last executing test programs: 5.092927832s ago: executing program 4 (id=1147): ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000280)={0x2, "610f"}) syz_usb_connect$uac1(0x0, 0xb4, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902a2000301ab00000904000000010100000a24010000000201020c240703000000ed129e84300724080000000009240300000003020009040100000102000009040101010102000008240201000000000905010900000003100725018001010109040200000103000009040201"], 0x0) 4.948395905s ago: executing program 0 (id=1149): r0 = epoll_create(0x3) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 4.889581669s ago: executing program 0 (id=1150): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000280)={[{@largeio}, {@gqnoenforce}, {@largeio}, {@uqnoenforce}, {@discard}, {@grpid}, {@pqnoenforce}]}, 0x1, 0x96cb, &(0x7f0000012ec0)="$eJzs3Qe0XHWhsP2ThEDoRVREUZqAIB2lI7333nvvAiK9iBRBkSYoiIAUKaKIoIBIs6MIggIiUgXpvddvhSQS4wOf3veul/fe53nWOpmZffbe5z//3559ZrIge92l11h8YGCSgRGNun276w+YZtBlTy8739Gz7jnv5WNP/eDIxcNG3Awd+XDooJG3gwcGBgaN3M/IZYN3veTSwcM3GDz6ficYd/xBEwwMbDny4aIjb+cdcTPhVqPWe3OMeKAHDf9xR474GvFDBwYGxh1+55AZT91r9P2MHNc1//JEpa272DJLv231D7fh8zfWyPujf4094mvCTQYGJtxwgI+PQe/tM3rr5y96wbnP7P0ej+N/ROsutsxyY/gPfy0OGbls3uGv8TFfg8bGPM433WenY0dO4aDRzl//41p3saVXHHjn8/zAXQttd/Obb503B+81MDB474GBwfsMDAzed2Bg8H4DA4P3f69d6v+s9/Tgq6qqqvekxRafe/Hhn/fGeD8wbNT7WnpfePGT924y8sP/kIGBwWeN+Cw4+PSBgQk3fW+fTVVVVVVVVVVRiy0+9xLw+X+Sd/v8v/65a57f5/+qqqqqqqqq/zktt9jicw//rD/G5/8p3u3z/+3n7PvayP/2f94RW73xnj6Hqqqqqqqqqnr3Vl/prc//44/x+X/qd/v8f9jyL4/6f6tH/b3B66PtctBo/z3Bq6MtHzLa+q+Mtnys0ZaPvv6wgYHBu45c/trbiwfvNTAwMPa/rj/4gLf/P+ahY422/MDRlo892vKDhj/Pkft5ebTlp48c6/D1xxlt+Zmj7WfYvzO3VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf9ubzx+xVVvX/P9gIHRrt/+j+u4j/x3AQZddM1NN71nA/1/o0H/+u8hHPRej+n/tOHOw86femBg57Xe66HUe9Cg93oA9Z6Wv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe4fr/y866vbsrZe8cuSq8y5xxwJLjr7tdqPdH/Z/ddTvWf9br/8/sN2ggYGRvpMMd115sdXXnGlgYGDJBe5YYp6Bf3xvvuHfW3CyIQND3tp0prf+HDr0HfY8+Yibg0auOnIfF721/+XePGPIoDEGMVoLX33f2duu++I8Y97O8M7PY/CoO6uN9eyZb7755pv/tHBk73Scjtr/qOcypvPIsc80fOyz77HTrrPvvvc+s26302bbbLXNVjvPP9dc884z7xzzzzX71tvtuNUcI/58pzmb+q0/h/w7czbFmHP2+GKjz9mYz+2d5mzqd5+zt/Z42l5H7Tlqzsb6D+dsyLvP2dTbjfxBQweGDmz61twMGhgYOtbQgb2GP5hznOFH0Mh1pxi+7kKTDR4YOObtJzr83jj/OAYHHTR8nXWXXmPxgYFJRq4xyb+M7V9fp6M/lVGTP3TkDxk6ch4mGXj7UBy86yWXDh6+wT9N8wTjjj9ogoGBLUc+XHTk7fwjv7vFqPXeHCMe6HDlQUeO+PqHx7jD75yy59D7R9/POxD8d/Rf+v3/L17zDfrHRA0a+TVynRFeiy2z3Ns/661pGD53Q0Yum3e4yZhz9t/Zv4x36mHDX17vON7lFlt87uGLx5j/UZvg8bXrbZdeNfLYmnfEVm/8l1H43LHiiG/+O+eOgXc/dwx5++7bS7e6Yaoxzx0rvPMQ/+l1MWqOxhljpXc6d8xx6MIHDt//wLufO1bcbuTTffvcMXhgYOiQUeeO4SeSsYcOHDP8wVzDH4wzdODc4Q/mfuvBuAPXDH8w2xa77Ljl8AXDRs3JHMP3u+hkg9568qePN/Pxbx7/5ptjjRzLAWOcWEceH1OP/vtxsclGTNuobWm/e1382i1vHP/mm2OP3O+B/8F+R21L+53j7BHfG2fkfk8fY79D3mW/o7Yd9XoYvupbr4eZBv3jQHiH1+/SY7x+R75nfOvXxaAxvsYe8TXhJgMDE25Ivv/peYdev5O8y3gXW3zuJYaP753Ov/T6PX3ulWYZebgNGRgYfNaIsQ8+fWBgwk3/k7G+03iHvft4F4fxDnu38Y5z7Uq3/jeMd9Bo4/2n42zVQ0ccK8NGHmdn/gfH76htxzyPDR2NYdi/cx5b9F/OYwcPGTzG4Efrnd4DbQnrj7g/xT/2tsT2Nz0xau7HHNr/33ugYe9+HptkuzG2W3PTgUE05xfduNCNg0549zkfOvDP79VHzfmobd9tzsf51zkf9C9zPt+7z/m/+75zpulGfH/Iu8z50ddMevaoOR/7P5zzcf7TOR8YGEJzvu11I+bt3c6n7zTno7b95zkfa2CpgYGB6UfO+dj/znE+x3/PcT4erD/i/gP/WHThYeNMPto5ZtB/Mudj/4dzvso9/zjOp3/re9MOHhh77IG9Nttjj93mHPHnqIdzjfiTz0Xn3jZint/td+k7GY3a9t1eF2P9O0ZT//cYTTnWv64/6kPHqMeD7754yH/1XDTWf2Y0aJVr+Fx0xIsj5u3d3he905yP2pZ+D0492vZjfq5bfaW33nePP8bvwX98hKXfgyfeOe7so3Y5crPXxxjmqN+rr462fMho678y2vKxRlv+6j9P++BdRy5/7e3Fg/ca/hL/1/UHH/A269DRPlIPPnC05aOd8gYPP8SmHrmfl0dbfvrbp9Cho729HnzmaPv5P/nrt386bEf9Hd92Y57k639r/f2/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3uH6/8fNOr6/1cve/IFI6/VPPS4a847/L0e73vc/+rr/4/0/afr/x9+3jXHDR74x/fe9frsI9b5f/L67POOuJlwq1HrjXl9cB7oO1+f/dbZ951k4P/O9dn/S416rf4b1/Hr/O8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9w7X/79m5O1Bi9wyw80jL4Q+dJK5D3jwvR7ve9z/6uv/j/T9p+v/P3jA3JMMHvjH9971+v8j1nFc/3/bm5d5beD/4ev/j3qtdv3/+v8pf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIXx9f/HzTyduCaHQZNPf7w2+GPT1rkhkvf6/G+x/1vvf7/sPOnHhjYea33eij1HtT5313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S9u5PX/B0Zc/39UgxbtuMDg+v//s3sH/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/8/mj1n8d8sfs/jvnj9m8d8jf8zi/7n8MYv/nvljFv/P549Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8f9C/pjF/5D8MYv/F/PHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4v+l/DGL/5H5Yxb/o/LHLP5fzh+z+H8lf8zif3T+mMX/q/ljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zi/7X8MYv/ifljFv+T8scs/l/PH7P4fyN/zOJ/cv6Yxf+U/DGL/zfzxyz+p+aPWfy/lT9m8T8tf8zif3r+mMX/jPwxi/+388cs/mfmj1n8z8ofs/ifnT9m8T8nf8zi/538MYv/ufljFv/z8scs/ufnj1n8L8gfs/h/N3/M4n9h/pjF/3v5Yxb/7+ePWfwvyh+z+P8gf8zif3H+mMX/h/ljFv9L8scs/pfmj1n8f5Q/ZvH/cf6Yxf+y/DGL/+X5Yxb/K/LHLP4/yR+z+F+ZP2bx/2n+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+P8sf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/b/LHLP7X549Z/H+bP2bx/13+mMX/hvwxi//v88cs/jfmj1n8b8ofs/j/IX/M4n9z/pjF/5b8MYv/H/PHLP5/yh+z+N+aP2bxvy1/zOJ/e/6Yxf/P+WMW/zvyxyz+f8kfs/jfmT9m8f9r/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8f9b/pjF/4H8MYv/g/ljFv+/549Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/N+6m/+/ZvEflD9m8R+cP2bxH5I/ZvEfK3/M4j80f8ziP3b+mMV/nPwxi/+w/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/u/LH7P4T54/ZvF/f/6Yxf8D+WMW/w/mj1n8p8gfs/h/KH/M4j9l/pjF/8P5Yxb/j+SPWfynyh+z+H80f8zi/7H8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8f94/pjFf4b8MYv/jPljFv+Z8scs/p/IH7P4z5w/ZvGfJX/M4v/J/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/p/LHLP6fzh+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fyZ/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6Yxf+z+WMW/93yxyz+u+ePWfz3yB+z+H8uf8ziv2f+mMX/8/ljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfy/kD9m8T8kf8zi/8X8MYv/ofljFv/D8scs/ofnj1n8j8gfs/h/KX/M4n9k/pjF/6j8MYv/l/PHLP5fyR+z+B+dP2bx/2r+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+H8tf8zif2L+mMX/pPwxi//X88cs/t/IH7P4n5w/ZvE/JX/M4v/N/DGL/6n5Yxb/b+WPWfxPyx+z+J+eP2bxPyN/zOL/7fwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+H8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+380fs/hfmD9m8f9e/pjF//v5Yxb/i/LHLP4/yB+z+F+cP2bx/2H+mMX/kvwxi/+l+WMW/x/lj1n8f5w/ZvG/LH/M4n95/pjF/4r8MYv/T/LHLP5X5o9Z/H+aP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+P86f8zi/5v8MYv/9fljFv/f5o9Z/H+XP2bxvyF/zOL/+/wxi/+N+WMW/5vyxyz+f8gfs/jfnD9m8b8lf8zi/8f8MYv/n/LHLP635o9Z/G/LH7P4354/ZvH/c/6Yxf+O/DGL/1/yxyz+d+aPWfz/mj9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfz/lj9m8X8gf8zi/2D+mMX/7/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljEv8hA/ljFv9B+WMW/8H5Yxb/IfljFv+x8scs/kPzxyz+Y+ePWfzHyR+z+A/LH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8zi/778MYv/5PljFv/3549Z/D+QP2bx/2D+mMV/ivwxi/+H8scs/lPmj1n8P5w/ZvH/SP6YxX+q/DGL/0fzxyz+H8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/4/nj1n8Z8gfs/jPmD9m8Z8pf8zi/4n8MYv/zPljFv9Z8scs/p/MH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/h/Kn/M4v/p/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/Z/LHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/D+bP2bx3y1/zOK/e/6YxX+P/DGL/+fyxyz+e+aPWfw/nz9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf8L+WMW/0Pyxyz+X8wfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+X8scs/kfmj1n8j8ofs/h/OX/M4v+V/DGL/9H5Yxb/r+aPWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/9fyxyz+J+aPWfxPyh+z+H89f8zi/438MYv/yfljFv9T8scs/t/MH7P4n5o/ZvH/Vv6Yxf+0/DGL/+n5Yxb/M/LHLP7fzh+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/3fyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL/3fwxi/+F+WMW/+/lj1n8v58/ZvG/KH/M4v+D/DGL/8X5Yxb/H+aPWfwvyR+z+F+aP2bx/1H+mMX/x/ljFv/L8scs/pfnj1n8r8gfs/j/JH/M4n9l/pjF/6f5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/6/zxyz+v8kfs/hfnz9m8f9t/pjF/3f5Yxb/G/LHLP6/zx+z+N+YP2bxvyl/zOL/h/wxi//N+WMW/1vyxyz+f8wfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv8/549Z/O/IH7P4/yV/zOJ/Z/6Yxf+v+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf9v+WMW/wfyxyz+D+aPWfz/nj9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT8m8R9rIH