last executing test programs: 3m18.525422389s ago: executing program 3 (id=1416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x2a20050, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64, @ANYRES64=r1, @ANYRES16, @ANYRESOCT=r0], 0x5, 0xc24, &(0x7f0000000d00)="$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") ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, 0x0) 3m17.907298317s ago: executing program 3 (id=1418): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) 3m17.557092538s ago: executing program 3 (id=1420): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x44, r0, 0x801, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bee136beff4fecf00da4548201"}]}]}, 0x44}}, 0x0) 3m17.307708135s ago: executing program 3 (id=1423): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000001080)=ANY=[@ANYBLOB="2c00125c6f3ad370264551ecffff7e80e44939e902bdf75947e3eae71f277e8a229bd4827cfac3e02dbdff45399cd965a877fb80b6f99d249537cb3c3525b10558", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x1, 0x570, &(0x7f00000012c0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 3m16.719657133s ago: executing program 3 (id=1428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x0, 0x5, 0x5, 0x9, 0x2}, 0x14) 3m15.927989218s ago: executing program 3 (id=1433): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1, 0x10022, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) 3m15.380933494s ago: executing program 32 (id=1433): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1, 0x10022, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) 2m23.574669621s ago: executing program 1 (id=1810): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f00000002c0)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0x2}}, {@fault_type={'fault_type', 0x3d, 0x302}}, {@lfs_mode}, {@inline_data}, {}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000004c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x3ffffc, 0x2, 0x0, 0x0, 0x2401}) 2m21.661910748s ago: executing program 1 (id=1823): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002005}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 2m21.28196822s ago: executing program 1 (id=1826): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 2m20.96372443s ago: executing program 1 (id=1830): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1214080, &(0x7f00000002c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',codepage=maccyrillic,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000000004,iocharset=maccroatian,part=0x00000000000007ff,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x32e, &(0x7f0000000b00)="$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") chroot(0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m20.63961685s ago: executing program 1 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x68, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x3f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0xf, 0x5}}, 0x8, @default, 0x1000, @void, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m20.079603737s ago: executing program 1 (id=1840): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) 2m19.613348421s ago: executing program 33 (id=1840): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) 3.750685506s ago: executing program 2 (id=2932): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x2, 0x4000844) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x0, 0x1000004d, 0x9, 0x7fff, 0x3, 0x4, 0x9, 0xe8e9, 0x5}, 0x0) 3.487994334s ago: executing program 4 (id=2934): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setreuid(0xffffffffffffffff, 0xee00) 3.331226359s ago: executing program 0 (id=2936): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.95562571s ago: executing program 0 (id=2948): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000580)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0}) 2.95527497s ago: executing program 2 (id=2939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = dup(r0) write$P9_RSTATFS(r1, 0x0, 0x0) 2.842018044s ago: executing program 6 (id=2940): r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) unshare(0x22020600) fcntl$dupfd(r0, 0x2, r1) 2.738877137s ago: executing program 2 (id=2941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 2.575847532s ago: executing program 6 (id=2942): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000080)={[{@nobh}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@usrjquota}, {@barrier}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48f, &(0x7f0000000a00)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@random={'user.', 'nobh'}, &(0x7f0000000280)='@]\'\xd0\x00', 0x5, 0x1) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.561879632s ago: executing program 2 (id=2943): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) 2.365568698s ago: executing program 2 (id=2944): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0807000000000000000000"], 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x160, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.119966565s ago: executing program 6 (id=2945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 2.118777675s ago: executing program 5 (id=2946): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffff81}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d1}, 0x80440d0) 1.926968792s ago: executing program 4 (id=2947): r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x9631fafd4003d832) 1.863196703s ago: executing program 6 (id=2949): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r0 = syz_open_procfs(0x0, &(0x7f00000025c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) 1.832922944s ago: executing program 5 (id=2950): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000088000000b0000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 1.690319108s ago: executing program 6 (id=2951): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00), 0x7, 0x9864, &(0x7f0000000140)="$eJzs3Qm8rWPBuP91nINjHko0IVMajRlSMg8lmSNz5owhocxDGSpKqCgUSSmEikiZZSbzPM/zPP4/xznE6SLv7/++r17XdX2cs8a99r3v73M/9trPPmutuMiyCwwGEw9G9vLpPztj/5tWW26CJTY/Yd9hVx6815L3jrp6rJEnk8w36nT+UacLDAaDIaMeZ8jI64bNe/wJYwyGDUb898/GH2fcMcYfDMYddXHU4wzmHHky3hEv3+/F0eKBTj3i0+058s9LTTDiQUacWWWN5zcZDAbDX/XxI8Y18798odLmX2C5Bf5p9YrbGKNuHvLP2146HTbyz3iHDQbjHTJ4/e1jxH3HfNXH/m824nNOPO1g+Zvegs/9f67Pz7/UMqP5j1iLQ0ddN+eINT76GjQ2+na+17Ib3j1qCoeMmriX182Qt2i7/39qxfkXWWLw+ut4sOTC29314kv7zWELDQbDFh4Mhi0yGAxb9K32qP+e3tKNr6qqqt6S5l9gthHP/8YY7fuB4S9/X0vfF57z3Cy3DQbDlhz5/e6wNV5+LlhVVVVVVVVV/5nNv8BsC8Lz/4nf6Pn/1CfvOknP/6uqqqqqqqr+77T4/AvMNuK5/mjP/6d4o+f/D91z9OEjf/d/vjlHftQLb+0XUVVVVVVVVVVv2CKL4/P/qd/o+f95x099Yc//q6qqqqqqqv7vtMxsiyw4eNXr7I26esaXb6fn/6fcecOqb9V4q6qqqqqqquq/3gv3n3TqP1+7esrBaK/3/lKjfi4w5JjTLr74LRvof0ZD/vXnITu+1WP6/9sI5+FHTT0YbLL8Wz2Uegv6P/Na9fU/Uv7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+51jv+/8vr/pxy31svvBf/B6We76qR/fuRL7/0/bMnF79/pLRr6W9Hb9fj/YIMhg8Eo34k3GAwGS86/zHIzDgaDk66abfrpBq/cNteI2+aZdOhLbxD/8j8TWXgSfuAdpxl5OmJDGbzzlcc45qXHX/zFQ4cOGW0Qr2qSEw8/fP0Vn5x99NMZXv/rGOOVcxOccM/L/5ZljNHuNPx1Pvjlx3/5axndedTYZxwx9pm23HizmbbYZtuPbbDxmuuts946m8w96xyzzD733HPMMdO6G2y0zswj/369OZv6pb8XfDNzNv7oc3b//K+es9G/ttebs6nfeM5eesT9zh3+mZfnbNh/cc4WfOM5m3qDUZ9okvnGHKzx0twMGQwmWWjMwdYjLswy9mAwycKj7jvFiPt+atIxBoN9/vmFjjg39ivb4JAdR9xnxUWWXWDkbmow+OfpP3ud97Mfa9TI5xt1Ov+o0wVGfpqJB//cFIfNe/wJY4yYi9dMx/jjjDvG+IPBuKMujnqcwdwjT8Y9+eX7vc77rI820JdeZmXPkX9eaoLBYDDeiDNTrnnKbiOm/n/hfdr/n/7//y9ecw15ZXscMurPqPuM9Jp/0cX/+blemoYRczd01HVzjjD5b35r+9f0L+Odevhg6jcY7xu8Ls5L0fa10UmT7fzf9bo4NN4p3mC8b/A6vq873hVuO/DukQ/13zbe0fZ1S7z093xvZl83eON93VB6gHUueP/o+7rPvf4QX7O7fHmOxh7tTq+3r5vioKl2HPH4873xvm6JEWMf8zX7ujEGg0kWfHlfN2LHt8iYg31GXJh1xIVFxxwcOeLCbC9dGGdw2ogLH19r043WHnHFYv+6Hcw45DW/oAnrbJHR1tmQV33tQ0b7/c5hI0/HO+zl93B6nf3mkFFf1r/dV9B2O/EbjPcN3n8K53nEdWsfO3yy/673n6LxDn/j8b7e+2W/7nj3fuKUm/6bx/vKOhvzVdO12JtZZ1O/dp2N+BKHvmplvNnvw9aG+488P8Urj7bV9ve88j3FmKM97r/7nmKxN15nE28w2sftcchgyBvNzaJvZm7e9y/7oJ1ePTdv9vutGacdefvQN5ibsedebYaX52as/+LcLPpfnZv5BkNfOzfDBgsPBoPpRu0fFnkzczPFG8/Nm91uxoX7jzy/zitXLbTXUWe9PDejz8W/m5tF/qtzM/Ur2810L902zRiDscYabL3mlltuPsvIv1++OOvIv994DS70ZuZy4v+euXzPsNeby39uquPfduFh/2YN/ss+/eXHX+i/OpeDV+ZysMHoi6X+U+vnf+7yd5e/u/zd5e8uf3f5i3ud4/+vvP7/ARPPs++oH26MeeFUk+/+Vo/3Le5tffx/lO9rjv/vPvlUF44xeOW2Nzw+O/I+/5HHZ+cceTLeES/fb/TjgzzQ1z8+e8jcc+76v3R89v+pl9fqm/g5XPt/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jXOf4/88u/B3DnLEs/MupA6Jj37rLy0m/1eN/i3tbH/0f5vub4/9Ir73LvGINXbnvD4/8j7+M4/n/Ls4vs/Z98/P/ltdrx//o35e8O/Ud/DZB629b6d5e/uzfyH+d/cRz11tT6d5e/u/zd5e8uf3f5u8vfXf7iXuf4/3wv/x7A0UcfuO3Lvw9w+SR7nvRWj/ct7u16/L/3//fW/t9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7qXj/yP/jfCr/6XwUm0XGBz//7/dqN//GIzmv3T+mMV/mfypMQYDh/+y+WOW9b9c/pjFf/n8MYv/CvljFv8v5o9Z/FfMH7P4r5Q/ZvH/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/l/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/yv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/6v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy1/zOK/Vf6Yxf/r+WMW/63zxyz+2+SPWfy3zR+z+H8jf8zi/838MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+38ofs/h/O3/M4r9H/pjFf8/8MYv/XvljFv+988cs/t/JH7P4fzd/zOL/vfwxi/8++WMW/33zxyz+388fs/j/IH/M4r9f/pjF/4f5Yxb//fPHLP4H5I9Z/A/MH7P4/yh/zOL/4/wxi/9P8scs/gflj1n8D84fs/j/NH/M4v+z/DGL/yH5Yxb/Q/PHLP6H5Y9Z/H+eP2bx/0X+mMX/8Pwxi/8R+WMW/1/mj1n8j8wfs/j/Kn/M4n9U/pjF/9f5Yxb/3+SPWfyPzh+z+P82f8zi/7v8MYv/MfljFv9j88cs/sflj1n8f58/ZvE/Pn/M4n9C/pjF/8T8MYv/H/LHLP5/zB+z+P8pf8zif1L+mMX/5Pwxi/+f88cs/qfkj1n8T80fs/j/JX/M4n9a/pjF/6/5Yxb/v+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/P+eP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+P/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+Qwb5Yxb/IfljFv8x8scs/kPzxyz+w/LHLP5j5o9Z/MfKH7P4j50/ZvEfnj9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6Yxf8d+WMW/3fmj1n8J8sfs/i/K3/M4j95/pjFf4r8MYv/u/PHLP7vyR+z+L83f8zi/778MYv/+/PHLP5T5o9Z/KfKH7P4T50/ZvH/QP6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fzB/zOI/Y/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/4/nj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/0/kj1n858gfs/jPmT9m8Z8rf8ziP3f+mMX/k/ljFv958scs/p/KH7P4fzp/zOI/b/6Yxf8z+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/D+bP2bx/1z+mMV/ifwxi//n88cs/kvmj1n8v5A/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/h/MX/M4r9i/pjFf6X8MYv/l/LHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv8v549Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/l/JH7P4b5g/ZvHfKH/M4r+xzn+cN3Uvi/8mOv83l8V/0/wxi/9m+WMW/6/mj1n8N88fs/hvkT9m8d8yf8zi/7X8MYv/VvljFv+v549Z/LfOH7P4b5M/ZvHfNn/M4v+N/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H/5Wv87/tfH9R+axf/I1j9m8f9V/pjF/6j8MYv/r/PHLP6/yR+z+B+dP2bx/23+mMX/d/ljFv9j8scs/sfmj1n8j8sfs/j/Pn/M4n98/pjF/4T8MYv/ifljFv8/5I9Z/P+YP2bx/1P+mMX/pPwxi//J+WMW/z/nj1n8T8kfs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH5P4v1T+/5rEf8j5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/f+SPWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5j9awUacO/+vyxyzr//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+L53N/1+z+A/JH7P4j5E/ZvEfmj9m8R+WP2bxHzN/zOI/Vv6YxX/s/DGL//D8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+78gfs/i/M3/M4j9Z/pjF/135Yxb/yfPHLP5T5I9Z/N+dP2bxf0/+mMX/vfljFv/35Y9Z/N+fP2bxnzJ/zOI/Vf6YxX/q/DGL/wfyxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+D+WMW/xnzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/h/PH/M4j9T/pjFf+b8sSFn7D/mYDB42/vPkj9mWf+z5o9Z/GfLH7P4z54/ZvH/RP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/D+ZP2bxnyd/zOL/qfwxi/+n88cs/vPmj1n8P5M/ZvGfL3/M4j//YJy3akT/0Vn8F2j9Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+38kfs/h/N3/M4v+9/DGL/z75Yxb/ffPHLP7fzx+z+P8gf8ziv1/+mMX/h/ljFv/988cs/gfkj1n8D8wfs/j/KH/M4v/j/DGL/0/yxyz+B+WPWfwPzh+z+P80f8zi/7P8MYv/IfljFv9D88cs/oflj1n8f54/ZvH/Rf6Yxf/w/DGL/xH5Yxb/X+aPWfyPzB+z+P8qf8zif1T+mMX/1/ljFv/f5I9Z/I/OH7P4/zZ/zOL/u/wxi/8x+WMW/2Pzxyz+x+WPWfx/nz9m8T8+f8zif0L+mMX/xPwxi/8f8scs/n/MH7P4/yl/zOJ/Uv6Yxf/k/DGL/5/zxyz+p+SPWfxPzR+z+P8lf8zif1r+mMX/r/ljFv+/5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8/54/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi/4/8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+Y9s2GsvWvyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH5P4Dx3kj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv935I9Z/N+ZP2bxnyx/zOL/rvwxi//k+WMW/ynyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmT9m8Z8qf8ziP3X+mMX/A/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/jPljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/D+eP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/D/xxv5j/4+P6z80i/8crX/M4j9n/pjFf678MYv/3PljFv9P5o9Z/OfJH7P4fyp/zOL/6fwxi/+8+WMW/8/kj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/2z+mMX/c/ljFv8l8scs/p/PH7P4L5k/ZvH/Qv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v/F/DGL/4r5Yxb/lfLHLP5fyh+z+K+cP2bxXyV/zOK/qt6fX+LQ4r+a3p+z+K+eP2bxXyN/zOK/Zv6Yxf/L+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/1fyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/1fzxyz+m+ePWfy3yB+z+G+ZP2bx/1r+mMV/q/wxi//X88cs/lvnj1n8t8kfs/hvmz9m8f9G/pjF/5v5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n8v5U/ZvH/dv6YxX+P/DGL/575Yxb/vfLHLP57549Z/L+TP2bx/27+mMX/e/ljFv998scs/vvmj1n8v58/ZvH/Qf6YxX+//DGL/w/zxyz+++ePWfwPyB+z+B+YP2bx/1H+mMX/x/ljFv+f5I9Z/A/KH7P4H5w/ZvH/af6Yxf9n+WMW/0Pyxyz+h+aPWfwPyx+z+P88f8zi/4v8MYv/4fljFv8j8scs/r/MH7P4H5k/ZvH/Vf6Yxf+o/DGL/6/zxyz+v8kfs/gfnT9m8f9t/tjb3n/4S2eH/i5/7G3vP7Khx+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/MX/M4v+n/DGL/0n5Yxb/k/PHLP5/zh+z+J+SP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f97/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8/8scs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH5P4Dxvkj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv935I9Z/N+ZP2bxnyx/zOL/rvwxi//k+WMW/ynyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmT9m8Z8qf8ziP3X+mMX/A/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/jPljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/D+eP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/D+RP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/T+aPWfznyR+z+H8qf8zi/+n8MYv/vPljFv/P5I9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8f9s/pjF/3Nv4G/eLiz+S8idXy+L/+fzxyz+S+aPWfy/kD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+H8xf8ziv2L+mMV/pfwxi/+X8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/y/nj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+X8kfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/83yxyz+X80fs/hvnj9m8d8if8ziv2X+mMX/a/ljFv+t8scs/l/PH7P4b50/ZvHfJn/M4r9t/pjF/xv5Yxb/b+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvH/Vv6Yxf/b+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx/07+mMX/u/ljFv/v5Y9Z/PfJH7P475s/ZvH/fv6Yxf8H+WMW//3yxyz+P8wfs/jvnz9m8T8gf8zif2D+mMX/R/ljFv8f549Z/H+SP2bxPyh/zOJ/cP6Yxf+n+WMW/5/lj1n8D8kfs/gfmj9m8T8sf8zi//P8MYv/L/LHLP6H549Z/I/IH7P4/zJ/zOJ/ZP6Yxf9X+WMW/6Pyxyz+v84fs/j/Jn/M4n90/pjF/7f5Yxb/3+WPWfyPyR+z+B+bP2bxPy5/zOL/+/wxi//x+WMW/xPyxyz+J+aPWfz/kD9m8f9j/pjF/0/5Yxb/k/LHLP4n549Z/P+cP2bxPyV/zOJ/av6Yxf8v+WMW/9Pyxyz+f80fs/j/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//f8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/ssFg8OKLL+7wVg3rPzWL/+Wtf8zi/4/8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHJP5jDvLHLP5D8scs/mPkj1n8h+aPWfyH5Y9Z/MfMH7P4j5U/ZvEfO3/M4j88f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/zvyxyz+78wfs/hPlj9m8X9X/pjFf/L8MYv/FPljFv93549Z/N+TP2bxf2/+mMX/ffljFv/3549Z/KfMH7P4T5U/ZvGfOn/M4v+B/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/YP6YxX/G/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+H88fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+n8gfs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/8n88cs/vPkj1n8P5U/ZvH/dP6YxX/e/DGL/2fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fzZ/zOL/ufwxi/8S+WMW/8/nj1n8l8wfs/h/IX/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8f9i/pjFf8X8MYv/SvljFv8v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/l/OH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8v5I/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8v5o/ZvHfPH/M4r9F/pjFf8v8MYv/1/LHLP5b5Y9Z/L+eP2bx3zp/zOK/Tf6YxX/b/DGL/zfyxyz+38wfs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOL/rfwxi/+388cs/nvkj1n898wfs/jvlT9m8d87f8zi/538MYv/d/PHLP7fyx+z+O+TP2bx3zd/zOL//fwxi/8P8scs/vvlj1n8f5g/ZvHfP3/M4n9A/pjF/8D8MYv/j/LHLP4/zh+z+P8kf8zif1D+mMX/4Pwxi/9P88cs/j/LH7P4H5I/ZvE/NH/M4n9Y/pjF/+f5Yxb/X+SPWfwPzx+z+B+RP2bx/2X+mMX/yPwxi/+v8scs/kflj1n8f50/ZvH/Tf6Yxf/o/DGL/2/zxyz+v8sfs/gfkz9m8T82f8zif1z+mMX/9/ljFv/j88cs/ifkj1n8T8wfs/j/IX/M4v/H/DGL/5/yxyz+J+WPWfxPzh+z+P85f8zif0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/IH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/1iB/zOI/JH/M4j9G/pjFf2j+mMV/WP6YxX/M/DGL/1j5Yxb/sfPHLP7D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/95vwH/Y/Oa7/0Cz+72n9Yxb/9+aPWfzflz9m8X9//pjFf8r8MYv/VPljFv+p88cs/h/IH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8P5o9Z/GfMH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8sbep/5DRrMdaJX/sber/Uq9e/6vmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/y/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/9X8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi/9X88cs/pvnj1n8t8gfs/hvmT9m8f9a/pjFf6v8MYv/1/PHLP5b549Z/LfJH7P4b5s/ZvH/Rv6Yxf+b+WMW/+3yxyz+2+ePWfx3+Df+O/1Pj+s/NIv/jq1/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H+ZP2bxPzJ/zOL/q/wxi/9R+WMW/1/nj1n8f5M/ZvE/On/M4v/b/DGL/+/yxyz+x+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/0ee/w5u5k8X/Tz7/N5XF/6T8MYv/yfljFv8/O/0f/Hd3sPif4vT/t1n8T80fs/j/JX/M4n9a/pjF/6/5Yxb/v+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/P+eP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+P/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/sJf/B4G3v/1j+g3HgOsv6fzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I8NGWswGAj8n80fs6z/5/LHLP7P549Z/F/IH7P4v5g/JvEfe5A/ZvEfkj9m8R8jf8ziPzR/zOI/LH/M4j9m/pjFf6z8MYv/2PljFv/h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfIf1fDXXLL4T5o/ZvF/R/6Yxf+d+WMW/8nyxyz+78ofs/hPnj9m8Z8if8zi/+78MYv/e/LHLP7vzR+z+L8vf8zi//78MYv/lPljFv+p8scs/lPnj1n8P5A/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/h/MH7P4z5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6Yxf/j+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6Yxf8T+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/2T+mMV/nvwxi/+n8scs/p/OH7P4z5s/ZvH/TP6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv/P5o9Z/D+XP2bxXyJ/zOL/+fwxi/+S+WMW/y/kj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