usb 1-1: USB disconnect, device number 8 [ 137.422598][ T7490] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 137.438011][ T7490] F2FS-fs (loop3): invalid crc value [ 137.453625][ T7490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.563446][ T7490] F2FS-fs (loop3): Start checkpoint disabled! [ 137.610163][ T7490] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 137.617317][ T7490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 137.646404][ T7490] F2FS-fs (loop3): access invalid blkaddr:3355443200 [ 137.661740][ T7490] CPU: 1 UID: 0 PID: 7490 Comm: syz.3.742 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0 [ 137.671873][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.681977][ T7490] Call Trace: [ 137.685284][ T7490] [ 137.688242][ T7490] dump_stack_lvl+0x241/0x360 [ 137.692969][ T7490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.698213][ T7490] ? filemap_dirty_folio+0xae/0x360 [ 137.703457][ T7490] ? f2fs_dirty_node_folio+0x510/0xaf0 [ 137.708973][ T7490] __f2fs_is_valid_blkaddr+0xe16/0x1460 [ 137.714574][ T7490] f2fs_truncate_data_blocks_range+0x658/0x1000 [ 137.720876][ T7490] ? f2fs_do_truncate_blocks+0x6e3/0x1180 [ 137.726645][ T7490] f2fs_do_truncate_blocks+0x6e3/0x1180 [ 137.732248][ T7490] ? __pfx_f2fs_do_truncate_blocks+0x10/0x10 [ 137.738273][ T7490] ? __pfx___dquot_initialize+0x10/0x10 [ 137.743872][ T7490] f2fs_truncate_blocks+0x10d/0x300 [ 137.749200][ T7490] ? f2fs_setattr+0xc08/0x12d0 [ 137.754005][ T7490] f2fs_truncate+0x407/0x700 [ 137.758639][ T7490] ? truncate_setsize+0xcf/0xf0 [ 137.763532][ T7490] f2fs_setattr+0xc08/0x12d0 [ 137.768184][ T7490] ? __pfx_f2fs_setattr+0x10/0x10 [ 137.773256][ T7490] notify_change+0xbca/0xe90 [ 137.777902][ T7490] do_truncate+0x220/0x310 [ 137.782367][ T7490] ? __pfx_do_truncate+0x10/0x10 [ 137.787597][ T7490] ? apparmor_file_truncate+0x297/0x350 [ 137.793212][ T7490] path_openat+0x2e1e/0x3590 [ 137.797912][ T7490] ? __pfx_path_openat+0x10/0x10 [ 137.802897][ T7490] ? rcu_is_watching+0x15/0xb0 [ 137.807722][ T7490] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 137.813150][ T7490] ? getname_kernel+0x140/0x2f0 [ 137.818047][ T7490] ? do_file_open_root+0x4e3/0x680 [ 137.823200][ T7490] do_file_open_root+0x356/0x680 [ 137.828177][ T7490] ? __lock_acquire+0x1384/0x2050 [ 137.833244][ T7490] ? __pfx_do_file_open_root+0x10/0x10 [ 137.838768][ T7490] ? alloc_fd+0x61a/0x690 [ 137.843134][ T7490] ? do_raw_spin_lock+0x14f/0x370 [ 137.848190][ T7490] ? __pfx_lock_release+0x10/0x10 [ 137.853243][ T7490] ? build_open_flags+0x448/0x5b0 [ 137.858316][ T7490] file_open_root+0x247/0x2a0 [ 137.863033][ T7490] ? __pfx_file_open_root+0x10/0x10 [ 137.868269][ T7490] ? _raw_spin_unlock+0x28/0x50 [ 137.873152][ T7490] ? alloc_fd+0x61a/0x690 [ 137.877540][ T7490] do_handle_open+0x85a/0x9d0 [ 137.882257][ T7490] ? __pfx_do_handle_open+0x10/0x10 [ 137.887485][ T7490] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.893507][ T7490] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.899869][ T7490] ? do_syscall_64+0x100/0x230 [ 137.904685][ T7490] ? do_syscall_64+0xb6/0x230 [ 137.909394][ T7490] do_syscall_64+0xf3/0x230 [ 137.914032][ T7490] ? clear_bhb_loop+0x35/0x90 [ 137.918763][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.924692][ T7490] RIP: 0033:0x7f6f24d7dff9 [ 137.929137][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.948783][ T7490] RSP: 002b:00007f6f25c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 