last executing test programs: 2.148515453s ago: executing program 0 (id=1317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 1.95259572s ago: executing program 0 (id=1319): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="9c", 0x1}], 0x1) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0xe0) 1.857742518s ago: executing program 0 (id=1320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000740)={0x1, &(0x7f0000000000)=[{0x80}]}) 1.808256583s ago: executing program 3 (id=1321): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xd6e) mount_setattr(0xffffffffffffff9c, 0x0, 0x8800, &(0x7f0000000300)={0x0, 0x0, 0x140000, {r0}}, 0x84) 1.754045107s ago: executing program 0 (id=1322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000f8ff00850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.731249369s ago: executing program 3 (id=1323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.638767367s ago: executing program 3 (id=1324): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000580)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x1}}, {@part={'part', 0x3d, 0xc3}}, {@part={'part', 0x3d, 0xa5ef}}, {@creator={'creator', 0x3d, "a0a54db3"}}, {@part={'part', 0x3d, 0xfff}}, {@gid}, {@uid}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}, {@dir_umask={'dir_umask', 0x3d, 0x2}}, {@codepage={'codepage', 0x3d, 'cp737'}}]}, 0x1, 0x2f6, &(0x7f00000009c0)="$eJzs3T9v00wcB/DvXZLG7VP1cf8gJBZQoRIsFQUGxJIKZWVnQkCTShFWEW2RgIWAGBEvgL1vASbeAAuINwATEy8g26E7Xxw7PrtpSOwGvh8p0eV8d/6dbMf3s9QGRPTPut38fnT9p34JoIIKgFuABOABVQBncNZ7unfYOQzarbyBKqaHfgmEPUWqzc5e29VV9zM9LF9/qmIxXkfToZTa/pHXoFZcLFQec/U7SKBur0Oz3Ss4rmnpAufLjqFo8QMseujhGZZKDIeIiE4Be/+X9jZRM1UCUgIb9rafvv/L0sIdg0p86pUWx1TcCFJVKrdD7P5vVndK6OP7v9k0yPdMCqe3y36WOEowwynDHMJzJbHAFMdllSYWOb/bqWJz5xVaEq/RsGLN1sx7K3kyHhPtuiM3zZE9Wg13FsLZmBXlsH5Iu52gXdcFR/yrJ9vjnxOfxVdxT/h4j1a0/qsqoQ+TOVL+0JGSNR3/1ewR/zO9dCvYtL/RaCS/G5bNTs7ZPVipWarEOeu5MxL0z6jlwUODbhRBGOfH7F4rSD5WCGe3lT0702vV1cuPPmX0Wkv0qtgzYXPncZD7KGW6xDtxV6zjFz6gGVv/Sx3fBka5MnUb09KeGeF85twtq6aln8ocB5fLhSgCqz7exOgk3uIhbmLp4PmLR5UgaO/rwgNH4cnivrA1tTeAs80YhfqExtEFdAc1Snup1Kjd1eTCqGO45sqERg4L+vsjqtGXj6uxvsqiGpk94CekNy1NLNRJFDxHhKel0PwCDG86StXMQEHfcTM2lf0FRUU4EP2DbivmSw6IiqbXXUIJr7+St6s6kyLpNz8nG8lPMpMjbkUZXHIpuGLeF9wZ3HbWsJkZXGyP1zJyRpNzXbwMXIpVCuTmXL6N8y8hmviG+3z+T0REREREREREREREREREREREREQ0a4r4S4Oy50hERERERERERERERERERERERERERERENOvG+v1f1/+IN7//6/P3f4lmyO8AAAD//8V1e0E=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.632970888s ago: executing program 0 (id=1325): unshare(0x680) pipe(&(0x7f0000000040)={0xffffffffffffffff}) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) 1.541602126s ago: executing program 0 (id=1327): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5001"], 0x150}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) 1.434435325s ago: executing program 3 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005500)={0x0, 0x0, &(0x7f00000054c0)={&(0x7f0000005440)={0x14, r1, 0x1}, 0x14}}, 0x0) 1.325562784s ago: executing program 3 (id=1334): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000617474722c616374697665c75a876348615f6c6f67873d342c6191138918655f2c6f67733d342c9b756f74082c66b2d1c46f4b2a3d159dce99edb2a4ea6173670000000000dbb374615f666c7573682c70726a6a71756f74613d2d7b2c6a7166748dba745fe3616368652c66617374626f6f742c00834aa38fc41d229b202ddadba6d8f9bfb74f705a8b2786d610d1f2335eb1dbbc87d1b7692ffe82e508d80bdcf88ebdd5523426b8a12703418316731cf8b17ccf2c330769e5a4a505efbc7f3c5c2d958ffa4d22b0e082b7d907739b8a94af832b46c4d5df1841440857364bd0ce880b4e382a53b6db010b536c4453c83641a4dbf3d147b6a4cced9525b95802fb963bbe29339389e0080a63899274b06ec30a4b9637f55c124fa8316c648710702597b1fe78094e80ef6cfe5fed332bccf3ed508a7ce4896190c3d30bb6d9cf60772580acc099a354eb945ed1b1389b6e41c8049beb0502fe36ae19cbe0e55e8f19988808a3985480e08369d04c8a2ffdd97dad05d38ddc9581179b74d9ef3f2ae5087750ae5b2dfc1dc080b627acb1a20e393875685f98759c6b7528693f270478dcc19640894fa2c3f4df26557e79c79e488bee952a50d0e0ffa94cdf736c06190beff240f4dc83dc7e5e6bdc5917ba0f104378c42985e2b1441e06", @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 1.318901635s ago: executing program 4 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.286525738s ago: executing program 2 (id=1336): unshare(0x4000400) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x94) 1.220915714s ago: executing program 2 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0xa, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {0x35}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) 1.186212307s ago: executing program 4 (id=1338): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x404, &(0x7f0000000480)=ANY=[@ANYBLOB='quiet,codepage=iso8859-6,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYRESOCT], 0x8, 0x351, &(0x7f0000000900)="$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") 1.100456835s ago: executing program 2 (id=1340): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xc0000004, 0x0) 653.641603ms ago: executing program 1 (id=1344): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='virt_wifi0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)) 629.459625ms ago: executing program 1 (id=1345): personality(0x500006) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) 593.611628ms ago: executing program 1 (id=1346): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000000, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES16, @ANYBLOB="87cdecb03ef8432bc18a0be5c82c26ef76c7e7afc3f46e75faec6b84f5bf5d44a362f320bba3ddbe17a52ade4ba62ef61bbb768ffb16646c43a13c81d29c3bbd54fe07a874bb430f1697db9660d0a610cc4d58c432796e884e9076092a18cc3f717d8eb7215a25bca8fdbe350b3ae00d4a584c4cbb6e5928039596ea51913252d70dcb12d5b73a7cc6cdf28372ab5f652ee0bc31d737cc6448a937c6e1a319ee7131a82a2770b898fa6fb45da0b447035cd0a40a242d25a11388b05df206aa678438ef2064bfba6960605a480197094a2b102602a6d5a4eb2247954c1a0841f1"], 0x8, 0xa7, &(0x7f0000000480)="$eJzszkFKw0AYBeBnolERcgEX3iB3yFEkS925UoScyKt4BG/gottupqRJ1l2U0lK+D2b+BzM/vN/tz3PapIxJKaU0SR4z54/Pr7fX9+mus3eX1X24CtVyHpK8tHP+76eXZvlxk7/N99A/ZZjmedsCAADHqNKt8XaZ3cGlMUl9ylYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl2MXAAD//1oAGQE=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 505.108896ms ago: executing program 1 (id=1347): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0xa10812, &(0x7f00000002c0)=ANY=[@ANYBLOB='discard,utf8,fmask=00000000000000000000267,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,umask=00000000000000000200004,umask=00000000000000000003377,errors=continue,iocharset=iso8859-9,iocharset=ascii,umask=00000000000000000005454,dmask=00000000000000000000015,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=user_u,subj_type=iocharset,dont_measure,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673666c6f6f723d2c6673636f6e746578743d73797374656d5f752ceb0d6e7065726d69745f646972656374696f2c666f776e", @ANYRES32, @ANYBLOB=',\x00'], 0x21, 0x14fd, &(0x7f0000003f40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/178, 0xb2) 269.024496ms ago: executing program 4 (id=1348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) 195.592363ms ago: executing program 4 (id=1349): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001600010000000000800000000a00ec"], 0x1c}}, 0x0) 188.576434ms ago: executing program 2 (id=1350): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000033c0)={&(0x7f0000000c80)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003240)=ANY=[@ANYBLOB="300000000000000000000000070000000144141103"], 0x30}, 0x0) 161.734566ms ago: executing program 1 (id=1351): r0 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000031401"], 0x38}}, 0x0) 156.529996ms ago: executing program 3 (id=1352): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0xffff, 0xa}, {0x100}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 128.544839ms ago: executing program 2 (id=1353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 75.527123ms ago: executing program 4 (id=1354): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x12, 0xa01, 0x0, 0x0, {0xa, 0x2}, [@typed={0x4}, @nested={0xc, 0x10c, 0x0, 0x1, [@typed={0x8, 0xdc, 0x0, 0x0, @u32=0x9}]}]}, 0x24}}, 0x0) 29.726757ms ago: executing program 1 (id=1355): inotify_init1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019a40)={{0x14}, [@NFT_MSG_DELCHAIN={0x90, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0x72, 0xc, "ded08365f9af3e5af916cf47a217d42f46e471cfb714fda98e4e857dc5d86ead68c49a12fe23805d6b68e94901002ff3fbcf32031fee3b15a58333c783a663b807bea5b3a6c8b471f8c823d02106781129c551bccdf4e9d96cfab7d0ef54865cc50b6b39854f5da6e6aaae6cec91"}, @NFTA_CHAIN_ID={0x8}]}, @NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN]}]}]}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x164}}, 0x0) 4.413459ms ago: executing program 2 (id=1356): ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) madvise(&(0x7f000011a000/0x1000)=nil, 0x1000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 0s ago: executing program 4 (id=1357): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f0000012ec0)="$eJzs/QW8bXWhcH/vA4fuUGkpBaVBykC6RERCQpAuSQEpRUAsQBQDpbu7u7u7u7u7eT8HDqjcAdf7vPf/cO8zxvh49tprrbnn/q3fd87pXntu1lpuwaXmHRgYc+CDPrz8R7uvNtYR2wwsft4hmz907+pvTnvO0JuH/+BirLmHXs4z9HLegYGBQUPXM+iD2wbPdfIpwwwMHhjyv3806kgjDzPqwMDIQ68OXc/A7B9cjHLoh8u997F4oJMO+XY7ffDv/UYbspL3B7rKPOMNDAyM+E9fP2RcM/6HByptuXkWWvAfVh+5DTP07kH/uO/9y8Ef/BvlwIGBUfYf+OTtY8iyw/3T1/7fbMj3HPPuLVZ7/DP43v/rWm6ehRb5mP+QfXHYobfNPmQf//g+aOzj2/lal9+9ytApHDR04gb/0/7yWWz3/0ctN8+Ciw188n48cPRDs53z3vvHzcHzDwwMXmBgYPCCAwODF/qsPeq/p89046uqqqrPpHnmnWXIc/ZhPvbzwIgf/lxLPxde9vxLdw4MDF78g+eJg1f58LlgVVVVVVVVVf3PbJ55Z5kPnv+P+WnP/2c4bcEZev5fVVVVVVVV9b+nReaZd5Yhz/U/9vx/vE97/v/eoxvt9cHf/s89+wdf9e5n+yCqqqqqqqqq6lNbcBF8/j/ppz3/v+T0B5/v+X9VVVVVVVXV/56WnGXB+Qb+6XX2ht489Yf30/P/E5+aaPXParxVVVVVVVVV9V/v3WfOPPcfr/k+ycDHXu/9/Yb+XmDQ8edff/1nNtD/GQ36j78P2e6zHtP/vw1xHvHISQcGNlzmsx5KfQb9r3mt+vr/pPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wnnP//6PX/x197zMeGLjrV6bs+t8E/vvL99/4fvPgiz2z/GQ39s+j/1fP/A+sOGhgY6jvmugMDA4vPs+TSUw8MDGzw3K6nTznw0X1zDLnvG2MP+/4bxH/4n4ksMBaveLvJP7gcsqEMjPvROo5/f/2LvHfAsIM+Noh/aqxTDzlkneVe+9rHL6f65McxzIefLHvBLvt9+N+yDPOxhUb8hC/+cP0fPpaPOw8d+9RDxj7DZhtsPMOmW2093bobrLr2mmuvueEsM88604yzzTTnjLPOsNa666854wcfP2HOJn3/43z/zpyN+vE5e2aef56zjz+2T5qzST99zt5f47CXnTbWh3M2+L84Z/N9+pxNuu7QbzTW3MMNrPL+1AwaGBhr/uEGthxyZaYRBgbGWmDosuMNWfabYw8zMLDrPx7okM9G+GgbHLTdkGWWW3CpeT84TA0M/OPyH33C+9kPP3Tkcw+9nGfo5bwffJsxB/6xKQ6e6+RThhkyF/8yHaOONPIwow4MjDz06tD1DMz5wcXIZ3243Ce8z/rHBvr+y6zs9MG/9xttYGBglCGfzL/qoJeGTP3/hfdp/z/6////4DXHoI+2x0FD/w1d5gOveRZa5B/f6/1pGDJ3ww69bfYhJv/Nb23/L/2H8U464sCknzLeT3ldnPej7Wv1U287+7/rdXFovON9yng/5XV8P3G8yz++wm0frOq/bbwfO9Yt9v7Huf+dY93Apx/rhqUVrHnNxB8/1n3nk4f4L4fLD+dohI8t9EnHuiVmv3a7Ieuf+9OPdYsNGftw/3KsG2ZgYKz5PjzWDTnwLTjcwK5Drsw85MpCww0cPuTKLO9fGWng/CFXpl99o/XXGHLDwv9xO5h60L/8gSbsZwt+bD8b9E+PfdDH/r5z8AeXoxz44Xs4fcJxc9DQh/WfHitoux3zU8b7Ke8/hfM85Lb1zrlymv+u95+i8Y746eP9pPfL/sTx7vDmtvf+N4/3o/1suH+aroX/nf1s0n/dz4Y8xGH/ac/4d38OWwOW/+Dz8T5a2x5jHP/RzxTDfWy9/9nPFAt/+n425rof+7od9x8Y9Glzs9C/MzcT/Ydj0Pb/PDf/7s9bU0/xwf3DfsrcXD+w0rYfzs3w/8W5Wei/OjdzDwz7r3MzeGCBgYGBKYceHxb8d+ZmvE+fm393uxkZlv/g8zU/umn+ia6e7MO5+fhc/Gdzs+B/dW4m/Wi7mfL9+yYfZmD44Qe2XHWzzTaZ6YOPH16d+YOPn74Pzv/vzOWY/z1zOcHgT5rLf2yquy280o7/yT74H47pH65//v/qXA58NJcD6358Z6n/qfX7P3f5u8vfXf7u8neXv7v8xX3C+f+PXv9/iT3On23oLzeGm/C+68b5rMf7Gff/9Pn/ob7/cv5/nOvum3CYgY/u+9Tzsx8s8z/y/OzsH1yMcuiHy338/CAP9JPPz745584v/l86P/t/1If76r/xe7iO/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xn3D+f8YP/w7gsqtPXHHoidDh3rvjqkU/6/F+xv0/ff5/qO+/nP9f9Ko73htm4KP7PvX8/wfLOM7/n/7Wm2/+Tz7//+G+2vn/+k/K313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFfcL5/7k//DuAOS+5bOUP/x7ginufmuizHu9n3P+r5/97/39vHf/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4oae/x/42NtbLtF2gcH5///dfYL/9/PHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v+D/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4/zB/zOK/Yv6YxX+l/DGL/4/yxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvH/cf6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/Sf6YxX+T/DGL/6b5Yxb/zfLHLP4/zR+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/n+WPWfx/nj9m8d8mf8zi/4v8MYv/tvljFv/t8scs/tvnj1n8f5k/ZvHfIX/M4v+r/DGL/6/zxyz+v8kfs/j/Nn/M4v+7/DGL/475Yxb/nfLHLP47549Z/H+fP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvH/c/6Yxf8v+WMW/7/mj1n8d8sfs/j/LX/M4v/3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjF/738MYn/oIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+n8sfs/h/Pn/M4v+F/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/4v5Yxb/SfPHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4v+l/DGL/5fzxyz+U+WPWfynzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/lj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi//X88cs/t/IH7P4fzN/zOL/rfwxi/9c+WMW/2/nj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOL/nfwxi/9i+WMW/+/mj1n8F88fs/h/L3/M4r9E/pjF//v5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvH/Qf6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/H+YP2bxXzF/zOK/Uv6Yxf9H+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4/zh/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4/yR/zOK/Sf6YxX/T/DGL/2b5Yxb/n+aPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/8/yxyz+P88fs/hvkz9m8f9F/pjFf9v8MYv/dvljFv/t88cs/r/MH7P475A/ZvH/Vf6Yxf/X+WMW/9/kj1n8f5s/ZvH/Xf6YxX/H/DGL/075Yxb/nfPHLP6/zx+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P4/zl/zOL/l/wxi/9f88cs/rvlj1n8/5Y/ZvH/e/6YxX/3/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/ZvF/N3/M4v9e/pjE//1P8/+PWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvH/XP6Yxf/z+WMW/y/kj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+X8wfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/y/lj1n8v5w/ZvGfKn/M4j91/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fy1/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/L+eP2bx/0b+mMX/m/ljFv9v5Y9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/v5I9Z/BfLH7P4fzd/zOK/eP6Yxf97+WMW/yXyxyz+388fs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/8P8scs/svmj1n8l8sfs/gvnz9m8V8hf8zi/8P8MYv/ivljFv+V8scs/j/KH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/x/ljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8ziv3H+mMX/J/ljFv9N8scs/pvmj1n8N8sfs/j/NH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8f5Y/ZvH/ef6YxX+b/DGL/y/yxyz+2+aPWfy3yx+z+G+fP2bx/2X+mMV/h/wxi/+v8scs/r/OH7P4/yZ/zOL/2/wxi//v8scs/jvmj1n8d8ofs/jvnD9m8f99/pjFf5f8MYv/H/LHLP5/zB+z+O+aP2bx/1P+mMX/z/ljFv+/5I9Z/P+aP2bx3y1/zOL/t/wxi//f88cs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMW//fyxyT+ww7kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bx/1z+mMX/8/ljFv8v5I9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/l/MH7P4T5o/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv8v5Y9Z/L+cP2bxnyp/zOI/df6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+H8tf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfy/nj9m8f9G/pjF/5v5Yxb/b+WPWfznyh+z+H87f8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/7+SPWfwXyx+z+H83f8ziv3j+mMX/e/ljFv8l8scs/t/PH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/D/LHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v/D/DGL/4r5Yxb/lfLHLP4/yh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/8f5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjF/yf5Yxb/TfLHLP6b5o9Z/DfLH7P4/zR/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/H+WP2bx/3n+mMV/m/wxi/8v8scs/tvmj1n8t8sfs/hvnz9m8f9l/pjFf4f8MYv/r/LHLP6/zh+z+P8mf8zi/9v8MYv/7/LHLP475o9Z/HfKH7P475w/ZvH/ff6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjF/8/5Yxb/v+SPWfz/mj9m8d8tf8zi/7f8MYv/3/PHLP67549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjF/538MYv/u/ljFv/38sck/oMH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv/hBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/4Qfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5fzx+z+H8jf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/d/LHLP6L5Y9Z/L+bP2bxXzx/zOL/vfwxi/8S+WMW/+/nj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/B/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9h/pjFf8X8MYv/SvljFv8f5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+P8MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8f5o/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/j/LH7P4/zx/zOK/Tf6Yxf8X+WMW/23zxyz+2+WPWfy3zx+z+P8yf8ziv0P+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/j/Pn/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8zi/+f8MYv/X/LHLP5/zR+z+O+WP2bx/1v+mMX/7/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/xEG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv8RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/kQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5fzx+z+H8jf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/d/LHLP6L5Y9Z/L+bP2bxXzx/zOL/vfwxi/8S+WMW/+/nj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/B/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9h/pjFf8X8MYv/SvljFv8f5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+P8MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8f5o/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/j/LH7P4/zx/zOK/Tf6Yxf8X+WMW/23zxyz+2+WPWfy3zx+z+P8yf8ziv0P+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/j/Pn/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8zi/+f8MYv/X/LHLP5/zR+z+O+WP2bx/1v+mMX/7/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/5EH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv9RBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/UQfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+WP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5fzx+z+H8jf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/d/LHLP6L5Y9Z/L+bP2bxXzx/zOL/vfwxi/8S+WMW/+/nj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/B/ljFv9l88cs/svlj1n8l88fs/ivkD9m8f9h/pjFf8X8MYv/SvljFv8f5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+P8MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8f5o/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/j/LH7P4/zx/zOK/Tf6Yxf8X+WMW/23zxyz+2+WPWfy3zx+z+P8yf8ziv0P+mMX/V/ljFv9f549Z/H+TP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/j/Pn/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8zi/+f8MYv/X/LHLP5/zR+z+O+WP2bx/1v+mMX/7/ljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/9EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8uf8zi//n8MYv/F/LHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8v5o9Z/CfNH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/l/LHLP5fzh+z+E+VP2bxnzp/zOL/lfwxi/9X88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+X88fs/h/I3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/3fyxyz+i+WPWfy/mz9m8V88f8zi/738MYv/EvljFv/v549Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/wf5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yf6YxX/F