/M4j8of8ziPzh/zOI/JH/M4j9W/pjFf2j+mMV/7Pwxi/84+WMW/2H5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n835c/ZvGfPH/M4v/+/DGL/wfyxyz+H8wfs/hPkT9m8f9Q/pjFf8r8MYv/h/PHLP4fyR+z+E+VP2bx/2j+mMX/Y/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi//H8MYv/DPljFv8Z88cs/jPlj1n8P5E/ZvGfOX/M4j9L/pjF/5P5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9P5Y9Z/D+dP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvH/TP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/2fzxyz+u+WPWfx3zx+z+O+RP2bx/1z+mMV/z/wxi//n88cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+H8hf8zif0j+mMX/i/ljFv9D88cs/oflj1n8D88fs/gfkT9m8f9S/pjF/8j8MYv/UfljFv8v549Z/L+SP2bxPzp/zOL/1fwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bx/1r+mMX/xPwxi/9J+WMW/6/nj1n8v5E/ZvE/OX/M4n9K/pjF/5v5Yxb/U/PHLP7fyh+z+J+WP2bxPz1/zOJ/Rv6Yxf/b+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bx/07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfy/mz9m8b8wf8zi/738MYv/9/PHLP4X5Y9Z/H+QP2bxvzh/zOL/w/wxi/8l+WMW/0vzxyz+P8ofs/j/OH/M4n9Z/pjF//L8MYv/FfljFv+f5I9Z/K/MH7P4/zR/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx/3X+mMX/N/ljFv/r88cs/r/NH7P4/y5/zOJ/Q/6Yxf/3+WMW/xvzxyz+N+WPWfz/kD9m8b85f8zif0v+mMX/j/ljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4v/n/DGL/x35Yxb/v+SPWfzvzB+z+P81f8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+P8tf8zi/0D+mMX/wfwxi//f88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388ck/kMH8scs/oPyxyz+g/PHLP5D8scs/mPlj1n8h+aPWfzHzh+z+I+TP2bxH5Y/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMX/ffljFv/J88cs/u/PH7P4fyB/zOL/wfwxi/8U+WMW/w/lj1n8p8wfs/h/OH/M4v+R/DGL/1T5Yxb/j+aPWfw/lj9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+H88fs/jPkD9m8Z8xf8ziP1P+mMX/E/ljFv+Z88cs/rPkj1n8P5k/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8f9U/pjF/9P5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv/P5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P4fzZ/zOK/W/6YxX/3/DGL/x75Yxb/z+WPWfz3zB+z+H8+f8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/xfyxyz+h+SPWfy/mD9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/y/lj1n8j8wfs/gflT9m8f9y/pjF/yv5Yxb/o/PHLP5fzR+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/r+WPWfxPzB+z+J+UP2bx/3r+mMX/G/ljFv+T88cs/qfkj1n8v5k/ZvE/NX/M4v+t/DGL/2n5Yxb/0/PHLP5n5I9Z/L+dP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/7+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf+7+WMW/wvzxyz+38sfs/h/P3/M4n9R/pjF/wf5Yxb/i/PHLP4/zB+z+F+SP2bxvzR/zOL/o/wxi/+P88cs/pflj1n8L88fs/hfkT9m8f9J/pjF/8r8MYv/T/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF/2f5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/X+ePWfx/kz9m8b8+f8zi/9v8MYv/7/LHLP435I9Z/H+fP2bxvzF/zOJ/U/6Yxf8P+WMW/5vzxyz+t+SPWfz/mD9m8f9T/pjF/9b8MYv/bfljFv/b88cs/n/OH7P435E/ZvH/S/6Yxf/O/DGL/1/zxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/9/yxyz+D+SPWfwfzB+z+P89f8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf0ziP/ZA/pjFf1D+mMV/cP6YxX9I/pjFf6z8MYv/0Pwxi//Y+WMW/3Hyxyz+w/LHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/i/L3/M4j95/pjF//35Yxb/D+SPWfw/mD9m8Z8if8zi/6H8MYv/lPljFv8P549Z/D+SP2bxnyp/zOL/0fwxi//H8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/4/ljFv8Z8scs/jPmj1n8Z8ofs/h/In/M4j9z/pjFf5b8MYv/J/PHLP6z5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/p/KH7P4fzp/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4v+Z/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/z+aPWfx3yx+z+O+eP2bx3yN/zOL/ufwxi/+e+WMW/8/nj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bx/0L+mMX/kPwxi/8X88cs/ofmj1n8D8sfs/gfnj9m8T8if8zi/6X8MYv/kfljFv+j8scs/l/OH7P4fyV/zOJ/dP6Yxf+r+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOL/tfwxi/+J+WMW/5Pyxyz+X88fs/h/I3/M4n9y/pjF/5T8MYv/N/PHLP6n5o9Z/L+VP2bxPy1/zOJ/ev6Yxf+M/DGL/7fzxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOL/nfwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+H83f8zif2H+mMX/e/ljFv/v549Z/C/KH7P4/yB/zOJ/cf6Yxf+H+WMW/0vyxyz+l+aPWfx/lD9m8f9x/pjF/7L8MYv/5fljFv8r8scs/j/JH7P4X5k/ZvH/af6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4/yx/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOL/6/wxi/9v8scs/tfnj1n8f5s/ZvH/Xf6Yxf+G/DGL/+/zxyz+N+aPWfxvyh+z+P8hf8zif3P+mMX/lvwxi/8f88cs/n/KH7P435o/ZvG/LX/M4n97/pjF/8/5Yxb/O/LHLP5/yR+z+N+ZP2bx/2v+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bx/1v+mMX/gfwxi/+D+WMW/7/nj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj0n8xxnIH7P4D8ofs/gPzh+z+A/JH7P4j5U/ZvEfmj9m8R87f8ziP07+mMV/WP6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35Y9Z/CfPH7P4vz9/zOL/gfwxi/8H88cs/lPkj1n8P5Q/ZvGfMn/M4v/h/DGL/0fyxyz+U+WPWfw/mj9m8f9Y/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/PH/M4j9D/pjFf8b8MYv/TPljFv9P5I9Z/GfOH7P4z5I/ZvH/ZP6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjF/1P5Yxb/T+ePWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/D+TP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOL/2fwxi/9u+WMW/93zxyz+e+SPWfw/lz9m8d8zf8zi//n8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+X8gfs/gfkj9m8f9i/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8v5Q/ZvE/Mn/M4n9U/pjF/8v5Yxb/r+SPWfyPzh+z+H81f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfy/lj9m8T8xf8zif1L+mMX/6/ljFv9v5I9Z/E/OH7P4n5I/ZvH/Zv6Yxf/U/DGL/7fyxyz+p+WPWfxPzx+z+J+RP2bx/3b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfy/kz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/mj1n8L8wfs/h/L3/M4v/9/DGL/0X5Yxb/H+SPWfwvzh+z+P8wf8zif0n+mMX/0vwxi/+P8scs/j/OH7P4X5Y/ZvG/PH/M4n9F/pjF/yf5Yxb/K/PHLP4/zR+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8f9N/pjF//r8MYv/b/PHLP6/yx+z+N+QP2bx/33+mMX/xvwxi/9N+WMW/z/kj1n8b84fs/jfkj9m8f9j/pjF/0/5Yxb/W/PHLP635Y9Z/G/PH7P4/zl/zOJ/R/6Yxf8v+WMW/zvzxyz+f80fs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+f8sfs/g/kD9m8X8wf8zi//f8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYn/sIH8MYv/oPwxi//g/DGL/5D8MYv/WPljFv+h+WMW/7Hzxyz+4+SPWfyH5Y9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8X9f/pjFf/L8MYv/+/PHLP4fyB+z+H8wf8ziP0X+mMX/Q/ljFv8p88cs/h/OH7P4fyR/zOI/Vf6Yxf+j+WMW/4/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi//H88cs/jPkj1n8Z8wfs/jPlD9m8f9E/pjFf+b8MYv/LPljFv9P5o9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8P5U/ZvH/dP6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zP5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP6fzR+z+O+WP2bx3z1/zOK/R/6Yxf9z+WMW/z3zxyz+n88fs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOL/hfwxi/8h+WMW/y/mj1n8D80fs/gflj9m8T88f8zif0T+mMX/S/ljFv8j88cs/kflj1n8v5w/ZvH/Sv6Yxf/o/DGL/1fzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf9r+WMW/xPzxyz+J+WPWfy/nj9m8f9G/pjF/+T8MYv/KfljFv9v5o9Z/E/NH7P4fyt/zOJ/Wv6Yxf/0/DGL/xn5Yxb/b+ePWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf87+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bx/27+mMX/wvwxi//38scs/t/PH7P4X5Q/ZvH/Qf6Yxf/i/DGL/w/zxyz+l+SPWfwvzR+z+P8of8zi/+P8MYv/ZfljFv/L88cs/lfkj1n8f5I/ZvG/Mn/M4v/T/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvH/Wf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/X+WMW/9/kj1n8r88fs/j/Nn/M4v+7/DGL/w35Yxb/3+ePWfxvzB+z+N+UP2bx/0P+mMX/5vwxi/8t+WMW/z/mj1n8/5Q/ZvG/NX/M4n9b/pjF//b8MYv/n/PHLP535I9Z/P+SP2bxvzN/zOL/1/wxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/t/wxi/8D+WMW/wfzxyz+f88fs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfk/iPO5A/ZvEflD9m8R+cP2bxH5I/ZvEfK3/M4j80f8ziP3b+mMV/nPwxi/+w/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/u/LH7P4T54/ZvF/f/6Yxf8D+WMW/w/mj1n8p8gfs/h/KH/M4j9l/pjF/8P5Yxb/j+SPWfynyh+z+H80f8zi/7H8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8f94/pjFf4b8MYv/jPljFv+Z8scs/p/IH7P4z5w/ZvGfJX/M4v/J/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/p/LHLP6fzh+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fyZ/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOK/a/6Yxf+z+WMW/93yxyz+u+ePWfz3yB+z+H8uf8ziv2f+mMX/8/ljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfy/kD9m8T8kf8zi/8X8MYv/ofljFv/D8scs/ofnj1n8j8gfs/h/KX/M4n9k/pjF/6j8MYv/l/PHLP5fyR+z+B+dP2bx/2r+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