137.957246][ T7490] RAX: ffffffffffffffda RBX: 00007f6f24f35f80 RCX: 00007f6f24d7dff9 [ 137.965253][ T7490] RDX: 000000000000ffa1 RSI: 00000000200005c0 RDI: 0000000000000004 [ 137.973243][ T7490] RBP: 00007f6f24df0296 R08: 0000000000000000 R09: 0000000000000000 [ 137.981251][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.989255][ T7490] R13: 0000000000000000 R14: 00007f6f24f35f80 R15: 00007ffd54cf5ab8 [ 137.997244][ T7490] [ 138.026857][ T5301] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 138.042341][ T5301] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 138.053835][ T5301] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 138.065789][ T5301] shield 0003:0955:7214.001B: unknown main item tag 0x0 [ 138.078826][ T5301] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 138.147635][ T5301] shield 0003:0955:7214.001B: Registered Thunderstrike controller [ 138.171793][ T5301] shield 0003:0955:7214.001B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 138.242045][ T9] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 138.265770][ T5301] usb 2-1: USB disconnect, device number 12 [ 138.275982][ T9] shield 0003:0955:7214.001B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 138.304449][ T5301] ------------[ cut here ]------------ [ 138.310162][ T5301] WARNING: CPU: 0 PID: 5301 at drivers/thermal/thermal_thresholds.c:28 thermal_thresholds_flush+0x1ff/0x230 [ 138.321929][ T5301] Modules linked in: [ 138.325866][ T5301] CPU: 0 UID: 0 PID: 5301 Comm: kworker/0:4 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0 [ 138.336278][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.346797][ T5301] Workqueue: usb_hub_wq hub_event [ 138.351997][ T5301] RIP: 0010:thermal_thresholds_flush+0x1ff/0x230 [ 138.358646][ T5301] Code: 34 24 eb 05 e8 92 87 36 f9 4c 89 f7 be 0f 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c7 3a ff ff e8 72 87 36 f9 90 <0f> 0b 90 e9 7f fe ff ff 48 c7 c1 fc df 1d 90 80 e1 07 80 c1 03 38 [ 138.379568][ T5301] RSP: 0000:ffffc90004297168 EFLAGS: 00010283 [ 138.385706][ T5301] RAX: ffffffff885e5a2e RBX: 0000000000000000 RCX: 0000000000100000 [ 138.394806][ T5301] RDX: ffffc9001232e000 RSI: 0000000000005288 RDI: 0000000000005289 [ 138.403541][ T5301] RBP: ffffffff8f97b8c0 R08: ffffffff885e58a2 R09: 1ffffffff285d10e [ 138.411847][ T5301] R10: dffffc0000000000 R11: fffffbfff285d10f R12: dffffc0000000000 [ 138.420191][ T5301] R13: dffffc0000000000 R14: ffff888028f0d000 R15: ffff888028f0d7c0 [ 138.428401][ T5301] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 138.437577][ T5301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.444301][ T5301] CR2: 0000001b33420000 CR3: 000000004d49a000 CR4: 00000000003526f0 [ 138.452400][ T5301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.460492][ T5301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.468551][ T5301] Call Trace: [ 138.471948][ T5301] [ 138.475715][ T5301] ? __warn+0x168/0x4e0 [ 138.480548][ T5301] ? thermal_thresholds_flush+0x1ff/0x230 [ 138.486316][ T5301] ? report_bug+0x2b3/0x500 [ 138.490982][ T5301] ? thermal_thresholds_flush+0x1ff/0x230 [ 138.496746][ T5301] ? handle_bug+0x60/0x90 [ 138.501195][ T5301] ? exc_invalid_op+0x1a/0x50 [ 138.505913][ T5301] ? asm_exc_invalid_op+0x1a/0x20 [ 138.511059][ T5301] ? thermal_thresholds_flush+0x72/0x230 [ 138.516725][ T5301] ? thermal_thresholds_flush+0x1fe/0x230 [ 138.522698][ T5301] ? thermal_thresholds_flush+0x1ff/0x230 [ 138.528451][ T5301] ? thermal_thresholds_flush+0x1fe/0x230 [ 138.534898][ T5301] thermal_zone_device_unregister+0x29e/0x370 [ 138.541060][ T5301] power_supply_unregister+0xe8/0x140 [ 138.546549][ T5301] ? __pfx_shield_remove+0x10/0x10 [ 138.551779][ T5301] shield_remove+0x72/0x120 [ 138.556311][ T5301] hid_device_remove+0x225/0x370 [ 138.561353][ T5301] ? __pfx_hid_device_remove+0x10/0x10 [ 138.566837][ T5301] device_release_driver_internal+0x4a9/0x7c0 [ 138.573025][ T5301] bus_remove_device+0x34f/0x420 [ 138.578796][ T5301] device_del+0x57a/0x9b0 [ 138.584040][ T5301] ? __pfx_device_del+0x10/0x10 [ 138.589038][ T5301] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.595417][ T5301] hid_destroy_device+0x6a/0x1b0 [ 138.600490][ T5301] usbhid_disconnect+0x9e/0xc0 [ 138.605295][ T5301] usb_unbind_interface+0x25e/0x940 [ 138.610664][ T5301] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 138.616425][ T5301] ? __pfx_usb_unbind_interface+0x10/0x10 [ 138.622232][ T5301] device_release_driver_internal+0x503/0x7c0 [ 138.628325][ T5301] bus_remove_device+0x34f/0x420 [ 138.633352][ T5301] device_del+0x57a/0x9b0 [ 138.637702][ T5301] ? kobject_put+0x272/0x480 [ 138.642397][ T5301] ? __pfx_device_del+0x10/0x10 [ 138.647282][ T5301] ? kobject_put+0x44d/0x480 [ 138.652013][ T5301] usb_disable_device+0x3bf/0x850 [ 138.657079][ T5301] usb_disconnect+0x340/0x950 [ 138.661843][ T5301] hub_event+0x1ebc/0x5150 [ 138.666298][ T5301] ? debug_object_deactivate+0x2d5/0x390 [ 138.672065][ T5301] ? __pfx_hub_event+0x10/0x10 [ 138.676888][ T5301] ? __pfx_lock_acquire+0x10/0x10 [ 138.682780][ T5301] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.688815][ T5301] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.695976][ T5301] ? process_scheduled_works+0x976/0x1850 [ 138.701775][ T5301] process_scheduled_works+0xa63/0x1850 [ 138.707388][ T5301] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.713505][ T5301] ? assign_work+0x364/0x3d0 [ 138.718130][ T5301] worker_thread+0x870/0xd30 [ 138.722793][ T5301] ? __kthread_parkme+0x169/0x1d0 [ 138.727843][ T5301] ? __pfx_worker_thread+0x10/0x10 [ 138.733053][ T5301] kthread+0x2f0/0x390 [ 138.737154][ T5301] ? __pfx_worker_thread+0x10/0x10 [ 138.742362][ T5301] ? __pfx_kthread+0x10/0x10 [ 138.746994][ T5301] ret_from_fork+0x4b/0x80 [ 138.751568][ T5301] ? __pfx_kthread+0x10/0x10 [ 138.756197][ T5301] ret_from_fork_asm+0x1a/0x30 [ 138.761093][ T5301] [ 138.764157][ T5301] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.771449][ T5301] CPU: 0 UID: 0 PID: 5301 Comm: kworker/0:4 Not tainted 6.12.0-rc3-next-20241015-syzkaller #0 [ 138.781688][ T5301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.791743][ T5301] Workqueue: usb_hub_wq hub_event [ 138.796773][ T5301] Call Trace: [ 138.800047][ T5301] [ 138.802974][ T5301] dump_stack_lvl+0x241/0x360 [ 138.807655][ T5301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.812853][ T5301] ? __pfx__printk+0x10/0x10 [ 138.817454][ T5301] ? vscnprintf+0x5d/0x90 [ 138.821786][ T5301] panic+0x349/0x880 [ 138.825684][ T5301] ? __warn+0x177/0x4e0 [ 138.829840][ T5301] ? __pfx_panic+0x10/0x10 [ 138.834265][ T5301] ? ret_from_fork_asm+0x1a/0x30 [ 138.839205][ T5301] __warn+0x34b/0x4e0 [ 138.843183][ T5301] ? thermal_thresholds_flush+0x1ff/0x230 [ 138.848903][ T5301] report_bug+0x2b3/0x500 [ 138.853240][ T5301] ? thermal_thresholds_flush+0x1ff/0x230 [ 138.858966][ T5301] handle_bug+0x60/0x90 [ 138.863119][ T5301] exc_invalid_op+0x1a/0x50 [ 138.867618][ T5301] asm_exc_invalid_op+0x1a/0x20 [ 138.872464][ T5301] RIP: 0010:thermal_thresholds_flush+0x1ff/0x230 [ 138.878799][ T5301] Code: 34 24 eb 05 e8 92 87 36 f9 4c 89 f7 be 0f 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c7 3a ff ff e8 72 87 36 f9 90 <0f> 0b 90 e9 7f fe ff ff 48 c7 c1 fc df 1d 90 80 e1 07 80 c1 03 38 [ 138.898413][ T5301] RSP: 0000:ffffc90004297168 EFLAGS: 00010283 [ 138.904485][ T5301] RAX: ffffffff885e5a2e RBX: 0000000000000000 RCX: 0000000000100000 [ 138.912454][ T5301] RDX: ffffc9001232e000 RSI: 0000000000005288 RDI: 0000000000005289 [ 138.920451][ T5301] RBP: ffffffff8f97b8c0 R08: ffffffff885e58a2 R09: 1ffffffff285d10e [ 138.928416][ T5301] R10: dffffc0000000000 R11: fffffbfff285d10f R12: dffffc0000000000 [ 138.936386][ T5301] R13: dffffc0000000000 R14: ffff888028f0d000 R15: ffff888028f0d7c0 [ 138.944358][ T5301] ? thermal_thresholds_flush+0x72/0x230 [ 138.949988][ T5301] ? thermal_thresholds_flush+0x1fe/0x230 [ 138.955704][ T5301] ? thermal_thresholds_flush+0x1fe/0x230 [ 138.961418][ T5301] thermal_zone_device_unregister+0x29e/0x370 [ 138.967499][ T5301] power_supply_unregister+0xe8/0x140 [ 138.972875][ T5301] ? __pfx_shield_remove+0x10/0x10 [ 138.977978][ T5301] shield_remove+0x72/0x120 [ 138.982480][ T5301] hid_device_remove+0x225/0x370 [ 138.987425][ T5301] ? __pfx_hid_device_remove+0x10/0x10 [ 138.992880][ T5301] device_release_driver_internal+0x4a9/0x7c0 [ 138.998957][ T5301] bus_remove_device+0x34f/0x420 [ 139.003903][ T5301] device_del+0x57a/0x9b0 [ 139.008236][ T5301] ? __pfx_device_del+0x10/0x10 [ 139.013082][ T5301] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.019415][ T5301] hid_destroy_device+0x6a/0x1b0 [ 139.024442][ T5301] usbhid_disconnect+0x9e/0xc0 [ 139.029206][ T5301] usb_unbind_interface+0x25e/0x940 [ 139.034406][ T5301] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 139.040122][ T5301] ? __pfx_usb_unbind_interface+0x10/0x10 [ 139.045835][ T5301] device_release_driver_internal+0x503/0x7c0 [ 139.051908][ T5301] bus_remove_device+0x34f/0x420 [ 139.056852][ T5301] device_del+0x57a/0x9b0 [ 139.061180][ T5301] ? kobject_put+0x272/0x480 [ 139.065780][ T5301] ? __pfx_device_del+0x10/0x10 [ 139.070630][ T5301] ? kobject_put+0x44d/0x480 [ 139.075223][ T5301] usb_disable_device+0x3bf/0x850 [ 139.080250][ T5301] usb_disconnect+0x340/0x950 [ 139.084937][ T5301] hub_event+0x1ebc/0x5150 [ 139.089373][ T5301] ? debug_object_deactivate+0x2d5/0x390 [ 139.095053][ T5301] ? __pfx_hub_event+0x10/0x10 [ 139.099815][ T5301] ? __pfx_lock_acquire+0x10/0x10 [ 139.104839][ T5301] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.110824][ T5301] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.117161][ T5301] ? process_scheduled_works+0x976/0x1850 [ 139.122908][ T5301] process_scheduled_works+0xa63/0x1850 [ 139.128512][ T5301] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.134518][ T5301] ? assign_work+0x364/0x3d0 [ 139.139117][ T5301] worker_thread+0x870/0xd30 [ 139.143721][ T5301] ? __kthread_parkme+0x169/0x1d0 [ 139.148748][ T5301] ? __pfx_worker_thread+0x10/0x10 [ 139.153870][ T5301] kthread+0x2f0/0x390 [ 139.157961][ T5301] ? __pfx_worker_thread+0x10/0x10 [ 139.163103][ T5301] ? __pfx_kthread+0x10/0x10 [ 139.167703][ T5301] ret_from_fork+0x4b/0x80 [ 139.172118][ T5301] ? __pfx_kthread+0x10/0x10 [ 139.176703][ T5301] ret_from_fork_asm+0x1a/0x30 [ 139.181479][ T5301] [ 139.184709][ T5301] Kernel Offset: disabled [ 139.189103][ T5301] Rebooting in 86400 seconds..