/DGL/0r5Yxb/H+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/j/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/H+aP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP4/yx+z+P88f8ziv03+mMX/F/ljFv9t88cs/tvlj1n8t88fs/j/Mn/M4r9D/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P4/z5/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4v/n/DGL/1/yxyz+f80fs/jvlj9m8f9b/pjF/+/5Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv/RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/h/Ln/M4v/5/DGL/xfyxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/L+aPWfwnzR+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/5fyxyz+X84fs/hPlT9m8Z86f8zi/5X8MYv/V/PHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8v5Y/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/l/PH7P4fyN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/938scs/ovlj1n8v5s/ZvFfPH/M4v+9/DGL/xL5Yxb/7+ePWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8H+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bx/2H+mMV/xfwxi/9K+WMW/x/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/4/wxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/k/wxi/8m+WMW/03zxyz+m+WPWfx/mj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+P8sfs/j/PH/M4r9N/pjF/xf5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zJ/zOK/Q/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+P8+f8ziv0v+mMX/D/ljFv8/5o9Z/HfNH7P4/yl/zOL/5/wxi/9f8scs/n/NH7P475Y/ZvH/W/6Yxf/v+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/MQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fy5/zOL/+fwxi/8X8scs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/y/mj1n8J80fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/+X8scs/l/OH7P4T5U/ZvGfOn/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz7//x87dx5lZ13fcfwmYdip/nq0p4u0qa1HPMeaBVDTWkwgOzIGkYSEJJJlspiExCyQxZCobdOUglgqiNpG06aCWLRVYkUDUbBYNoFSu5BSkQJiG3FtikrSc5OZmEy/zOk86fPQ+n29/sjMvcP3CnmfD/dyco6hLP2H6B/K0n+o/qEs/YfpH8rSf7j+oSz9T9U/lKX/afqHsvQ/Xf9Qlv6v1j+Upf9r9A9l6f9a/UNZ+o/QP5Sl/6/rH8rS/zf0D2Xp/zr9Q1n6/6b+oSz9z9A/lKX/6/UPZek/Uv9Qlv6j9A9l6X+m/qEs/c/SP5Sl/2j9Q1n6j9E/lKX/WP1DWfqP0z+Upf94/UNZ+k/QP5Sl/0T9Q1n6n61/KEv/N+gfytL/HP1DWfp36h/K0v+N+oey9J+kfyhL/3P1D2Xp/yb9Q1n6n6d/KEv/N+sfytL/fP1DWfpP1j+Upf8U/UNZ+l+gfyhL/6n6h7L0n6Z/KEv/C/UPZek/Xf9Qlv4z9A9l6T9T/1CW/m/RP5Sl/0X6h7L0n6V/KEv/2fqHsvSfo38oS/+5+oey9O/SP5Sl/zz9Q1n6z9c/lKX/Av1DWfov1D+Upf9b9Q9l6b9I/1CW/ov1D2Xpv0T/UJb+F+sfytJ/qf6hLP2X6R/K0v9t+oey9F+ufyhL/xX6h7L0X6l/KEv/VfqHsvS/RP9Qlv6X6h/K0n+1/qEs/dfoH8rSf63+oSz91+kfytL/7fqHsvRfr38oS//L9A9l6b9B/1CW/hv1D2Xp/w79Q1n6v1P/UJb+79I/lKX/b+kfytL/t/UPZen/O/qHsvTfpH8oS//f1T+Upf9m/UNZ+v+e/qEs/S/XP5Sl/+/rH8rS/wr9Q1n6X6l/KEv/d+sfytL/Kv1DWfq/R/9Qlv5/oH8oS/+r9Q9l6f+H+oey9H+v/qEs/a/RP5Sl/7X6h7L0f5/+oSz9r9M/lKX/+/UPZen/Af1DWfp/UP9Qlv5/pH8oS/8/1j+Upf8W/UNZ+n9I/1CW/h/WP5Sl/1b9Q1n6/4n+oSz9/1T/UJb+2/QPZen/Z/qHsvT/iP6hLP2v1z+Upf8N+oey9P+o/qEs/W/UP5Sl/8f0D2Xp/+f6h7L0v0n/UJb+H9c/lKX/J/QPZen/F/qHsvT/S/1DWfp/Uv9Qlv6f0j+Upf/N+oey9N+ufyhL/0/rH8rS/6/0D2Xp/xn9Q1n636J/KEv/z+ofytL/c/qHsvTfoX8oS/9b9Q9l6X+b/qEs/XfqH8rS//P6h7L0/4L+oSz9b9c/lKX/HfqHsvT/ov6hLP3/Wv9Qlv536h/K0v9L+oey9P8b/UNZ+t+lfyhL/7v1D2Xpf4/+oSz979U/lKX/ffqHsvT/sv6hLP3v1z+Upf8D+oey9H9Q/1CW/n+rfyhL/4f0D2Xp/3f6h7L0/4r+oSz9/17/UJb+/6B/KEv/f9Q/lKX/P+kfytL/Yf1DWfrv0j+Upf8/6x/K0v8R/UNZ+v+L/qEs/b+qfyhL/0f1D2Xp/zX9Q1n6P6Z/KEv/f9U/lKX/4/qHsvR/Qv9Qlv5P6h/K0v/r+oey9H9K/1CW/t/QP5Sl/7/pH8rS/9/1D2Xpv1v/UJb+39Q/lKX/0/qHsvT/lv6hLP2/rX8oS//v6B/K0v+7+oey9P+e/qEs/b+vfyhL///QP5Sl/x79Q1n6/6f+oSz9n9E/lKX/D/QPZen/Q/1DWfr/SP9Qlv7P6h/K0n+v/qEs/ffpH0rS/4Ut/UNZ+g/QP5Sl/0D9Q1n6D9I/lKX/UfqHsvTv0D+Upf/R+oey9D9G/1CW/sfqH8rS/zj9Q1n6H69/KEv/E/QPZel/ov6hLP1P0j+Upf9P6R/K0v8F+od+4voDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8X7NizdpFsxYv7lruG9/4xjcHv3m+/80EAAD8b/vxh/7n++8EAAAAAAAAAAAAAAAAAAAA8mri/07s+f5nBAAAAAAAAAAAAACA/+8mdI7aPWjAYU8NOvTByfd27f962p4LFmzbtr30fO3+8dnBSw489MG+ffv2nbdix5juh8e0Wq32/9oLux8f2/u4/fob73vNpAOPysj3zS43rG913rbtkscemfODV+7o2P9sR+uieQsXdw0d2GqVszpaq9sPhg1otcrYjtZV7QfD2w/GdbSubz84df+D41o72w9eNWfp4rntJ8ZX/j2DnxQTOje2Bh222NZh/zY4dP8b75u2uudrHy/Z82pHtbr3v+XZSQ/1+lmP59h/z+uXUb333+9/QOA59W//84b2fO3jJf/b+//YHw3bEf3sufff8/rlTPuH+gSf/w/baO/P/b0+/w8OXvLgffn0nYPa+x9+/HfndT911P/k8/+PX7+c1Xv/Aw/7/N/+HD+65/P/Ma1WGXOEvx2QyoTOd+zu6/2/7/0f9fO9bgYcuv/NM8a/t73/X7r90Rd1P9XRz/2P7uv9f3Ovv1egfyZ0fnhfr/f/fuy/9fLgJQ/uf8sVn5/S3v/6cTffcMjP+rP/Mb33P2TlkmVDVqxZ+2sLl8ya3zW/6+JTh58+bOirh40YevqQ/R8JDvx6hL8rkMORvf+3ju91M6DV6jp4/8v3vGR0e/93bH1iYvdTx/Zz/2P7fP8f7P0fQi8d2Dr66NbqWStXLh924Neeh8MP/HrgLwv234///v+VU7r/sp4/MxzQav3swfsNM1r3t/f/i08+8Prup47u5/7H9bn/kYf/WSXQP0f4/j+3181h+y+feMF17f2PO2H43d1P9fe//8f3uf8Pef+HIzGhs1Xrm2h7/wMfv+aaatdlgj//g/o0sf9XlU2nVLsuE+0f6tPE/ruWvvLWatflbPuH+jSx/03vHn9utevyBvuH+jSx/3u+/did1a7LOfYP9Wli/1/t+M6aatel0/6hPk3s/8Z1U5+udl3eaP9Qnyb2/5Jrn/5atesyyf6hPk3sf8pTo1dWuy7n2j/Up4n9rzv5/LuqXZc32T/Up4n9D52zd3q163Ke/UN9mtj/g+96/yerXZc32z/Up4n9X/fssJdVuy7n2z/Up4n933zc4A9Uuy6T7R/q08T+9156+UnVrssU+4f6NLH/jbd2jKx2XS6wf6hPE/u/e+dNX6l2XabaP9Snif0/edptC6pdl2n2D/VpYv8fm/iivdWuy4X2D/VpYv+dH11Wql2X6fYP9Wli/x0PPbyp2nWZYf9Qnyb2/4rBd42odl1m2j/Up4n9z5456+PVrstb7B/q08T+xz3zkZdWuy4X2T/Up4n9n7jpxE9Vuy6z7B/q08T+B684+fhq12W2/UN9mtj/opO2f7DadZlj/1CfJva/efeDK6pdl7n2D/VpYv9fuHrN49WuS5f9Q32a2P835y+4sNp1mWf/UJ8m9r/t526/t9p1mW//UJ8m9v/w/edsrHZdFtg/1KeJ/V910xM/U+26LLR/qE8T+//ctD3XV7sub7V/qE8T+9/zq9PPqHZdFtk/1KeJ/b/4jtc+UO26LLZ/qE8T+595y9Xjql2XJfYP9Wli/8s73/lMtetysf1DfZrY/4ihr1ha7bostX+oTxP7v3LXltnVrssy+4f6NLH/L2497XvVrsvb7B/q08T+n5r8sonVrsty+4f6NLH/radcuavadVlh/1CfJvY/8kvfOLXadVlp/1CfJvZ/wvZR26pdl1X2D/VpYv8vP3PSL1S7LpfYP9Snif0vft0Pr6h2XS61f6hPE/v/6e+v2lntuqy2f6hPE/ufevkjk6tdlzX2D/VpYv+rNnz569Wuy1r7h/o0sf8zBsy9rNp1WWf/UJ8m9r/r0dZ7ql2Xt9s/1KeJ/V+75cZjql2X9fYP9Wli/59ddMtnql2Xy+wf6tPE/r/14jKk2nXZYP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+sgejcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAD//yMwiMk=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, &(0x7f0000000100)=ANY=[]) kernel console output (not intermixed with test programs): requency < 30 seconds [ 81.395240][ T4871] loop4: detected capacity change from 0 to 4096 [ 81.457123][ T4881] netlink: 'syz.2.441': attribute type 2 has an invalid length. [ 81.521738][ T4871] ntfs: volume version 3.1. [ 81.607475][ T4886] use of bytesused == 0 is deprecated and will be removed in the future, [ 81.626614][ T4885] loop2: detected capacity change from 0 to 64 [ 81.665361][ T4886] use the actual size instead. [ 81.853560][ T4895] loop4: detected capacity change from 0 to 16 [ 81.960138][ T4895] erofs: (device loop4): mounted with root inode @ nid 36. [ 82.434841][ T4879] loop3: detected capacity change from 0 to 32768 [ 82.528585][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.601571][ T4930] loop4: detected capacity change from 0 to 256 [ 82.652392][ T4900] loop0: detected capacity change from 0 to 32768 [ 82.769209][ T4936] loop1: detected capacity change from 0 to 256 [ 82.882877][ C0] eth0: bad gso: type: 1, size: 1408 [ 82.903314][ T4942] loop3: detected capacity change from 0 to 1024 [ 82.928642][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.964301][ T13] usb 3-1: New USB device found, idVendor=050f, idProduct=0190, bcdDevice=2b.a5 [ 82.977750][ T4944] loop4: detected capacity change from 0 to 736 [ 82.987708][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.000441][ T13] usb 3-1: config 0 descriptor?? [ 83.028707][ T4948] loop0: detected capacity change from 0 to 512 [ 83.050406][ T13] cdc_subset: probe of 3-1:0.0 failed with error -22 [ 83.061500][ T144] hfsplus: b-tree write err: -5, ino 8 [ 83.071210][ C0] eth0: bad gso: type: 1, size: 1408 [ 83.140484][ T4948] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.470: corrupted inode contents [ 83.186549][ T4955] dlm: no local IP address has been set [ 83.217398][ T4955] dlm: cannot start dlm midcomms -107 [ 83.223776][ T4959] loop1: detected capacity change from 0 to 2048 [ 83.233444][ T4948] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.470: mark_inode_dirty error [ 83.265059][ T13] usb 3-1: USB disconnect, device number 3 [ 83.275248][ T4948] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.470: corrupted inode contents [ 83.292398][ T4948] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.470: mark_inode_dirty error [ 83.338039][ T4948] Quota error (device loop0): write_blk: dquota write failed [ 83.349019][ T4959] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.381450][ T4948] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 83.439561][ T4948] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.470: Failed to acquire dquot type 0 [ 83.545815][ T4948] EXT4-fs (loop0): 1 orphan inode deleted [ 83.585191][ T4959] overlayfs: './file1' not a directory [ 83.605491][ T4948] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.639947][ T4948] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038 (0x7fffffff) [ 84.088633][ T4986] syz.1.489 uses obsolete (PF_INET,SOCK_PACKET) [ 84.383067][ T4990] loop1: detected capacity change from 0 to 4096 [ 84.439919][ T4990] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 84.558599][ T4990] ntfs: (device loop1): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 84.591326][ T4990] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 84.622090][ T4990] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 84.626947][ T4971] loop3: detected capacity change from 0 to 40427 [ 84.687921][ T4990] ntfs: volume version 3.1. [ 84.701828][ T4971] F2FS-fs (loop3): invalid crc value [ 84.726981][ T4971] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.804285][ T4990] ntfs: (device loop1): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 84.837106][ T4971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.890351][ T4981] loop2: detected capacity change from 0 to 32768 [ 84.945027][ T4981] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 84.951875][ T4983] loop4: detected capacity change from 0 to 40427 [ 84.965363][ T4981] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 84.975563][ T4980] loop0: detected capacity change from 0 to 32768 [ 84.992791][ T4981] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 85.005108][ T4312] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.012364][ T4312] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.040616][ T4980] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 85.075706][ T4980] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 85.113284][ T4312] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 100ms [ 85.130966][ T4983] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.138586][ T4980] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 85.154380][ T4312] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.180297][ T4981] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.209976][ T4312] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 85.230331][ T4312] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 85.332461][ T4983] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.377387][ T4312] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 147ms [ 85.407936][ T4312] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 85.446693][ T4980] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 85.497297][ T5007] loop1: detected capacity change from 0 to 8 [ 85.517580][ T3579] attempt to access beyond end of device [ 85.517580][ T3579] loop4: rw=2049, want=45104, limit=40427 [ 85.654748][ T5007] SQUASHFS error: zlib decompression failed, data probably corrupt [ 85.723135][ T5007] SQUASHFS error: Failed to read block 0x13e: -5 [ 85.803530][ T5007] SQUASHFS error: Unable to read metadata cache entry [13c] [ 85.878492][ T5007] SQUASHFS error: Unable to read directory block [13c:26] [ 86.113298][ T5020] loop0: detected capacity change from 0 to 4096 [ 86.240229][ T5020] NILFS (loop0): invalid segment: Checksum error in segment payload [ 86.240255][ T5020] NILFS (loop0): trying rollback from an earlier position [ 86.269809][ T5020] NILFS (loop0): recovery complete [ 86.287583][ T5031] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.315912][ T5029] loop2: detected capacity change from 0 to 2048 [ 86.483888][ T5029] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.569211][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.632650][ T5029] overlayfs: './file1' not a directory [ 86.808383][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 86.908039][ T5038] loop1: detected capacity change from 0 to 32768 [ 87.005356][ T5023] loop3: detected capacity change from 0 to 32768 [ 87.018233][ T5038] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 87.026660][ T5056] loop0: detected capacity change from 0 to 1024 [ 87.032232][ T5038] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 87.061398][ T5038] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 87.074347][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 87.079764][ T5023] XFS (loop3): Mounting V5 Filesystem [ 87.081713][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 87.091034][ T21] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 87.102787][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.110956][ T21] usb 5-1: Product: syz [ 87.115197][ T21] usb 5-1: Manufacturer: syz [ 87.119977][ T21] usb 5-1: SerialNumber: syz [ 87.126707][ T21] usb 5-1: config 0 descriptor?? [ 87.177469][ T21] as10x_usb: device has been detected [ 87.192316][ T21] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 87.230985][ T21] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 87.277077][ T5023] XFS (loop3): Ending clean mount [ 87.278776][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 197ms [ 87.295136][ T21] as10x_usb: error during firmware upload part1 [ 87.318860][ T21] Registered device PCTV Systems picoStick (74e) [ 87.357878][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 87.357934][ T5038] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 87.427743][ T5023] XFS (loop3): Quotacheck needed: Please wait. [ 87.468185][ T5077] loop0: detected capacity change from 0 to 512 [ 87.471478][ T5023] XFS (loop3): Quotacheck: Done. [ 87.483845][ T13] usb 5-1: USB disconnect, device number 6 [ 87.523991][ T13] Unregistered device PCTV Systems picoStick (74e) [ 87.527966][ T13] as10x_usb: device has been disconnected [ 87.563101][ T5077] EXT4-fs (loop0): 1 orphan inode deleted [ 87.593073][ T5077] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 87.615813][ T5081] loop2: detected capacity change from 0 to 256 [ 87.629334][ T3577] XFS (loop3): Unmounting Filesystem [ 87.657018][ T5077] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038 (0x7fffffff) [ 87.692698][ T5081] FAT-fs (loop2): Directory bread(block 64) failed [ 87.716989][ T5081] FAT-fs (loop2): Directory bread(block 65) failed [ 87.737123][ T5081] FAT-fs (loop2): Directory bread(block 66) failed [ 87.752411][ T5081] FAT-fs (loop2): Directory bread(block 67) failed [ 87.764392][ T5081] FAT-fs (loop2): Directory bread(block 68) failed [ 87.771000][ T5081] FAT-fs (loop2): Directory bread(block 69) failed [ 87.777763][ T5081] FAT-fs (loop2): Directory bread(block 70) failed [ 87.785452][ T5081] FAT-fs (loop2): Directory bread(block 71) failed [ 87.803889][ T5081] FAT-fs (loop2): Directory bread(block 72) failed [ 87.831512][ T5081] FAT-fs (loop2): Directory bread(block 73) failed [ 87.954131][ T5083] loop0: detected capacity change from 0 to 4096 [ 88.024454][ T5083] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 88.269418][ T5083] ntfs: (device loop0): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 88.319078][ T5083] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 88.354499][ T5083] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 88.394829][ T5083] ntfs: volume version 3.1. [ 88.413151][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.526'. [ 88.464737][ T5099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.526'. [ 88.479208][ T5083] ntfs: (device loop0): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 88.502788][ T5099] Zero length message leads to an empty skb [ 88.833485][ C0] eth0: bad gso: type: 1, size: 1408 [ 88.892369][ T5124] loop3: detected capacity change from 0 to 8 [ 88.931925][ T5126] loop2: detected capacity change from 0 to 64 [ 89.050027][ T5129] loop1: detected capacity change from 0 to 64 [ 89.062752][ T5087] loop4: detected capacity change from 0 to 40427 [ 89.145832][ T5087] F2FS-fs (loop4): invalid crc value [ 89.198474][ T5087] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.354109][ T5087] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 89.510622][ T5143] loop1: detected capacity change from 0 to 512 [ 89.565703][ T5143] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 89.583768][ T5143] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 89.659455][ T5143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 89.715830][ T5143] System zones: 1-12 [ 89.779856][ T5143] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.547: corrupted in-inode xattr [ 89.852649][ T5143] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.547: couldn't read orphan inode 15 (err -117) [ 89.893133][ T5143] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 89.986754][ T5120] loop0: detected capacity change from 0 to 40427 [ 90.055044][ T5120] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 90.057342][ T5135] loop2: detected capacity change from 0 to 32768 [ 90.072261][ T5120] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 90.116705][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 90.120860][ T5120] F2FS-fs (loop0): invalid crc value [ 90.201877][ T5120] F2FS-fs (loop0): Found nat_bits in checkpoint [ 90.249654][ T5135] XFS (loop2): Mounting V5 Filesystem [ 90.286156][ T5177] program syz.1.