+H8tf8zif2L+mMX/pPwxi//X88cs/t/IH7P4n5w/ZvE/JX/M4v/N/DGL/6n5Yxb/b+WPWfxPyx+z+J+eP2bxPyN/zOL/7fwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+H8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+380fs/hfmD9m8f9e/pjF//v5Yxb/i/LHLP4/yB+z+F+cP2bx/2H+mMX/kvwxi/+l+WMW/x/lj1n8f5w/ZvG/LH/M4n95/pjF/4r8MYv/T/LHLP5X5o9Z/H+aP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+P86f8zi/5v8MYv/9fljFv/f5o9Z/H+XP2bxvyF/zOL/+/wxi/+N+WMW/5vyxyz+f8gfs/jfnD9m8b8lf8zi/8f8MYv/n/LHLP635o9Z/G/LH7P4354/ZvH/c/6Yxf+O/DGL/1/yxyz+d+aPWfz/mj9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfz/lj9m8X8gf8zi/2D+mMX/7/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljEv/xBvLHLP6D8scs/oPzxyz+Q/LHLP5j5Y9Z/Ifmj1n8x84fs/iPkz9m8R+WP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjF/335Yxb/yfPHLP7vzx+z+H8gf8zi/8H8MYv/FPljFv8P5Y9Z/KfMH7P4fzh/zOL/kfwxi/9U+WMW/4/mj1n8P5Y/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/h/PH7P4z5A/ZvGfMX/M4j9T/pjF/xP5Yxb/mfPHLP6z5I9Z/D+ZP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvH/VP6Yxf/T+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/z+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+H82f8ziv1v+mMV/9/wxi/8e+WMW/8/lj1n898wfs/h/Pn/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8X8scs/ofkj1n8v5g/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8v5Y9Z/I/MH7P4H5U/ZvH/cv6Yxf8r+WMW/6Pzxyz+X80fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/6/lj1n8T8wfs/iflD9m8f96/pjF/xv5Yxb/k/PHLP6n5I9Z/L+ZP2bxPzV/zOL/rfwxi/9p+WMW/9Pzxyz+Z+SPWfy/nT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/+/kj1n8z80fs/iflz9m8T8/f8zif0H+mMX/u/ljFv8L88cs/t/LH7P4fz9/zOJ/Uf6Yxf8H+WMW/4vzxyz+P8wfs/hfkj9m8b80f8zi/6P8MYv/j/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/Sf6Yxf/K/DGL/0/zxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf9n+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/1/nj1n8f5M/ZvG/Pn/M4v/b/DGL/+/yxyz+N+SPWfx/nz9m8b8xf8zif1P+mMX/D/ljFv+b88cs/rfkj1n8/5g/ZvH/U/6Yxf/W/DGL/235Yxb/2/PHLP5/zh+z+N+RP2bx/0v+mMX/zvwxi/9f88cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi//f8scs/g/kj1n8H8wfs/j/PX/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M39M4j/+QP6YxX9Q/pjFf3D+mMV/SP6YxX+s/DGL/9D8MYv/2PljFv9x8scs/sPyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vy9/zOI/ef6Yxf/9+WMW/w/kj1n8P5g/ZvGfIn/M4v+h/DGL/5T5Yxb/D+ePWfw/kj9m8Z8qf8zi/9H8MYv/x/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/+P5Yxb/GfLHLP4z5o9Z/GfKH7P4fyJ/zOI/c/6YxX+W/DGL/yfzxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP6fyh+z+H86f8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/mfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/8/mj1n8d8sfs/jvnj9m8d8jf8zi/7n8MYv/nvljFv/P549Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8f9C/pjF/5D8MYv/F/PHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4v+l/DGL/5H5Yxb/o/LHLP5fzh+z+H8lf8zif3T+mMX/q/ljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zi/7X8MYv/ifljFv+T8scs/l/PH7P4fyN/zOJ/cv6Yxf+U/DGL/zfzxyz+p+aPWfy/lT9m8T8tf8zif3r+mMX/jPwxi/+388cs/mfmj1n8z8ofs/ifnT9m8T8nf8zi/538MYv/ufljFv/z8scs/ufnj1n8L8gfs/h/N3/M4n9h/pjF/3v5Yxb/7+ePWfwvyh+z+P8gf8zif3H+mMX/h/ljFv9L8scs/pfmj1n8f5Q/ZvH/cf6Yxf+y/DGL/+X5Yxb/K/LHLP4/yR+z+F+ZP2bx/2n+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+P8sf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/b/LHLP7X549Z/H+bP2bx/13+mMX/hvwxi//v88cs/jfmj1n8b8ofs/j/IX/M4n9z/pjF/5b8MYv/H/PHLP5/yh+z+N+aP2bxvy1/zOJ/e/6Yxf/P+WMW/zvyxyz+f8kfs/jfmT9m8f9r/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8f9b/pjF/4H8MYv/g/ljFv+/549Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9J/CcYyB+z+A/KH7P4D84fs/gPyR+z+I+VP2bxH5o/ZvEfO3/M4j9O/pjFf1j+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/9+WPWfwnzx+z+L8/f8zi/4H8MYv/B/PHLP5T5I9Z/D+UP2bxnzJ/zOL/4fwxi/9H8scs/lPlj1n8P5o/ZvH/WP6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fzx/zOI/Q/6YxX/G/DGL/0z5Yxb/T+SPWfxnzh+z+M+SP2bx/2T+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6Yxf9T+WMW/0/nj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfw/kz9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/jvlj1n8d84fs/jvkj9m8d81f8zi/9n8MYv/bvljFv/d88cs/nvkj1n8P5c/ZvHfM3/M4v/5/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/l/IH7P4H5I/ZvH/Yv6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/L+UP2bxPzJ/zOJ/VP6Yxf/L+WMW/6/kj1n8j84fs/h/NX/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8v5Y/ZvE/MX/M4n9S/pjF/+v5Yxb/b+SPWfxPzh+z+J+SP2bx/2b+mMX/1Pwxi/+38scs/qflj1n8T88fs/ifkT9m8f92/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8v5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv/v5o9Z/C/MH7P4fy9/zOL//fwxi/9F+WMW/x/kj1n8L84fs/j/MH/M4n9J/pjF/9L8MYv/j/LHLP4/zh+z+F+WP2bxvzx/zOJ/Rf6Yxf8n+WMW/yvzxyz+P80fs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvH/Tf6Yxf/6/DGL/2/zxyz+v8sfs/jfkD9m8f99/pjF/8b8MYv/TfljFv8/5I9Z/G/OH7P435I/ZvH/Y/6Yxf9P+WMW/1vzxyz+t+WPWfxvzx+z+P85f8zif0f+mMX/L/ljFv8788cs/n/NH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/n/LH7P4P5A/ZvF/MH/M4v/3/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGJ/4QD+WMW/0H5Yxb/wfljFv8h+WMW/7Hyxyz+Q/PHLP5j549Z/MfJH7P4D8sfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOL/vvwxi//k+WMW//fnj1n8P5A/ZvH/YP6YxX+K/DGL/4fyxyz+U+aPWfw/nD9m8f9I/pjFf6r8MYv/R/PHLP4fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/j+ePWfxnyB+z+M+YP2bxnyl/zOL/ifwxi//M+WMW/1nyxyz+n8wfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+H8qf8zi/+n8MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/9n8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv9d8scs/rvmj1n8P5s/ZvHfLX/M4r97/pjFf4/8MYv/5/LHLP575o9Z/D+fP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/wv5Yxb/Q/LHLP5fzB+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5fyxyz+R+aPWfyPyh+z+H85f8zi/5X8MYv/0fljFv+v5o9Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/1/LHLP4n5o9Z/E/KH7P4fz1/zOL/jfwxi//J+WMW/1Pyxyz+38wfs/ifmj9m8f9W/pjF/7T8MYv/6fljFv8z8scs/t/OH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/d/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/d/DGL/4X5Yxb/7+WPWfy/nz9m8b8of8zi/4P8MYv/xfljFv8f5o9Z/C/JH7P4X5o/ZvH/Uf6Yxf/H+WMW/8vyxyz+l+ePWfyvyB+z+P8kf8zif2X+mMX/p/ljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zi/7P8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/r/PHLP6/yR+z+F+fP2bx/23+mMX/d/ljFv8b8scs/r/PH7P435g/ZvG/KX/M4v+H/DGL/835Yxb/W/LHLP5/zB+z+P8pf8zif2v+mMX/tvwxi//t+WMW/z/nj1n878gfs/j/JX/M4n9n/pjF/6/5Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/2/5Yxb/B/LHLP4P5o9Z/P+eP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZPybxn2ggf8ziPyh/zOI/OH/M4j8kf8ziP1b+mMV/aP6YxX/s/DGL/zj5Yxb/YfljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflz9m8Z88f8zi//78MYv/B/LHLP4fzB+z+E+RP2bx/1D+mMV/yvwxi/+H88cs/h/JH7P4T5U/ZvH/aP6Yxf9j+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/8fwxi/8M+WMW/xnzxyz+M+WPWfw/kT9m8Z85f8ziP0v+mMX/k/ljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/0/lj1n8P50/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8f9M/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/Z/PHLP675Y9Z/HfPH7P475E/ZvH/XP6YxX/P/DGL/+fzxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4fyF/zOJ/SP6Yxf+L+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bx/1L+mMX/yPwxi/9R+WMW/y/nj1n8v5I/ZvE/On/M4v/V/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvH/Wv6Yxf/E/DGL/0n5Yxb/r+ePWfy/kT9m8T85f8zif0r+mMX/m/ljFv9T88cs/t/KH7P4n5Y/ZvE/PX/M4n9G/pjF/9v5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvH/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/L+bP2bxvzB/zOL/vfwxi//388cs/hflj1n8f5A/ZvG/OH/M4v/D/DGL/yX5Yxb/S/PHLP4/yh+z+P84f8zif1n+mMX/8vwxi/8V+WMW/5/kj1n8r8wfs/j/NH/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvH/df6Yxf83+WMW/+vzxyz+v80fs/j/Ln/M4n9D/pjF//f5Yxb/G/PHLP435Y9Z/P+QP2bxvzl/zOJ/S/6Yxf+P+WMW/z/lj1n8b80fs/jflj9m8b89f8zi/+f8MYv/HfljFv+/5I9Z/O/MH7P4/zV/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4/y1/zOL/QP6Yxf/B/DGL/9/zxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyT+Ew/kj1n8B+WPWfwH549Z/Ifkj1n8x8ofs/gPzR+z+I+