+X8wfs/ivmD9m8V8pf8zi/6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/y/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/9X8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi/9X88cs/pvnj1n8t8gfs/hvmT9m8f9a/pjFf6v8MYv/1/PHLP5b549Z/LfJH7P4b5s/ZvH/Rv6Yxf+b+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3dC/LcLiv3vamMX/W/ljFv9v549Z/PfIH7P475k/ZvHfK3/M4r93/pjF/zv5Yxb/7+aPWfy/lz9m8d/H6D/2v7+LxX9fo/+byOL//fwxi/8P8scs/vvlj1n8f5g/ZvHfP3/M4n9A/pjF/8D8MYv/j/LHLP4/zh+z+P8kf8zif1D+mMX/4Pwxi/9P88cs/j/LH7P4H5I/ZvE/NH/M4n9Y/pjF/+f5Yxb/X+SPWfwPzx+z+B+RP2bx/2X+mMX/yPwxi/+v8scs/kflj1n8f50/ZvH/Tf6Yxf/o/DGL/2/zxyz+v8sfs/gfkz9m8T82f8zif1z+mMX/9/ljFv/j88cs/ifkj1n8T8wfs/j/IX/M4v/H/DGL/5/yxyz+J+WPWfxPzh+z+P85f8zif0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/IH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/fJA/ZvEfkj9m8R8jf8ziPzR/zOI/LH/M4j9m/pjFf6z8MYv/2PljFv/h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/N+RP2bxf2f+mMV/svwxi/+78scs/pPnj1n8p8gfs/i/O3/M4v+e/DGL/3vzxyz+78sfs/i/P3/M4j9l/pjFf6r8MYv/1PljFv8P5I9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/B/PHLP4z5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bx/3j+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bx/0T+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfw/mT9m8Z8nf8zi/6n8MYv/p/PHLP7z5o9Z/D+TP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/7Nv5D/ZCy+++L8wtP/ELP6fa/1jFv8l8scs/p/PH7P4L5k/ZvH/Qv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLHxvlP/Tt7r98/phl/a+QP2bx/2L+mMV/xfwxi/9K+WMW/y/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+X84fs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfy/kj9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfy/mj9m8d88f8ziv0X+mMV/y/wxi//X8scs/lvlj1n8v54/ZvHfOn/M4r9N/pjFf9v8MYv/N/LHLP7fzB+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+t/DGL/7fzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/nfwxi/9388cs/t/LH7P475M/ZvHfN3/M4v/9/DGL/w/yxyz+++WPWfx/mD9m8d8/f8zif0D+mMX/wPwxi/+P8scs/j/OH7P4/yR/zOJ/UP6Yxf/g/DGL/0/zxyz+P8sfs/gfkj9m8T80f8zif1j+mMX/5/ljFv9f5I9Z/A/PH7P4H5E/ZvH/Zf6Yxf/I/DGL/6/yxyz+R+WPWfx/nT9m8f9N/pjF/+j8MYv/b/PHLP6/yx+z+B+TP2bxPzZ/zOJ/XP6Yxf/3+WMW/+Pzxyz+J+SPWfxPzB+z+P8hf8zi/8f8MYv/n/LHLP4n5Y9Z/E/OH7P4/zl/zOJ/Sv6Yxf/U/DGL/1/yxyz+p+WPWfz/mj9m8f9b/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+/8gfs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78Rzb8tRct/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYn/OIP8MYv/kPwxi/8Y+WMW/6H5Yxb/YfljFv8x88cs/mPlj1n8x84fs/gPzx+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v+O/DGL/zvzxyz+k+WPWfzflT9m8Z88f8ziP0X+mMX/3fljFv/35I9Z/N+bP2bxf1/+mMX//fljFv8p88cs/lPlj1n8p84fs/h/IH/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8P5g/ZvGfMX/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/8fzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/7YS/5TDQaDt7n/7PljlvX/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/iPlT9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+2JAz9n9i1Nm3tf+e+WOW9b9X/pjFf+/8MYv/d/LHLP7fzR+z+H8vf8ziv0/+mMV/3/wxi//388cs/j/IH7P475c/ZvH/Yf6YxX///DGL/wH5Yxb/A/PHLP4/yh+z+P84f8zi/5P8MYv/QfljFv+D88cs/j/NH7P4/yx/zOJ/SP6Yxf/Q/DGL/2H5Yxb/n+ePWfx/kT9m8T88f8zif0T+mMX/l/ljFv8j88cs/r/KH7P4H5U/ZvH/df6Yxf83+WMW/6Pzxyz+v80fs/j/Ln/M4n9M/pjF/9j8MYv/cfljFv/f549Z/I/PH7P4n5A/ZvE/MX/M4v+H/DGL/x/zxyz+f8ofs/iflD9m8T85f8zi/+f8MYv/KfljFv9T88cs/n/JH7P4n5Y/ZvH/a/6Yxf9v+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/v+ePWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/yN/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxif+4g/wxi/+Q/DGL/xj5Yxb/ofljFv9h+WMW/zHzxyz+Y+WPWfzHzh+z+A/PH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/478MYv/O/PHLP6T5Y9Z/N+VP2bxnzx/zOI/Rf6Yxf/d+WMW//fkj1n835s/ZvF/X/6Yxf/9+WMW/ynzxyz+U+WPWfynzh+z+H8gf8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfw/mD9m8Z8xf8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/x/PHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/J/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4v/J/DGL/zz5Yxb/T+WPWfw/nT9m8Z83f8zi/5n8MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+n80fs/h/Ln/M4r9E/pjF//P5Yxb/JfPHLP5fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/L+YP2bxXzF/zOK/Uv6Yxf9L+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/5fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/r+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/r+aPWfw3zx+z+G+RP2bx3zJ/zOL/tfwxi/9W+WMW/6/nj1n8t84fs/hvkz9m8d82f8zi/438MYv/N/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/K3/M4v/t/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P4fyd/zOL/3fwxi//38scs/vvkj1n8980fs/h/P3/M4v+D/DGL/375Yxb/H+aPWfz3zx+z+B+QP2bxPzB/zOL/o/wxi/+P88cs/j/JH7P4H5Q/ZvE/OH/M4v/T/DGL/8/yxyz+h+SPWfwPzR+z+B+WP2bx/3n+mMX/F/ljFv/D88cs/kfkj1n8f5k/ZvE/Mn/M4v+r/DGL/1H5Yxb/X+ePWfx/kz9m8T86f8ziP2b+mMX/d/ljFv9j8scs/sfmj1n8j8sfs/j/Pn/M4n98/pjF/4T8MYv/ifljFv8/5I9Z/P+YP2bx/1P+mMX/pPwxi//J+WMW/z/nj1n8T8kfs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4/z1/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/x/5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwHg6H/epXF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vyxt7v/6iPPjvtA/tjb3X9U4z6YP2bxfyh/zOL/cP7Y29l/7H9eO+4j+WNvZ/9Xr/9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/3iB/zOI/JH/M4j9G/pjFf2j+mMV/WP6YxX/M/DGL/1j5Yxb/sfPHLP7D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/d/6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/K/DGL/1T5Yxb/qfPHLP4fyB+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/D+aPWfxnzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8zi/4n8MYv/HPljFv8588cs/nPlj1n8584fs/h/Mn/M4j9P/pjF/1P5Yxb/T+ePWfznzR+z+H8mf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/2fzxyz+n8sfs/gvkT9m8f98/pjFf8n8MYv/F/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8v5o9Z/FfMH7P4r5Q/ZvH/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/l/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/yv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/6v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy1/zOK/Vf6Yxf/r+WMW/63zxyz+2+SPvX39L3vx1f7b5o+9ff1fu/6/kT9m8f9m/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/2/lj1n8v50/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv/v5I9Z/L+bP2bx/17+mMV/n/wxi/+++WMW/+/nj1n8f5A/ZvHfL3/M4v/D/DGL//75Yxb/A/LHLP4H5o9Z/H+UP2bx/3H+mMX/J/ljFv+D8scs/gfnj1n8f5o/ZvH/Wf6Yxf+Q/DGL/6H5Yxb/w/LHLP4/zx+z+P8if8zif3j+mMX/iPwxi/8v88cs/kfmj1n8f5U/ZvE/Kn/M4v/r/DGL/2/yxyz+R+ePWfx/mz9m8f9d/pjF/5j8MYv/sfljFv/j8scs/r/PH7P4H58/ZvE/IX/M4n9i/pjF/w/5Yxb/P+aPWfz/lD9m8T8pf8zif3L+2Mv+g+GDwdvZ/8/5Y5b1f0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/4V/82B5H/FYFjFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/bKT/YDDY8e3tf1v+mGX9354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjEf/xB/pjFf0j+mMV/jPwxi//Q/DGL/7D8MYv/mK/jf+VVQ1f/3xraf2IW/7Fa/5jFf+z8MYv/8Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+Q/7+0o8h/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/d/6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/K/DGL/1T5Yxb/qfPHLP4fyB+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/D+aPWfxnzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8zi/4n8MYv/HPljFv8588cs/nPlj1n8584fs/h/Mn/M4j9P/pjF/1P5Yxb/T+ePWfznzR97e/qPlH61/2fyx96e/iN7tf98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP6fzR+z+H8uf8ziv0T+mMX/8/ljFv8l88cs/l/IH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8v5g/ZvFfMX/M4r9S/pjF/0v5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/l/PHLP5r5Y9Z/Nc2+r+JL9jiv47R/01k8V83f8ziv17+mMV//fwxi/8G+WMW/6/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/6/mj1n8N88fs/hvkT9m8d8yf8zi/7X8MYv/VvljFv+v549Z/LfOH7P4b5M/ZvHfNn/M4v+N/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H+ZP2bxPzJ/zOL/q/wxi/9R+WMW/1/nj1n8f5M/ZvE/On/M4v/b/DGL/+/yxyz+x+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/MX/M4v+n/DGL/0n5Yxb/k/PHLP5/zh+z+J+SP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/Npr/OG/1eP5/9zr+p+ePWdb/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+/8gfs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX9M4j/BIH/M4j8kf8ziP0b+mMV/aP6YxX9Y/pjFf8z8MYv/WPljFv+x88cs/sPzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4vyN/zOL/zvwxi/9k+WMW/3flj1n8J88fs/hPkT9m8X93/pjF/z35Yxb/9+aPWfzflz9m8X9//pjFf8r8MYv/VPljFv+p88cs/h/IH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8P5o9Z/GfMH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/Le1+g9/45st/t+w+v+bLP7fzB+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+t/DGL/7fzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/nfwxi/9388cs/t/LH7P475M/ZvHfN3/s7eo/fDT/7+ePvV39B6P5/yB/zOK/X/6Yxf+H+WMW//3zxyz+B+SPWfwPzB+z+P8of8zi/+P8MYv/T/LHLP4H5Y9Z/A/OH7P4/zR/zOL/s/wxi/8h+WMW/0Pzxyz+h+WPWfx/nj9m8f9F/pjF//D8MYv/EfljFv9f5o9Z/I/MH7P4/yp/zOJ/VP6Yxf/X+WMW/9/kj1n8j84fs/j/Nn/M4v+7/DGL/zH5Yxb/Y/PHLP7H5Y9Z/H+fP2bxPz5/zOJ/Qv6Yxf/E/DGL/x/yxyz+f8wfs/j/KX/M4n9S/pjF/+T8MYv/n5X+w//tPSz+pyj9/30W/1Pzxyz+f8kfs/iflj9m8f9r/pjF/2/5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv+/549Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/j/I3/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735P9SU4922eJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPSfwnHOSPWfyH5I9Z/MfIH7P4D80fs/gPyx+z+I+ZP2bxHyt/zOI/dv6YxX94/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/3fkj1n835k/ZvGfLH/M4v+u/DGL/+T5Yxb/KfLHLP7vzh+z+L8nf8zi/978MYv/+/LHLP7vzx+z+E+ZP2bxnyp/zOI/df6Yxf8D+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/wfwxi/+Mr/V/cej/+sD+M7P4f6j1j1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8P54/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n8P5E/ZvGfI3/M4j9n/pjFf678MYv/3PljFv9P5o9Z/OfJH7P4f+pl/zaC12Tx/3T0mMV/3vwxi/9n8scs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+H82f8zi/7n8MYv/EvljFv/P549Z/JfMH7P4fyF/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yv6YxX/F/DGL/0r5Yxb/L+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5fzh+z+K+VP2bxXzt/zOK/Tv6YxX/d/LEhZ+y/0kQjz76t/dfLH7Os//Xzxyz+G+SPWfy/kj9m8d8wf8ziv1H+mMV/4/wxi/8mev8d8FqL/6Z6f87iv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+38kfs/h/N3/M4v+9/DGL/z75Yxb/ffPHLP7fzx+z+P8gf8ziv1/+mMX/h/ljFv/988cs/gfkj1n8D8wfs/j/KH/M4v/j/DGL/0/yxyz+B+WPWfwPzh+z+P80f8zi/7P8MYv/IfljFv9D88cs/oflj1n8f54/ZvH/Rf6Yxf/w/DGL/xH5Yxb/X+aPWfyPzB+z+P8qf8zif1T+mMX/1/ljFv/f5I9Z/I/OH7P4/zZ/zOL/u/wxi/8x+WMW/2Pzxyz+x+WPWfx/nz9m8T8+f8zif0L+mMX/xPwxi/8f8scs/n/MH7P4/yl/zOJ/Uv6Yxf/k/DGL/5/V/mO/7i0W/1PU/q+fxf/U/DGL/1/yxyz+p+WPWfz/mj9m8f9b/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyT+QwaDHfOHJP4TXtH6xyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj0n8Jxrkj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL///Hzv2Ha13Xdxy/+U0o6cc2dWnDoTHXZiQyGrUQFcXjj1Mmmvkb9QgkiPyQBFNxo5U6Nl3qZsmmlo45W7XU4eb6taJhWbM1YmuVU1wLY8zBQnPGrgPnEOfs7bk6X/b92nw/Hn/Aue/j+w55Xi/vm4vraoT+oSz999A/lKX/nvqHsvQfqX8oS/9X6h/K0n8v/UNZ+u+tfyhL/6J/KEv/ffQPZen/Kv1DWfr/jP6hLP1/Vv9Qlv776h/K0n8//UNZ+u+vfyhL/5/TP5Sl/6v1D2Xpf4D+oSz9D9Q/lKX/a/QPZen/8/qHsvQfpX8oS/+D9A9l6f8L+oey9B+tfyhL/4P1D2Xpf4j+oSz9X6t/KEv/MfqHsvT/Rf1DWfofqn8oS/9f0j+Upf/r9A9l6f/L+oey9P8V/UNZ+h+mfyhL/9frH8rSf6z+oSz936B/KEv/w/UPZek/Tv9Qlv5H6B/K0n+8/qEs/X9V/1CW/hP0D2Xp/0b9Q1n6/5r+oSz9J+ofytL/TfqHsvR/s/6hLP1/Xf9Qlv5v0T+Upf8k/UNZ+h+pfyhL/8n6h7L0P0r/UJb+R+sfytL/GP1DWfpP0T+Upf+x+oey9D9O/1CW/lP1D2Xpf7z+oSz92/QPZel/gv6hLP1P1D+Upf9J+oey9D9Z/1CW/u36h7L0f6v+oSz936Z/KEv/U/QPZen/dv1DWfqfqn8oS/9p+oey9D9N/1CW/qfrH8rS/x36h7L0P0P/UJb+79Q/lKX/mfqHsvQ/S/9Qlv5n6x/K0v8c/UNZ+p+rfyhL//P0D2Xpf77+oSz9p+sfytL/Av1DWfpfqH8oS/+L9A9l6d+hfyhL/4v1D2XpP0P/UJb+M/UPZek/S/9Qlv7v0j+Upf8l+oey9J+tfyhL/zn6h7L0v1T/UJb+c/UPZel/mf6hLP3n6R/K0n++/qEs/RfoH8rSf6H+oSz9L9c/lKX/Iv1DWfq/W/9Qlv5X6B/K0n+x/qEs/ZfoH8rS/0r9Q1n6v0f/UJb+V+kfytL/av1DWfpfo38oS/+l+oey9L9W/1CW/r+hfyhL/9/UP5Sl/zL9Q1n6v1f/UJb+v6V/KEv/9+kfytL//fqHsvS/Tv9Qlv7X6x/K0v8G/UNZ+v+2/qEs/ZfrH8rS/3f0D2Xp/7v6h7L0v1H/UJb+N+kfytL/9/QPZen/Af1DWfrfrH8oS/9b9A9l6X+r/qEs/X9f/1CW/n+gfyhL/9v0D2Xp/0H9Q1n6f0j/UJb+t+sfytJ/hf6hLP3/UP9Qlv5/pH8oS/879A9l6X+n/qEs/e/SP5Sl/4f1D2Xp/xH9Q1n63927/6iGf10/pbL0v8f+Q1n6/7H+oSz9V+ofytL/T/QPZel/r/6hLP3/VP9Qlv736R/K0v+j+oey9P8z/UNZ+n9M/1CW/h/XP5Sl/yf0D2Xp/+f6h7L0/6T+oSz979c/lKX/A/qHsvR/UP9Qlv5/oX8oS/9V+oey9H9I/1CW/n+pfyhL/7/SP5Sl/8P6h7L0/2v9Q1n6f0r/UJb+n9Y/lKX/Z/QPZen/Wf1DWfp/Tv9Qlv5/o38oS//P6x/K0v8L+oey9F+tfyhL/y/qH8rS/2/1D2Xpv0b/UJb+j+gfytL/S/qHsvT/sv6hLP0f1T+Upf9X9A9l6f9V/UNZ+v+d/qEs/R/TP5Sl/9f0D2Xp//f6h7L0/7r+oSz9/0H/UJb+a/UPZen/Df1DWfqv0z+Upf8/6h/K0v+f9A9l6f9N/UNZ+v+z/qEs/b+lfyhL/2/rH8rS/zv6h7L0f1z/UJb+/6J/KEv/J/QPZen/pP6hLP3X6x/K0v8p/UNZ+v+r/qEs/b+rfyhL/3/TP5Sl//f0D2Xpv0H/UJb+T+sfytL/+/qHsvTfqH8oS/9/1z+Upf8m/UNZ+v+H/qEs/Z/RP5Sl/3/qH8rSf7P+oSz9t+gfytL/v/QPZen/A/1DWfpv1T+Upf+z+oey9H9O/1CW/j/UP5Sl//P6h7L0/2/9Q1n6v6B/KEv/H+kfytJ/m/6hJP33bukfytJ/gP6hLP0H6h/K0n+Q/qEs/QfrH8rSf4j+oSz9h+ofytJ/mP6hLP2H6x/K0v8V+oey9B+hfyhL/z30D2Xpv6f+oSz9R+ofytL/lfqHsvTfS//Qy64/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAT5sFi5dcMn327I75vvCFL3yx84uX+r9MAADA/7Uff+h/qX8lAAAAAAAAAAAAAAAAAAAAkFcT/3diL/W/IwAAAAAAAAAAAAAA/H/X1n7UxkEDejw1aNcHr3m0Y/vP47eeMfPuux8s3T93ffvE4CUH7vpg27Zt21Y8M2lK18NhrVar839t767Hw3sfd77+0lG377/jUZn8+VsfP3fayJPmP3DT4G+suKH96SHbnx3SOv/iWbM73jCw1SrHDGld0fng8AGtVjluSOvGzgfjOh9MHdJa2fngiO0PXtH6TOeD1184d/ZFnU8cX/n3DF4u2tqXtgb1WGyrx38Ndt3/0lFPzOz+uY+X7H61wa2u/Y9+4Ev79fpetxfZf/frl6N677/f/4LAi+rf/p9b1/1zHy/5v97/P7xm65Loey++/+7XL0fbP9Qn+PzfY6O9P/f3+vx/UPCSO++PHL7m5s79t51274FdTw3+ST7///j1yzG99z+wx+f/zs/xU7o//w9rtcqxu/nbAam0tV+7sa/3/773P/jVvW4G7Lr/u76yfs/O/d/zfGtZ11ND+rn/KX29/1/X69cK9E9b+53ber3/92P/rTHBS+7c/4YHRm7//L/+vgv33eV7/dn/sb33P3bhnMvGLli85LBZc6bP6JjRcenEcRMOHz9x4oQJY7d/Itjx427+pkASu/f+3xrR62ZAq9Wx8371vTdM6dz/poeWfaTrqeH93P9xfb7/H+T9H0KjB7aGDm1dMX3hwvmH7/ix++G4HT/u+MeC/ffjz/8HH9r1j3X/neGAVmv/nfdjzp04rHP/V84rq7qeGtrP/U/tc/+Te/5dJdA/u/n+f1Gvmx77P3LD1Ys693/ID/ZZ3/VUf//8f3yf+7/D+z/sjrb2Vq1vop37P2LYtSdUuy5t/v4P6tPE/kdtvnFLtetygv1DfZrY/7Tlb76g2nU50f6hPk3s/8E55y2vdl1Osn+oTxP7f+FVWw6odl1Otn+oTxP7f+y7T91d7bq02z/Up4n9f/C29iOqXZe32j/Up4n9H3b5s5OqXZe32T/Up4n9X7zHqSurXZdT7B/q08T+T9h29L7Vrsvb7R/q08T+B1z7vaXVrsup9g/1aWL/T05fPrfadZlm/1CfJva/ctSY56pdl9PsH+rTxP6XPf3GqdWuy+n2D/VpYv9fveX2x6pdl3fYP9Snif1/4ux9bq92Xc6wf6hPE/v/4eiHRlS7Lu+0f6hPE/tfu3bl/dWuy5n2D/VpYv8rVg4aXe26nGX/UJ8m9n/N8TMerXZdzrZ/qE8T+x8/4ctnVbsu59g/1KeJ/e//uW89Ve26nGv/UJ8m9n/qw4sWVLsu59k/1KeJ/S864OM/qnZdzrd/qE8T+39LxwEzq12X6fYP9Wli/+WmEWurXZcL7B/q08T+z9x05+Rq1+VC+4f6NLH/VXt94WPVrstF9g/1aWL/m+ddOrHademwf6hPE/v/znuveV+163Kx/UN9mtj/zc9/vVS7LjPsH+rTxP43jDvz7GrXZab9Q32a2P+dJz3zSLXrMsv+oT5N7H/5qscXVrsu77J/qE8T+1+9+sQnql2XS+wf6tPE/g8ZM3Zkz2ef/Qmvy2z7h/o0sf+5Zyz7ULXrMsf+oT5N7P+Y+255bbXrcqn9Q32a2P/wr036ZLXrMtf+oT5N7P/Tk97/qWrX5TL7h/o0sf8tkw8+tNp1mWf/UJ8m9r/u/nG3Vrsu8+0f6tPE/j/wyG0Vr8sC+4f6NLH/ea97YVO167LQ/qE+Tez/TdNOX1ztulxu/1CfJva/7x1Tv1jtuiyyf6hPE/s/59vfP6XadXm3/UN9mtj/wftdcGC163KF/UN9mtj/zFlrrq92XRbbP9Snif1PWbFufLXrssT+oT5N7H+vJxfcVe26XGn/UJ8m9r9x0H4nV7su77F/qE8T+7/nqoe/We26XGX/UJ8m9n/9dR/tqHZdrrZ/qE8T+//s1qGbq12Xa+wfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UQvRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHAQAA//96y+r8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) 1.636009241s ago: executing program 4 (id=2952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000180)=0x8, 0x4) 1.534263113s ago: executing program 5 (id=2953): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x20004080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="07012cbd7000fedbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) 1.410761737s ago: executing program 5 (id=2954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.241898782s ago: executing program 5 (id=2955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x340) 1.189477614s ago: executing program 0 (id=2956): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0) 991.77987ms ago: executing program 0 (id=2957): syz_mount_image$exfat(&(0x7f0000001080), &(0x7f0000001040)='./file1\x00', 0x0, &(0x7f00000011c0)=ANY=[], 0x23, 0x153a, &(0x7f00000012c0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) 759.796777ms ago: executing program 0 (id=2958): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 579.292172ms ago: executing program 4 (id=2959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 452.515077ms ago: executing program 6 (id=2960): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) waitid(0x0, r0, 0x0, 0x8000000a, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) 403.937788ms ago: executing program 0 (id=2961): poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x10) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200c00, &(0x7f0000000140)={[{@dax_never}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@noquota}]}, 0x4, 0x968e, &(0x7f000001c300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x29, 0x300000000}) 306.423431ms ago: executing program 4 (id=2962): sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) 75.732837ms ago: executing program 5 (id=2963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000700)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 75.351457ms ago: executing program 4 (id=2964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5e19307201bc4d3e8108a0077bab72d8015da3dcd6df845424cfea02da138072f1efe0341a6eb1cc7248c2e8c17d7cee77e7a77457bbde8d7fff1fc8a3b53b8fac7234c5e184ccd39945192b851cce2d1bb601e058b63f09c64b53f8915c7618a5f3d70a79bf6107ebcf7be378d0a84d37fa02d9d807426048c78e7ddc6fe197fc", 0x81}, {&(0x7f0000000100)="d736c15d5f896dfed0cfacfb29dfb83469c0f7b525496662d30658227cd64c48d9837c528a6d36c9ab8a4350231e85494a9debc646", 0x35}], 0x2, 0x0, 0x0, 0x200080c4}, 0x0) 0s ago: executing program 2 (id=2965): r0 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @empty, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) kernel console output (not intermixed with test programs): 36074][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.781709][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.790133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 329.806617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 329.819388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 329.830914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 329.849252][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.865835][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.883580][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.900967][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.915330][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.936352][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.957038][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.981420][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.994103][ T4285] syz-executor: attempt to access beyond end of device [ 329.994103][ T4285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.995099][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.026167][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 330.042209][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.066778][ T9540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.098042][ T9540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.107347][ T9540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.149798][ T9540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.320671][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.337345][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.375979][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.417595][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.431396][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.439036][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.697049][ T128] hid-generic 0005:10CF:0080.0014: unknown main item tag 0x2 [ 330.843340][ T128] hid-generic 0005:10CF:0080.0014: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 331.678272][ T9844] loop2: detected capacity change from 0 to 512 [ 331.679962][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 331.716298][ T9847] loop6: detected capacity change from 0 to 512 [ 331.765685][ T9844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 331.790567][ T9847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 331.813115][ T9847] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1921: missing EA_INODE flag [ 331.894702][ T9847] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1921: error while reading EA inode 2 err=-117 [ 331.958660][ T9847] EXT4-fs (loop6): 1 orphan inode deleted [ 331.991661][ T9847] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 332.129684][ T9855] loop4: detected capacity change from 0 to 2048 [ 332.195271][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 332.235317][ T9855] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 332.283095][ T9855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.368846][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 332.817209][ T9872] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 333.728643][ T9911] device veth1_macvtap left promiscuous mode [ 333.751390][ T9911] device macsec0 entered promiscuous mode [ 333.799343][ T9915] loop2: detected capacity change from 0 to 256 [ 333.815805][ T9911] device veth1_macvtap entered promiscuous mode [ 333.844693][ T9911] device macsec0 left promiscuous mode [ 333.886379][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 333.975475][ T9915] FAT-fs (loop2): Directory bread(block 64) failed [ 334.017901][ T9915] FAT-fs (loop2): Directory bread(block 65) failed [ 334.067294][ T9915] FAT-fs (loop2): Directory bread(block 66) failed [ 334.096158][ T9915] FAT-fs (loop2): Directory bread(block 67) failed [ 334.110946][ T9915] FAT-fs (loop2): Directory bread(block 68) failed [ 334.125108][ T9915] FAT-fs (loop2): Directory bread(block 69) failed [ 334.134321][ T9915] FAT-fs (loop2): Directory bread(block 70) failed [ 334.140902][ T9915] FAT-fs (loop2): Directory bread(block 71) failed [ 334.181697][ T9915] FAT-fs (loop2): Directory bread(block 72) failed [ 334.188374][ T9915] FAT-fs (loop2): Directory bread(block 73) failed [ 334.728713][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.790007][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.824978][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.857605][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1961'. [ 334.875442][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.904269][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.929649][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.940473][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.951858][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.001369][ T9936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.022421][ T9936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.087186][ T9936] batman_adv: batadv0: Adding interface: ipvlan3 [ 335.118714][ T9936] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.159035][ T9936] batman_adv: batadv0: Interface activated: ipvlan3 [ 335.523834][ T9960] loop2: detected capacity change from 0 to 256 [ 335.691371][ T8110] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 335.701698][ T128] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 335.913619][ T8110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.924886][ T128] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 335.939927][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.958730][ T8110] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.981998][ T128] usb 5-1: config 0 descriptor?? [ 335.994236][ T8110] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.012945][ T128] cp210x 5-1:0.0: cp210x converter detected [ 336.031554][ T8110] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.040831][ T8110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.100944][ T8110] usb 6-1: config 0 descriptor?? [ 336.244990][ T9974] loop2: detected capacity change from 0 to 4096 [ 336.395905][ T128] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 336.414046][ T128] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 336.443940][ T128] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 336.476652][ T128] usb 5-1: cp210x converter now attached to ttyUSB0 [ 336.485536][ T4272] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 336.511577][ T4272] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 336.520202][ T128] usb 5-1: USB disconnect, device number 19 [ 336.530843][ T8110] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xe [ 336.565225][ T8110] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 336.579068][ T128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 336.618728][ T128] cp210x 5-1:0.0: device disconnected [ 336.662060][ T8110] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 336.734497][ T8110] usb 6-1: USB disconnect, device number 5 [ 337.109042][ T9993] program syz.2.1980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.125846][ T9987] fido_id[9987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 337.204594][ T9996] loop4: detected capacity change from 0 to 1024 [ 337.374481][ T26] audit: type=1800 audit(1779279043.877:113): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1981" name="file2" dev="loop4" ino=20 res=0 errno=0 [ 337.450159][ T9996] syz.4.1981: attempt to access beyond end of device [ 337.450159][ T9996] loop4: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 338.874175][T10015] sp0: Synchronizing with TNC [ 339.033315][ T8110] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 339.222710][ T8110] usb 5-1: Using ep0 maxpacket: 8 [ 339.231109][ T8110] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 339.233392][T10049] loop2: detected capacity change from 0 to 2048 [ 339.272354][T10049] EXT4-fs: Ignoring removed nobh option [ 339.286038][ T8110] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.331310][ T8110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 339.368935][ T8110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 339.370235][T10049] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 339.387998][T10049] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.420004][T10056] loop5: detected capacity change from 0 to 8 [ 339.451533][ T8110] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.534502][ T8110] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 339.590658][ T8110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.643091][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 339.835942][ T8110] usb 5-1: GET_CAPABILITIES returned 0 [ 339.848905][ T8110] usbtmc 5-1:16.0: can't read capabilities [ 340.048726][ T8110] usb 5-1: USB disconnect, device number 20 [ 340.109657][ T26] audit: type=1326 audit(1779279046.607:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef5cd9ce59 code=0x0 [ 340.596357][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.608655][T10080] loop6: detected capacity change from 0 to 512 [ 340.637618][T10080] EXT4-fs: Ignoring removed bh option [ 340.728509][T10080] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 340.742704][ T128] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 340.748308][T10080] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 340.772357][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.866792][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 340.941472][ T128] usb 1-1: Using ep0 maxpacket: 8 [ 340.963382][ T128] usb 1-1: config 0 has no interfaces? [ 340.993235][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.003791][ T128] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 341.003826][ T128] usb 1-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 341.121310][ T128] usb 1-1: Product: syz [ 341.149082][ T128] usb 1-1: config 0 descriptor?? [ 341.190269][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.511928][T10098] loop4: detected capacity change from 0 to 512 [ 341.530580][T10098] ext4: Unknown parameter 'nouser_xattr' [ 341.576957][T10097] loop5: detected capacity change from 0 to 2048 [ 341.698082][T10097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 341.777794][T10097] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.821863][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.841906][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.856857][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.864908][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.874434][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.882218][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.069114][ T7] usb 1-1: USB disconnect, device number 25 [ 342.378637][T10117] netlink: 'syz.0.2023': attribute type 5 has an invalid length. [ 342.411345][ T63] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 345: padding at end of block bitmap is not set [ 342.511974][ T63] EXT4-fs (loop5): Remounting filesystem read-only [ 342.562355][ T8268] EXT4-fs (loop5): unmounting filesystem. [ 342.759918][T10129] loop5: detected capacity change from 0 to 256 [ 342.868367][T10129] FAT-fs (loop5): Directory bread(block 64) failed [ 342.908376][T10129] FAT-fs (loop5): Directory bread(block 65) failed [ 342.922310][T10104] chnl_net:caif_netlink_parms(): no params data found [ 342.956997][T10129] FAT-fs (loop5): Directory bread(block 66) failed [ 342.998339][T10129] FAT-fs (loop5): Directory bread(block 67) failed [ 343.025298][T10129] FAT-fs (loop5): Directory bread(block 68) failed [ 343.067338][T10129] FAT-fs (loop5): Directory bread(block 69) failed [ 343.088458][T10129] FAT-fs (loop5): Directory bread(block 70) failed [ 343.102196][T10129] FAT-fs (loop5): Directory bread(block 71) failed [ 343.108871][T10129] FAT-fs (loop5): Directory bread(block 72) failed [ 343.116744][T10129] FAT-fs (loop5): Directory bread(block 73) failed [ 343.451102][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.546797][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.602807][T10104] device bridge_slave_0 entered promiscuous mode [ 343.637896][T10125] loop6: detected capacity change from 0 to 40427 [ 343.683800][T10125] F2FS-fs (loop6): build fault injection attr: rate: 694, type: 0x3ffff [ 343.713199][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.720794][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.769380][T10125] F2FS-fs (loop6): invalid crc value [ 343.800098][T10104] device bridge_slave_1 entered promiscuous mode [ 343.819919][T10125] F2FS-fs (loop6): Found nat_bits in checkpoint [ 343.911387][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 344.080669][T10125] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 344.334533][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.813617][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.921706][ T11] device hsr_slave_0 left promiscuous mode [ 344.948818][ T11] device hsr_slave_1 left promiscuous mode [ 344.972111][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.005176][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.042939][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.078495][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.109257][ T11] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 345.163230][ T11] batman_adv: batadv0: Removing interface: ipvlan3 [ 345.204400][ T11] device bridge_slave_1 left promiscuous mode [ 345.210691][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.216585][T10156] loop5: detected capacity change from 0 to 131072 [ 345.225591][ T128] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 345.275250][ T11] device bridge_slave_0 left promiscuous mode [ 345.284873][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.295729][T10156] F2FS-fs (loop5): Found nat_bits in checkpoint [ 345.360361][T10156] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 345.441495][ T128] usb 1-1: Using ep0 maxpacket: 8 [ 345.450517][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.507826][ T128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.538247][ T128] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.584671][ T128] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 345.610579][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.620804][T10171] loop6: detected capacity change from 0 to 1024 [ 345.649872][ T128] usb 1-1: config 0 descriptor?? [ 345.661295][T10171] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 345.743081][T10171] EXT4-fs error (device loop6): ext4_get_journal_inode:5762: inode #32: comm syz.6.2036: iget: special inode unallocated [ 345.776842][T10171] EXT4-fs (loop6): no journal found [ 345.796872][T10171] EXT4-fs (loop6): can't get journal size [ 345.839100][T10171] EXT4-fs (loop6): filesystem is read-only [ 345.851886][T10171] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 345.981447][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 346.040829][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 346.075174][ T128] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 346.097891][ T128] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 346.128714][ T128] kye 0003:0458:4018.0016: item fetching failed at offset 3/5 [ 346.144385][ T128] kye 0003:0458:4018.0016: parse failed [ 346.160251][ T128] kye: probe of 0003:0458:4018.0016 failed with error -22 [ 346.330672][ T8110] usb 1-1: USB disconnect, device number 26 [ 346.388855][ T11] device veth1_macvtap left promiscuous mode [ 346.407835][ T11] device veth0_macvtap left promiscuous mode [ 346.420946][ T11] device veth1_vlan left promiscuous mode [ 346.433974][ T11] device veth0_vlan left promiscuous mode [ 347.966237][ T11] team0 (unregistering): Port device team_slave_1 removed [ 348.061328][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 348.070263][ T11] team0 (unregistering): Port device team_slave_0 removed [ 348.146386][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.213468][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.674761][T10184] loop4: detected capacity change from 0 to 128 [ 348.869940][ T11] bond0 (unregistering): Released all slaves [ 348.878185][T10186] xt_hashlimit: Unknown mode mask 883EBBD7, kernel too old? [ 349.305563][T10104] team0: Port device team_slave_0 added [ 349.373733][T10104] team0: Port device team_slave_1 added [ 349.389621][T10195] loop6: detected capacity change from 0 to 128 [ 349.471608][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.490203][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.559096][T10199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 349.598026][T10195] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 349.612566][T10195] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 349.660492][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.740589][T10199] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 349.778623][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.833871][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.863594][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.912209][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 349.928331][T10206] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 349.990096][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2047'. [ 350.139305][T10104] device hsr_slave_0 entered promiscuous mode [ 350.141523][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 350.164398][T10104] device hsr_slave_1 entered promiscuous mode [ 350.405969][T10222] loop5: detected capacity change from 0 to 512 [ 350.425616][T10224] loop6: detected capacity change from 0 to 256 [ 350.445805][T10222] EXT4-fs: Ignoring removed nobh option [ 350.456947][T10222] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.486161][T10222] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.2054: iget: bad i_size value: 38620345925642 [ 350.552115][T10224] exfat: Deprecated parameter 'utf8' [ 350.590832][T10224] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 350.609723][T10222] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2054: couldn't read orphan inode 15 (err -117) [ 350.629099][T10222] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 350.662918][T10222] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2054: bg 0: block 5: invalid block bitmap [ 350.874116][ T8268] EXT4-fs (loop5): unmounting filesystem. [ 351.229586][T10243] device team_slave_0 entered promiscuous mode [ 351.668551][T10104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.728939][T10104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.812750][T10104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.851848][T10104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.118603][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.142916][T10274] loop6: detected capacity change from 0 to 256 [ 352.261118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.281719][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.318783][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.359486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.399098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.439794][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.447001][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.501312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 