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.288401][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.345975][ T5120] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 90.368652][ T5120] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.386308][ T5135] XFS (loop2): Ending clean mount [ 90.425093][ T3571] attempt to access beyond end of device [ 90.425093][ T3571] loop0: rw=2049, want=45104, limit=40427 [ 90.577677][ T3566] XFS (loop2): Unmounting Filesystem [ 90.723513][ T5198] loop4: detected capacity change from 0 to 64 [ 90.734599][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.753801][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.773928][ T21] usb 4-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 90.783628][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.824508][ T21] usb 4-1: config 0 descriptor?? [ 90.949849][ T5200] loop4: detected capacity change from 0 to 1024 [ 91.316577][ T5196] loop1: detected capacity change from 0 to 32768 [ 91.342069][ T21] wacom 0003:056A:0317.0006: unknown main item tag 0x0 [ 91.358067][ T21] wacom 0003:056A:0317.0006: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 91.399214][ T21] wacom 0003:056A:0317.0006: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.3-1/input0 [ 91.442884][ T21] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0317.0006/input/input9 [ 91.538515][ T5196] XFS (loop1): Mounting V5 Filesystem [ 91.591608][ T21] usb 4-1: USB disconnect, device number 3 [ 91.677700][ T5196] XFS (loop1): Ending clean mount [ 91.788773][ T5196] XFS (loop1): Quotacheck needed: Please wait. [ 91.857447][ T5196] XFS (loop1): Quotacheck: Done. [ 91.858149][ T5232] loop0: detected capacity change from 0 to 1024 [ 91.931953][ T3567] XFS (loop1): Unmounting Filesystem [ 91.981618][ T5232] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 92.028132][ T5232] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 92.034783][ T5207] loop2: detected capacity change from 0 to 40427 [ 92.114039][ T5207] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 92.123300][ T5207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.168948][ T5214] loop4: detected capacity change from 0 to 32768 [ 92.177522][ T5207] F2FS-fs (loop2): invalid crc value [ 92.207203][ T5207] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.258928][ T5214] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.575 (5214) [ 92.353027][ T5207] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 92.370545][ T5207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.402017][ T5214] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 92.422343][ T5214] BTRFS info (device loop4): using free space tree [ 92.446988][ T5214] BTRFS info (device loop4): has skinny extents [ 92.514146][ T5243] loop0: detected capacity change from 0 to 4096 [ 92.582860][ T5243] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 92.733540][ T5214] BTRFS info (device loop4): enabling ssd optimizations [ 92.769006][ T5267] netlink: 'syz.2.585': attribute type 8 has an invalid length. [ 92.778451][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.882350][ T5214] BTRFS error (device loop4): unable to set label with more than 255 bytes [ 92.978854][ T5241] loop3: detected capacity change from 0 to 32768 [ 92.998416][ T5269] loop2: detected capacity change from 0 to 4096 [ 93.221711][ T13] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 93.250453][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.323626][ T5241] XFS (loop3): Mounting V5 Filesystem [ 93.358725][ T13] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 93.368554][ T13] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 93.376559][ T13] usb 2-1: Manufacturer: syz [ 93.398852][ T13] usb 2-1: config 0 descriptor?? [ 93.467085][ T5271] loop0: detected capacity change from 0 to 40427 [ 93.526541][ T5241] XFS (loop3): Ending clean mount [ 93.561357][ T5271] F2FS-fs (loop0): Unrecognized mount option "errors=continue" or missing value [ 93.571971][ T5241] XFS (loop3): Quotacheck needed: Please wait. [ 93.578439][ T13] rc_core: IR keymap rc-hauppauge not found [ 93.584519][ T13] Registered IR keymap rc-empty [ 93.604465][ T13] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 93.623833][ T13] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 93.709392][ T5241] XFS (loop3): Quotacheck: Done. [ 93.832719][ T3577] XFS (loop3): Unmounting Filesystem [ 94.012464][ T5293] loop4: detected capacity change from 0 to 8192 [ 94.102576][ T5293] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 94.130600][ T5293] REISERFS (device loop4): using ordered data mode [ 94.137128][ T5293] reiserfs: using flush barriers [ 94.168581][ T5293] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.177315][ T3610] usb 2-1: USB disconnect, device number 5 [ 94.186558][ T5293] REISERFS (device loop4): checking transaction log (loop4) [ 94.426156][ T5293] REISERFS (device loop4): Using tea hash to sort names [ 94.445000][ T5293] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 94.663692][ T5324] loop2: detected capacity change from 0 to 8 [ 94.719738][ T5324] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 94.790547][ T5324] cramfs: Error -5 while decompressing! [ 94.796445][ T5324] cramfs: ffffffff969941f8(27)->ffff88805d8b6000(4096) [ 94.835590][ T5324] cramfs: Error -5 while decompressing! [ 94.845620][ T5324] cramfs: ffffffff969941f8(27)->ffff88805d8b6000(4096) [ 94.865208][ T26] audit: type=1800 audit(1725636730.094:4): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.605" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 95.029544][ T5332] loop4: detected capacity change from 0 to 4096 [ 95.197114][ T5332] ntfs3: loop4: failed to convert "0000" to iso8859-2 [ 95.206999][ T5332] ntfs3: loop4: failed to convert name for inode 1e. [ 95.214303][ T5338] loop0: detected capacity change from 0 to 512 [ 95.284112][ T5338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.314928][ T5330] loop1: detected capacity change from 0 to 32768 [ 95.350541][ T5338] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.369584][ T5338] EXT4-fs (loop0): 1 truncate cleaned up [ 95.375292][ T5338] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,nombcache,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 95.396652][ T3610] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.424759][ T5330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.607 (5330) [ 95.439580][ T26] audit: type=1800 audit(1725636730.674:5): pid=5338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.612" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 95.442007][ T5346] loop4: detected capacity change from 0 to 512 [ 95.508900][ T5330] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 95.544481][ T5330] BTRFS info (device loop1): using free space tree [ 95.552310][ T5330] BTRFS info (device loop1): has skinny extents [ 95.645610][ T5346] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.688674][ T5346] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038 (0x7fffffff) [ 95.782678][ T3610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.798156][ T5330] BTRFS info (device loop1): enabling ssd optimizations [ 95.804495][ T3610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.843469][ T3610] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 95.895817][ T3610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.972208][ T3610] usb 3-1: config 0 descriptor?? [ 96.224138][ T5377] loop0: detected capacity change from 0 to 8192 [ 96.313353][ T5384] loop4: detected capacity change from 0 to 512 [ 96.342363][ T5377] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 96.356559][ T5377] REISERFS (device loop0): using ordered data mode [ 96.373964][ T5377] reiserfs: using flush barriers [ 96.374053][ C0] eth0: bad gso: type: 1, size: 1408 [ 96.380652][ T5351] loop3: detected capacity change from 0 to 32768 [ 96.393636][ T5377] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.410926][ T5377] REISERFS (device loop0): checking transaction log (loop0) [ 96.460478][ T3610] pyra 0003:1E7D:2C24.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.2-1/input0 [ 96.486939][ T5384] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 96.512691][ T5384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 96.521274][ T5384] System zones: 0-1, 15-15, 18-18, 34-34 [ 96.528590][ T5384] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.535112][ T5384] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 96.544681][ T5384] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 96.559456][ T5384] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 96.567009][ T5384] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.621: bad orphan inode 16 [ 96.636425][ T5384] ext4_test_bit(bit=15, block=18) = 1 [ 96.642131][ T5384] is_bad_inode(inode)=0 [ 96.646385][ T5384] NEXT_ORPHAN(inode)=0 [ 96.651585][ T5384] max_ino=32 [ 96.653578][ T4320] usb 3-1: USB disconnect, device number 4 [ 96.654918][ T5384] i_nlink=2 [ 96.664263][ T5384] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.717716][ T5393] loop3: detected capacity change from 0 to 1024 [ 96.783920][ T5384] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 96.785010][ T5377] REISERFS (device loop0): Using tea hash to sort names [ 96.825825][ T5377] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 96.886873][ T9] hfsplus: b-tree write err: -5, ino 4 [ 97.038764][ T5402] loop3: detected capacity change from 0 to 512 [ 97.183405][ T5402] EXT4-fs (loop3): 1 orphan inode deleted [ 97.234016][ T5402] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 97.252160][ T5412] loop2: detected capacity change from 0 to 1024 [ 97.345754][ T5402] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038 (0x7fffffff) [ 97.384355][ T5412] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.429744][ T5412] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x000000000000b930,commit=0x0000000000000005,user_xattr,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 97.520318][ C0] eth0: bad gso: type: 1, size: 1408 [ 97.552986][ T5403] loop1: detected capacity change from 0 to 40427 [ 97.734358][ T5429] loop3: detected capacity change from 0 to 256 [ 97.745738][ T5403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.870598][ T5429] FAT-fs (loop3): Directory bread(block 64) failed [ 97.871022][ T5403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.934510][ T5429] FAT-fs (loop3): Directory bread(block 65) failed [ 97.973830][ T5429] FAT-fs (loop3): Directory bread(block 66) failed [ 98.000272][ T5429] FAT-fs (loop3): Directory bread(block 67) failed [ 98.008696][ T3567] attempt to access beyond end of device [ 98.008696][ T3567] loop1: rw=2049, want=45104, limit=40427 [ 98.020249][ T5429] FAT-fs (loop3): Directory bread(block 68) failed [ 98.041759][ T5429] FAT-fs (loop3): Directory bread(block 69) failed [ 98.078817][ T5429] FAT-fs (loop3): Directory bread(block 70) failed [ 98.100479][ T5429] FAT-fs (loop3): Directory bread(block 71) failed [ 98.121962][ T5429] FAT-fs (loop3): Directory bread(block 72) failed [ 98.142486][ T5429] FAT-fs (loop3): Directory bread(block 73) failed [ 98.243776][ T5413] loop4: detected capacity change from 0 to 40427 [ 98.312656][ T5413] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 98.329732][ T5413] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.359017][ T5413] F2FS-fs (loop4): invalid crc value [ 98.387455][ T5413] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.533728][ T5413] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.546572][ T5413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.636199][ T5439] loop3: detected capacity change from 0 to 4096 [ 98.637788][ T3579] attempt to access beyond end of device [ 98.637788][ T3579] loop4: rw=2049, want=45104, limit=40427 [ 98.789359][ T5439] ntfs: volume version 3.1. [ 98.831614][ T5439] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1. You might want to try to use the mount option nls=utf8. [ 98.859001][ T5444] loop2: detected capacity change from 0 to 1024 [ 98.859555][ T5433] loop0: detected capacity change from 0 to 32768 [ 98.888706][ T5439] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 99.119152][ T5454] loop1: detected capacity change from 0 to 64 [ 99.155916][ T5458] loop3: detected capacity change from 0 to 1024 [ 99.231477][ T5458] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.254796][ T5458] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x000000000000b930,commit=0x0000000000000005,user_xattr,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 99.435542][ T5456] loop2: detected capacity change from 0 to 32768 [ 99.469909][ T4317] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.488487][ T5456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.653 (5456) [ 99.534779][ T5467] loop3: detected capacity change from 0 to 256 [ 99.553439][ T5456] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 99.572153][ T5456] BTRFS info (device loop2): using free space tree [ 99.575611][ T5469] loop0: detected capacity change from 0 to 256 [ 99.578783][ T5456] BTRFS info (device loop2): has skinny extents [ 99.599930][ T5467] exfat: Deprecated parameter 'namecase' [ 99.600717][ T5456] BTRFS info (device loop2): enabling ssd optimizations [ 99.724884][ T3646] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 99.742676][ T5467] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 99.755188][ T13] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 99.763449][ T5469] FAT-fs (loop0): Directory bread(block 64) failed [ 99.776582][ T5469] FAT-fs (loop0): Directory bread(block 65) failed [ 99.845089][ T5469] FAT-fs (loop0): Directory bread(block 66) failed [ 99.877820][ T5469] FAT-fs (loop0): Directory bread(block 67) failed [ 99.908611][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.953088][ T4317] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.989140][ T5469] FAT-fs (loop0): Directory bread(block 68) failed [ 99.989744][ T4317] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.005283][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.016534][ T3675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (3675) [ 100.032134][ T4317] usb 5-1: config 0 descriptor?? [ 100.036743][ T5469] FAT-fs (loop0): Directory bread(block 69) failed [ 100.076108][ T5469] FAT-fs (loop0): Directory bread(block 70) failed [ 100.083235][ T5469] FAT-fs (loop0): Directory bread(block 71) failed [ 100.100378][ T5469] FAT-fs (loop0): Directory bread(block 72) failed [ 100.111373][ T5469] FAT-fs (loop0): Directory bread(block 73) failed [ 100.174639][ T13] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.191987][ T13] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.209096][ T13] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.222831][ T13] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 100.235318][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.257958][ T13] usb 2-1: config 0 descriptor?? [ 100.520348][ T4317] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 100.540828][ T4317] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 100.555440][ T3613] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.735496][ T13] wacom 0003:056A:005E.0009: unknown main item tag 0x0 [ 100.742694][ T13] wacom 0003:056A:005E.0009: unknown main item tag 0x0 [ 100.751094][ T13] wacom 0003:056A:005E.0009: unknown main item tag 0x0 [ 100.757977][ T13] wacom 0003:056A:005E.0009: unknown main item tag 0x0 [ 100.768081][ T13] wacom 0003:056A:005E.0009: hidraw1: USB HID v0.00 Device [HID 056a:005e] on usb-dummy_hcd.1-1/input0 [ 100.782662][ T13] usb 5-1: USB disconnect, device number 7 [ 100.818408][ T3613] usb 4-1: Using ep0 maxpacket: 8 [ 100.932401][ T4317] usb 2-1: USB disconnect, device number 6 [ 100.948532][ T3613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 100.961120][ T3613] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 100.975872][ T3613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 134, changing to 11 [ 100.993506][ T3613] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59360, setting to 1024 [ 101.018089][ T5505] loop2: detected capacity change from 0 to 1024 [ 101.145361][ T5505] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.663: Invalid block bitmap block 0 in block_group 0 [ 101.162142][ T5505] Quota error (device loop2): write_blk: dquota write failed [ 101.171974][ T5505] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 101.182254][ T5505] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.663: Failed to acquire dquot type 0 [ 101.194307][ T5505] EXT4-fs error (device loop2): ext4_free_blocks:6225: comm syz.2.663: Freeing blocks not in datazone - block = 0, count = 4096 [ 101.208443][ T3613] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 101.209115][ T5505] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.663: Invalid inode bitmap blk 0 in block_group 0 [ 101.222057][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.238239][ T5488] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 101.256701][ T5505] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 101.258081][ T5488] EXT4-fs error (device loop2): ext4_release_dquot:6219: comm kworker/u4:7: Failed to release dquot type 0 [ 101.265654][ T3613] usb 4-1: Product: syz [ 101.280427][ T5505] EXT4-fs (loop2): 1 orphan inode deleted [ 101.283034][ T3613] usb 4-1: Manufacturer: syz [ 101.292609][ T3613] usb 4-1: SerialNumber: syz [ 101.302961][ T5505] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 101.319902][ T5497] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 101.340110][ T3613] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 101.356709][ T5508] program syz.4.665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.492554][ T5514] loop1: detected capacity change from 0 to 1024 [ 101.578033][ T13] usb 4-1: USB disconnect, device number 4 [ 101.606003][ T5514] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nombcache,,errors=continue. Quota mode: writeback. [ 101.646591][ T5514] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038 (0x7fffffff) [ 101.816960][ T5525] loop4: detected capacity change from 0 to 1024 [ 101.864196][ T5525] hfsplus: walked past end of dir [ 102.002024][ T5516] loop2: detected capacity change from 0 to 32768 [ 102.242463][ T5516] XFS (loop2): Mounting V5 Filesystem [ 102.448723][ T5555] loop1: detected capacity change from 0 to 512 [ 102.450465][ T5516] XFS (loop2): Ending clean mount [ 102.477245][ T5516] XFS (loop2): Quotacheck needed: Please wait. [ 102.503996][ T5555] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.680: casefold flag without casefold feature [ 102.541724][ T5555] EXT4-fs (loop1): 1 truncate cleaned up [ 102.596903][ T5516] XFS (loop2): Quotacheck: Done. [ 102.597589][ T5555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 102.626121][ T5558] loop3: detected capacity change from 0 to 256 [ 102.700113][ T5555] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #2: comm syz.1.680: invalid size [ 102.731755][ T5558] exfat: Deprecated parameter 'namecase' [ 102.755231][ T3566] XFS (loop2): Unmounting Filesystem [ 102.757571][ T5558] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 103.045691][ T5570] loop3: detected capacity change from 0 to 2048 [ 103.131350][ T5570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.213219][ T5575] loop2: detected capacity change from 0 to 16 [ 103.299803][ T5575] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.408662][ T5582] loop3: detected capacity change from 0 to 1024 [ 103.467465][ T5567] loop4: detected capacity change from 0 to 32768 [ 103.482704][ T5582] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.528448][ T26] audit: type=1326 audit(1725636738.754:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5559 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e22773ef9 code=0x7fc00000 [ 103.618220][ T5582] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 103.819678][ T26] audit: type=1800 audit(1725636739.054:7): pid=5598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.693" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 103.904520][ T5604] loop0: detected capacity change from 0 to 512 [ 104.043146][ T5604] EXT4-fs (loop0): 1 orphan inode deleted [ 104.056356][ T5604] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 104.086839][ T5604] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038 (0x7fffffff) [ 104.097294][ T5597] loop1: detected capacity change from 0 to 32768 [ 104.109585][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.131297][ T5597] XFS: noikeep mount option is deprecated. [ 104.177676][ T5597] XFS (loop1): Mounting V5 Filesystem [ 104.189556][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.242978][ T5597] XFS (loop1): Ending clean mount [ 104.250758][ T5597] XFS (loop1): Quotacheck needed: Please wait. [ 104.265350][ T5620] IPVS: sync thread started: state = BACKUP, mcast_ifn = vxcan1, syncid = 3, id = 0 [ 104.296815][ T5622] loop0: detected capacity change from 0 to 128 [ 104.303306][ T3613] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.313978][ T5597] XFS (loop1): Quotacheck: Done. [ 104.348655][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 104.375620][ T3567] XFS (loop1): Unmounting Filesystem [ 104.447233][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 104.478726][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.496062][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.506412][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 104.530233][ T5626] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.542175][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.554785][ T23] usb 3-1: config 0 descriptor?? [ 104.575341][ T3613] usb 4-1: Using ep0 maxpacket: 32 [ 104.601157][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.615109][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.630066][ T13] usb 5-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 104.644369][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.656640][ T13] usb 5-1: config 0 descriptor?? [ 104.728607][ T3613] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 104.760626][ T5626] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 104.887812][ T5638] program syz.0.