dP2bxHyd/zOI/LH/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//78scs/pPnj1n8358/ZvH/QP6Yxf+D+WMW/ynyxyz+H8ofs/hPmT9m8f9w/pjF/yP5Yxb/qfLHLP4fzR+z+H8sf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfw/nj9m8Z8hf8ziP2P+mMV/pvwxi/8n8scs/jPnj1n8Z8kfs/h/Mn/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8zi/6n8MYv/p/PHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/p/JH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+/x/79h5kZ13fcfzsbn67AWO4GCEimBuEKAlJlkgSJFJj22nqGMdKp9a2M6QkhIREzEVMYoWggIIFDaIFaqWAsYqNILEV8BaKCpVY0SrWWyNe8FIJiDbQarvOJrsxu3zdYZ88eZjx+3r9kd1z1u8B8p7xk7OZPUv/UJb+S/UPZel/tv6hLP2X6R/K0n+5/qEs/c/RP5Sl/wr9Q1n6r9Q/lKX/q/UPZel/rv6hLP1fo38oS/9V+oey9F+tfyhL/zX6h7L0X6t/KEv/1+ofytL/PP1DWfq/Tv9Qlv7r9A9l6b9e/1CW/hv0D2Xp/3r9Q1n6/5X+oSz936B/KEv/8/UPZel/gf6hLP036h/K0v9C/UNZ+r9R/1CW/m/SP5Sl/0X6h7L0v1j/UJb+l+gfytL/zfqHsvR/i/6hLP0v1T+Upf9l+oey9H+r/qEs/f9a/1CW/pfrH8rS/wr9Q1n6v03/UJb+b9c/lKX/Jv1DWfpfqX8oS/936B/K0v8q/UNZ+r9T/1CW/u/SP5Sl/9/oH8rS/2r9Q1n6X6N/KEv/a/UPZen/t/qHsvR/t/6hLP3/Tv9Qlv7v0T+Upf91+oey9P97/UNZ+l+vfyhL/xv0D2Xpf6P+oSz936t/KEv/zfqHsvR/n/6hLP3/Qf9Qlv7v1z+Upf8H9A9l6X+T/qEs/T+ofyhL/3/UP5Sl/xb9Q1n6f0j/UJb+N+sfytL/Fv1DWfp/WP9Qlv636h/K0n+r/qEs/T+ifyhL/3/SP5Sl/z/rH8rS/6P6h7L0v03/UJb+t+sfytL/Dv1DWfp/TP9Qlv4f1z+Upf8n9A9l6f9J/UNZ+n9K/1CW/tv0D2Xpf6f+oSz9/0X/UJb+d+kfytL/0/qHsvT/jP6hLP0/q38oS/+79Q9l6X+P/qEs/f9V/1CW/p/TP5Sl/736h7L0365/KEv/z+sfytL/3/QPZen/Bf1DWfrfp38oS/8v6h/K0v9L+oey9P93/UNZ+n9Z/1CW/l/RP5Sl//36h7L0/6r+oSz9/0P/UJb+X9M/lKX/1/UPZen/Df1DWfp/U/9Qlv7f0j+Upf9/6h/K0n+H/qEs/b+tfyhL/wf0D2Xp/x39Q1n6f1f/UJb+39M/lKX/9/UPZen/oP6hLP1/oH8oS/8f6h/K0v9H+oey9P+x/qEs/f9L/1CW/j/RP5Sl/0P6h7L036l/KEv/h/UPZen/iP6hLP1/qn8oS/9H9Q9l6f8z/UNZ+v9c/1CW/v+tfyhL/136h7L0f0z/UJb+j+sfytL/f/QPZen/v/qHsvT/hf6hLP1/qX8oS///0z+Upf//6x/K0r9H/1CS/oe29A9l6d+mfyhL/3b9Q1n6d+gfytJ/hP6hLP2L/qEs/Tv1D2Xp36V/KEv/kfqHsvQ/SP9Qlv4H6x/K0v9p+oey9B+lfyhL/6frH8rSf7T+oSz9D9E/lKX/ofqHsvQ/TP9Qlv6H6x/K0v8Z+oey9B+jfyhL/2fqH8rS/wj9Q1n6H6l/KEv/sfqHsvR/lv6hLP2P0j+Upf+z9Q9l6X+0/qEs/Y/RP5Sl/3P0D2XpP07/UJb+4/UPZek/Qf9Qlv4T9Q9l6T9J/1CW/sfqH8rS/zj9Q1n6T9Y/lKX/8fqHsvSfon8oS//n6h/K0v95+oey9D9B/1CW/lP1D2XpP03/UJb+J+ofytJ/uv6hLP1n6B/K0n+m/qEs/bv1D2Xpf5L+oSz9Z+kfytL/+fqHsvQ/Wf9Qlv6z9Q9l6T9H/1CW/nP1D2Xpf4r+oSz9X6B/KEv/U/UPZek/T/9Qlv4v1D+Upf9p+od+6/oDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIG0Zv2GcxatWLFktU984hOf7P3kqf5/JgAAoG6//kP/U/1vAgAAABwoCxa+6KGOtgFPdez74JjPL9n9cdZjrzx783c+Na//Y9+XXxK8ZPu+D3p6enruvveRV/Y97Gq1Wr3/tN/pezxy8HHv618w7+IZex6V1ufOn9B220//YM4V086bfXvn+AfL7mdL64yzlq1YMqO91SodpbWu98HMtlardJbW23sfdPc+6Cqt9/c+OGn3g4Na23ofnHjmuSsW9z7xhH80AKSxYOHGVseAxW4N+NPAvvt/wbxbpvR/HOIl+19tRKtv/y/+49u+Mehr/X7D/ve/fmkbvP/D/g8EAJ5gePt/1y39H4d4ySe8/79/yq6ro6/95v3vf/3Sbv8BoH7B9/8HbPTg7/sP+v7/+OAl996f99Z11/Xu//wzXzam76kRT+b7/79+/dIxeP/bB3z/v63VKiP6v//f1WqVsp+/HQCQwoKFFz401Pv/ofd/xFGDbtr23f+OW3e09+7/60ZddWXfU2WY+z9iqPf/L9s28N8VAHhyFiy8vmfQ+/9h7H9rcvCSe/f/xp+NeHnv/j96c/vafb42nP0vg/d/+tqVr5m+Zv2GactWLlq6ZOmSV8/t7p49a/aMud3Td39HYM+v+/mbAgC/5fbv/X/r4EE3ba3W9/fej+m6ZEvv/p81atTEvqdGDnP/O4d8//9t7/8BYICJ7a3Ozta6RWvXrp6559f+h917ft3zPwv2fxh//z+p/+cA+n9msK3VGrv3fvNh267o3f9L2l//ob6nOoe5/11D7f/pg35WEQB4cvbz/f/iQTcD9n/nfctf3Lv/b9l+3ei+p4b79/8jh9z/M7z/B4AqFiw8sG+ie/f/dz9z2QPVrstBfv4PAOrXxP5P+fLP/7zadTnY/gNA/ZrY/xt3bbi32nV5mv0HgPo1sf9tG783qdp1GWX/AaB+Tez/ZTcs/0i16/J0+w8A9Wti/x/cOuagatdltP0HgPo1sf8rN137nmrX5RD7DwD1a2L/r73zA2+rdl0Otf8AUL8m9v+w7x4/ttp1Ocz+A0D9mtj/Nzz6p5urXZfD7T8A1K+J/d9131e7q12XZ9h/AKhfE/t/+vsWfL3adRlj/wGgfk3s/46L7n5ptevyTPsPAPVrYv+3vvP2R6pdlyPsPwDUr4n9n/PR2UurXZcj7T8A1K+J/e8cvezYatdlrP0HgPo1sf+XT/3B1mrX5Vn2HwDq18T+PzDvmtHVrstR9h8A6tfE/i8fd+Q11a7Ls+0/ANSvif2/Z9mlq6pdl6PtPwDUr4n9f/FLuirudjnG/gNA/ZrY/+mvWv9n1a7Lc+w/ANSvif1/77rHtle7LuPsPwDUr4n9v/MX49ZXuy7j7T8A1K+J/f/Dr23aWe26TLD/AFC/JvZ/8j0Pv6LadZlo/wGgfk3s/5YfL/p0tesyyf4DQP2a2P9D3t0ztdp1Odb+A0D9mtj/iz656mPVrstx9h8A6tfE/v/w5kM6q12XyfYfAOrXxP6fefmFm6pdl+PtPwDUr4n9/4tZO75U7bpMsf8AUL8m9v/+I17+e9Wuy3PtPwDUr4n9v6Nr+uPVrsvz7D8A1K+J/Z953PXnVrsuJ9h/AKhfE/v/jlec9uZq12Wq/QeA+jWx/2NXffjQatdlmv0HgPo1sf9rz/jClmrX5UT7DwD1a2L/e+a/6JRq12W6/QeA+jWx/yMPX31Ctesyw/4DQP2a2P83zfjlx6tdl5n2HwDq18T+PzzhjW3Vrku3/QeA+jWx/4s7Rr2r2nU5yf4DQP2a2P/PvvbK86tdl1n2HwDq18T+v/RPjv5RtevyfPsPAPVrYv8n/P5fnl7tupxs/wGgfk3s/02Lf3JXtesy2/4DQP2a2P+rvnXrxmrXZY79B4D6NbH/43pOPbLadZlr/wGgfk3s/5qd82+qdl1Osf8AUL8m9v/x7dvnVbsuL7D/AFC/Jvb/VXf80VeqXZdT7T8A1K+J/f/i1d+cX+26zLP/AFC/Jvb/E5fe0FPturzQ/gNA/ZrY/5M/OPXsatflNPsPAAAAAAAAAAAAAAAAQEZr1m84Z9GKFUtWH8BPnur/RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgV+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAMAAAAgzN86j/YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//3Bb7hQ=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000340)) 3.52699427s ago: executing program 3 (id=1162): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00fffd000000000000001200ffffe0000012fe8000000000000000000000000000aa84"], 0x0) 3.346608934s ago: executing program 3 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 3.298239952s ago: executing program 4 (id=1164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222400000003adfa9e274a07000000000b849b9173b3e633ec2c0b7d024063b0"], 0x0}, 0x0) 3.263299137s ago: executing program 3 (id=1165): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f00000000c0), 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x1) 3.223107897s ago: executing program 3 (id=1166): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 3.194889108s ago: executing program 0 (id=1167): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000b40)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 3.081190402s ago: executing program 3 (id=1169): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a902535cbbad75f6b2607cde34400"], 0x0}, 0x0) 2.187898922s ago: executing program 0 (id=1173): syz_open_dev$media(0x0, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) 1.944476895s ago: executing program 2 (id=1175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x14}}, 0x0) 1.78500546s ago: executing program 2 (id=1177): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x9205, 0x0) 1.730248898s ago: executing program 1 (id=1178): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044160, &(0x7f0000000180)) 1.600859963s ago: executing program 1 (id=1179): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000010c0)=""/243) 1.542539856s ago: executing program 2 (id=1180): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001000000018000180140002006e657464657673428c872ed31284b20000000b0011030b"], 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0) 1.500453378s ago: executing program 1 (id=1181): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 1.305806561s ago: executing program 4 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 1.305150784s ago: executing program 1 (id=1192): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000004000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x20}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x4, {0x2, @win={{0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}}}) 1.207633363s ago: executing program 2 (id=1183): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='iocharset=cp864,keep_last_dots,iocharset=cp861,discard,zero_size_dir,gid=', @ANYRESHEX=0x0, @ANYBLOB="00000000009b2911f50058ebdff6cf22bdaaf07aaea88f835bb927201b4302f95308319c3bc5f5f1eeb3c1a1de28ffdebb7b1ec77c6deb053cee3f68f8b559cb8c59f1c3fb7c3d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-9,discard,errors=continue,\x00'], 0x3, 0x1509, &(0x7f0000003640)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.16654054s ago: executing program 4 (id=1184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0xfffffffe}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x3c}}, 0x0) 1.092793992s ago: executing program 3 (id=1185): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xf00, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 1.081219572s ago: executing program 1 (id=1186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfc}}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 