352.536263][T10284] device syz_tun entered promiscuous mode [ 352.572177][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 352.591775][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.636072][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.643291][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.672495][T10282] device syz_tun left promiscuous mode [ 352.700670][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 352.761123][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 352.789793][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 352.823303][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.872522][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.923261][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 352.963468][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.001093][T10104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.017832][T10253] loop4: detected capacity change from 0 to 40427 [ 353.074541][T10253] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 353.101153][T10104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.138712][T10253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 353.156322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.173356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.214496][T10253] F2FS-fs (loop4): invalid crc value [ 353.228479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.258782][T10253] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 353.262127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.334349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.568601][T10253] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 353.577045][T10253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 353.757944][T10296] f2fs_ckpt-7:4: attempt to access beyond end of device [ 353.757944][T10296] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.329559][T10322] netlink: 464 bytes leftover after parsing attributes in process `syz.6.2085'. [ 354.535739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.574240][T10327] overlayfs: upper fs does not support file handles, falling back to index=off. [ 354.580681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.624029][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.641538][T10327] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 354.664245][T10327] overlayfs: conflicting lowerdir path [ 354.749659][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.770364][ T7171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.825928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.845555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.894172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.922590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.948363][T10104] device veth0_vlan entered promiscuous mode [ 354.974372][T10104] device veth1_vlan entered promiscuous mode [ 355.102747][T10104] device veth0_macvtap entered promiscuous mode [ 355.109713][ T8110] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 355.131541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 355.140337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 355.170144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.205248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.271435][T10104] device veth1_macvtap entered promiscuous mode [ 355.281185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.290005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.304307][ T8110] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 355.328295][ T8110] usb 5-1: config 0 has no interface number 0 [ 355.330849][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.361117][ T8110] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 355.367889][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.401036][ T8110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.401180][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.419757][ T8110] usb 5-1: Product: syz [ 355.429891][ T8110] usb 5-1: Manufacturer: syz [ 355.437931][ T8110] usb 5-1: SerialNumber: syz [ 355.469326][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.475703][ T8110] usb 5-1: config 0 descriptor?? [ 355.491321][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.531595][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.551280][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.565148][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.603726][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.621472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.672583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.694701][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.710457][ T8110] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 355.721943][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.748964][ T8110] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.761321][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.790328][ T8110] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 355.797336][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.824520][ T8110] usb 5-1: media controller created [ 355.828916][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.861459][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.896781][ T8110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.901256][T10104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.957397][T10104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.971603][ T8110] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 356.020022][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.045808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.065623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.086012][ T8110] usb 5-1: USB disconnect, device number 21 [ 356.112408][T10104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.151576][T10104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.160362][T10104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.199881][T10104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.423312][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.468907][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.515753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.556006][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.578498][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.607569][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.692644][T10393] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 357.840617][T10364] loop6: detected capacity change from 0 to 40427 [ 357.898094][T10364] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 357.920454][T10364] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 357.946571][T10364] F2FS-fs (loop6): invalid crc value [ 358.010670][T10364] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 358.295772][T10364] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 358.331741][T10364] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 358.505553][T10408] f2fs_ckpt-7:6: attempt to access beyond end of device [ 358.505553][T10408] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.901421][T10436] loop4: detected capacity change from 0 to 128 [ 358.962271][T10436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 359.000404][T10436] ext4 filesystem being mounted at /449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.032897][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.663264][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 359.964272][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 360.293671][T10477] program syz.4.2129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.471392][ T2183] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 360.683715][ T2183] usb 1-1: Using ep0 maxpacket: 32 [ 360.693350][ T2183] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 360.741383][ T2183] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.771017][ T2183] usb 1-1: config 0 descriptor?? [ 360.813787][ T2183] gspca_main: sunplus-2.14.0 probing 041e:400b [ 360.988560][T10490] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2133'. [ 361.066086][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2133'. [ 361.618723][ T2183] gspca_sunplus: reg_w_riv err -71 [ 361.624827][ T2183] sunplus: probe of 1-1:0.0 failed with error -71 [ 361.653328][ T2183] usb 1-1: USB disconnect, device number 27 [ 361.834974][T10484] loop4: detected capacity change from 0 to 32768 [ 361.881472][T10484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2131 (10484) [ 361.936311][T10484] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.986050][T10484] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 362.025633][T10484] BTRFS info (device loop4): force clearing of disk cache [ 362.059723][T10484] BTRFS info (device loop4): metadata ratio 0 [ 362.077684][T10484] BTRFS info (device loop4): enabling ssd optimizations [ 362.087833][T10484] BTRFS info (device loop4): using spread ssd allocation scheme [ 362.111361][T10484] BTRFS info (device loop4): using free space tree [ 362.435402][T10523] loop2: detected capacity change from 0 to 128 [ 362.460491][T10523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 362.561672][T10523] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 362.650332][T10484] BTRFS info (device loop4): rebuilding free space tree [ 362.875825][ T4351] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 362.907589][T10498] loop5: detected capacity change from 0 to 40427 [ 362.964526][T10498] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 362.994463][T10498] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 363.033527][T10498] F2FS-fs (loop5): invalid crc value [ 363.075492][ T4351] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 363.106963][ T4351] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 363.131098][T10498] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 363.162654][ T4351] usb 1-1: config 220 has an invalid descriptor of length 104, skipping remainder of the config [ 363.191991][ T4285] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.231278][ T4351] usb 1-1: config 220 has no interface number 2 [ 363.237652][ T4351] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 363.351284][ T4351] usb 1-1: config 220 interface 0 has no altsetting 0 [ 363.401313][ T4351] usb 1-1: config 220 interface 76 has no altsetting 0 [ 363.408338][ T4351] usb 1-1: config 220 interface 1 has no altsetting 0 [ 363.500142][ T4351] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 363.527472][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.551645][T10498] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 363.558749][T10498] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 363.594538][ T4351] usb 1-1: Product: syz [ 363.599144][ T4351] usb 1-1: Manufacturer: syz [ 363.644764][ T4351] usb 1-1: SerialNumber: syz [ 363.825889][T10104] EXT4-fs (loop2): unmounting filesystem. [ 363.889844][ T4351] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 363.921417][ T4351] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 363.927903][ T4351] usb 1-1: No valid video chain found. [ 364.006289][ T4351] usb 1-1: selecting invalid altsetting 0 [ 364.055132][ T8268] syz-executor: attempt to access beyond end of device [ 364.055132][ T8268] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 364.077637][ T4351] usb 1-1: selecting invalid altsetting 0 [ 364.094613][ T4351] usbtest: probe of 1-1:220.1 failed with error -22 [ 364.149893][ T4351] usb 1-1: USB disconnect, device number 28 [ 364.321666][T10576] loop6: detected capacity change from 0 to 1024 [ 364.558564][ T7171] hfsplus: b-tree write err: -5, ino 25 [ 364.570480][ T7171] hfsplus: b-tree write err: -5, ino 4 [ 364.583201][ T7171] hfsplus: b-tree write err: -5, ino 2 [ 365.931839][T10622] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 365.948422][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2160'. [ 366.230555][T10625] loop2: detected capacity change from 0 to 4096 [ 366.442904][T10625] overlayfs: upper fs does not support tmpfile. [ 366.504317][T10625] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 366.564278][T10625] overlayfs: conflicting lowerdir path [ 366.617549][T10563] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 366.683418][T10563] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.002057][T10646] fido_id[10646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 367.191921][T10653] loop2: detected capacity change from 0 to 4096 [ 367.221425][T10563] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 367.423288][T10563] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.441316][T10563] usb 7-1: config 0 has no interface number 0 [ 367.460654][T10563] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.486306][T10563] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.530002][T10563] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 367.575823][T10563] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.633855][T10563] usb 7-1: config 0 descriptor?? [ 367.710702][T10670] netlink: 'syz.2.2176': attribute type 3 has an invalid length. [ 367.752248][T10670] netlink: 812 bytes leftover after parsing attributes in process `syz.2.2176'. [ 368.097318][T10563] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 368.112550][T10563] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 368.132885][T10563] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 368.150471][T10563] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 368.160661][T10563] uclogic 0003:256C:006D.0018: unknown main item tag 0x0 [ 368.193925][T10563] uclogic 0003:256C:006D.0018: No inputs registered, leaving [ 368.260486][T10563] uclogic 0003:256C:006D.0018: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input1 [ 368.331028][ T4351] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 368.338249][T10563] usb 7-1: USB disconnect, device number 2 [ 368.353752][ T4351] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 368.657444][T10693] fido_id[10693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 368.674308][T10692] loop4: detected capacity change from 0 to 4096 [ 368.827576][T10692] overlayfs: upper fs does not support tmpfile. [ 368.883262][T10692] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 368.926126][T10692] overlayfs: conflicting lowerdir path [ 368.939902][T10699] fido_id[10699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 369.653991][T10682] loop5: detected capacity change from 0 to 32768 [ 370.136745][ T8110] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 370.176893][ T8110] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 370.538427][T10734] fido_id[10734]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.055048][T10754] program syz.6.2201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.342485][T10736] loop2: detected capacity change from 0 to 32768 [ 371.514082][T10736] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 371.737794][T10736] (syz.2.2198,10736,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 372.035461][T10104] ocfs2: Unmounting device (7,2) on (node local) [ 372.471462][ T8111] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 372.673383][ T8111] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 372.692995][ T8111] usb 3-1: config 0 has no interface number 0 [ 372.699168][ T8111] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.737825][T10795] mmap: syz.0.2221 (10795) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 372.761001][ T8111] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 372.780848][ T8111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.809663][ T8111] usb 3-1: Product: syz [ 372.829982][ T8111] usb 3-1: Manufacturer: syz [ 372.846671][ T8111] usb 3-1: SerialNumber: syz [ 372.867922][ T8111] usb 3-1: config 0 descriptor?? [ 372.932214][ T8111] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 373.008913][T10773] loop4: detected capacity change from 0 to 32768 [ 373.190582][ T8111] usb 3-1: USB disconnect, device number 21 [ 373.212226][ T8111] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 374.504174][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 374.513606][T10834] netlink: 39 bytes leftover after parsing attributes in process `syz.5.2227'. [ 374.897043][T10837] loop6: detected capacity change from 0 to 1024 [ 375.028842][T10837] hfsplus: bad catalog entry type [ 375.178985][ T9] hfsplus: b-tree write err: -5, ino 25 [ 375.185094][ T9] hfsplus: b-tree write err: -5, ino 4 [ 375.190682][ T9] hfsplus: b-tree write err: -5, ino 2 [ 375.227754][ T9] hfsplus: b-tree write err: -5, ino 26 [ 375.380086][T10843] loop4: detected capacity change from 0 to 4096 [ 375.409756][T10843] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 375.486325][T10843] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 375.691432][T10562] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 375.902260][T10562] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 375.941000][T10562] usb 7-1: config 0 has no interface number 0 [ 375.951133][T10562] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.984568][T10562] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 376.021264][T10865] input: syz0 as /devices/virtual/input/input16 [ 376.029020][T10562] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.049129][T10562] usb 7-1: Product: syz [ 376.069890][T10562] usb 7-1: Manufacturer: syz [ 376.083904][T10562] usb 7-1: SerialNumber: syz [ 376.108158][T10562] usb 7-1: config 0 descriptor?? [ 376.171691][T10562] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 376.405578][T10563] usb 7-1: USB disconnect, device number 3 [ 376.427266][T10563] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 376.469370][T10849] loop2: detected capacity change from 0 to 40427 [ 376.491536][T10849] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 376.524742][T10849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 376.580596][T10849] F2FS-fs (loop2): invalid crc value [ 376.664748][T10849] F2FS-fs (loop2): Found nat_bits in checkpoint [ 376.849762][T10849] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 376.879551][T10849] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 