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.930872][ T5640] tmpfs: Cannot retroactively limit inodes [ 104.951374][ T3613] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 104.968227][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.986570][ T3613] usb 4-1: Product: syz [ 104.993376][ T3613] usb 4-1: Manufacturer: syz [ 105.003539][ T3613] usb 4-1: SerialNumber: syz [ 105.012638][ T3613] usb 4-1: config 0 descriptor?? [ 105.028642][ T5606] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 105.042214][ T23] ryos 0003:1E7D:3232.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 105.111662][ T5651] tmpfs: Bad value for 'mpol' [ 105.236117][ T5653] loop0: detected capacity change from 0 to 16 [ 105.263391][ T5653] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 105.290193][ T23] usb 3-1: USB disconnect, device number 5 [ 105.341342][ T3796] usb 5-1: USB disconnect, device number 8 [ 105.354992][ T13] usb 4-1: USB disconnect, device number 5 [ 105.564366][ T5649] loop1: detected capacity change from 0 to 32768 [ 105.688549][ T5649] XFS (loop1): Mounting V5 Filesystem [ 105.727074][ T5649] XFS (loop1): Ending clean mount [ 105.733566][ T5655] loop0: detected capacity change from 0 to 32768 [ 105.757826][ T3567] XFS (loop1): Unmounting Filesystem [ 106.193475][ T5677] loop0: detected capacity change from 0 to 2048 [ 106.274078][ T5684] loop3: detected capacity change from 0 to 512 [ 106.322128][ T5677] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.352185][ T3675] udevd[3675]: incorrect nilfs2 checksum on /dev/loop0 [ 106.361496][ T5684] EXT4-fs (loop3): orphan cleanup on readonly fs [ 106.392283][ T5677] NILFS (loop0): mounting unchecked fs [ 106.397931][ T5677] NILFS (loop0): recovery required for readonly filesystem [ 106.416495][ T5684] EXT4-fs (loop3): 1 truncate cleaned up [ 106.450938][ T5684] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 106.476074][ T5677] NILFS (loop0): write access will be enabled during recovery [ 106.534325][ T5677] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 106.611031][ T3675] udevd[3675]: incorrect nilfs2 checksum on /dev/loop0 [ 106.624035][ T5677] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 106.911224][ T5699] loop3: detected capacity change from 0 to 2048 [ 106.954979][ T5699] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.992543][ T5702] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.993398][ T5699] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 107.063947][ T5699] Remounting filesystem read-only [ 107.111772][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.126863][ T5690] loop2: detected capacity change from 0 to 32768 [ 107.145416][ T5686] loop1: detected capacity change from 0 to 65536 [ 107.215660][ T5686] XFS (loop1): Mounting V5 Filesystem [ 107.231152][ T5690] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 107.244389][ T5690] BTRFS info (device loop2): using free space tree [ 107.252814][ T5690] BTRFS info (device loop2): has skinny extents [ 107.368814][ T5686] XFS (loop1): Ending clean mount [ 107.398491][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 107.428650][ T5728] loop3: detected capacity change from 0 to 256 [ 107.441196][ T3567] XFS (loop1): Unmounting Filesystem [ 107.527778][ T5690] BTRFS info (device loop2): enabling ssd optimizations [ 107.561098][ T5728] FAT-fs (loop3): Directory bread(block 64) failed [ 107.567664][ T5728] FAT-fs (loop3): Directory bread(block 65) failed [ 107.568369][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.593025][ T5728] FAT-fs (loop3): Directory bread(block 66) failed [ 107.619385][ T5728] FAT-fs (loop3): Directory bread(block 67) failed [ 107.634634][ T5728] FAT-fs (loop3): Directory bread(block 68) failed [ 107.641549][ T5728] FAT-fs (loop3): Directory bread(block 69) failed [ 107.647066][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.648771][ T5728] FAT-fs (loop3): Directory bread(block 70) failed [ 107.678520][ T5728] FAT-fs (loop3): Directory bread(block 71) failed [ 107.692749][ T5728] FAT-fs (loop3): Directory bread(block 72) failed [ 107.738680][ T5728] FAT-fs (loop3): Directory bread(block 73) failed [ 107.748679][ T13] usb 5-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 107.777306][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.804010][ T13] usb 5-1: config 0 descriptor?? [ 108.325454][ T13] logitech 0003:046D:C211.000C: unknown main item tag 0x0 [ 108.344328][ T13] logitech 0003:046D:C211.000C: hidraw0: USB HID v0.00 Device [HID 046d:c211] on usb-dummy_hcd.4-1/input0 [ 108.384209][ T13] logitech 0003:046D:C211.000C: no inputs found [ 108.565215][ T3613] usb 5-1: USB disconnect, device number 9 [ 108.621183][ T5753] loop2: detected capacity change from 0 to 32768 [ 108.678490][ T3606] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.947536][ T5758] loop1: detected capacity change from 0 to 40427 [ 109.034010][ T5777] loop2: detected capacity change from 0 to 1024 [ 109.071076][ T3606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.083021][ T5758] F2FS-fs (loop1): Found nat_bits in checkpoint [ 109.098635][ T3606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.110057][ T3606] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 109.120267][ T3606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.131943][ T3606] usb 4-1: config 0 descriptor?? [ 109.153524][ T5777] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.224128][ T5758] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.253737][ T5793] program syz.0.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.272378][ T5777] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,bsddf,nojournal_checksum,norecovery,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 109.299054][ T3567] attempt to access beyond end of device [ 109.299054][ T3567] loop1: rw=2049, want=45104, limit=40427 [ 109.348870][ T26] audit: type=1800 audit(1725636744.584:8): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.760" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 109.636028][ T3606] pyra 0003:1E7D:2C24.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 109.843565][ T3788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.845977][ T3606] usb 4-1: USB disconnect, device number 6 [ 109.914006][ T5795] loop4: detected capacity change from 0 to 32768 [ 109.967907][ T5795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.767 (5795) [ 110.073970][ T5795] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 110.086890][ T5795] BTRFS info (device loop4): using free space tree [ 110.098380][ T3788] usb 1-1: Using ep0 maxpacket: 32 [ 110.106819][ T5795] BTRFS info (device loop4): has skinny extents [ 110.219331][ T3788] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 110.263651][ T5795] BTRFS info (device loop4): enabling ssd optimizations [ 110.388600][ T3788] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 110.401282][ T3788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.411471][ T3788] usb 1-1: Product: syz [ 110.415913][ T3788] usb 1-1: Manufacturer: syz [ 110.420651][ T3788] usb 1-1: SerialNumber: syz [ 110.436119][ T3788] usb 1-1: config 0 descriptor?? [ 110.458814][ T5801] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.723888][ T3788] usb 1-1: USB disconnect, device number 4 [ 111.077669][ T5890] loop2: detected capacity change from 0 to 512 [ 111.156617][ T5890] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.220083][ T5890] EXT4-fs (loop2): 1 truncate cleaned up [ 111.225826][ T5890] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,quota,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 111.340123][ T5895] loop3: detected capacity change from 0 to 4096 [ 111.342771][ T5876] loop1: detected capacity change from 0 to 32768 [ 111.425610][ T5895] NILFS (loop3): invalid segment: Checksum error in segment payload [ 111.466231][ T5895] NILFS (loop3): trying rollback from an earlier position [ 111.468514][ T3788] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.535814][ T5895] NILFS (loop3): recovery complete [ 111.609446][ T5911] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.828797][ C0] eth0: bad gso: type: 1, size: 1408 [ 111.834360][ T5921] loop2: detected capacity change from 0 to 24 [ 111.858519][ T3788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.884545][ T5926] device tunl0 entered promiscuous mode [ 111.891437][ T5921] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 111.895210][ T3788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.909423][ T3788] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 111.926042][ T5926] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 111.927783][ T3788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.942025][ T5926] netlink: 9 bytes leftover after parsing attributes in process `syz.3.802'. [ 111.981025][ T5921] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.988630][ T3788] usb 5-1: config 0 descriptor?? [ 112.012022][ T5929] devtmpfs: Too few inodes for current use [ 112.355568][ T5952] loop3: detected capacity change from 0 to 128 [ 112.428822][ T4364] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.516790][ T3788] pyra 0003:1E7D:2C24.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 112.678563][ T4364] usb 3-1: Using ep0 maxpacket: 16 [ 112.730978][ T5943] loop0: detected capacity change from 0 to 32768 [ 112.797768][ T3788] usb 5-1: USB disconnect, device number 10 [ 112.807331][ T4364] usb 3-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 112.826466][ T5950] loop1: detected capacity change from 0 to 32768 [ 112.832368][ T4364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 112.860638][ T5943] XFS (loop0): Mounting V5 Filesystem [ 112.912734][ T5950] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.815 (5950) [ 112.950834][ T5943] XFS (loop0): Ending clean mount [ 112.974176][ T5943] XFS (loop0): Quotacheck needed: Please wait. [ 113.004935][ T5950] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 113.014774][ T4364] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.039308][ T5950] BTRFS info (device loop1): using free space tree [ 113.045889][ T5950] BTRFS info (device loop1): has skinny extents [ 113.055191][ T4364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.083949][ T4364] usb 3-1: Product: syz [ 113.098535][ T4364] usb 3-1: Manufacturer: syz [ 113.103165][ T4364] usb 3-1: SerialNumber: syz [ 113.172883][ T5943] XFS (loop0): Quotacheck: Done. [ 113.220324][ T3571] XFS (loop0): Unmounting Filesystem [ 113.246701][ T5950] BTRFS info (device loop1): enabling ssd optimizations [ 113.341092][ T5970] loop3: detected capacity change from 0 to 32768 [ 113.613720][ T4364] r8152-cfgselector 3-1: Unknown version 0x0000 [ 113.624962][ T4364] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 113.761741][ T5970] XFS (loop3): Mounting V5 Filesystem [ 113.882922][ T5970] XFS (loop3): Ending clean mount [ 113.988626][ T3577] XFS (loop3): Unmounting Filesystem [ 114.002497][ T6012] loop1: detected capacity change from 0 to 2048 [ 114.066312][ T6016] loop0: detected capacity change from 0 to 4096 [ 114.120581][ T6012] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 114.148399][ T6012] UDF-fs: Scanning with blocksize 512 failed [ 114.206919][ T6012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.207621][ T6023] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.368652][ T6027] loop4: detected capacity change from 0 to 256 [ 114.467002][ T6027] MINIX-fs: mounting file system with errors, running fsck is recommended [ 114.648394][ T4321] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.738350][ T4316] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 114.908341][ T4321] usb 3-1: Using ep0 maxpacket: 8 [ 115.069103][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.088976][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.116239][ T4321] usb 3-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 115.139928][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.158654][ T4316] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.175440][ T4321] usb 3-1: config 0 descriptor?? [ 115.185297][ T4316] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.210955][ T4316] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.227960][ T4316] usb 1-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 115.259524][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.291591][ T4316] usb 1-1: config 0 descriptor?? [ 115.681418][ T4321] wacom 0003:056A:0303.000F: unbalanced delimiter at end of report description [ 115.707136][ T4321] wacom 0003:056A:0303.000F: parse failed [ 115.728332][ T4321] wacom: probe of 0003:056A:0303.000F failed with error -22 [ 115.791357][ T4316] wacom 0003:056A:005E.0010: unknown main item tag 0x0 [ 115.808367][ T4316] wacom 0003:056A:005E.0010: unknown main item tag 0x0 [ 115.816394][ T4316] wacom 0003:056A:005E.0010: unknown main item tag 0x0 [ 115.848398][ T4316] wacom 0003:056A:005E.0010: unknown main item tag 0x0 [ 115.867314][ T4316] wacom 0003:056A:005E.0010: hidraw0: USB HID v0.00 Device [HID 056a:005e] on usb-dummy_hcd.0-1/input0 [ 115.902033][ T4364] usb 3-1: USB disconnect, device number 7 [ 116.011929][ T3788] usb 1-1: USB disconnect, device number 5 [ 116.193065][ T6037] loop3: detected capacity change from 0 to 40427 [ 116.209756][ T6042] loop1: detected capacity change from 0 to 40427 [ 116.234942][ T6049] loop4: detected capacity change from 0 to 32768 [ 116.252978][ T6042] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 116.260710][ T6042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 116.271749][ T6042] F2FS-fs (loop1): invalid crc value [ 116.280959][ T6042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.297959][ T6049] XFS (loop4): Mounting V5 Filesystem [ 116.346726][ T6042] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 116.355550][ T6042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 116.358643][ T6037] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.424154][ T6049] XFS (loop4): Ending clean mount [ 116.444197][ T6037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.450053][ T6049] XFS (loop4): Quotacheck needed: Please wait. [ 116.513638][ T3577] attempt to access beyond end of device [ 116.513638][ T3577] loop3: rw=2049, want=45104, limit=40427 [ 116.628025][ T6049] XFS (loop4): Quotacheck: Done. [ 116.693095][ T6071] loop2: detected capacity change from 0 to 8 [ 116.710103][ T3579] XFS (loop4): Unmounting Filesystem [ 117.152700][ T6078] loop1: detected capacity change from 0 to 8192 [ 117.211419][ T6078] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 117.221215][ T6078] REISERFS (device loop1): using ordered data mode [ 117.248305][ T6078] reiserfs: using flush barriers [ 117.308479][ T6078] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.370279][ T6078] REISERFS (device loop1): checking transaction log (loop1) [ 117.387468][ T6091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.395572][ T6091] IPv6: NLM_F_CREATE should be set when creating new route [ 117.412302][ T6078] REISERFS (device loop1): Using r5 hash to sort names [ 117.416834][ T6089] loop3: detected capacity change from 0 to 512 [ 117.433052][ T6078] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 117.471695][ T6078] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 117.513568][ T6089] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.573565][ T6078] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 117.608902][ T6089] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.850: invalid indirect mapped block 4294967295 (level 1) [ 117.633954][ T6089] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.850: invalid indirect mapped block 4294967295 (level 1) [ 117.654107][ T6074] loop0: detected capacity change from 0 to 32768 [ 117.676086][ T6078] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 117.697182][ T6078] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 117.698927][ T6095] loop2: detected capacity change from 0 to 4096 [ 117.754983][ T6089] EXT4-fs (loop3): 2 truncates cleaned up [ 117.783665][ T6089] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 117.831990][ T6095] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 117.868115][ T6089] EXT4-fs error (device loop3): ext4_get_parent:1904: inode #11: comm syz.3.850: bad parent inode number: 3 [ 117.920919][ T6095] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 118.100088][ T6095] Process accounting resumed [ 118.245235][ T6116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'. [ 118.269960][ T6117] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 118.381216][ T6125] mmap: syz.3.876 (6125): VmData 41648128 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 118.588647][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.787547][ T6161] loop3: detected capacity change from 0 to 512 [ 118.828471][ T3788] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.848658][ T6161] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 118.848658][ T6161] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 118.848658][ T6161] [ 118.878424][ T4364] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.899821][ T6161] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.893: inline data xattr refers to an external xattr inode [ 118.915987][ T6161] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.893: couldn't read orphan inode 12 (err -117) [ 118.934969][ T6161] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,max_dir_size_kb=0x0000000000001c2e,min_batch_time=0x00000000000005c9,resuid=0x0000000000000000,prjquota,noacl,block_validity,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback. [ 119.068597][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=4f.4a [ 119.078375][ T3788] usb 2-1: Using ep0 maxpacket: 16 [ 119.098453][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.123745][ T7] usb 1-1: config 0 descriptor?? [ 119.193633][ T7] ldusb 1-1:0.0: Interrupt in endpoint not found [ 119.198575][ T3788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.222917][ T3788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.248637][ T4364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.259832][ T3788] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 119.276689][ T4364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.293237][ T3788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.311933][ T4364] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.335529][ T3788] usb 2-1: config 0 descriptor?? [ 119.352771][ T4364] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 119.376618][ T4364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.409436][ T3795] usb 1-1: USB disconnect, device number 6 [ 119.423131][ T4364] usb 5-1: config 0 descriptor?? [ 119.821369][ T3788] apple 0003:05AC:026C.0011: unknown main item tag 0x0 [ 119.837273][ T3788] apple 0003:05AC:026C.0011: unknown main item tag 0x0 [ 119.857938][ T3788] apple 0003:05AC:026C.0011: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.1-1/input0 [ 119.921994][ T4364] wacom 0003:056A:0043.0012: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 119.928694][ T6178] loop3: detected capacity change from 0 to 1024 [ 119.973435][ T4364] wacom 0003:056A:0043.0012: hidraw1: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0 [ 120.011805][ T4364] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0012/input/input20 [ 120.024363][ T7] usb 2-1: USB disconnect, device number 7 [ 120.033987][ T6178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.133035][ T6186] program syz.2.904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.164288][ T4364] usb 5-1: USB disconnect, device number 11 [ 120.224154][ T6188] loop0: detected capacity change from 0 to 128 [ 120.293407][ T6188] EXT4-fs (loop0): Ignoring removed nobh option [ 120.314763][ T3922] udevd[3922]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 120.315116][ T6188] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000000040,,errors=continue. Quota mode: none. [ 120.344720][ T6188] ext4 filesystem being mounted at mnt:[4026533011] supports timestamps until 2038 (0x7fffffff) [ 120.355106][ T3922] udevd[3922]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 120.427439][ T6199] loop2: detected capacity change from 0 to 4096 [ 120.438022][ T6199] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 120.532131][ T6199] ntfs: (device loop2): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 120.576837][ T6199] ntfs: volume version 3.1. [ 120.578435][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.607189][ T6199] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macturkish. You might want to try to use the mount option nls=utf8. [ 120.666941][ T6199] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 120.771169][ T6204] loop1: detected capacity change from 0 to 4096 [ 120.861274][ T6204] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 120.916033][ T6204] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 120.931405][ T6204] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 120.942719][ T6204] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 120.956293][ T6204] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 120.995619][ T6204] ntfs: volume version 3.1. [ 121.048532][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.168709][ T7] usb 4-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 121.186776][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.280211][ T6215] MPTCP: kernel_bind error, err=-99 [ 121.299337][ T6206] loop4: detected capacity change from 0 to 32768 [ 121.375391][ T6221] loop2: detected capacity change from 0 to 512 [ 121.438642][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.440371][ T6221] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.461374][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.475207][ T6202] loop0: detected capacity change from 0 to 40427 [ 121.503460][ T7] usb 4-1: Product: syz [ 121.507762][ T7] usb 4-1: Manufacturer: syz [ 121.514685][ T6221] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.921: invalid indirect mapped block 4294967295 (level 1) [ 121.518145][ T7] usb 4-1: SerialNumber: syz [ 121.533563][ T6221] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.921: invalid indirect mapped block 4294967295 (level 1) [ 121.550907][ T6202] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 121.568821][ T6202] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.631056][ T6202] F2FS-fs (loop0): Found nat_bits in checkpoint [ 121.676881][ T6221] EXT4-fs (loop2): 2 truncates cleaned up [ 121.724082][ T6221] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.774745][ T6236] loop4: detected capacity change from 0 to 1024 [ 121.778080][ T6202] F2FS-fs (loop0): recover fsync data on readonly fs [ 121.795413][ T6202] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 121.805268][ T6202] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 121.833972][ T6221] EXT4-fs error (device loop2): ext4_get_parent:1904: inode #11: comm syz.2.921: bad parent inode number: 3 [ 121.848655][ T6238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.928'. [ 121.937367][ T7] usb 4-1: bad CDC descriptors [ 121.962937][ T7] usb 4-1: USB disconnect, device number 7 [ 122.252643][ T6253] netlink: 'syz.1.936': attribute type 29 has an invalid length. [ 122.281889][ T6253] netlink: 'syz.1.936': attribute type 29 has an invalid length. [ 122.296338][ T6253] netlink: 'syz.1.936': attribute type 29 has an invalid length. [ 122.333685][ T6255] loop0: detected capacity change from 0 to 2048 [ 122.423310][ T6255] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.601946][ T6242] loop4: detected capacity change from 0 to 32768 [ 122.650580][ T6269] loop0: detected capacity change from 0 to 512 [ 122.716069][ T6242] XFS (loop4): Mounting V5 Filesystem [ 122.766108][ T6269] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.818225][ T6269] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.942: invalid block [ 122.856245][ T6242] XFS (loop4): Ending clean mount [ 122.865244][ T6242] XFS (loop4): Quotacheck needed: Please wait. [ 122.924072][ T6269] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.942: invalid indirect mapped block 4294967295 (level 1) [ 122.958793][ T6269] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.942: invalid indirect mapped block 4294967295 (level 1) [ 122.995480][ T6269] EXT4-fs (loop0): 2 truncates cleaned up [ 123.004698][ T6269] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 123.024956][ T6242] XFS (loop4): Quotacheck: Done. [ 123.074943][ T6269] EXT4-fs error (device loop0): ext4_get_parent:1904: inode #11: comm syz.0.942: bad parent inode number: 3 [ 123.115502][ T3579] XFS (loop4): Unmounting Filesystem [ 123.285411][ T6261] loop1: detected capacity change from 0 to 32768 [ 123.321333][ T6288] devtmpfs: Bad value for 'size' [ 123.445106][ T6272] loop3: detected capacity change from 0 to 32768 [ 123.471510][ T6261] XFS (loop1): Mounting V5 Filesystem [ 123.531992][ T6293] loop2: detected capacity change from 0 to 8192 [ 123.580098][ T6272] find_entry called with index = 0 [ 123.597577][ T6272] find_entry called with index = 0 [ 123.607689][ T6272] read_mapping_page failed! [ 123.619052][ T6272] ERROR: (device loop3): txCommit: [ 123.619052][ T6272] [ 123.648844][ T6293] REISERFS warning (device loop2): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 123.648844][ T6293] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 123.648844][ T6293] get newer reiserfsprogs package [ 123.680351][ T6272] ERROR: (device loop3): remounting filesystem as read-only [ 123.754280][ T6261] XFS (loop1): Ending clean mount [ 123.894701][ T3567] XFS (loop1): Unmounting Filesystem [ 124.015730][ T6293] fuse: Unexpected value for 'default_permissions' [ 124.202118][ T6316] loop3: detected capacity change from 0 to 2048 [ 124.215576][ T6318] trusted_key: encrypted_key: key trusted:syz not found [ 124.276169][ T6307] loop4: detected capacity change from 0 to 40427 [ 124.334781][ T6307] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 124.362844][ T6307] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.363084][ T6324] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.448917][ T6307] F2FS-fs (loop4): invalid crc value [ 124.481927][ T6307] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.605924][ T6339] loop0: detected capacity change from 0 to 256 [ 124.632948][ T6307] F2FS-fs (loop4): recover fsync data on readonly fs [ 124.664046][ T6307] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 124.715503][ T6307] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 124.748775][ T6307] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 124.869445][ T6354] loop3: detected capacity change from 0 to 164 [ 124.917129][ T6356] loop1: detected capacity change from 0 to 512 [ 124.995451][ T6356] EXT4-fs (loop1): 1 truncate cleaned up [ 125.030337][ T6356] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.110493][ T6356] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.975: bg 0: block 7: invalid block bitmap [ 125.147710][ T6356] syz.1.975 (6356) used greatest stack depth: 17520 bytes left [ 125.528161][ T6382] loop4: detected capacity change from 0 to 8192 [ 125.615821][ T6382] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 125.686852][ T6382] REISERFS (device loop4): using ordered data mode [ 125.701783][ T6382] reiserfs: using flush barriers [ 125.707703][ T6384] loop3: detected capacity change from 0 to 32768 [ 125.714185][ T6387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 125.726507][ T6382] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.754061][ T6389] loop2: detected capacity change from 0 to 1024 [ 125.757895][ T6382] REISERFS (device loop4): checking transaction log (loop4) [ 125.770262][ T6382] REISERFS (device loop4): Using r5 hash to sort names [ 125.831495][ T6382] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 125.871595][ T6384] XFS (loop3): Mounting V5 Filesystem [ 125.881382][ T6389] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 125.939771][ T6389] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,bsdgroups,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 126.011197][ T6384] XFS (loop3): Ending clean mount [ 126.167727][ T3577] XFS (loop3): Unmounting Filesystem [ 126.207620][ T6413] netlink: 1776 bytes leftover after parsing attributes in process `syz.4.993'. [ 126.404303][ T6421] loop1: detected capacity change from 0 to 2048 [ 126.432713][ T6424] loop4: detected capacity change from 0 to 1024 [ 126.470365][ T6421] loop1: p2 < > [ 126.472112][ T6425] netlink: 'syz.2.1002': attribute type 2 has an invalid length. [ 126.542687][ T3025] loop1: p2 < > [ 126.705432][ T6438] loop2: detected capacity change from 0 to 1024 [ 126.739710][ T6438] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 126.757677][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 126.854493][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 126.925711][ T6445] loop2: detected capacity change from 0 to 64 [ 126.944096][ T6441] loop1: detected capacity change from 0 to 4096 [ 126.946000][ T26] audit: type=1800 audit(1725636762.174:9): pid=6445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1012" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 127.019407][ T6441] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 127.051986][ T6441] ntfs: volume version 3.1. [ 127.207288][ T6453] loop4: detected capacity change from 0 to 128 [ 127.314380][ T6457] loop3: detected capacity change from 0 to 512 [ 127.378377][ T6457] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 127.378468][ T6457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.453648][ T6457] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1020: corrupted in-inode xattr [ 127.454075][ T6457] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1020: couldn't read orphan inode 15 (err -117) [ 127.454382][ T6457] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,mblk_io_submit,lazytime,nogrpid,block_validity,user_xattr,mb_optimize_scan=0x0000000000000001,init_itable=0x00000000000003ed,,errors=continue. Quota mode: none. [ 127.744564][ T6481] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 127.932474][ T6490] loop2: detected capacity change from 0 to 2048 [ 128.023292][ T6490] EXT4-fs (loop2): Ignoring removed bh option [ 128.040178][ T6490] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 128.047543][ T6490] EXT4-fs (loop2): Ignoring removed nobh option [ 128.156909][ T6490] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue. Quota mode: none. [ 128.380005][ T6510] tipc: Enabling of bearer rejected, failed to enable media [ 128.486207][ T6514] loop2: detected capacity change from 0 to 1024 [ 128.591998][ T6514] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.617341][ T6470] loop0: detected capacity change from 0 to 32768 [ 128.624457][ T6514] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038 (0x7fffffff) [ 128.648198][ T6491] loop3: detected capacity change from 0 to 32768 [ 128.687232][ T6470] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 128.698172][ T6491] XFS: ikeep mount option is deprecated. [ 128.707307][ T6491] XFS: noikeep mount option is deprecated. [ 128.710303][ T6528] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 128.713312][ T6470] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.786038][ T6470] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 128.795166][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 128.803002][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 128.829172][ T3798] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.852809][ T6491] XFS (loop3): Mounting V5 Filesystem [ 128.892641][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 89ms [ 128.900510][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 128.905751][ T6470] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 128.967720][ T6491] XFS (loop3): Ending clean mount [ 129.010710][ T6491] XFS (loop3): Quotacheck needed: Please wait. [ 129.090930][ T3798] usb 2-1: Using ep0 maxpacket: 32 [ 129.120495][ T6491] XFS (loop3): Quotacheck: Done. [ 129.214397][ T3798] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 129.227374][ T3577] XFS (loop3): Unmounting Filesystem [ 129.235333][ T3798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.264899][ T3798] usb 2-1: config 0 descriptor?? [ 129.301200][ T6546] loop2: detected capacity change from 0 to 8192 [ 129.330577][ T3798] gspca_main: sq930x-2.14.0 probing 041e:403c [ 129.417129][ T6546] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 129.436788][ T6546] REISERFS (device loop2): using ordered data mode [ 129.444132][ T6546] reiserfs: using flush barriers [ 129.451132][ T6546] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 129.474233][ T6546] REISERFS (device loop2): checking transaction log (loop2) [ 129.503677][ T6546] REISERFS (device loop2): Using r5 hash to sort names [ 129.554464][ T6535] loop4: detected capacity change from 0 to 32768 [ 129.701318][ T6535] XFS (loop4): Mounting V5 Filesystem [ 129.799929][ T6535] XFS (loop4): Ending clean mount [ 129.808545][ T6535] XFS (loop4): Quotacheck needed: Please wait. [ 129.888325][ T6535] XFS (loop4): Quotacheck: Done. [ 129.981895][ T6567] loop2: detected capacity change from 0 to 256 [ 129.997917][ T3579] XFS (loop4): Unmounting Filesystem [ 130.030575][ T3798] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 130.037015][ T3798] sq930x: probe of 2-1:0.0 failed with error -71 [ 130.052657][ T3798] usb 2-1: USB disconnect, device number 8 [ 130.130058][ T6567] FAT-fs (loop2): Directory bread(block 64) failed [ 130.136636][ T6567] FAT-fs (loop2): Directory bread(block 65) failed [ 130.174872][ T6567] FAT-fs (loop2): Directory bread(block 66) failed [ 130.182157][ T6567] FAT-fs (loop2): Directory bread(block 67) failed [ 130.211525][ T6567] FAT-fs (loop2): Directory bread(block 68) failed [ 130.218101][ T6567] FAT-fs (loop2): Directory bread(block 69) failed [ 130.235606][ T6567] FAT-fs (loop2): Directory bread(block 70) failed [ 130.254675][ T6567] FAT-fs (loop2): Directory bread(block 71) failed [ 130.266575][ T6567] FAT-fs (loop2): Directory bread(block 72) failed [ 130.292273][ T6567] FAT-fs (loop2): Directory bread(block 73) failed [ 130.445286][ T6557] loop3: detected capacity change from 0 to 40427 [ 130.460813][ T6571] program syz.2.1064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.534752][ T6557] F2FS-fs (loop3): invalid crc value [ 130.589427][ T6557] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.690308][ T6587] loop2: detected capacity change from 0 to 64 [ 130.714829][ T6557] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.789405][ T3577] attempt to access beyond end of device [ 130.789405][ T3577] loop3: rw=2049, want=45104, limit=40427 [ 130.905496][ T6569] loop0: detected capacity change from 0 to 32768 [ 131.124322][ T6592] loop0: detected capacity change from 0 to 512 [ 131.166758][ T6592] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.275715][ T6592] EXT4-fs (loop0): 1 truncate cleaned up [ 131.294493][ T6592] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.364620][ T6586] loop4: detected capacity change from 0 to 32768 [ 131.433728][ T6586] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1069 (6586) [ 131.508799][ T6586] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 131.558168][ T6586] BTRFS info (device loop4): using free space tree [ 131.590558][ T6602] loop2: detected capacity change from 0 to 8192 [ 131.602443][ T6586] BTRFS info (device loop4): has skinny extents [ 131.623252][ T6606] loop1: detected capacity change from 0 to 4096 [ 131.691210][ T6602] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 131.704718][ T6602] REISERFS (device loop2): using ordered data mode [ 131.712132][ T6602] reiserfs: using flush barriers [ 131.718190][ T6602] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.745410][ T6624] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.796380][ T6602] REISERFS (device loop2): checking transaction log (loop2) [ 131.877013][ T6602] REISERFS (device loop2): Using r5 hash to sort names [ 131.903037][ T6602] REISERFS (device loop2): using 3.5.x disk format [ 131.940573][ T6586] BTRFS info (device loop4): enabling ssd optimizations [ 132.001316][ T6602] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 132.144923][ T6621] loop0: detected capacity change from 0 to 32768 [ 132.287825][ T6642] loop1: detected capacity change from 0 to 8192 [ 132.378056][ T6647] loop3: detected capacity change from 0 to 1024 [ 132.389629][ T6642] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 132.406395][ T6642] REISERFS (device loop1): using ordered data mode [ 132.413223][ T6642] reiserfs: using flush barriers [ 132.435104][ T6647] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 132.460927][ T6642] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.477997][ T6642] REISERFS (device loop1): checking transaction log (loop1) [ 132.503812][ T6621] XFS (loop0): Mounting V5 Filesystem [ 132.526161][ T6642] REISERFS (device loop1): Using r5 hash to sort names [ 132.541901][ T6642] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 132.714056][ T6621] XFS (loop0): Ending clean mount [ 132.718401][ T6658] loop2: detected capacity change from 0 to 256 [ 132.755560][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.761919][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.786151][ T6621] XFS (loop0): Quotacheck needed: Please wait. [ 132.789288][ T6661] loop3: detected capacity change from 0 to 512 [ 132.840259][ T6658] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 132.842404][ T6661] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.901500][ T6621] XFS (loop0): Quotacheck: Done. [ 132.908614][ T6661] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 132.966002][ T6661] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1089: invalid indirect mapped block 2683928664 (level 1) [ 133.078404][ T6661] EXT4-fs (loop3): Remounting filesystem read-only [ 133.098344][ T3792] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.128795][ T6661] EXT4-fs (loop3): 1 truncate cleaned up [ 133.134618][ T6661] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 133.166481][ T3571] XFS (loop0): Unmounting Filesystem [ 133.252007][ T3577] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 133.304201][ T3577] EXT4-fs (loop3): Remounting filesystem read-only [ 133.316639][ T3577] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 133.336382][ T3577] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 133.438358][ T3789] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.474729][ T3792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.490821][ T3792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.501178][ T3792] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 133.510849][ T3792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.521060][ T3792] usb 2-1: config 0 descriptor?? [ 133.688336][ T3789] usb 3-1: Using ep0 maxpacket: 8 [ 133.808709][ T3789] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 133.823003][ T3789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.851215][ T3789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.864846][ T3789] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 133.884638][ T3789] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 133.894014][ T3789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.909749][ T3789] usb 3-1: config 0 descriptor?? [ 134.000658][ T3624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.020084][ T3792] belkin 0003:1020:0006.0013: item fetching failed at offset 2/5 [ 134.044183][ T3792] belkin 0003:1020:0006.0013: parse failed [ 134.049940][ T6668] loop0: detected capacity change from 0 to 40427 [ 134.050236][ T3792] belkin: probe of 0003:1020:0006.0013 failed with error -22 [ 134.089711][ T6668] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 134.119998][ T6668] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.151262][ T3624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.186007][ T6668] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.242460][ T3624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.246030][ T4321] usb 2-1: USB disconnect, device number 9 [ 134.275903][ T6668] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 134.320757][ T6668] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.336583][ T6668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.356857][ T3624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.390423][ T3789] hid (null): report_id 0 is invalid [ 134.414811][ T3789] uclogic 0003:2179:0077.0014: report_id 0 is invalid [ 134.428750][ T3789] uclogic 0003:2179:0077.0014: item 0 1 1 8 parsing failed [ 134.445501][ T6683] loop4: detected capacity change from 0 to 256 [ 134.452797][ T3789] uclogic 0003:2179:0077.0014: parse failed [ 134.468521][ T3789] uclogic: probe of 0003:2179:0077.0014 failed with error -22 [ 134.530467][ T6683] FAT-fs (loop4): Directory bread(block 64) failed [ 134.537015][ T6683] FAT-fs (loop4): Directory bread(block 65) failed [ 134.547818][ T6683] FAT-fs (loop4): Directory bread(block 66) failed [ 134.568680][ T6683] FAT-fs (loop4): Directory bread(block 67) failed [ 134.575299][ T6683] FAT-fs (loop4): Directory bread(block 68) failed [ 134.582416][ T6683] FAT-fs (loop4): Directory bread(block 69) failed [ 134.589933][ T6683] FAT-fs (loop4): Directory bread(block 70) failed [ 134.596749][ T6683] FAT-fs (loop4): Directory bread(block 71) failed [ 134.603874][ T6683] FAT-fs (loop4): Directory bread(block 72) failed [ 134.611972][ T6683] FAT-fs (loop4): Directory bread(block 73) failed [ 134.652174][ T4316] usb 3-1: USB disconnect, device number 8 [ 134.770659][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 135.006606][ T6702] loop1: detected capacity change from 0 to 64 [ 135.037601][ T6706] loop0: detected capacity change from 0 to 512 [ 135.143943][ T6706] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1105: invalid indirect mapped block 256 (level 2) [ 135.172931][ T6706] EXT4-fs (loop0): 2 truncates cleaned up [ 135.181587][ T6706] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.411458][ T6727] loop0: detected capacity change from 0 to 8 [ 135.464560][ T6727] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 135.485335][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.498577][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.527254][ T6679] device bridge_slave_0 entered promiscuous mode [ 135.610736][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.633143][ T6733] loop1: detected capacity change from 0 to 2048 [ 135.642700][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.684665][ T6679] device bridge_slave_1 entered promiscuous mode [ 135.771256][ T6733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.832267][ T26] audit: type=1800 audit(1725636771.064:10): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1113" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 135.852828][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.940490][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.000774][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.136058][ T6724] loop4: detected capacity change from 0 to 32768 [ 136.200943][ T6679] team0: Port device team_slave_0 added [ 136.270575][ T6679] team0: Port device team_slave_1 added [ 136.340155][ T6724] XFS (loop4): Mounting V5 Filesystem [ 136.365882][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 136.376290][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.392547][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.470534][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.484150][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.491395][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.517549][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.524183][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.620195][ T6744] loop0: detected capacity change from 0 to 32768 [ 136.637660][ T6724] XFS (loop4): Ending clean mount [ 136.672662][ T6724] XFS (loop4): Quotacheck needed: Please wait. [ 136.694840][ T309] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 136.714703][ T6679] device hsr_slave_0 entered promiscuous mode [ 136.715320][ T309] XFS (loop4): Unmount and run xfs_repair [ 136.744704][ T309] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 136.766225][ T6679] device hsr_slave_1 entered promiscuous mode [ 136.778972][ T6679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.795791][ T309] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 136.814799][ T6744] XFS (loop0): Mounting V5 Filesystem [ 136.815187][ T309] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 136.834022][ T6679] Cannot create hsr debugfs directory [ 136.854641][ T309] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 136.875343][ T309] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 136.877541][ T309] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 136.877559][ T309] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 136.877572][ T309] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 136.877585][ T309] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 136.877906][ T309] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74 [ 136.927540][ T6724] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 137.021119][ T6744] XFS (loop0): Ending clean mount [ 137.049294][ T6744] XFS (loop0): Quotacheck needed: Please wait. [ 137.145090][ T3579] XFS (loop4): Unmounting Filesystem [ 137.175018][ T6744] XFS (loop0): Quotacheck: Done. [ 137.175557][ T6761] loop2: detected capacity change from 0 to 32768 [ 137.263705][ T6761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 137.308061][ T3571] XFS (loop0): Unmounting Filesystem [ 137.313383][ T6761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1801)... [ 137.430070][ T6761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 137.534157][ T4316] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 137.551366][ T4316] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 137.685299][ T4316] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 133ms [ 137.702636][ T4316] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 137.714762][ T6761] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 138.093070][ T6822] loop4: detected capacity change from 0 to 1024 [ 138.211716][ T6822] hfsplus: bad catalog entry type [ 138.222518][ T3624] device hsr_slave_0 left promiscuous mode [ 138.259890][ T3624] device hsr_slave_1 left promiscuous mode [ 138.280776][ T3608] hfsplus: b-tree write err: -5, ino 4 [ 138.305864][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.323892][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.342650][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.358735][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.382206][ T3624] device bridge_slave_1 left promiscuous mode [ 138.426058][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.428436][ T3796] Bluetooth: hci3: command 0x041b tx timeout [ 138.532661][ T3624] device bridge_slave_0 left promiscuous mode [ 138.549955][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.571035][ T3624] device veth1_macvtap left promiscuous mode [ 138.577693][ T3624] device veth0_macvtap left promiscuous mode [ 138.584792][ T3624] device veth1_vlan left promiscuous mode [ 138.593497][ T3624] device veth0_vlan left promiscuous mode [ 139.119395][ T6848] loop0: detected capacity change from 0 to 32768 [ 139.154732][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 139.186020][ T6839] loop2: detected capacity change from 0 to 32768 [ 139.194487][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 139.220055][ T6839] XFS: noikeep mount option is deprecated. [ 139.235725][ T6848] find_entry called with index = 0 [ 139.243720][ T6848] find_entry called with index = 0 [ 139.250060][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.259859][ T6848] read_mapping_page failed! [ 139.268600][ T6848] ERROR: (device loop0): txCommit: [ 139.268600][ T6848] [ 139.292242][ T6848] ERROR: (device loop0): remounting filesystem as read-only [ 139.303844][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.313201][ T6839] XFS (loop2): Mounting V5 Filesystem [ 139.428533][ T3796] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 139.471028][ T3624] bond0 (unregistering): Released all slaves [ 139.471559][ T6839] XFS (loop2): Ending clean mount [ 139.527901][ T6839] XFS (loop2): Quotacheck needed: Please wait. [ 139.647926][ T6839] XFS (loop2): Quotacheck: Done. [ 139.668608][ T3796] usb 2-1: Using ep0 maxpacket: 32 [ 139.780870][ T6839] autofs4:pid:6839:autofs_fill_super: called with bogus options [ 139.788592][ T3796] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 139.821021][ T3796] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 139.861277][ T3796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.900581][ T6877] loop4: detected capacity change from 0 to 128 [ 139.926255][ T3566] XFS (loop2): Unmounting Filesystem [ 140.049287][ T6877] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.068516][ T3796] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.118137][ T3796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.131064][ T6877] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038 (0x7fffffff) [ 140.163344][ T3796] usb 2-1: Product: syz [ 140.190619][ T3796] usb 2-1: Manufacturer: syz [ 140.195251][ T3796] usb 2-1: SerialNumber: syz [ 140.309012][ T6679] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 140.345767][ T6679] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.390899][ T6679] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.437620][ T6679] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.545855][ T3794] Bluetooth: hci3: command 0x040f tx timeout [ 140.750308][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.800872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.819066][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.863073][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.907447][ T6907] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1160'. [ 140.916767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.948168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.968929][ T3796] usb 2-1: 0:2 : does not exist [ 140.979272][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.986349][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.994924][ T3796] usb 2-1: USB disconnect, device number 10 [ 141.063237][ T6883] loop0: detected capacity change from 0 to 32768 [ 141.087463][ T6909] tipc: Started in network mode [ 141.106084][ T6909] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 141.140950][ T6909] tipc: Enabled bearer , priority 0 [ 141.147645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.161748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.201625][ T6883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1155 (6883) [ 141.236954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.268753][ T6883] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.269479][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.284596][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.305288][ T6926] loop4: detected capacity change from 0 to 64 [ 141.310305][ T6883] BTRFS info (device loop0): setting nodatacow, compression disabled [ 141.372311][ T6883] BTRFS info (device loop0): enabling auto defrag [ 141.398605][ T6883] BTRFS info (device loop0): max_inline at 0 [ 141.408880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.428737][ T6883] BTRFS info (device loop0): using free space tree [ 141.436420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.463839][ T6883] BTRFS info (device loop0): has skinny extents [ 141.499113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.599378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.652218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.702279][ T6939] tipc: Enabled bearer , priority 10 [ 141.738676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.749887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 142.226381][ T6979] loop2: detected capacity change from 0 to 256 [ 142.316104][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.369166][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.375108][ T6979] FAT-fs (loop2): Directory bread(block 64) failed [ 142.405681][ T6979] FAT-fs (loop2): Directory bread(block 65) failed [ 142.409433][ T6679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.422380][ T6979] FAT-fs (loop2): Directory bread(block 66) failed [ 142.461849][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 142.474457][ T6979] FAT-fs (loop2): Directory bread(block 67) failed [ 142.487912][ T6984] loop4: detected capacity change from 0 to 16 [ 142.501693][ T6979] FAT-fs (loop2): Directory bread(block 68) failed [ 142.516621][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.518442][ T6979] FAT-fs (loop2): Directory bread(block 69) failed [ 142.537846][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.546324][ T6979] FAT-fs (loop2): Directory bread(block 70) failed [ 142.563344][ T6979] FAT-fs (loop2): Directory bread(block 71) failed [ 142.573516][ T6979] FAT-fs (loop2): Directory bread(block 