377.201277][T10563] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 377.391768][T10563] usb 1-1: Using ep0 maxpacket: 16 [ 377.398908][T10563] usb 1-1: config 0 has no interfaces? [ 377.430049][T10563] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 377.457825][T10563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.492567][T10563] usb 1-1: Product: syz [ 377.501497][T10563] usb 1-1: Manufacturer: syz [ 377.511611][T10563] usb 1-1: SerialNumber: syz [ 377.537011][T10563] usb 1-1: config 0 descriptor?? [ 377.678396][T10895] program syz.4.2253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.679859][T10893] loop6: detected capacity change from 0 to 256 [ 377.767811][ T4351] usb 1-1: USB disconnect, device number 29 [ 378.026724][T10905] loop5: detected capacity change from 0 to 128 [ 378.158308][T10905] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 378.185142][T10905] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.207343][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2261'. [ 378.310578][ T8268] EXT4-fs (loop5): unmounting filesystem. [ 378.544503][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.579829][T10923] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 378.607193][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 378.628520][T10927] loop4: detected capacity change from 0 to 512 [ 378.659506][ T4277] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 378.670249][ T4277] CPU: 1 PID: 4277 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 378.677843][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.687939][ T4277] Workqueue: hci4 hci_rx_work [ 378.692800][ T4277] Call Trace: [ 378.696196][ T4277] [ 378.699276][ T4277] dump_stack_lvl+0x188/0x24e [ 378.704071][ T4277] ? show_regs_print_info+0x12/0x12 [ 378.709333][ T4277] ? load_image+0x400/0x400 [ 378.713919][ T4277] sysfs_create_dir_ns+0x26a/0x290 [ 378.719129][ T4277] ? sysfs_warn_dup+0xa0/0xa0 [ 378.723837][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 378.729070][ T4277] kobject_add_internal+0x61c/0xcc0 [ 378.734322][ T4277] kobject_add+0x160/0x230 [ 378.738772][ T4277] ? kobject_init+0x1d0/0x1d0 [ 378.743480][ T4277] ? klist_children_get+0x50/0x50 [ 378.748595][ T4277] ? get_device_parent+0x121/0x3f0 [ 378.753741][ T4277] device_add+0x483/0xfb0 [ 378.758103][ T4277] ? kmem_cache_free+0xf7/0x290 [ 378.763020][ T4277] hci_conn_add_sysfs+0xd1/0x1e0 [ 378.768030][ T4277] le_conn_complete_evt+0x1062/0x1670 [ 378.773431][ T4277] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 378.779693][ T4277] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 378.785395][ T4277] ? skb_pull_data+0xf7/0x200 [ 378.790099][ T4277] hci_le_enh_conn_complete_evt+0x185/0x460 [ 378.796013][ T4277] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 378.802465][ T4277] ? hci_remote_host_features_evt+0x270/0x270 [ 378.808561][ T4277] hci_event_packet+0x7b9/0x1280 [ 378.813526][ T4277] ? bis_list+0x280/0x280 [ 378.817888][ T4277] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 378.823804][ T4277] ? kcov_remote_start+0x4c7/0x7e0 [ 378.828993][ T4277] ? patch_conexant_auto+0x1260/0x1650 [ 378.834477][ T4277] ? hci_send_to_monitor+0x9c/0x4a0 [ 378.839695][ T4277] hci_rx_work+0x3eb/0xd40 [ 378.844212][ T4277] ? _raw_spin_unlock+0x40/0x40 [ 378.849101][ T4277] ? process_one_work+0x7b0/0x1160 [ 378.854259][ T4277] process_one_work+0x8a2/0x1160 [ 378.859226][ T4277] ? worker_detach_from_pool+0x240/0x240 [ 378.864877][ T4277] ? _raw_spin_lock_irq+0xb7/0xf0 [ 378.869926][ T4277] ? _raw_spin_lock_irqsave+0x100/0x100 [ 378.875505][ T4277] ? kthread_data+0x4b/0xc0 [ 378.880033][ T4277] worker_thread+0xaa2/0x1270 [ 378.884750][ T4277] kthread+0x29d/0x330 [ 378.888885][ T4277] ? worker_clr_flags+0x1a0/0x1a0 [ 378.893927][ T4277] ? kthread_blkcg+0xd0/0xd0 [ 378.898527][ T4277] ret_from_fork+0x1f/0x30 [ 378.902990][ T4277] [ 378.920214][ T4277] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 378.934336][ T4277] Bluetooth: hci4: failed to register connection device [ 378.971490][ T4351] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 379.153215][ T4351] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 379.162174][ T4351] usb 6-1: config 0 has no interface number 0 [ 379.168297][ T4351] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.182938][ T4351] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 379.192298][ T4351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.200302][ T4351] usb 6-1: Product: syz [ 379.204614][ T4351] usb 6-1: Manufacturer: syz [ 379.209233][ T4351] usb 6-1: SerialNumber: syz [ 379.216557][ T4351] usb 6-1: config 0 descriptor?? [ 379.226569][ T4351] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 379.452489][T10932] loop4: detected capacity change from 0 to 256 [ 379.475817][ T4351] usb 6-1: USB disconnect, device number 6 [ 379.486587][ T4351] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 379.811094][T10941] sctp: Trying to GSO but underlying device doesn't support it. [ 379.947024][T10944] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2277'. [ 379.957504][T10946] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2276'. [ 379.997824][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2276'. [ 380.103657][T10948] loop6: detected capacity change from 0 to 256 [ 380.110773][T10948] exfat: Deprecated parameter 'utf8' [ 380.173095][T10948] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 380.621359][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 381.526781][T10954] loop6: detected capacity change from 0 to 40427 [ 381.578491][T10954] F2FS-fs (loop6): invalid crc value [ 381.610553][T10954] F2FS-fs (loop6): Found nat_bits in checkpoint [ 381.757908][T10954] F2FS-fs (loop6): Start checkpoint disabled! [ 381.783099][T10954] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 381.949426][T10964] loop4: detected capacity change from 0 to 32768 [ 382.069315][T10964] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 382.079268][ T9] kworker/u4:0: attempt to access beyond end of device [ 382.079268][ T9] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 382.216483][T10964] (syz.4.2286,10964,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 382.900058][ T4285] ocfs2: Unmounting device (7,4) on (node local) [ 383.491051][T10985] loop4: detected capacity change from 0 to 8192 [ 383.558033][T10985] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 383.581455][T10985] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 383.590717][T10985] REISERFS (device loop4): using ordered data mode [ 383.601627][T10985] reiserfs: using flush barriers [ 383.626970][T10985] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 383.721788][T10985] REISERFS (device loop4): checking transaction log (loop4) [ 383.755322][T10985] REISERFS (device loop4): Using r5 hash to sort names [ 383.776865][T10985] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 383.805141][T10994] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.2298'. [ 383.863959][T10994] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 383.990948][T10979] loop6: detected capacity change from 0 to 40427 [ 384.084409][T10979] F2FS-fs (loop6): Found nat_bits in checkpoint [ 384.258979][T10979] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 384.290625][T10979] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 384.762200][ T9540] syz-executor: attempt to access beyond end of device [ 384.762200][ T9540] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 384.809769][ T2183] hid-generic 0005:10CF:0080.001B: unknown main item tag 0x2 [ 384.876169][ T2183] hid-generic 0005:10CF:0080.001B: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 385.642853][T11028] loop6: detected capacity change from 0 to 256 [ 387.343015][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'. [ 387.372907][T11064] netlink: 39 bytes leftover after parsing attributes in process `syz.6.2328'. [ 387.470276][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2329'. [ 387.483352][T11068] loop4: detected capacity change from 0 to 256 [ 387.498687][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2329'. [ 387.763979][T11071] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2341'. [ 387.801397][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2341'. [ 388.206069][T11089] loop4: detected capacity change from 0 to 256 [ 388.252640][T11089] exfat: Deprecated parameter 'utf8' [ 388.304765][T11089] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 388.909107][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2349'. [ 389.095837][T11116] loop4: detected capacity change from 0 to 4096 [ 389.382370][ T4285] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 389.389011][ T4285] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 389.659024][T11125] loop4: detected capacity change from 0 to 1024 [ 389.885160][T11113] loop6: detected capacity change from 0 to 32768 [ 389.934961][T11113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2347 (11113) [ 390.006884][T11113] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.041487][ T4351] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 390.044856][T11113] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 390.099645][T11113] BTRFS info (device loop6): force clearing of disk cache [ 390.124871][T11113] BTRFS info (device loop6): metadata ratio 0 [ 390.139503][T11113] BTRFS info (device loop6): enabling ssd optimizations [ 390.170430][T11113] BTRFS info (device loop6): using spread ssd allocation scheme [ 390.200655][T11113] BTRFS info (device loop6): using free space tree [ 390.233273][ T4351] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.261539][ T4351] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.303607][ T4351] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.321577][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.338386][ T4351] usb 6-1: SerialNumber: syz [ 390.399423][T11117] loop2: detected capacity change from 0 to 40427 [ 390.432754][T11117] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 390.447755][T11117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 390.458532][T11117] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff [ 390.475407][T11117] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8 [ 390.484877][T11117] F2FS-fs (loop2): invalid crc value [ 390.488456][T11113] BTRFS info (device loop6): rebuilding free space tree [ 390.534118][T11117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 390.563452][ T4351] usb 6-1: 0:2 : does not exist [ 390.624533][T11117] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 390.631121][ T4351] usb 6-1: USB disconnect, device number 7 [ 390.643937][T11117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 390.758406][T11117] syz.2.2350: attempt to access beyond end of device [ 390.758406][T11117] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 390.923740][T10104] syz-executor: attempt to access beyond end of device [ 390.923740][T10104] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.955263][ T9540] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.972430][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.503105][T11170] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 392.021804][T11180] loop2: detected capacity change from 0 to 2048 [ 392.121383][T11180] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 392.168886][T11180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.325947][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 392.939634][T11211] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2383'. [ 392.982107][T11211] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.990000][T11211] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.390860][T11226] loop4: detected capacity change from 0 to 4096 [ 393.400431][T11226] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 393.481060][T11226] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 393.505543][T11226] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 393.535044][T11226] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 393.563503][T11226] ntfs: volume version 3.1. [ 393.812972][ T4322] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 393.844249][ T4322] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 393.865070][ T4285] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 395.297471][T11268] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 396.043039][T11298] loop5: detected capacity change from 0 to 256 [ 396.075447][T11298] exfat: Deprecated parameter 'utf8' [ 396.100721][T11298] exfat: Deprecated parameter 'utf8' [ 396.137849][T11298] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd93e7a9e, utbl_chksum : 0xe619d30d) [ 396.497301][T11302] loop4: detected capacity change from 0 to 4096 [ 396.746167][ T4285] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 396.756739][ T4285] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 397.063600][T11316] loop2: detected capacity change from 0 to 1024 [ 397.089523][T11319] program syz.5.2430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.342017][ T4289] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 397.524181][ T4351] kernel write not supported for file /234/clear_refs (pid: 4351 comm: kworker/1:7) [ 397.838185][T11334] sp0: Synchronizing with TNC [ 397.846557][ T4351] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 398.033441][ T4351] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 398.048926][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.070504][ T4351] usb 3-1: config 0 descriptor?? [ 398.090299][ T4351] cp210x 3-1:0.0: cp210x converter detected [ 398.341930][T11353] loop6: detected capacity change from 0 to 512 [ 398.353395][T11353] ext4: Unknown parameter 'nouser_xattr' [ 398.491418][ T4351] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 398.521770][ T4351] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 398.529503][ T4351] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 398.571905][ T26] audit: type=1326 audit(1779279105.077:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.6.2447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6a4d9ce59 code=0x0 [ 398.585626][ T4351] usb 3-1: cp210x converter now attached to ttyUSB0 [ 398.657972][ T4351] usb 3-1: USB disconnect, device number 22 [ 398.680255][ T4351] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 398.698933][ T4351] cp210x 3-1:0.0: device disconnected [ 399.003355][T11351] sp0: Synchronizing with TNC [ 399.356111][T11372] loop2: detected capacity change from 0 to 8192 [ 399.393661][T11372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 399.407897][T11372] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 399.417569][ T4351] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 399.421657][T11372] REISERFS (device loop2): using ordered data mode [ 399.446507][T11372] reiserfs: using flush barriers [ 399.459422][T11372] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 399.491966][T11372] REISERFS (device loop2): checking transaction log (loop2) [ 399.531895][T11372] REISERFS (device loop2): Using r5 hash to sort names [ 399.556720][T11372] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 399.603253][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.621158][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.644864][ T4351] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.677066][ T4351] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.704048][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.753991][ T4351] usb 1-1: config 0 descriptor?? [ 399.938454][T11384] loop2: detected capacity change from 0 to 512 [ 399.987548][T11384] EXT4-fs: Ignoring removed bh option [ 400.046125][T11384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 400.067996][T11384] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.154458][T10104] EXT4-fs (loop2): unmounting filesystem. [ 400.195571][ T4351] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xe [ 400.222717][ T4351] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 400.243939][ T4351] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 400.382182][T11375] loop4: detected capacity change from 0 to 32768 [ 400.432825][T11375] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.2457 (11375) [ 400.451619][T10557] usb 1-1: USB disconnect, device number 30 [ 400.518921][T11375] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 400.563881][T11375] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 400.596448][T11375] BTRFS info (device loop4): using free space tree [ 400.638150][T11392] fido_id[11392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 400.877703][T11375] BTRFS info (device loop4): enabling ssd optimizations [ 401.078516][ T4285] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 401.458693][T10557] kernel write not supported for file /423/clear_refs (pid: 10557 comm: kworker/0:12) [ 402.505683][T11429] loop6: detected capacity change from 0 to 131072 [ 402.616496][T11429] F2FS-fs (loop6): Found nat_bits in checkpoint [ 402.719355][T11429] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 402.903308][T11442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.217996][T11442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.506001][T11464] Bluetooth: MGMT ver 1.22 [ 403.545525][T11442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.711814][T11470] loop6: detected capacity change from 0 to 4096 [ 403.789341][T11442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.951250][T10557] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 404.050860][T11442] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.124714][T11442] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.158895][T10557] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 404.188966][T10557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.198319][T11442] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.213850][T10557] usb 6-1: Product: syz [ 404.221679][T10557] usb 6-1: Manufacturer: syz [ 404.226326][T10557] usb 6-1: SerialNumber: syz [ 404.235980][T11442] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.275716][T10557] usb 6-1: config 0 descriptor?? [ 404.408350][T11485] loop2: detected capacity change from 0 to 128 [ 404.463165][T11485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 404.525479][T10557] usb 6-1: USB disconnect, device number 8 [ 404.573214][T11485] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 404.679532][T10104] EXT4-fs (loop2): unmounting filesystem. [ 405.307855][T11509] device syz_tun entered promiscuous mode [ 405.349347][T11509] device syz_tun left promiscuous mode [ 405.354246][T11477] loop4: detected capacity change from 0 to 40427 [ 405.442043][T11477] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x3ffff [ 405.503945][T11477] F2FS-fs (loop4): invalid crc value [ 405.524356][T11477] F2FS-fs (loop4): Found nat_bits in checkpoint [ 405.587402][T11518] loop5: detected capacity change from 0 to 256 [ 405.609400][T11520] loop6: detected capacity change from 0 to 512 [ 405.720627][T11520] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 405.771160][T11477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.903854][T11526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2510'. [ 405.913564][T11526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2510'. [ 405.926381][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 405.938993][T11526] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2510'. [ 406.060658][T11529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2510'. [ 406.196082][T11533] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 406.380368][T11540] device team_slave_0 entered promiscuous mode [ 406.518756][T11544] loop5: detected capacity change from 0 to 256 [ 406.584456][T11544] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 406.676051][ T26] audit: type=1800 audit(1779279113.177:116): pid=11544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2518" name="file1" dev="loop5" ino=1048725 res=0 errno=0 [ 407.057763][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2525'. [ 407.480720][ T4289] Bluetooth: hci2: adv larger than maximum supported [ 407.480963][ T4289] Bluetooth: hci2: Unknown advertising packet type: 0x2540 [ 407.490177][ T4289] Bluetooth: hci2: Malformed LE Event: 0x0d [ 407.775751][T11585] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2532'. [ 408.419213][T11605] loop6: detected capacity change from 0 to 64 [ 408.568060][T11605] hfs: bad catalog entry type 0 [ 409.220437][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 409.252473][ T8110] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 409.349368][T11615] loop5: detected capacity change from 0 to 40427 [ 409.365425][T11633] loop6: detected capacity change from 0 to 4096 [ 409.368390][T11615] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64) [ 409.381115][T11615] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 409.393329][T11615] F2FS-fs (loop5): invalid crc value [ 409.410193][T11633] EXT4-fs (loop6): Test dummy encryption mode enabled [ 409.433810][T11615] F2FS-fs (loop5): Found nat_bits in checkpoint [ 409.458903][T11633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 409.473516][ T8110] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 409.500635][ T8110] usb 3-1: config 0 has no interface number 0 [ 409.528081][ T8110] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 409.578200][ T8110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.592766][T11615] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 409.619540][T11615] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 409.627369][ T8110] usb 3-1: Product: syz [ 409.671314][ T8110] usb 3-1: Manufacturer: syz [ 409.676305][ T8110] usb 3-1: SerialNumber: syz [ 409.708344][ T8110] usb 3-1: config 0 descriptor?? [ 409.920982][ T8268] syz-executor: attempt to access beyond end of device [ 409.920982][ T8268] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 409.962738][ T8110] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 409.993531][ T8110] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 410.009919][T11633] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 410.019190][T10558] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 410.027425][ T8110] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 410.051021][ T8110] usb 3-1: media controller created [ 410.098799][ T8110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.124762][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 410.184576][ T8110] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 410.223931][T10558] usb 1-1: unable to get BOS descriptor or descriptor too short [ 410.243441][T10558] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 410.274128][ T8110] usb 3-1: USB disconnect, device number 23 [ 410.278640][T10558] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 410.327547][T10558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.347900][T10558] usb 1-1: Product: syz [ 410.358033][T10558] usb 1-1: Manufacturer: syz [ 410.378241][T10558] usb 1-1: SerialNumber: syz [ 410.631051][T10558] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 410.680440][T11659] loop6: detected capacity change from 0 to 1024 [ 410.736729][T11659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.763945][T11661] loop4: detected capacity change from 0 to 512 [ 410.808968][T11661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 410.842690][T10558] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 410.851520][T10558] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 410.871409][T10554] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 410.881160][T11661] EXT4-fs (loop4): orphan cleanup on readonly fs [ 410.899916][T11661] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 410.993506][T11661] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 411.067127][T11661] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.2563: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 411.086281][T11661] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2563: couldn't read orphan inode 13 (err -117) [ 411.093567][T10554] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.108366][T11661] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 411.131975][T11664] loop2: detected capacity change from 0 to 4096 [ 411.140076][T10554] usb 6-1: config 0 has no interfaces? [ 411.170710][T10554] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 411.170978][T11661] EXT4-fs (loop4): shut down requested (1) [ 411.182291][T10554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.215759][T11664] ntfs: volume version 3.1. [ 411.216292][T10554] usb 6-1: config 0 descriptor?? [ 411.253940][T10558] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 411.259365][T11664] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 411.335564][T10558] usb 1-1: USB disconnect, device number 31 [ 411.350409][T11664] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 411.378740][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.445870][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 411.500680][ T4351] usb 6-1: USB disconnect, device number 9 [ 412.146694][T11679] program syz.6.2571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.392307][T11684] loop6: detected capacity change from 0 to 128 [ 412.430293][T11684] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 412.446580][T11686] program syz.2.2574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.461587][T11684] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.623896][T11669] loop4: detected capacity change from 0 to 32768 [ 412.710773][T11694] loop6: detected capacity change from 0 to 256 [ 412.758051][T11694] exFAT-fs (loop6): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 412.800860][T11669] XFS (loop4): Mounting V5 Filesystem [ 412.920315][T11694] exFAT-fs (loop6): invalid start cluster (520) [ 412.937432][T11694] exFAT-fs (loop6): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 412.951473][T11694] exFAT-fs (loop6): Filesystem has been set read-only [ 413.005747][T11669] XFS (loop4): Ending clean mount [ 413.014724][T11669] XFS (loop4): Quotacheck needed: Please wait. [ 413.183267][T11669] XFS (loop4): Quotacheck: Done. [ 413.359482][T11711] loop6: detected capacity change from 0 to 256 [ 413.457337][T11711] FAT-fs (loop6): Directory bread(block 64) failed [ 413.475779][T11711] FAT-fs (loop6): Directory bread(block 65) failed [ 413.492480][T11711] FAT-fs (loop6): Directory bread(block 66) failed [ 413.499334][ T4285] XFS (loop4): Unmounting Filesystem [ 413.564906][T11711] FAT-fs (loop6): Directory bread(block 67) failed [ 413.590478][T11711] FAT-fs (loop6): Directory bread(block 68) failed [ 413.650636][T11711] FAT-fs (loop6): Directory bread(block 69) failed [ 413.693229][T11711] FAT-fs (loop6): Directory bread(block 70) failed [ 413.700274][T11711] FAT-fs (loop6): Directory bread(block 71) failed [ 413.707984][T11711] FAT-fs (loop6): Directory bread(block 72) failed [ 413.715735][T11711] FAT-fs (loop6): Directory bread(block 73) failed [ 413.883039][T11720] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 414.282081][T11726] loop2: detected capacity change from 0 to 4096 [ 414.356027][T11736] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 414.426863][T11735] overlayfs: failed to set xattr on upper [ 414.451063][T11735] overlayfs: ...falling back to index=off,metacopy=off. [ 415.031098][T11756] loop2: detected capacity change from 0 to 4096 [ 415.295382][T11762] netlink: 340 bytes leftover after parsing attributes in process `syz.6.2604'. [ 415.329625][T11764] loop5: detected capacity change from 0 to 1024 [ 415.474147][T11768] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.505005][T11768] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.528029][T11770] vxcan1: tx address claim with dest, not broadcast [ 415.573518][T11768] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.591410][T11768] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.629567][T11764] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.671351][T11764] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.772477][ T7171] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.780432][ T7171] hfsplus: request for non-existent node 16777216 in B*Tree [ 415.787572][T11777] loop4: detected capacity change from 0 to 512 [ 415.914920][T11777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 415.973376][T11777] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.152267][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 416.277463][T11794] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 416.293374][T11794] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 416.343734][T11792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.440290][ T4289] Bluetooth: hci4: adv larger than maximum supported [ 416.440321][ T4289] Bluetooth: hci4: Unknown advertising packet type: 0x2540 [ 416.447184][ T4289] Bluetooth: hci4: Malformed LE Event: 0x0d [ 416.461646][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 416.696415][T11792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.843364][T11792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.884204][T11789] loop5: detected capacity change from 0 to 32768 [ 417.099462][T11792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.455514][T11792] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.532817][T11792] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.616647][T11792] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.640873][T11792] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.176829][T10560] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 418.193422][T11846] loop4: detected capacity change from 0 to 64 [ 418.273035][T11814] loop6: detected capacity change from 0 to 40427 [ 418.328023][T11814] F2FS-fs (loop6): Corrupted extension count (327717 + 1 > 64) [ 418.355920][T11814] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 418.373632][T10560] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 418.381752][T11814] F2FS-fs (loop6): invalid crc value [ 418.418379][T10560] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 255, setting to 64 [ 418.436366][T10560] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 418.483166][T10560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.499298][T11814] F2FS-fs (loop6): Found nat_bits in checkpoint [ 418.528932][T11834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 418.557547][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 418.648705][T11814] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 418.663611][T11814] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 418.922167][ T9540] syz-executor: attempt to access beyond end of device [ 418.922167][ T9540] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 419.181575][ T8111] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 419.280820][T11874] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 419.374092][ T8111] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.401310][ T8111] usb 6-1: config 0 has no interface number 0 [ 419.410732][ T8111] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 419.440699][ T8111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.474647][ T8111] usb 6-1: Product: syz [ 419.491489][ T8111] usb 6-1: Manufacturer: syz [ 419.501940][ T8111] usb 6-1: SerialNumber: syz [ 419.524595][ T8111] usb 6-1: config 0 descriptor?? [ 419.599352][T10560] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 419.613992][T10560] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input23 [ 419.731511][T10560] usb 3-1: USB disconnect, device number 24 [ 419.731567][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 419.786115][ T8111] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 419.817824][ T8111] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 419.868394][ T8111] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 419.890613][ T8111] usb 6-1: media controller created [ 419.936544][ T8111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 420.011684][ T8111] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 420.070920][ T8111] usb 6-1: USB disconnect, device number 10 [ 420.457369][T11906] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 420.562537][T11906] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.570112][T11906] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.864922][T11913] netlink: 'syz.5.2666': attribute type 8 has an invalid length. [ 420.987998][T11898] loop4: detected capacity change from 0 to 32768 [ 421.010080][T11898] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.2661 (11898) [ 421.059412][T11898] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 421.087952][T11898] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 421.125261][T11898] BTRFS info (device loop4): enabling ssd optimizations [ 421.151280][T11898] BTRFS info (device loop4): not using ssd optimizations [ 421.171290][T11898] BTRFS info (device loop4): turning off barriers [ 421.177814][T11898] BTRFS info (device loop4): using free space tree [ 421.481762][ T4285] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 422.180665][T11934] loop2: detected capacity change from 0 to 32768 [ 422.434245][T11934] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 422.463626][T11934] XFS (loop2): Mounting V5 Filesystem [ 422.756909][T11934] XFS (loop2): Ending clean mount [ 422.773727][T11934] XFS (loop2): Quotacheck needed: Please wait. [ 422.857218][T11934] XFS (loop2): Quotacheck: Done. [ 422.991419][ T8111] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 422.992413][T11978] Set syz1 is full, maxelem 2 reached [ 423.009031][T10104] XFS (loop2): Unmounting Filesystem [ 423.181611][ T8111] usb 1-1: Using ep0 maxpacket: 16 [ 423.188953][ T8111] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 423.212452][ T8111] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 423.230847][ T8111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.256184][ T8111] usb 1-1: Product: syz [ 423.260446][ T8111] usb 1-1: Manufacturer: syz [ 423.268597][ T8111] usb 1-1: SerialNumber: syz [ 423.311805][ T8111] usb 1-1: config 0 descriptor?? [ 423.333462][ T8111] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 423.345136][ T8111] usb 1-1: Detected FT232R [ 423.524570][ T8111] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 423.645817][T11990] loop5: detected capacity change from 0 to 4096 [ 423.708307][T11995] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 423.762057][ T8111] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 423.933759][ T8268] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 423.945752][ T8111] usb 1-1: USB disconnect, device number 32 [ 423.985774][ T8268] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 424.006720][ T8111] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 424.043488][ T8111] ftdi_sio 1-1:0.0: device disconnected [ 424.069147][T12001] loop2: detected capacity change from 0 to 128 [ 424.220785][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2699'. [ 424.223487][T12001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 424.271670][T12001] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 424.291549][T12001] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 424.347830][T10104] EXT4-fs (loop2): unmounting filesystem. [ 424.591506][T10560] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 424.743648][T12022] loop4: detected capacity change from 0 to 256 [ 424.781302][T10560] usb 7-1: Using ep0 maxpacket: 32 [ 424.782799][T12022] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 424.788367][T10560] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 424.856186][T10560] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 424.891285][T10560] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 424.934524][T10560] usb 7-1: Product: syz [ 424.938903][T10560] usb 7-1: Manufacturer: syz [ 424.954784][T10560] usb 7-1: SerialNumber: syz [ 424.976336][T10560] usb 7-1: config 0 descriptor?? [ 425.001981][T12010] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 425.010281][T10560] hub 7-1:0.0: bad descriptor, ignoring hub [ 425.024708][T10560] hub: probe of 7-1:0.0 failed with error -5 [ 425.085587][T12028] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2708'. [ 425.363331][T12036] loop5: detected capacity change from 0 to 1024 [ 425.497895][T12041] program syz.0.2714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.508728][ T9] hfsplus: b-tree write err: -5, ino 25 [ 425.522734][ T9] hfsplus: b-tree write err: -5, ino 4 [ 425.534088][T12019] loop2: detected capacity change from 0 to 32768 [ 