72) failed [ 142.588386][ T6979] FAT-fs (loop2): Directory bread(block 73) failed [ 142.594890][ T3792] Bluetooth: hci3: command 0x0419 tx timeout [ 142.704951][ T6984] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 142.745182][ T6984] erofs: (device loop4): erofs_read_inode: bogus i_mode (3) @ nid 36 [ 142.760400][ T4316] tipc: Node number set to 10136234 [ 142.904472][ T7006] loop2: detected capacity change from 0 to 16 [ 142.935256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.958730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.980935][ T7011] loop1: detected capacity change from 0 to 256 [ 142.987522][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.025170][ T7006] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.061380][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.086075][ T7008] loop0: detected capacity change from 0 to 4096 [ 143.109613][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.157240][ T7013] loop4: detected capacity change from 0 to 4096 [ 143.178903][ T7011] FAT-fs (loop1): Directory bread(block 64) failed [ 143.185478][ T7011] FAT-fs (loop1): Directory bread(block 65) failed [ 143.206701][ T7008] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 143.210484][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.237282][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.252964][ T7008] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 143.262219][ T7011] FAT-fs (loop1): Directory bread(block 66) failed [ 143.284901][ T6679] device veth0_vlan entered promiscuous mode [ 143.301131][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.326260][ T7013] ntfs3: loop4: ino=5, "/" directory corrupted [ 143.329182][ T7011] FAT-fs (loop1): Directory bread(block 67) failed [ 143.339049][ T7008] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 143.339082][ T7008] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 143.339136][ T7008] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 143.361417][ T7008] ntfs: volume version 3.1. [ 143.380272][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.398704][ T7013] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 143.412137][ T6679] device veth1_vlan entered promiscuous mode [ 143.444470][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.501602][ T7016] loop2: detected capacity change from 0 to 4096 [ 143.521114][ T7008] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 143.541835][ T7008] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 143.559135][ T7011] FAT-fs (loop1): Directory bread(block 68) failed [ 143.561065][ T6679] device veth0_macvtap entered promiscuous mode [ 143.565704][ T7011] FAT-fs (loop1): Directory bread(block 69) failed [ 143.589488][ T7016] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 143.609944][ T7008] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 143.616127][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.621433][ T7011] FAT-fs (loop1): Directory bread(block 70) failed [ 143.636926][ T7008] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 143.656645][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.693932][ T7011] FAT-fs (loop1): Directory bread(block 71) failed [ 143.712622][ T7008] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 143.744257][ T6679] device veth1_macvtap entered promiscuous mode [ 143.752987][ T7011] FAT-fs (loop1): Directory bread(block 72) failed [ 143.769322][ T7011] FAT-fs (loop1): Directory bread(block 73) failed [ 143.778168][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.801528][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.855986][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.871353][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.898763][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.909652][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.936177][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.957222][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.975519][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.986727][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.001836][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.010633][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.025009][ T7020] loop2: detected capacity change from 0 to 4096 [ 144.041560][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.055654][ T4316] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.099582][ T7020] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 144.130317][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.155946][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.174360][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.187985][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.226095][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.236850][ T7020] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 144.252234][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.262357][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.283547][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.295862][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.308485][ T7024] netlink: 'syz.0.1185': attribute type 3 has an invalid length. [ 144.326147][ T7026] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 144.334505][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 144.339883][ T7026] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1187'. [ 144.363941][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.404792][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.443474][ T6679] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.479350][ T7034] netlink: 'syz.0.1190': attribute type 1 has an invalid length. [ 144.485073][ T6679] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.489688][ T7034] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1190'. [ 144.497337][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.528440][ T6679] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.547797][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.568317][ T6679] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.585549][ T7039] loop1: detected capacity change from 0 to 136 [ 144.588753][ T4316] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 144.647231][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.684424][ T4316] usb 5-1: config 0 descriptor?? [ 144.831316][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.852240][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.903996][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.949925][ T3646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.958215][ T3646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.065143][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.154455][ T7061] loop2: detected capacity change from 0 to 128 [ 145.176029][ T4316] ntrig 0003:1B96:0008.0015: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 145.331967][ T7070] program syz.0.1208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.348802][ T7071] loop3: detected capacity change from 0 to 64 [ 145.381233][ T4316] usb 5-1: USB disconnect, device number 12 [ 145.455095][ T7075] tipc: Started in network mode [ 145.470261][ T7073] loop1: detected capacity change from 0 to 2048 [ 145.488741][ T7075] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 145.505730][ T7075] tipc: Enabled bearer , priority 10 [ 145.530815][ T7077] loop2: detected capacity change from 0 to 512 [ 145.581311][ T7077] EXT4-fs (loop2): Value of option "test_dummy_encryption=discard" is unrecognized [ 145.590759][ T7073] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.620652][ T7082] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.003771][ T7086] loop0: detected capacity change from 0 to 4096 [ 146.029087][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 146.293345][ T4317] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.398925][ T7105] loop2: detected capacity change from 0 to 32768 [ 146.478929][ T7105] XFS (loop2): sunit and swidth must be specified together [ 146.490998][ T4316] tipc: Node number set to 4269801488 [ 146.708757][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.738559][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.782851][ T4317] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.794495][ T7129] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.837108][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.868810][ T7129] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 146.886204][ T4317] usb 2-1: config 0 descriptor?? [ 146.893672][ T7130] loop3: detected capacity change from 0 to 4096 [ 146.898790][ C0] eth0: bad gso: type: 1, size: 1408 [ 147.047228][ T7130] NILFS (loop3): invalid segment: Checksum error in segment payload [ 147.098433][ T7130] NILFS (loop3): trying rollback from an earlier position [ 147.117426][ T7130] NILFS (loop3): recovery complete [ 147.140450][ T7106] loop4: detected capacity change from 0 to 40427 [ 147.154009][ T7144] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.258996][ T7106] F2FS-fs (loop4): invalid crc value [ 147.329370][ T7106] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.332748][ T7152] loop2: detected capacity change from 0 to 256 [ 147.415059][ T4317] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 147.442379][ T4317] plantronics 0003:047F:FFFF.0016: unbalanced collection at end of report description [ 147.479699][ T4317] plantronics 0003:047F:FFFF.0016: parse failed [ 147.495634][ T7106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 147.495896][ T4317] plantronics: probe of 0003:047F:FFFF.0016 failed with error -22 [ 147.597955][ T7106] F2FS-fs (loop4): Corrupted max_depth of 3: 4294967295 [ 147.664885][ T3606] usb 2-1: USB disconnect, device number 11 [ 147.867382][ T7169] loop3: detected capacity change from 0 to 1024 [ 147.941757][ T7169] hfsplus: small dir entry [ 148.153764][ C0] eth0: bad gso: type: 1, size: 1408 [ 148.400931][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 148.455102][ T7161] loop2: detected capacity change from 0 to 32768 [ 148.584730][ T7161] XFS (loop2): Mounting V5 Filesystem [ 148.621720][ T7210] loop1: detected capacity change from 0 to 256 [ 148.673210][ T7210] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 148.706856][ T7161] XFS (loop2): Ending clean mount [ 148.715094][ T7161] XFS (loop2): Quotacheck needed: Please wait. [ 148.811088][ T7161] XFS (loop2): Quotacheck: Done. [ 148.943578][ T7219] loop4: detected capacity change from 0 to 4096 [ 148.969503][ T3566] XFS (loop2): Unmounting Filesystem [ 148.980532][ T7221] loop1: detected capacity change from 0 to 16 [ 149.035387][ T7221] erofs: Unknown parameter 'GPL' [ 149.136444][ T7221] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 149.479835][ T7232] IPVS: Error connecting to the multicast addr [ 149.509326][ T7234] loop4: detected capacity change from 0 to 128 [ 149.550605][ T7237] loop2: detected capacity change from 0 to 64 [ 149.562352][ T7239] loop0: detected capacity change from 0 to 16 [ 149.576845][ T7234] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 149.616450][ T7234] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 149.651620][ T7209] loop3: detected capacity change from 0 to 40427 [ 149.684522][ T7239] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 149.749434][ T7234] sysv_count_free_inodes: unable to read inode table [ 149.750523][ T7209] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.800731][ T7246] loop2: detected capacity change from 0 to 1024 [ 149.829742][ T7239] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 149.905023][ T3579] sysv_free_block: trying to free block not in datazone [ 149.916480][ T7246] hfsplus: walked past end of dir [ 149.938615][ T3579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 149.947629][ T7209] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.974430][ T7239] CIFS mount error: No usable UNC path provided in device string! [ 149.974430][ T7239] [ 149.985556][ T7239] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 150.188220][ T6679] attempt to access beyond end of device [ 150.188220][ T6679] loop3: rw=2049, want=45104, limit=40427 [ 150.321498][ T7268] loop0: detected capacity change from 0 to 2048 [ 150.335099][ T7270] hsr0: VLAN not yet supported [ 150.446377][ T7268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.773019][ T7241] loop1: detected capacity change from 0 to 32768 [ 150.846215][ T7241] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1283 (7241) [ 150.869058][ T3606] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 150.926368][ T7241] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 150.976363][ T7241] BTRFS info (device loop1): use zlib compression, level 3 [ 151.000236][ T7287] process 'syz.0.1303' launched './file0' with NULL argv: empty string added [ 151.009603][ T7241] BTRFS info (device loop1): using free space tree [ 151.016130][ T7241] BTRFS info (device loop1): has skinny extents [ 151.023909][ T3675] udevd[3675]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [7285] terminated by signal 33 (Unknown signal 33) [ 151.047834][ T7283] loop3: detected capacity change from 0 to 4096 [ 151.110336][ T7283] __ntfs_warning: 6 callbacks suppressed [ 151.110352][ T7283] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 151.144126][ T3606] usb 5-1: Using ep0 maxpacket: 16 [ 151.146493][ T7283] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 151.217491][ T7272] loop2: detected capacity change from 0 to 40427 [ 151.232807][ T7283] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 151.264386][ T7306] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.267874][ T7283] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.295690][ T7283] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 151.308190][ T7272] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 151.316226][ T3606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.336647][ T3606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.347922][ T3606] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 151.357019][ T3606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.366835][ T3606] usb 5-1: config 0 descriptor?? [ 151.372654][ T7272] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.383144][ T7283] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.392702][ T7283] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 151.396376][ T7241] BTRFS info (device loop1): enabling ssd optimizations [ 151.429884][ T7272] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.473410][ T7283] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.483228][ T7272] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.495366][ T7283] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 151.511299][ T7272] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.516346][ T7283] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 151.558982][ T7283] ntfs: volume version 3.1. [ 151.585945][ T3566] attempt to access beyond end of device [ 151.585945][ T3566] loop2: rw=2049, want=45104, limit=40427 [ 151.866470][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1314'. [ 151.881655][ T3606] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0017/input/input23 [ 151.983231][ T3606] appleir 0003:05AC:8241.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 152.194331][ T3611] usb 5-1: USB disconnect, device number 13 [ 152.667246][ T7355] loop3: detected capacity change from 0 to 64 [ 152.907351][ T7369] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 152.953138][ T7335] loop1: detected capacity change from 0 to 32768 [ 153.030153][ T4320] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.180656][ T7383] loop4: detected capacity change from 0 to 64 [ 153.240323][ T7383] hfs: unable to open extent tree [ 153.265239][ T7383] hfs: can't find a HFS filesystem on dev loop4 [ 153.288358][ T4320] usb 1-1: Using ep0 maxpacket: 8 [ 153.428693][ T4320] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.442663][ T4320] usb 1-1: config 179 has no interface number 0 [ 153.482662][ T4320] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.494138][ T7394] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.504265][ T7394] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.510335][ T4320] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.513583][ T7394] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.533857][ T7394] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.562765][ T4320] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.584279][ T4320] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 153.619069][ T4320] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.659095][ T4320] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.694230][ T7400] loop1: detected capacity change from 0 to 64 [ 153.694370][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.748609][ T7360] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.811068][ T7374] loop3: detected capacity change from 0 to 40427 [ 153.827447][ T7402] loop1: detected capacity change from 0 to 256 [ 153.870442][ T7402] exfat: Deprecated parameter 'utf8' [ 153.892910][ T7402] exfat: Deprecated parameter 'namecase' [ 153.902168][ T7374] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.952000][ T7402] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 153.960560][ T7374] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.106563][ T6679] attempt to access beyond end of device [ 154.106563][ T6679] loop3: rw=2049, want=45104, limit=40427 [ 154.194728][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 154.266738][ T3798] usb 1-1: USB disconnect, device number 7 [ 154.278493][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 154.287627][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.296859][ C0] ================================================================== [ 154.305011][ C0] BUG: KASAN: use-after-free in register_lock_class+0x8ff/0x9a0 [ 154.312652][ C0] Read of size 1 at addr ffff888076515891 by task udevd/3025 [ 154.320021][ C0] [ 154.322344][ C0] CPU: 0 PID: 3025 Comm: udevd Not tainted 5.15.166-syzkaller #0 [ 154.330050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 154.340177][ C0] Call Trace: [ 154.343467][ C0] [ 154.346305][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 154.350971][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 154.356669][ C0] ? _printk+0xd1/0x120 [ 154.360814][ C0] ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0 [ 154.367239][ C0] ? __wake_up_klogd+0xcc/0x100 [ 154.372073][ C0] ? panic+0x860/0x860 [ 154.376125][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 154.381579][ C0] print_address_description+0x63/0x3b0 [ 154.387115][ C0] ? register_lock_class+0x8ff/0x9a0 [ 154.392494][ C0] kasan_report+0x16b/0x1c0 [ 154.396972][ C0] ? register_lock_class+0x8ff/0x9a0 [ 154.402233][ C0] register_lock_class+0x8ff/0x9a0 [ 154.407318][ C0] ? vprintk_emit+0x150/0x150 [ 154.411976][ C0] ? is_dynamic_key+0x1f0/0x1f0 [ 154.416797][ C0] __lock_acquire+0xd7/0x1ff0 [ 154.421462][ C0] ? __wake_up_klogd+0xd5/0x100 [ 154.426285][ C0] ? mark_lock+0x98/0x340 [ 154.430585][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 154.435601][ C0] lock_acquire+0x1db/0x4f0 [ 154.440078][ C0] ? __wake_up+0xf5/0x1c0 [ 154.444386][ C0] ? read_lock_is_recursive+0x10/0x10 [ 154.449736][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 154.455003][ C0] ? __wake_up+0xf5/0x1c0 [ 154.459395][ C0] ? _raw_spin_lock+0x40/0x40 [ 154.464084][ C0] ? kcov_remote_stop+0x3d7/0x4d0 [ 154.469094][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 154.474182][ C0] __wake_up+0xf5/0x1c0 [ 154.478316][ C0] ? remove_wait_queue+0x130/0x130 [ 154.483417][ C0] ? _raw_spin_unlock+0x24/0x40 [ 154.488257][ C0] __usb_hcd_giveback_urb+0x3a8/0x530 [ 154.493622][ C0] dummy_timer+0x8ad/0x3200 [ 154.498129][ C0] ? dummy_free_streams+0x310/0x310 [ 154.503300][ C0] call_timer_fn+0x16d/0x560 [ 154.507893][ C0] ? dummy_free_streams+0x310/0x310 [ 154.513062][ C0] ? __run_timers+0x890/0x890 [ 154.517711][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 154.522883][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 154.528175][ C0] ? dummy_free_streams+0x310/0x310 [ 154.533362][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 154.538548][ C0] ? dummy_free_streams+0x310/0x310 [ 154.543729][ C0] __run_timers+0x67c/0x890 [ 154.548235][ C0] ? detach_timer+0x2f0/0x2f0 [ 154.552894][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 154.558860][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 154.564138][ C0] run_timer_softirq+0x63/0xf0 [ 154.568877][ C0] handle_softirqs+0x3a7/0x930 [ 154.573626][ C0] ? __irq_exit_rcu+0x157/0x240 [ 154.578461][ C0] ? do_softirq+0x240/0x240 [ 154.582935][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 154.588059][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 154.593380][ C0] __irq_exit_rcu+0x157/0x240 [ 154.598040][ C0] ? irq_exit_rcu+0x20/0x20 [ 154.602541][ C0] irq_exit_rcu+0x5/0x20 [ 154.606762][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 154.612391][ C0] [ 154.615307][ C0] [ 154.618212][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 154.624174][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 154.629454][ C0] Code: 2b 00 74 08 4c 89 f7 e8 bc 73 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 154.649050][ C0] RSP: 0018:ffffc900014df3c0 EFLAGS: 00000206 [ 154.655091][ C0] RAX: 0000000000000001 RBX: 1ffff9200029be84 RCX: ffffffff81636652 [ 154.663222][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3cc0 RDI: ffffffff8ad90100 [ 154.671178][ C0] RBP: ffffc900014df508 R08: dffffc0000000000 R09: fffffbfff20e221a [ 154.679128][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200029be80 [ 154.687198][ C0] R13: dffffc0000000000 R14: ffffc900014df420 R15: 0000000000000246 [ 154.695184][ C0] ? validate_chain+0x112/0x5930 [ 154.700113][ C0] ? read_lock_is_recursive+0x10/0x10 [ 154.705464][ C0] ? read_lock_is_recursive+0x10/0x10 [ 154.710815][ C0] ? __might_sleep+0xc0/0xc0 [ 154.715468][ C0] ? __might_sleep+0xc0/0xc0 [ 154.720050][ C0] ? kernfs_dop_revalidate+0x33e/0x4a0 [ 154.725481][ C0] _raw_spin_lock+0x2a/0x40 [ 154.729958][ C0] ? fast_dput+0x177/0x290 [ 154.734350][ C0] fast_dput+0x177/0x290 [ 154.738563][ C0] dput+0xb7/0x1a0 [ 154.742256][ C0] step_into+0x352/0xe90 [ 154.746474][ C0] ? lookup_fast+0x399/0x7b0 [ 154.751055][ C0] ? set_root+0x3b0/0x3b0 [ 154.755380][ C0] ? __up_read+0x2b9/0x690 [ 154.759785][ C0] walk_component+0x359/0x610 [ 154.764459][ C0] ? nd_alloc_stack+0xf0/0xf0 [ 154.769111][ C0] ? kernfs_iop_permission+0x25b/0x360 [ 154.774545][ C0] ? inode_permission+0x21e/0x450 [ 154.779561][ C0] ? inode_permission+0xf7/0x450 [ 154.784504][ C0] ? kernfs_evict_inode+0x60/0x60 [ 154.789533][ C0] ? bpf_lsm_inode_permission+0x5/0x10 [ 154.794970][ C0] ? security_inode_permission+0xad/0xf0 [ 154.800597][ C0] link_path_walk+0x642/0xd90 [ 154.805260][ C0] ? set_root+0x332/0x3b0 [ 154.809669][ C0] ? handle_lookup_down+0x130/0x130 [ 154.814840][ C0] path_openat+0x249/0x2f20 [ 154.819319][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 154.824578][ C0] ? mark_lock+0x98/0x340 [ 154.828878][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 154.833894][ C0] ? do_filp_open+0x460/0x460 [ 154.838550][ C0] do_filp_open+0x21c/0x460 [ 154.843027][ C0] ? vfs_tmpfile+0x2e0/0x2e0 [ 154.847602][ C0] ? _raw_spin_unlock+0x24/0x40 [ 154.852425][ C0] ? alloc_fd+0x598/0x630 [ 154.856846][ C0] do_sys_openat2+0x13b/0x4f0 [ 154.861520][ C0] ? do_sys_open+0x220/0x220 [ 154.866104][ C0] ? __x64_sys_newfstatat+0x140/0x1b0 [ 154.871539][ C0] __x64_sys_openat+0x243/0x290 [ 154.876364][ C0] ? __ia32_sys_open+0x270/0x270 [ 154.881292][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 154.887244][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 154.892458][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 154.898489][ C0] do_syscall_64+0x3b/0xb0 [ 154.902878][ C0] ? clear_bhb_loop+0x15/0x70 [ 154.907636][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.913788][ C0] RIP: 0033:0x7f7e4c129477 [ 154.918219][ C0] Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 82 69 0d 00 f7 d8 64 89 02 48 83 [ 154.937975][ C0] RSP: 002b:00007ffed02c5d98 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 154.946455][ C0] RAX: ffffffffffffffda RBX: 0000556c07755290 RCX: 00007f7e4c129477 [ 154.954400][ C0] RDX: 0000000000090800 RSI: 0000556c0774f110 RDI: 00000000ffffff9c [ 154.962344][ C0] RBP: 0000556c0777b260 R08: 0000000000090800 R09: 0000556c0774f110 [ 154.970287][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 0000556c0774f110 [ 154.978318][ C0] R13: 00000000000000ff R14: 0000556be95021c4 R15: 0000000000000000 [ 154.986289][ C0] [ 154.989816][ C0] [ 154.992113][ C0] Allocated by task 4320: [ 154.996413][ C0] ____kasan_kmalloc+0xba/0xf0 [ 155.001161][ C0] kmem_cache_alloc_trace+0x143/0x290 [ 155.006511][ C0] xpad_probe+0x3eb/0x1b40 [ 155.010899][ C0] usb_probe_interface+0x5c0/0xaf0 [ 155.015983][ C0] really_probe+0x24e/0xb60 [ 155.020459][ C0] __driver_probe_device+0x1a2/0x3d0 [ 155.025713][ C0] driver_probe_device+0x50/0x420 [ 155.030804][ C0] __device_attach_driver+0x2b9/0x500 [ 155.036146][ C0] bus_for_each_drv+0x183/0x200 [ 155.040988][ C0] __device_attach+0x359/0x570 [ 155.045723][ C0] bus_probe_device+0xba/0x1e0 [ 155.050543][ C0] device_add+0xb48/0xfd0 [ 155.054954][ C0] usb_set_configuration+0x19dd/0x2020 [ 155.060386][ C0] usb_generic_driver_probe+0x84/0x140 [ 155.065833][ C0] usb_probe_device+0x130/0x260 [ 155.070744][ C0] really_probe+0x24e/0xb60 [ 155.075216][ C0] __driver_probe_device+0x1a2/0x3d0 [ 155.080490][ C0] driver_probe_device+0x50/0x420 [ 155.085502][ C0] __device_attach_driver+0x2b9/0x500 [ 155.090846][ C0] bus_for_each_drv+0x183/0x200 [ 155.095781][ C0] __device_attach+0x359/0x570 [ 155.100539][ C0] bus_probe_device+0xba/0x1e0 [ 155.105358][ C0] device_add+0xb48/0xfd0 [ 155.109672][ C0] usb_new_device+0xc17/0x18e0 [ 155.114403][ C0] hub_event+0x2cdf/0x54c0 [ 155.118788][ C0] process_one_work+0x8a1/0x10c0 [ 155.123693][ C0] worker_thread+0xaca/0x1280 [ 155.128338][ C0] kthread+0x3f6/0x4f0 [ 155.132383][ C0] ret_from_fork+0x1f/0x30 [ 155.136780][ C0] [ 155.139101][ C0] Freed by task 3798: [ 155.143087][ C0] kasan_set_track+0x4b/0x80 [ 155.147658][ C0] kasan_set_free_info+0x1f/0x40 [ 155.152586][ C0] ____kasan_slab_free+0xd8/0x120 [ 155.157588][ C0] slab_free_freelist_hook+0xdd/0x160 [ 155.162948][ C0] kfree+0xf1/0x270 [ 155.166733][ C0] xpad_disconnect+0x355/0x480 [ 155.171490][ C0] usb_unbind_interface+0x1cd/0x840 [ 155.176674][ C0] device_release_driver_internal+0x50e/0x7f0 [ 155.182712][ C0] bus_remove_device+0x2e5/0x400 [ 155.188167][ C0] device_del+0x6e2/0xbd0 [ 155.192480][ C0] usb_disable_device+0x3b8/0x840 [ 155.197482][ C0] usb_disconnect+0x33c/0x8c0 [ 155.202169][ C0] hub_event+0x1d58/0x54c0 [ 155.206571][ C0] process_one_work+0x8a1/0x10c0 [ 155.211591][ C0] worker_thread+0xaca/0x1280 [ 155.216245][ C0] kthread+0x3f6/0x4f0 [ 155.220298][ C0] ret_from_fork+0x1f/0x30 [ 155.224736][ C0] [ 155.227073][ C0] The buggy address belongs to the object at ffff888076515800 [ 155.227073][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 155.241120][ C0] The buggy address is located 145 bytes inside of [ 155.241120][ C0] 1024-byte region [ffff888076515800, ffff888076515c00) [ 155.254455][ C0] The buggy address belongs to the page: [ 155.260061][ C0] page:ffffea0001d94400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76510 [ 155.270196][ C0] head:ffffea0001d94400 order:3 compound_mapcount:0 compound_pincount:0 [ 155.278490][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 155.286443][ C0] raw: 00fff00000010200 ffffea0001d9ac00 0000000400000004 ffff888017041dc0 [ 155.295013][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 155.303562][ C0] page dumped because: kasan: bad access detected [ 155.309946][ C0] page_owner tracks the page as allocated [ 155.315631][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3611, ts 48443585537, free_ts 48280309443 [ 155.332610][ C0] get_page_from_freelist+0x322a/0x33c0 [ 155.338132][ C0] __alloc_pages+0x272/0x700 [ 155.342693][ C0] new_slab+0xbb/0x4b0 [ 155.346733][ C0] ___slab_alloc+0x6f6/0xe10 [ 155.351291][ C0] __kmalloc+0x1c9/0x300 [ 155.355522][ C0] ___neigh_create+0x6be/0x2220 [ 155.360341][ C0] ip6_finish_output2+0x11c5/0x15a0 [ 155.365515][ C0] ndisc_send_skb+0xae0/0x13c0 [ 155.370271][ C0] ndisc_send_ns+0x64d/0x830 [ 155.374848][ C0] addrconf_dad_work+0xb35/0x1720 [ 155.379927][ C0] process_one_work+0x8a1/0x10c0 [ 155.384922][ C0] worker_thread+0xaca/0x1280 [ 155.389583][ C0] kthread+0x3f6/0x4f0 [ 155.393628][ C0] ret_from_fork+0x1f/0x30 [ 155.398018][ C0] page last free stack trace: [ 155.402686][ C0] free_unref_page_prepare+0xc34/0xcf0 [ 155.408116][ C0] free_unref_page+0x95/0x2d0 [ 155.413112][ C0] ___cache_free+0xe3/0x100 [ 155.417595][ C0] qlist_free_all+0x36/0x90 [ 155.422165][ C0] kasan_quarantine_reduce+0x162/0x180 [ 155.427633][ C0] __kasan_slab_alloc+0x2f/0xc0 [ 155.432486][ C0] slab_post_alloc_hook+0x53/0x380 [ 155.437571][ C0] kmem_cache_alloc_node+0x121/0x2c0 [ 155.442841][ C0] __alloc_skb+0xdd/0x590 [ 155.447166][ C0] netlink_ack+0x33c/0xb10 [ 155.451589][ C0] netlink_rcv_skb+0x24c/0x410 [ 155.456348][ C0] netlink_unicast+0x7b6/0x980 [ 155.461107][ C0] netlink_sendmsg+0xa30/0xd60 [ 155.465844][ C0] __sys_sendto+0x564/0x720 [ 155.470436][ C0] __x64_sys_sendto+0xda/0xf0 [ 155.475171][ C0] do_syscall_64+0x3b/0xb0 [ 155.479581][ C0] [ 155.481878][ C0] Memory state around the buggy address: [ 155.487565][ C0] ffff888076515780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.495597][ C0] ffff888076515800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.503742][ C0] >ffff888076515880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.511964][ C0] ^ [ 155.516540][ C0] ffff888076515900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.524691][ C0] ffff888076515980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.532721][ C0] ================================================================== [ 155.540770][ C0] Disabling lock debugging due to kernel taint [ 155.546922][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.554107][ C0] CPU: 0 PID: 3025 Comm: udevd Tainted: G B 5.15.166-syzkaller #0 [ 155.563181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 155.573210][ C0] Call Trace: [ 155.576484][ C0] [ 155.579303][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 155.583956][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 155.589561][ C0] ? panic+0x860/0x860 [ 155.593743][ C0] ? rcu_is_watching+0x11/0xa0 [ 155.598476][ C0] ? lock_release+0xb9/0x9a0 [ 155.603049][ C0] panic+0x318/0x860 [ 155.606917][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 155.612205][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 155.617588][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 155.622770][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 155.628643][ C0] ? _raw_spin_unlock+0x40/0x40 [ 155.633652][ C0] check_panic_on_warn+0x7e/0xa0 [ 155.638653][ C0] ? register_lock_class+0x8ff/0x9a0 [ 155.643908][ C0] end_report+0x6d/0xf0 [ 155.648036][ C0] kasan_report+0x18e/0x1c0 [ 155.652508][ C0] ? register_lock_class+0x8ff/0x9a0 [ 155.657877][ C0] register_lock_class+0x8ff/0x9a0 [ 155.662977][ C0] ? vprintk_emit+0x150/0x150 [ 155.667626][ C0] ? is_dynamic_key+0x1f0/0x1f0 [ 155.672448][ C0] __lock_acquire+0xd7/0x1ff0 [ 155.677113][ C0] ? __wake_up_klogd+0xd5/0x100 [ 155.681934][ C0] ? mark_lock+0x98/0x340 [ 155.686237][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 155.691231][ C0] lock_acquire+0x1db/0x4f0 [ 155.695724][ C0] ? __wake_up+0xf5/0x1c0 [ 155.700027][ C0] ? read_lock_is_recursive+0x10/0x10 [ 155.705379][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 155.710638][ C0] ? __wake_up+0xf5/0x1c0 [ 155.714937][ C0] ? _raw_spin_lock+0x40/0x40 [ 155.719585][ C0] ? kcov_remote_stop+0x3d7/0x4d0 [ 155.724580][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 155.729577][ C0] __wake_up+0xf5/0x1c0 [ 155.733723][ C0] ? remove_wait_queue+0x130/0x130 [ 155.738807][ C0] ? _raw_spin_unlock+0x24/0x40 [ 155.743633][ C0] __usb_hcd_giveback_urb+0x3a8/0x530 [ 155.748977][ C0] dummy_timer+0x8ad/0x3200 [ 155.753481][ C0] ? dummy_free_streams+0x310/0x310 [ 155.758825][ C0] call_timer_fn+0x16d/0x560 [ 155.763395][ C0] ? dummy_free_streams+0x310/0x310 [ 155.768580][ C0] ? __run_timers+0x890/0x890 [ 155.773305][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 155.778497][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 155.783753][ C0] ? dummy_free_streams+0x310/0x310 [ 155.788928][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 155.794096][ C0] ? dummy_free_streams+0x310/0x310 [ 155.799276][ C0] __run_timers+0x67c/0x890 [ 155.803751][ C0] ? detach_timer+0x2f0/0x2f0 [ 155.808395][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 155.814349][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 155.819603][ C0] run_timer_softirq+0x63/0xf0 [ 155.824336][ C0] handle_softirqs+0x3a7/0x930 [ 155.829075][ C0] ? __irq_exit_rcu+0x157/0x240 [ 155.833897][ C0] ? do_softirq+0x240/0x240 [ 155.838367][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 155.843448][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 155.848617][ C0] __irq_exit_rcu+0x157/0x240 [ 155.853278][ C0] ? irq_exit_rcu+0x20/0x20 [ 155.857766][ C0] irq_exit_rcu+0x5/0x20 [ 155.861978][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 155.867584][ C0] [ 155.870487][ C0] [ 155.873389][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 155.879359][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 155.884618][ C0] Code: 2b 00 74 08 4c 89 f7 e8 bc 73 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 155.904667][ C0] RSP: 0018:ffffc900014df3c0 EFLAGS: 00000206 [ 155.910708][ C0] RAX: 0000000000000001 RBX: 1ffff9200029be84 RCX: ffffffff81636652 [ 155.918663][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3cc0 RDI: ffffffff8ad90100 [ 155.926617][ C0] RBP: ffffc900014df508 R08: dffffc0000000000 R09: fffffbfff20e221a [ 155.934569][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200029be80 [ 155.942523][ C0] R13: dffffc0000000000 R14: ffffc900014df420 R15: 0000000000000246 [ 155.950472][ C0] ? validate_chain+0x112/0x5930 [ 155.955388][ C0] ? read_lock_is_recursive+0x10/0x10 [ 155.960727][ C0] ? read_lock_is_recursive+0x10/0x10 [ 155.966068][ C0] ? __might_sleep+0xc0/0xc0 [ 155.970647][ C0] ? __might_sleep+0xc0/0xc0 [ 155.975206][ C0] ? kernfs_dop_revalidate+0x33e/0x4a0 [ 155.980634][ C0] _raw_spin_lock+0x2a/0x40 [ 155.985111][ C0] ? fast_dput+0x177/0x290 [ 155.989499][ C0] fast_dput+0x177/0x290 [ 155.993712][ C0] dput+0xb7/0x1a0 [ 155.997402][ C0] step_into+0x352/0xe90 [ 156.001616][ C0] ? lookup_fast+0x399/0x7b0 [ 156.006262][ C0] ? set_root+0x3b0/0x3b0 [ 156.010564][ C0] ? __up_read+0x2b9/0x690 [ 156.014955][ C0] walk_component+0x359/0x610 [ 156.019607][ C0] ? nd_alloc_stack+0xf0/0xf0 [ 156.024275][ C0] ? kernfs_iop_permission+0x25b/0x360 [ 156.029719][ C0] ? inode_permission+0x21e/0x450 [ 156.034732][ C0] ? inode_permission+0xf7/0x450 [ 156.039661][ C0] ? kernfs_evict_inode+0x60/0x60 [ 156.044659][ C0] ? bpf_lsm_inode_permission+0x5/0x10 [ 156.050089][ C0] ? security_inode_permission+0xad/0xf0 [ 156.055693][ C0] link_path_walk+0x642/0xd90 [ 156.060338][ C0] ? set_root+0x332/0x3b0 [ 156.064635][ C0] ? handle_lookup_down+0x130/0x130 [ 156.069801][ C0] path_openat+0x249/0x2f20 [ 156.074275][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 156.079372][ C0] ? mark_lock+0x98/0x340 [ 156.083670][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 156.088665][ C0] ? do_filp_open+0x460/0x460 [ 156.093329][ C0] do_filp_open+0x21c/0x460 [ 156.097801][ C0] ? vfs_tmpfile+0x2e0/0x2e0 [ 156.102366][ C0] ? _raw_spin_unlock+0x24/0x40 [ 156.107189][ C0] ? alloc_fd+0x598/0x630 [ 156.111493][ C0] do_sys_openat2+0x13b/0x4f0 [ 156.116138][ C0] ? do_sys_open+0x220/0x220 [ 156.120693][ C0] ? __x64_sys_newfstatat+0x140/0x1b0 [ 156.126036][ C0] __x64_sys_openat+0x243/0x290 [ 156.130856][ C0] ? __ia32_sys_open+0x270/0x270 [ 156.135763][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 156.141715][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 156.146884][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 156.152845][ C0] do_syscall_64+0x3b/0xb0 [ 156.157243][ C0] ? clear_bhb_loop+0x15/0x70 [ 156.161899][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.167793][ C0] RIP: 0033:0x7f7e4c129477 [ 156.172289][ C0] Code: 10 00 00 00 44 8b 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 82 69 0d 00 f7 d8 64 89 02 48 83 [ 156.192043][ C0] RSP: 002b:00007ffed02c5d98 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 156.200425][ C0] RAX: ffffffffffffffda RBX: 0000556c07755290 RCX: 00007f7e4c129477 [ 156.208363][ C0] RDX: 0000000000090800 RSI: 0000556c0774f110 RDI: 00000000ffffff9c [ 156.216305][ C0] RBP: 0000556c0777b260 R08: 0000000000090800 R09: 0000556c0774f110 [ 156.224246][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 0000556c0774f110 [ 156.232186][ C0] R13: 00000000000000ff R14: 0000556be95021c4 R15: 0000000000000000 [ 156.240129][ C0] [ 157.331944][ C0] Shutting down cpus with NMI [ 157.336851][ C0] Kernel Offset: disabled [ 157.342143][ C0] Rebooting in 86400 seconds..