425.538269][ T9] hfsplus: b-tree write err: -5, ino 2 [ 425.583257][ T9] hfsplus: b-tree write err: -5, ino 17 [ 425.791880][T12043] loop5: detected capacity change from 0 to 512 [ 425.856819][T12043] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 425.911496][T12043] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.056788][ T8268] EXT4-fs (loop5): unmounting filesystem. [ 426.161490][T10554] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 426.250478][T10560] kernel write not supported for file /532/clear_refs (pid: 10560 comm: kworker/0:15) [ 426.279478][T12038] loop4: detected capacity change from 0 to 32768 [ 426.338078][T12038] jfs_rename did not expect dtDelete to return rc = -2 [ 426.347434][T12038] ERROR: (device loop4): jfs_rename: [ 426.347434][T12038] [ 426.364450][T10554] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 426.403389][T10554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.416732][T12038] ERROR: (device loop4): remounting filesystem as read-only [ 426.454085][T10554] usb 1-1: config 0 descriptor?? [ 426.474301][T10554] cp210x 1-1:0.0: cp210x converter detected [ 426.889744][T10554] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 426.912389][T12063] nr0: tun_chr_ioctl cmd 1074025677 [ 426.913756][T10554] usb 1-1: cp210x converter now attached to ttyUSB0 [ 426.956822][T12063] nr0: linktype set to 774 [ 427.028441][T12065] No such timeout policy "syz0" [ 427.061348][T10560] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 427.110220][T10554] usb 1-1: USB disconnect, device number 33 [ 427.133019][T10554] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 427.157449][T12067] hugetlbfs: syz.2.2725 (12067): Using mlock ulimits for SHM_HUGETLB is obsolete [ 427.166085][T10554] cp210x 1-1:0.0: device disconnected [ 427.176796][T12069] loop4: detected capacity change from 0 to 128 [ 427.206146][T12069] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 427.260648][T12069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.262873][T10560] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 108, changing to 7 [ 427.320774][T10560] usb 6-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 427.340855][T10560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.365591][T10560] usb 6-1: Product: syz [ 427.367435][T12071] loop2: detected capacity change from 0 to 512 [ 427.374295][T10560] usb 6-1: Manufacturer: syz [ 427.385104][T10560] usb 6-1: SerialNumber: syz [ 427.459339][T12071] EXT4-fs: Ignoring removed bh option [ 427.486934][T12071] EXT4-fs (loop2): Test dummy encryption mode enabled [ 427.498337][T12071] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 427.546411][T12071] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 427.567174][T12071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 427.587915][T12071] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 427.591514][ T8110] usb 7-1: USB disconnect, device number 4 [ 427.625493][T10560] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 427.680043][T10560] usb 6-1: unit 4 not found! [ 427.729901][T10104] EXT4-fs (loop2): unmounting filesystem. [ 427.777576][T10560] usb 6-1: USB disconnect, device number 11 [ 428.012273][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.028456][ T8110] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 428.151389][T10554] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 428.211810][ T8110] usb 1-1: Using ep0 maxpacket: 32 [ 428.218852][ T8110] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 428.241418][ T8110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.259323][ T8110] usb 1-1: config 0 descriptor?? [ 428.285794][ T8110] as10x_usb: device has been detected [ 428.291862][ T8110] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 428.359498][ T8110] usb 1-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 428.371392][T10554] usb 3-1: Using ep0 maxpacket: 32 [ 428.392061][T10554] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 428.433175][T10554] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 428.449550][ T8110] as10x_usb: error during firmware upload part1 [ 428.456007][T10554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.483505][T10554] usb 3-1: Product: syz [ 428.489383][ T8110] Registered device nBox DVB-T Dongle [ 428.498105][T10554] usb 3-1: Manufacturer: syz [ 428.498205][ T8110] usb 1-1: USB disconnect, device number 34 [ 428.508250][T10554] usb 3-1: SerialNumber: syz [ 428.552734][T10554] usb 3-1: config 0 descriptor?? [ 428.557432][ T8110] Unregistered device nBox DVB-T Dongle [ 428.558414][T12085] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 428.559236][ T8110] as10x_usb: device has been disconnected [ 428.572114][T10554] hub 3-1:0.0: bad descriptor, ignoring hub [ 428.603969][T10554] hub: probe of 3-1:0.0 failed with error -5 [ 428.641080][T10554] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 428.691353][T10560] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 428.815455][T10562] usb 3-1: USB disconnect, device number 25 [ 428.821612][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 428.871295][T10560] usb 6-1: Using ep0 maxpacket: 16 [ 428.882177][T10560] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 428.906108][T10560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.931874][T10560] usb 6-1: Product: syz [ 428.952557][T10560] usb 6-1: Manufacturer: syz [ 428.957275][T10560] usb 6-1: SerialNumber: syz [ 428.974332][T10560] usb 6-1: config 0 descriptor?? [ 428.991367][T10560] gspca_main: spca508-2.14.0 probing 041e:4018 [ 429.194201][T10560] gspca_spca508: reg_read err -32 [ 429.199808][T10560] gspca_spca508: reg_read err -32 [ 429.296037][T12103] loop4: detected capacity change from 0 to 32768 [ 429.371448][T10562] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 429.415446][T10560] gspca_spca508: reg_read err -71 [ 429.422326][T10560] gspca_spca508: reg_read err -71 [ 429.447985][T10560] gspca_spca508: reg write: error -71 [ 429.463968][T10560] spca508: probe of 6-1:0.0 failed with error -71 [ 429.485277][T10560] usb 6-1: USB disconnect, device number 12 [ 429.591512][T10562] usb 7-1: Using ep0 maxpacket: 8 [ 429.598589][T10562] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.619109][T10562] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.656843][T10562] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.683715][T10562] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.706422][T10562] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.724983][T10562] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.778398][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 429.944185][T10562] usb 7-1: GET_CAPABILITIES returned 0 [ 429.949741][T10562] usbtmc 7-1:16.0: can't read capabilities [ 430.172691][T10560] usb 7-1: USB disconnect, device number 5 [ 430.362304][T12143] loop4: detected capacity change from 0 to 1024 [ 430.509745][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 430.656360][T12154] loop5: detected capacity change from 0 to 4096 [ 430.746406][T12154] ntfs: volume version 3.1. [ 430.811068][T12159] loop6: detected capacity change from 0 to 1024 [ 430.835657][T12154] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 430.854751][T12159] EXT4-fs: Ignoring removed orlov option [ 430.911893][T12154] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 430.974575][T12159] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 431.029698][T12165] IPv6: addrconf: prefix option has invalid lifetime [ 431.270578][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 431.591330][ T4351] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 431.680920][T12189] loop5: detected capacity change from 0 to 256 [ 431.726932][T12189] FAT-fs (loop5): unable to read block(103987194760) for building NFS inode [ 431.781302][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 431.788548][ T4351] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.829051][ T4351] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.841568][ T8111] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 431.863943][ T4351] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 431.901374][ T4351] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 431.920154][ T4351] usb 5-1: Product: syz [ 431.930357][ T4351] usb 5-1: Manufacturer: syz [ 431.946468][ T4351] hub 5-1:4.0: USB hub found [ 432.041371][ T8111] usb 7-1: Using ep0 maxpacket: 16 [ 432.047994][ T8111] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 432.056317][ T8111] usb 7-1: config 0 has no interface number 0 [ 432.062794][ T8111] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.074133][ T8111] usb 7-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.084274][ T8111] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 432.093420][ T8111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.105036][ T8111] usb 7-1: config 0 descriptor?? [ 432.150035][ T4351] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 432.261277][T10562] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 432.261308][ T8110] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 432.382402][T12201] netlink: 'syz.2.2786': attribute type 4 has an invalid length. [ 432.451379][ T8110] usb 6-1: Using ep0 maxpacket: 8 [ 432.461583][T10562] usb 1-1: Using ep0 maxpacket: 8 [ 432.462649][ T8110] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 432.468975][T10562] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.485890][ T8110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.494586][ T8110] usb 6-1: Product: syz [ 432.496374][T10562] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 432.498793][ T8110] usb 6-1: Manufacturer: syz [ 432.498811][ T8110] usb 6-1: SerialNumber: syz [ 432.511069][ T8110] usb 6-1: config 0 descriptor?? [ 432.529148][ T8111] hid (null): invalid report_count 31666 [ 432.531278][T10562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.535449][ T8111] hid (null): unknown global tag 0xe [ 432.550845][ T8110] gspca_main: se401-2.14.0 probing 047d:5003 [ 432.558706][T10557] usb 5-1: USB disconnect, device number 22 [ 432.559208][ T8111] hid (null): nested delimiters [ 432.570263][ T8111] hid (null): unknown global tag 0xe [ 432.578226][T10562] usb 1-1: config 0 descriptor?? [ 432.605410][T10562] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 432.742800][T10557] usb 7-1: USB disconnect, device number 6 [ 432.953801][ T8110] gspca_se401: ExtraFeatures: 117 [ 432.958903][ T8110] gspca_se401: Too many frame sizes [ 433.162640][ T8111] usb 6-1: USB disconnect, device number 13 [ 433.411305][T10562] gspca_vc032x: reg_w err -71 [ 433.416166][T10562] vc032x: probe of 1-1:0.0 failed with error -71 [ 433.457057][T10562] usb 1-1: USB disconnect, device number 35 [ 433.581953][T12216] Set syz1 is full, maxelem 0 reached [ 433.701656][ T8111] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 433.710361][ T26] audit: type=1326 audit(1779279140.207:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.6.2795" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6a4d9ce59 code=0x0 [ 433.810617][T12222] loop2: detected capacity change from 0 to 4096 [ 433.852646][T12222] EXT4-fs (loop2): Test dummy encryption mode enabled [ 433.891551][ T8111] usb 5-1: Using ep0 maxpacket: 16 [ 433.906586][T12222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 433.907113][ T8111] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.940812][ T8111] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.971271][ T8111] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 434.017337][ T8111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 434.038559][T10104] EXT4-fs (loop2): unmounting filesystem. [ 434.039174][ T8111] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 434.067403][ T8111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.085437][ T8111] usb 5-1: config 0 descriptor?? [ 434.191354][T10562] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 434.250381][ T128] kernel write not supported for file /1257/clear_refs (pid: 128 comm: kworker/1:2) [ 434.394947][T10562] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.409637][T10562] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 434.427506][T10562] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 434.437878][T10562] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 434.443452][ T4351] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 434.449442][T10562] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 434.478228][T10562] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 434.488245][T10562] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.496709][T10562] usb 6-1: Product: syz [ 434.503283][T10562] usb 6-1: Manufacturer: syz [ 434.505903][ T8111] hid (null): unknown global tag 0xc [ 434.521418][ T8111] hid (null): report_id 49667 is invalid [ 434.527159][ T8111] hid (null): global environment stack underflow [ 434.529936][T10562] cdc_wdm 6-1:1.0: skipping garbage [ 434.554818][T10562] cdc_wdm 6-1:1.0: skipping garbage [ 434.611673][T10562] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 434.617732][T10562] cdc_wdm 6-1:1.0: Unknown control protocol [ 434.665533][ T4351] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 434.692205][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.712890][ T4351] usb 3-1: config 0 descriptor?? [ 434.756773][ T128] usb 5-1: USB disconnect, device number 23 [ 435.026564][T10562] usb 6-1: USB disconnect, device number 14 [ 435.126476][ T4351] hackrf 3-1:0.0: Board ID: 00 [ 435.133787][ T4351] hackrf 3-1:0.0: Firmware version: [ 435.166463][ T4351] hackrf 3-1:0.0: Registered as swradio24 [ 435.181334][ T4351] videodev: could not get a free minor [ 435.190557][ T4351] hackrf 3-1:0.0: Failed to register as video device (-23) [ 435.208908][T12239] loop6: detected capacity change from 0 to 32768 [ 435.210216][ T4351] hackrf: probe of 3-1:0.0 failed with error -23 [ 435.323125][T12239] XFS (loop6): Mounting V5 Filesystem [ 435.356512][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.385523][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.453107][ T4351] usb 3-1: USB disconnect, device number 26 [ 435.507937][T12239] XFS (loop6): Ending clean mount [ 435.520621][T12239] XFS (loop6): Quotacheck needed: Please wait. [ 435.575718][T12239] XFS (loop6): Quotacheck: Done. [ 435.738485][ T9540] XFS (loop6): Unmounting Filesystem [ 435.847072][T12264] loop4: detected capacity change from 0 to 1024 [ 435.977911][T12264] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.2809: lblock 2 mapped to illegal pblock 2 (length 1) [ 436.071878][T12264] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 436.098437][T12264] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.2809: lblock 0 mapped to illegal pblock 48 (length 1) [ 436.158355][T12268] loop5: detected capacity change from 0 to 4096 [ 436.170020][T12264] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 436.201445][T12264] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.2809: Failed to acquire dquot type 0 [ 436.236775][T12268] EXT4-fs (loop5): Test dummy encryption mode enabled [ 436.265841][T12264] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 436.314783][T12268] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 436.347515][T12264] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.2809: mark_inode_dirty error [ 436.361075][T12275] loop2: detected capacity change from 0 to 256 [ 436.385570][T12275] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 436.410027][T12264] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 436.423335][T12264] EXT4-fs (loop4): 1 orphan inode deleted [ 436.429139][T12264] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 436.459398][ T11] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 436.541269][ T11] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 436.595714][T12264] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.2809: Invalid inode table block 1 in block_group 0 [ 436.620820][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0 [ 436.663952][T12264] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 436.720925][ T8268] EXT4-fs (loop5): unmounting filesystem. [ 436.727238][T12264] EXT4-fs error (device loop4): ext4_setattr:5538: inode #2: comm syz.4.2809: mark_inode_dirty error [ 436.890517][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 436.896954][T12284] loop5: detected capacity change from 0 to 512 [ 436.913733][ T46] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 436.935562][T12284] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 436.961343][ T46] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 436.969998][ T46] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 0 [ 436.983454][ T4285] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 436.999127][ T128] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 437.019110][ T4285] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 437.069745][ T4285] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 437.087322][ T8268] EXT4-fs (loop5): unmounting filesystem. [ 437.193598][ T128] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.233786][ T128] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.274301][ T128] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.299099][ T128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.372187][T12280] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 437.603766][T10557] usb 7-1: USB disconnect, device number 7 [ 439.338523][T12327] loop2: detected capacity change from 0 to 32768 [ 439.377430][T12327] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.2832 (12327) [ 439.458192][T12327] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 439.491067][T12327] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 439.513687][T12327] BTRFS info (device loop2): using free space tree [ 439.653172][T12329] loop6: detected capacity change from 0 to 40427 [ 439.707615][T12329] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 439.717365][T12329] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 439.726095][T12329] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3ffff [ 439.733253][T12327] BTRFS info (device loop2): enabling ssd optimizations [ 439.735611][T12329] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8 [ 439.780702][T12329] F2FS-fs (loop6): invalid crc value [ 439.851286][T12329] F2FS-fs (loop6): Found nat_bits in checkpoint [ 439.960278][T10104] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 439.994651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049946][T12329] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 440.074514][T12329] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 440.287933][T12329] syz.6.2833: attempt to access beyond end of device [ 440.287933][T12329] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 440.547595][ T9540] syz-executor: attempt to access beyond end of device [ 440.547595][ T9540] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.160289][T12386] loop2: detected capacity change from 0 to 1024 [ 441.300553][T12386] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.358124][T12386] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.453668][T12386] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.471302][T12386] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.481827][T12389] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.529251][T12389] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.537941][T12391] loop4: detected capacity change from 0 to 512 [ 441.566535][T12391] EXT4-fs: Ignoring removed bh option [ 441.581670][T12391] EXT4-fs (loop4): Test dummy encryption mode enabled [ 441.621633][T12391] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 441.636052][ T11] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.682358][ T11] hfsplus: request for non-existent node 16777216 in B*Tree [ 441.683208][T12391] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 441.699091][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2851'. [ 441.711677][T12391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 441.838221][T12391] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 442.018868][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 442.415696][T10557] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 442.613979][T10557] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 442.629816][T10557] usb 5-1: config 0 interface 0 has no altsetting 0 [ 442.646401][T10557] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 442.667453][T10557] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 442.686131][T10557] usb 5-1: Product: syz [ 442.695021][T10557] usb 5-1: Manufacturer: syz [ 442.705324][T10557] usb 5-1: SerialNumber: syz [ 442.718900][T10557] usb 5-1: config 0 descriptor?? [ 442.738531][T10557] usb 5-1: selecting invalid altsetting 0 [ 442.881294][T10554] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 442.956616][T12427] loop6: detected capacity change from 0 to 256 [ 442.989678][T12427] exfat: Deprecated parameter 'namecase' [ 443.029069][ T4351] usb 5-1: USB disconnect, device number 24 [ 443.050315][T12427] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x43aef5c9, utbl_chksum : 0xe619d30d) [ 443.111631][T10554] usb 6-1: Using ep0 maxpacket: 8 [ 443.129440][T10554] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 443.171692][T10554] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.225408][T10554] usb 6-1: config 0 interface 0 has no altsetting 0 [ 443.242600][T10554] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 443.261315][T10554] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.289510][T10554] usb 6-1: config 0 descriptor?? [ 443.442861][T12433] loop6: detected capacity change from 0 to 8192 [ 443.518098][T10554] usbhid 6-1:0.0: can't add hid device: -71 [ 443.534742][T10554] usbhid: probe of 6-1:0.0 failed with error -71 [ 443.569763][T10554] usb 6-1: USB disconnect, device number 15 [ 443.993010][ T22] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 444.191287][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 444.206797][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 444.243353][ T22] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 444.271335][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.291660][ T22] usb 3-1: Product: syz [ 444.295889][ T22] usb 3-1: Manufacturer: syz [ 444.329775][ T22] usb 3-1: SerialNumber: syz [ 444.345006][ T22] usb 3-1: config 0 descriptor?? [ 444.374323][ T22] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 444.392711][ T22] usb 3-1: Detected FT232R [ 444.590737][ T22] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 444.605116][T12441] loop4: detected capacity change from 0 to 32768 [ 444.816698][ T22] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 444.828569][T12443] loop6: detected capacity change from 0 to 40427 [ 444.887987][T12443] F2FS-fs (loop6): invalid crc value [ 444.912119][T12443] F2FS-fs (loop6): Found nat_bits in checkpoint [ 444.979968][T12443] F2FS-fs (loop6): Start checkpoint disabled! [ 444.995924][T12443] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 445.030616][ T4351] usb 3-1: USB disconnect, device number 27 [ 445.069773][ T4351] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 445.096240][T12443] syz.6.2871: attempt to access beyond end of device [ 445.096240][T12443] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 445.121081][ T4351] ftdi_sio 3-1:0.0: device disconnected [ 445.329211][ T11] kworker/u4:1: attempt to access beyond end of device [ 445.329211][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 445.566456][T12466] pimreg: tun_chr_ioctl cmd 1074025677 [ 445.594863][T12466] pimreg: linktype set to 805 [ 445.832973][T12475] vcan0: tx address claim with dlc 0 [ 446.220867][T12492] loop5: detected capacity change from 0 to 256 [ 446.257603][T12492] exfat: Deprecated parameter 'utf8' [ 446.295223][T12492] exfat: Deprecated parameter 'namecase' [ 446.306993][T12492] exfat: Deprecated parameter 'namecase' [ 446.349950][T12492] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 446.380513][T12498] loop6: detected capacity change from 0 to 1024 [ 446.413636][T12492] fuse: Bad value for 'fd' [ 446.440082][T12498] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.491045][T12498] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.536850][T12498] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.560625][T12498] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.581665][T12499] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.609595][T12499] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.753306][ T37] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.764328][ T37] hfsplus: request for non-existent node 16777216 in B*Tree [ 446.822778][T10557] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 447.041403][T10557] usb 5-1: Using ep0 maxpacket: 32 [ 447.054939][T10557] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 447.080196][T10557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.116383][T10557] usb 5-1: config 0 descriptor?? [ 447.137508][T12521] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2905'. [ 447.167869][T10557] as10x_usb: device has been detected [ 447.177567][T10557] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 447.283820][T10557] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 447.319969][T10557] as10x_usb: error during firmware upload part1 [ 447.378943][T10557] Registered device nBox DVB-T Dongle [ 447.388181][T10557] usb 5-1: USB disconnect, device number 25 [ 447.479873][T10557] Unregistered device nBox DVB-T Dongle [ 447.481929][T10557] as10x_usb: device has been disconnected [ 447.851595][ T4351] kernel read not supported for file /dsp1 (pid: 4351 comm: kworker/1:7) [ 448.984046][T12548] loop5: detected capacity change from 0 to 32768 [ 449.086314][T12548] XFS (loop5): Mounting V5 Filesystem [ 449.204303][T12548] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 449.279243][T12552] loop6: detected capacity change from 0 to 32768 [ 449.281696][T12548] XFS (loop5): Starting recovery (logdev: internal) [ 449.332774][T12552] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop6 scanned by syz.6.2920 (12552) [ 449.389037][T12548] XFS (loop5): Ending recovery (logdev: internal) [ 449.448181][T12552] BTRFS info (device loop6): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 449.475660][T12552] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 449.486184][T12548] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x447/0x650, xfs_bnobt block 0x8 [ 449.506295][T12552] BTRFS info (device loop6): using free space tree [ 449.521398][T12548] XFS (loop5): Unmount and run xfs_repair [ 449.686781][ T8268] XFS (loop5): Unmounting Filesystem [ 449.813090][T12591] program syz.4.2926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.827059][T12552] BTRFS info (device loop6): enabling ssd optimizations [ 450.089528][T12599] loop4: detected capacity change from 0 to 512 [ 450.173305][ T9540] BTRFS info (device loop6): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 450.220611][T12599] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 450.342597][T12599] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.2929: bad orphan inode 131083 [ 450.425884][T12599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 450.536822][T12599] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.2929: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 450.711028][T12599] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 450.821859][T12607] loop6: detected capacity change from 0 to 256 [ 450.829301][T12607] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 450.890349][T12607] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.914844][ T4285] EXT4-fs (loop4): unmounting filesystem. [ 450.989776][T12608] loop5: detected capacity change from 0 to 4096 [ 451.047649][T12608] EXT4-fs: inline encryption not supported [ 451.110450][T12608] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 451.121505][T12608] System zones: 0-5 [ 451.137533][T12608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 451.439865][ T8268] EXT4-fs (loop5): unmounting filesystem. [ 451.811281][ T4351] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 451.900375][T12635] loop6: detected capacity change from 0 to 512 [ 451.958929][T12635] EXT4-fs: Ignoring removed nobh option [ 452.018146][T12635] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.2942: corrupted in-inode xattr [ 452.030545][ T4351] usb 1-1: Using ep0 maxpacket: 16 [ 452.041549][ T4351] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 452.042232][T12635] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.2942: couldn't read orphan inode 15 (err -117) [ 452.050712][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.071571][ T4351] usb 1-1: Product: syz [ 452.075774][ T4351] usb 1-1: Manufacturer: syz [ 452.080399][ T4351] usb 1-1: SerialNumber: syz [ 452.087864][ T4351] usb 1-1: config 0 descriptor?? [ 452.096103][ T4351] gspca_main: spca508-2.14.0 probing 041e:4018 [ 452.149369][T12635] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 452.262709][ T9540] EXT4-fs (loop6): unmounting filesystem. [ 452.298767][ T4351] gspca_spca508: reg_read err -32 [ 452.307508][ T4351] gspca_spca508: reg_read err -32 [ 452.421421][ T22] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 452.538942][ T4351] gspca_spca508: reg_read err -71 [ 452.548388][ T4351] gspca_spca508: reg_read err -71 [ 452.558816][ T4351] gspca_spca508: reg write: error -71 [ 452.578794][ T4351] spca508: probe of 1-1:0.0 failed with error -71 [ 452.610325][ T4351] usb 1-1: USB disconnect, device number 36 [ 452.616811][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 452.627215][ T22] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 452.661481][ T22] usb 3-1: config 1 has no interface number 0 [ 452.669584][ T22] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 452.680091][ T22] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 452.700991][ T22] usb 3-1: config 1 interface 105 has no altsetting 0 [ 452.734103][ T22] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 452.800408][ T22] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 452.820639][ T22] usb 3-1: Product: syz [ 452.830754][ T22] usb 3-1: Manufacturer: syz [ 452.842902][ T22] usb 3-1: SerialNumber: syz [ 452.893706][T12641] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 452.902982][T12641] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 453.339102][T12641] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 453.356995][T12641] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 453.375537][T12653] loop6: detected capacity change from 0 to 32768 [ 453.467759][T12653] XFS (loop6): Mounting V5 Filesystem [ 453.562541][T12653] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 453.604273][T12653] XFS (loop6): Starting recovery (logdev: internal) [ 453.650329][T12653] XFS (loop6): Ending recovery (logdev: internal) [ 453.693386][T12653] XFS (loop6): User initiated shutdown received. [ 453.727181][T12653] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 453.769583][T12653] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 453.800478][ T22] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 453.823622][ T22] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 453.888087][ T22] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 453.899316][ T9540] XFS (loop6): Unmounting Filesystem [ 453.935231][ T22] aqc111 3-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9a:cc:26:cb:88:3e [ 454.003958][T12662] loop5: detected capacity change from 0 to 32768 [ 454.012758][ T22] usb 3-1: USB disconnect, device number 28 [ 454.055002][ T22] aqc111 3-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 454.173112][T12662] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 454.203706][T12662] VFS: Lookup of '' in ocfs2 loop5 would have caused loop [ 454.271880][ T22] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 454.285730][ T8268] ocfs2: Unmounting device (7,5) on (node local) [ 454.291839][ T22] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 454.313154][ T22] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 454.357113][ T8268] VFS: Busy inodes after unmount of loop5 (ocfs2) [ 454.357284][ T8268] ------------[ cut here ]------------ [ 454.369343][ T8268] kernel BUG at fs/super.c:505! [ 454.426744][ T8268] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 454.433008][ T8268] CPU: 1 PID: 8268 Comm: syz-executor Not tainted syzkaller #0 [ 454.440592][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.450679][ T8268] RIP: 0010:generic_shutdown_super+0x334/0x340 [ 454.456975][ T8268] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 65 6c f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 57 99 8a 48 89 de e8 0c 97 40 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49 [ 454.476664][ T8268] RSP: 0000:ffffc90005eafd18 EFLAGS: 00010246 [ 454.482830][ T8268] RAX: 000000000000002f RBX: ffff88807a1366a8 RCX: ea3f8e87832aa300 [ 454.490811][ T8268] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 454.498871][ T8268] RBP: 1ffff1100f426cfb R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 454.506850][ T8268] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: 0000000000000000 [ 454.514845][ T8268] R13: dffffc0000000000 R14: ffffffff8d01ab00 R15: ffff88807a1367d8 [ 454.522998][ T8268] FS: 000055556ccac500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 454.531934][ T8268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.538528][ T8268] CR2: 00007fa411f8b000 CR3: 000000005eb1e000 CR4: 00000000003506e0 [ 454.546512][ T8268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.554489][ T8268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.562550][ T8268] Call Trace: [ 454.565835][ T8268] [ 454.568792][ T8268] kill_block_super+0x7c/0xe0 [ 454.573528][ T8268] deactivate_locked_super+0x93/0xf0 [ 454.578837][ T8268] cleanup_mnt+0x42c/0x4b0 [ 454.583372][ T8268] ? lockdep_hardirqs_on+0x94/0x140 [ 454.588610][ T8268] task_work_run+0x1d0/0x260 [ 454.593211][ T8268] ? task_work_cancel+0x220/0x220 [ 454.598249][ T8268] ? exit_to_user_mode_loop+0x3b/0x110 [ 454.603771][ T8268] exit_to_user_mode_loop+0xe6/0x110 [ 454.609066][ T8268] exit_to_user_mode_prepare+0xee/0x180 [ 454.614626][ T8268] syscall_exit_to_user_mode+0x16/0x40 [ 454.620093][ T8268] do_syscall_64+0x58/0xa0 [ 454.624529][ T8268] ? clear_bhb_loop+0x60/0xb0 [ 454.629216][ T8268] ? clear_bhb_loop+0x60/0xb0 [ 454.633927][ T8268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.639851][ T8268] RIP: 0033:0x7fef5cd9e097 [ 454.644283][ T8268] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 454.663907][ T8268] RSP: 002b:00007ffeabffdd98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 454.672333][ T8268] RAX: 0000000000000000 RBX: 00007fef5ce321ca RCX: 00007fef5cd9e097 [ 454.680398][ T8268] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeabffde50 [ 454.688392][ T8268] RBP: 00007ffeabffde50 R08: 00007ffeabffee50 R09: 00000000ffffffff [ 454.696371][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeabffeee0 [ 454.704345][ T8268] R13: 00007fef5ce321ca R14: 000000000006ee33 R15: 00007ffeabffef20 [ 454.712332][ T8268] [ 454.715353][ T8268] Modules linked in: [ 454.951234][ T8268] ---[ end trace 0000000000000000 ]--- [ 454.956968][ T8268] RIP: 0010:generic_shutdown_super+0x334/0x340 [ 454.965407][ T8268] Code: e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 65 6c f1 ff 49 8b 16 48 81 c3 a8 06 00 00 48 c7 c7 20 57 99 8a 48 89 de e8 0c 97 40 08 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 53 48 89 fb 49 [ 454.990596][ T8268] RSP: 0000:ffffc90005eafd18 EFLAGS: 00010246 [ 454.996772][ T8268] RAX: 000000000000002f RBX: ffff88807a1366a8 RCX: ea3f8e87832aa300 [ 455.006546][ T8268] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 455.014692][ T8268] RBP: 1ffff1100f426cfb R08: ffff8880b8f279db R09: 1ffff110171e4f3b [ 455.023126][ T8268] R10: dffffc0000000000 R11: ffffed10171e4f3c R12: 0000000000000000 [ 455.031135][ T8268] R13: dffffc0000000000 R14: ffffffff8d01ab00 R15: ffff88807a1367d8 [ 455.039941][ T8268] FS: 000055556ccac500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 455.049043][ T8268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.055802][ T8268] CR2: 00007fb6a5c08ff8 CR3: 000000005eb1e000 CR4: 00000000003506f0 [ 455.063892][ T8268] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 455.072557][ T8268] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 455.080628][ T8268] Kernel panic - not syncing: Fatal exception [ 455.086939][ T8268] Kernel Offset: disabled [ 455.091266][ T8268] Rebooting in 86400 seconds..