947.106538ms ago: executing program 4 (id=1187): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 924.791952ms ago: executing program 1 (id=1188): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00220f00000006b0834f11e31201a10000008643"], 0x0}, 0x0) 862.7426ms ago: executing program 2 (id=1189): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 743.044234ms ago: executing program 4 (id=1190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086a04270000000000000109022400010000000009040000010300000009210000000122450009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x45, {0x45, 0x0, "3b651763da0333ddbb3c8e9187148f258ce1c51708e13e0962e15c69cc465ec4c94d51a60f84a4bfa30c43ce1055c03a0000000000000000d7129a6ccb2addb0dc0445"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 627.538852ms ago: executing program 0 (id=1191): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/56, 0x38, 0x6, 0x0, 0x0, 0x7}}, 0x120) write$UHID_CREATE2(r0, &(0x7f0000003640)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) 503.046027ms ago: executing program 2 (id=1193): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 0 (id=1194): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$eJzs3T9v00AYx/HfOWkbaFXcPwgJMRUqMaG2LIilCGVgZ2FCQBOkiqhIUMSfKTAj2Nl5C7wARibEjMTGxAvIFnTnC3HSOA5W00vS70dKlNT32M/F5949rqoIwKl1u/rr8/Xf9mGkkkqSbkqRpIpUlnReFyovDg73Dxv12rAdlVyEfRglkeZIm72D+qBQG+civNi+K2sp/TOMR+Wnmh9v3XkZOg+E5a7+ASJpwV+dbnvlxDMbj2boBAIzLbX0Ssuh8wAAhOXn/8jP80t+/R5F0qaf9nvn/ymfQFuhExizrznbU/O/q7Laxp7fc25Tt95zJZzdHnWqxCK5zCsZWT0LTJNXVbpcojOP9xv1a3tPG7VI77TrzXWbrbvnWjJ0O9LZvj26640BtekQxfu+6PowZ/uwk84/1WTteI+Yz3wz3819E+uTav/Wf+W2safJnam470wl+W9l79H1cl6uVUYvV9xBLvojeEN7WVJGRaLOiFpR7w2COC9PF7XaF5X0bjsnam1g1E5O1Hp/VHc0Z0eOm/lg7pkN/dEXVVPr/8h+2psa5cq0bVxLPzKG9qfsWsZuPvFXXfPSwJZR0R6hgPd6pBtafv76zZOHjUb92cy+sFfiBKQxUS86g2BS8pnZF/ZDDnL0zrxTfD/BfjPhBHVP+n8G8reZWWHXXSap/1L1ypZbrNmnuHedvpCObeftPLXH7YzaYNU9n82u4HoYd+thMbuCG7XmunxVujLKEROxz3Py7BYJMlX90APu/wMAAAAAAAAAAAAAAAAAAEyb4/uXg4qyNoXuIwAAAAAAAAAAAAAAAAAAAAAA027ivv/3rpJ3fP8vMHZ/AwAA////DnhI") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) kernel console output (not intermixed with test programs): l = 5 seconds, CP frequency < 30 seconds [ 76.701525][ T1138] cfg80211: failed to load regulatory.db [ 76.759584][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.291402][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 77.300433][ T5866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'. [ 77.315994][ T5866] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 77.393383][ T5868] XFS (nullb0): Invalid superblock magic number [ 77.513179][ T5843] loop3: detected capacity change from 0 to 32768 [ 77.533124][ T5843] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.211 (5843) [ 77.552458][ T5879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.223'. [ 77.585360][ T5843] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 77.674818][ T5843] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 77.691030][ T5843] BTRFS info (device loop3): disk space caching is enabled [ 77.704278][ T5326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.714171][ T5843] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 77.788421][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.794577][ T5248] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.848297][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 77.857855][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 77.925303][ T5326] usb 3-1: Using ep0 maxpacket: 8 [ 77.955970][ T5248] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.969660][ T5326] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 77.980264][ T5326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.988328][ T5326] usb 3-1: Product: syz [ 77.999267][ T5326] usb 3-1: Manufacturer: syz [ 78.004005][ T5326] usb 3-1: SerialNumber: syz [ 78.015420][ T5326] usb 3-1: config 0 descriptor?? [ 78.026536][ T5326] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 78.053919][ T5843] BTRFS info (device loop3): rebuilding free space tree [ 78.163620][ T5843] BTRFS info (device loop3): disabling free space tree [ 78.170603][ T5248] Bluetooth: hci4: command 0x0c1a tx timeout [ 78.172039][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 78.178001][ T5843] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.197506][ T5843] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.315097][ T5843] syz.3.211 (5843) used greatest stack depth: 18448 bytes left [ 78.392472][ T5240] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 78.430722][ T5326] gspca_sn9c20x: Write register 1001 failed -71 [ 78.450360][ T5326] gspca_sn9c20x: Device initialization failed [ 78.467896][ T5326] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 78.556288][ T5326] usb 3-1: USB disconnect, device number 3 [ 78.793100][ T5248] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.894998][ T5918] loop1: detected capacity change from 0 to 32768 [ 78.905562][ T5918] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.234 (5918) [ 78.936669][ T5918] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.947182][ T5918] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 78.956190][ T5918] BTRFS info (device loop1): using free-space-tree [ 79.101256][ T5935] loop0: detected capacity change from 0 to 4096 [ 79.428187][ T5962] netlink: 108 bytes leftover after parsing attributes in process `syz.4.247'. [ 79.491750][ T5962] netlink: 108 bytes leftover after parsing attributes in process `syz.4.247'. [ 79.509578][ T5967] loop3: detected capacity change from 0 to 8 [ 79.524515][ T5935] ntfs3: loop0: Failed to load $Extend (-22). [ 79.525270][ T5229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.532080][ T5935] ntfs3: loop0: Failed to initialize $Extend. [ 79.593909][ T5962] netlink: 84 bytes leftover after parsing attributes in process `syz.4.247'. [ 79.767292][ T29] audit: type=1800 audit(1727762474.170:7): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.249" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 79.832037][ T5248] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.832045][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout [ 79.971856][ T5248] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.063560][ T5974] loop2: detected capacity change from 0 to 4096 [ 80.095219][ T5974] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 80.135020][ T5974] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 80.201001][ T5974] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 80.208000][ T5248] Bluetooth: hci4: command 0x0c1a tx timeout [ 80.270656][ T5978] loop1: detected capacity change from 0 to 4096 [ 80.299788][ T5978] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 80.348869][ T5978] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 80.532562][ T2999] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22. [ 80.648910][ T6000] openvswitch: netlink: Port -2 exceeds max allowable 65535 [ 80.912597][ T6007] nvme_fabrics: missing parameter 'transport=%s' [ 80.945178][ T6007] nvme_fabrics: missing parameter 'nqn=%s' [ 81.367770][ T6034] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 81.579684][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.284'. [ 82.019583][ T6070] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 82.305473][ T6086] __nla_validate_parse: 3 callbacks suppressed [ 82.305494][ T6086] netlink: 188 bytes leftover after parsing attributes in process `syz.4.305'. [ 82.717751][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.865879][ T6082] loop2: detected capacity change from 0 to 32768 [ 82.887692][ T6082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.301 (6082) [ 82.894409][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 82.939832][ T6082] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.942826][ T8] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 82.973178][ T6082] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 82.985894][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.012928][ T6082] BTRFS info (device loop2): using free-space-tree [ 83.068039][ T8] usb 1-1: config 0 descriptor?? [ 83.159145][ T8] as10x_usb: device has been detected [ 83.179777][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 83.278607][ T5234] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.330397][ T8] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 83.475357][ T8] as10x_usb: error during firmware upload part1 [ 83.510703][ T8] Registered device nBox DVB-T Dongle [ 83.526669][ T8] usb 1-1: USB disconnect, device number 3 [ 83.658957][ T8] Unregistered device nBox DVB-T Dongle [ 83.685996][ T8] as10x_usb: device has been disconnected [ 83.861587][ T6103] loop4: detected capacity change from 0 to 32768 [ 83.918520][ T6146] loop3: detected capacity change from 0 to 2048 [ 83.960703][ T6146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.980164][ T6103] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.290494][ T6103] XFS (loop4): Ending clean mount [ 84.437445][ T5235] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.493330][ T6182] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 84.501066][ T6182] netlink: 244 bytes leftover after parsing attributes in process `syz.0.341'. [ 84.525076][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.711292][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 84.750627][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 84.764286][ T6190] loop0: detected capacity change from 0 to 164 [ 84.793698][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 84.912558][ T6190] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 85.198172][ T6186] infiniband syz1: set active [ 85.205551][ T8] vcan0 speed is unknown, defaulting to 1000 [ 85.218776][ T6186] infiniband syz1: added vcan0 [ 85.338543][ T6186] RDS/IB: syz1: added [ 85.343334][ T6186] smc: adding ib device syz1 with port count 1 [ 85.352477][ T6186] smc: ib device syz1 port 1 has pnetid [ 85.360782][ T8] vcan0 speed is unknown, defaulting to 1000 [ 85.378614][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 85.774341][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 86.043301][ T6198] loop2: detected capacity change from 0 to 32768 [ 86.060380][ T6238] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 86.152547][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 86.255761][ T6248] loop3: detected capacity change from 0 to 24 [ 86.255862][ T6198] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 86.270877][ T6248] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 86.290889][ T6248] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 86.343050][ T6250] loop4: detected capacity change from 0 to 8 [ 86.405248][ T6198] ocfs2: Unmounting device (7,2) on (node local) [ 86.623785][ T6256] QAT: Device 127 not found [ 86.658941][ T6258] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 86.679544][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 86.735150][ T6261] loop3: detected capacity change from 0 to 128 [ 86.913142][ T6263] loop0: detected capacity change from 0 to 4096 [ 86.933076][ T6263] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 86.980060][ T6269] netlink: 'syz.2.383': attribute type 3 has an invalid length. [ 86.991462][ T6269] netlink: 'syz.2.383': attribute type 1 has an invalid length. [ 87.000207][ T6269] netlink: 220 bytes leftover after parsing attributes in process `syz.2.383'. [ 87.077355][ T6270] loop4: detected capacity change from 0 to 256 [ 87.091587][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 87.139042][ T6263] ntfs3: loop0: ino=5, "/" directory corrupted [ 87.189444][ T6270] FAT-fs (loop4): Directory bread(block 64) failed [ 87.230139][ T6270] FAT-fs (loop4): Directory bread(block 65) failed [ 87.237029][ T6270] FAT-fs (loop4): Directory bread(block 66) failed [ 87.265342][ T6270] FAT-fs (loop4): Directory bread(block 67) failed [ 87.285586][ T6270] FAT-fs (loop4): Directory bread(block 68) failed [ 87.316892][ T6270] FAT-fs (loop4): Directory bread(block 69) failed [ 87.333943][ T6270] FAT-fs (loop4): Directory bread(block 70) failed [ 87.365172][ T6270] FAT-fs (loop4): Directory bread(block 71) failed [ 87.385361][ T6270] FAT-fs (loop4): Directory bread(block 72) failed [ 87.406051][ T6270] FAT-fs (loop4): Directory bread(block 73) failed [ 87.649952][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.388'. [ 87.821347][ T6288] loop4: detected capacity change from 0 to 64 [ 87.914138][ T6267] loop3: detected capacity change from 0 to 32768 [ 87.933763][ T6267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.382 (6267) [ 87.959717][ T6267] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.977484][ T6267] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 87.986424][ T6267] BTRFS info (device loop3): using free-space-tree [ 88.068470][ T6300] netlink: 'syz.0.396': attribute type 3 has an invalid length. [ 88.079327][ T6294] loop2: detected capacity change from 0 to 2048 [ 88.113671][ T6294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.550174][ T5240] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 88.582904][ T6333] nftables ruleset with unbound set [ 88.890667][ T6345] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 89.123106][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.418'. [ 89.331913][ T6366] IPv6: sit1: Disabled Multicast RS [ 89.369393][ T6361] netlink: 'syz.1.420': attribute type 2 has an invalid length. [ 89.577464][ T6363] block device autoloading is deprecated and will be removed. [ 89.620582][ T6363] syz.4.421: attempt to access beyond end of device [ 89.620582][ T6363] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.057773][ T6393] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 90.120470][ T6395] netlink: 'syz.4.435': attribute type 7 has an invalid length. [ 90.128167][ T6395] netlink: 'syz.4.435': attribute type 8 has an invalid length. [ 90.154817][ T6395] netlink: 224 bytes leftover after parsing attributes in process `syz.4.435'. [ 90.418959][ T6397] loop0: detected capacity change from 0 to 32768 [ 90.720942][ T6378] loop1: detected capacity change from 0 to 32768 [ 90.768458][ T6378] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 90.939119][ T6421] loop2: detected capacity change from 0 to 764 [ 90.940482][ T6378] XFS (loop1): Ending clean mount [ 90.951494][ T6421] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.953120][ T5326] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.208280][ T6431] loop3: detected capacity change from 0 to 512 [ 91.220727][ T5326] usb 5-1: Using ep0 maxpacket: 8 [ 91.228279][ T5326] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 91.239534][ T5229] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 91.241084][ T5326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.258136][ T5326] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.268140][ T5326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 187, changing to 11 [ 91.279733][ T5326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59276, setting to 1024 [ 91.287938][ T6431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.291468][ T5326] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 91.324750][ T6431] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.382350][ T5326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.411348][ T5326] usb 5-1: config 0 descriptor?? [ 91.445835][ T6405] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 91.457912][ T6405] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 91.657229][ T5240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.792208][ T5248] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 91.859463][ T5326] usb 5-1: USB disconnect, device number 4 [ 92.140161][ T6468] loop1: detected capacity change from 0 to 512 [ 92.166055][ T6468] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.227902][ T6468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.465: bg 0: block 64: padding at end of block bitmap is not set [ 92.267338][ T6468] Quota error (device loop1): write_blk: dquota write failed [ 92.282539][ T6468] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 92.312104][ T6468] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.465: Failed to acquire dquot type 0 [ 92.353353][ T6468] EXT4-fs (loop1): 1 truncate cleaned up [ 92.359934][ T6468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.506541][ T6468] Quota error (device loop1): write_blk: dquota write failed [ 92.538553][ T6468] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 92.569942][ T6468] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.465: Failed to acquire dquot type 0 [ 92.798462][ T6468] syz.1.465 (6468) used greatest stack depth: 17656 bytes left [ 92.842352][ T5229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.945285][ T6506] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 93.825400][ T6542] loop4: detected capacity change from 0 to 128 [ 93.850487][ T6502] loop0: detected capacity change from 0 to 32768 [ 93.877903][ T6502] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.476 (6502) [ 93.917908][ T6502] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.961558][ T6502] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.986846][ T6502] BTRFS info (device loop0): using free-space-tree [ 94.264820][ T6573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'. [ 94.372704][ T6576] loop2: detected capacity change from 0 to 4096 [ 94.467899][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.4.508'. [ 94.474729][ T6509] loop3: detected capacity change from 0 to 40427 [ 94.506394][ T5241] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.518373][ T6509] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 94.554387][ T6509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 94.766907][ T6509] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.046559][ T6601] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.117560][ T6509] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 95.131420][ T6601] ip6t_srh: unknown srh match flags 4020 [ 95.149570][ T6509] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.193964][ T6509] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 95.938986][ T6642] PKCS7: Unknown OID: [4] 0.0 [ 95.957712][ T6642] PKCS7: Only support pkcs7_signedData type [ 96.193345][ T6654] loop3: detected capacity change from 0 to 512 [ 96.341001][ T6654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.347356][ T6660] loop2: detected capacity change from 0 to 256 [ 96.360923][ T6660] exfat: Deprecated parameter 'namecase' [ 96.366739][ T6660] exfat: Deprecated parameter 'namecase' [ 96.393213][ T6660] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 96.395882][ T6659] loop1: detected capacity change from 0 to 1764 [ 96.453368][ T6654] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.549298][ T6632] loop4: detected capacity change from 0 to 32768 [ 96.631051][ T5240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.739093][ T6632] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 96.955096][ T6687] loop1: detected capacity change from 0 to 512 [ 96.988259][ T5235] ocfs2: Unmounting device (7,4) on (node local) [ 97.020453][ T6687] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 97.089640][ T6687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 97.097758][ T6687] System zones: 1-12 [ 97.148533][ T6687] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.211573][ T6687] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.555: bg 0: block 361: padding at end of block bitmap is not set [ 97.303693][ T6687] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 97.362920][ T6687] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.555: attempt to clear invalid blocks 33619980 len 1 [ 97.419651][ T6687] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.555: invalid indirect mapped block 1811939328 (level 0) [ 97.491204][ T6687] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.555: invalid indirect mapped block 2 (level 2) [ 97.540954][ T6687] EXT4-fs (loop1): 1 truncate cleaned up [ 97.572433][ T6687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 97.581048][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 97.646947][ T6687] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 97.774410][ T5229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 98.100073][ T6739] loop3: detected capacity change from 0 to 16 [ 98.128186][ T6739] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 98.271011][ T6746] xt_TCPMSS: Only works on TCP SYN packets [ 98.352524][ T1138] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.483739][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 98.560445][ T1138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 98.590278][ T1138] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 98.605127][ T1138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.648323][ T1138] usb 3-1: Product: syz [ 98.679213][ T1138] usb 3-1: Manufacturer: syz [ 98.691065][ T1138] usb 3-1: SerialNumber: syz [ 98.725404][ T1138] usb 3-1: config 0 descriptor?? [ 98.786167][ T6762] loop3: detected capacity change from 0 to 32768 [ 98.843526][ T6758] xt_CT: No such helper "snmp_trap" [ 98.923798][ T1138] viperboard 3-1:0.0: version 0.00 found at bus 003 address 004 [ 98.953349][ T6762] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.974477][ T1138] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 98.989592][ T1138] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 99.109492][ T1138] usb 3-1: USB disconnect, device number 4 [ 99.277517][ T6794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.603'. [ 99.336385][ T6762] XFS (loop3): Ending clean mount [ 99.363276][ T6762] XFS (loop3): Quotacheck needed: Please wait. [ 99.447637][ T6762] XFS (loop3): Quotacheck: Done. [ 99.490797][ T6801] bpf: Bad value for 'mode' [ 99.730121][ T5240] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.772497][ T6811] loop0: detected capacity change from 0 to 1024 [ 99.781170][ T6811] EXT4-fs: Ignoring removed oldalloc option [ 99.826729][ T6811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000080000000 r/w without journal. Quota mode: writeback. [ 100.070104][ T6795] loop4: detected capacity change from 0 to 32768 [ 100.088543][ T6811] EXT4-fs error (device loop0): __ext4_new_inode:1070: comm syz.0.612: reserved inode found cleared - inode=1 [ 100.105536][ T6795] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.602 (6795) [ 100.164279][ T6795] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 100.176188][ T6795] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 100.186208][ T6795] BTRFS info (device loop4): using free-space-tree [ 100.190361][ T5241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000080000000. [ 100.602738][ T5235] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 100.802183][ T6807] loop2: detected capacity change from 0 to 32768 [ 100.809757][ T6807] XFS (loop2): Invalid device [./file0], error=-15 [ 100.972014][ T5313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.168865][ T5313] usb 4-1: Using ep0 maxpacket: 16 [ 101.270983][ T5313] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 101.276432][ T6861] syz.2.627 uses old SIOCAX25GETINFO [ 101.288259][ T5313] usb 4-1: config 0 has no interface number 0 [ 101.298278][ T5313] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.358466][ T5313] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 101.367567][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 101.396335][ T5313] usb 4-1: Product: syz [ 101.406444][ T5313] usb 4-1: SerialNumber: syz [ 101.449096][ T5313] usb 4-1: config 0 descriptor?? [ 101.472093][ T5313] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 101.520007][ T6868] loop2: detected capacity change from 0 to 128 [ 101.526149][ T6865] loop4: detected capacity change from 0 to 2048 [ 101.562645][ T6868] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 101.613805][ T6865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.653929][ T6849] loop1: detected capacity change from 0 to 32768 [ 101.658987][ T6868] syz.2.630: attempt to access beyond end of device [ 101.658987][ T6868] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 101.661875][ T6865] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.684780][ T6849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.621 (6849) [ 101.739104][ T6849] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.805717][ T5284] usb 4-1: USB disconnect, device number 3 [ 101.812692][ T6849] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 101.833931][ T6868] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 101.857999][ T6849] BTRFS info (device loop1): using free-space-tree [ 101.866315][ T6868] syz.2.630: attempt to access beyond end of device [ 101.866315][ T6868] loop2: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 101.910208][ T6868] Buffer I/O error on dev loop2, logical block 8833403, async page read [ 101.951145][ T6868] syz.2.630: attempt to access beyond end of device [ 101.951145][ T6868] loop2: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 101.965735][ T6868] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 101.974249][ T6868] syz.2.630: attempt to access beyond end of device [ 101.974249][ T6868] loop2: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 101.985950][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.989680][ T6868] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 102.007231][ T6868] syz.2.630: attempt to access beyond end of device [ 102.007231][ T6868] loop2: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 102.021212][ T6868] Buffer I/O error on dev loop2, logical block 3245771, async page read [ 102.029755][ T6868] syz.2.630: attempt to access beyond end of device [ 102.029755][ T6868] loop2: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 102.043402][ T6868] Buffer I/O error on dev loop2, logical block 8834171, async page read [ 102.052220][ T6868] syz.2.630: attempt to access beyond end of device [ 102.052220][ T6868] loop2: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 102.066209][ T6868] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 102.074733][ T6868] syz.2.630: attempt to access beyond end of device [ 102.074733][ T6868] loop2: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 102.089384][ T6868] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 102.107610][ T6868] syz.2.630: attempt to access beyond end of device [ 102.107610][ T6868] loop2: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 102.133436][ T6868] Buffer I/O error on dev loop2, logical block 3245774, async page read [ 102.141982][ T6868] syz.2.630: attempt to access beyond end of device [ 102.141982][ T6868] loop2: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 102.195801][ T5229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.214686][ T6868] Buffer I/O error on dev loop2, logical block 8834939, async page read [ 102.245438][ T29] audit: type=1400 audit(1727762496.851:8): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A405B3A80 pid=6894 comm="syz.4.634" [ 102.680046][ T6905] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 102.914841][ T6912] loop1: detected capacity change from 0 to 256 [ 103.061156][ T6912] FAT-fs (loop1): Directory bread(block 64) failed [ 103.067754][ T6912] FAT-fs (loop1): Directory bread(block 65) failed [ 103.110762][ T6912] FAT-fs (loop1): Directory bread(block 66) failed [ 103.130638][ T6912] FAT-fs (loop1): Directory bread(block 67) failed [ 103.141300][ T6912] FAT-fs (loop1): Directory bread(block 68) failed [ 103.147888][ T6912] FAT-fs (loop1): Directory bread(block 69) failed [ 103.190475][ T6912] FAT-fs (loop1): Directory bread(block 70) failed [ 103.197076][ T6912] FAT-fs (loop1): Directory bread(block 71) failed [ 103.233162][ T6912] FAT-fs (loop1): Directory bread(block 72) failed [ 103.239855][ T6912] FAT-fs (loop1): Directory bread(block 73) failed [ 103.362287][ T6919] loop3: detected capacity change from 0 to 2048 [ 103.363528][ T6923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'. [ 103.422409][ T6919] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.784943][ T6925] loop1: detected capacity change from 0 to 4096 [ 103.835772][ T6925] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 103.947119][ T6876] syz.0.633: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.005531][ T6925] ntfs3: loop1: failed to convert "c46c" to maccroatian [ 104.023571][ T6876] CPU: 0 UID: 0 PID: 6876 Comm: syz.0.633 Not tainted 6.12.0-rc1-next-20241001-syzkaller #0 [ 104.033876][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.043962][ T6876] Call Trace: [ 104.047258][ T6876] [ 104.050199][ T6876] dump_stack_lvl+0x241/0x360 [ 104.054899][ T6876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.060112][ T6876] ? __pfx__printk+0x10/0x10 [ 104.064756][ T6876] ? __rcu_read_unlock+0xa1/0x110 [ 104.069823][ T6876] warn_alloc+0x278/0x410 [ 104.074182][ T6876] ? __pfx_warn_alloc+0x10/0x10 [ 104.079065][ T6876] ? vb2_vmalloc_alloc+0xf2/0x340 [ 104.084109][ T6876] ? __get_vm_area_node+0x23d/0x270 [ 104.089335][ T6876] __vmalloc_node_range_noprof+0x691/0x13f0 [ 104.095272][ T6876] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 104.101279][ T6876] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.107628][ T6876] ? vb2_vmalloc_alloc+0xf2/0x340 [ 104.112669][ T6876] ? __get_vm_area_node+0x23d/0x270 [ 104.117889][ T6876] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 104.123814][ T6876] ? vb2_vmalloc_alloc+0xf2/0x340 [ 104.128906][ T6876] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.135277][ T6876] ? __kasan_kmalloc+0x98/0xb0 [ 104.140069][ T6876] ? vb2_vmalloc_alloc+0xb5/0x340 [ 104.145226][ T6876] vmalloc_user_noprof+0x74/0x80 [ 104.150191][ T6876] ? vb2_vmalloc_alloc+0xf2/0x340 [ 104.155246][ T6876] vb2_vmalloc_alloc+0xf2/0x340 [ 104.160125][ T6876] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 104.165597][ T6876] __vb2_queue_alloc+0xa0b/0x16f0 [ 104.170670][ T6876] vb2_core_create_bufs+0x825/0x1040 [ 104.175993][ T6876] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 104.181743][ T6876] ? __pfx___might_resched+0x10/0x10 [ 104.187047][ T6876] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 104.192622][ T6876] vb2_create_bufs+0x60e/0xdd0 [ 104.197415][ T6876] ? __pfx_vb2_create_bufs+0x10/0x10 [ 104.202717][ T6876] ? __mutex_lock+0x2ef/0xd70 [ 104.207413][ T6876] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 104.213005][ T6876] vb2_ioctl_create_bufs+0x2b7/0x400 [ 104.218327][ T6876] v4l_create_bufs+0x18b/0x2a0 [ 104.223121][ T6876] __video_do_ioctl+0xc23/0xdd0 [ 104.228008][ T6876] ? __pfx___video_do_ioctl+0x10/0x10 [ 104.233407][ T6876] ? __might_fault+0xc6/0x120 [ 104.238127][ T6876] video_usercopy+0x89b/0x1180 [ 104.243016][ T6876] ? __pfx___video_do_ioctl+0x10/0x10 [ 104.248422][ T6876] ? __pfx_video_usercopy+0x10/0x10 [ 104.253675][ T6876] ? __fget_files+0x29/0x470 [ 104.258302][ T6876] ? __fget_files+0x3f3/0x470 [ 104.263011][ T6876] v4l2_ioctl+0x189/0x1e0 [ 104.267375][ T6876] ? __pfx_v4l2_ioctl+0x10/0x10 [ 104.272260][ T6876] __se_sys_ioctl+0xf9/0x170 [ 104.276886][ T6876] do_syscall_64+0xf3/0x230 [ 104.281415][ T6876] ? clear_bhb_loop+0x35/0x90 [ 104.286124][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.292063][ T6876] RIP: 0033:0x7f3bb8f7dff9 [ 104.296511][ T6876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.316147][ T6876] RSP: 002b:00007f3bb9cd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.324753][ T6876] RAX: ffffffffffffffda RBX: 00007f3bb9135f80 RCX: 00007f3bb8f7dff9 [ 104.332758][ T6876] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 104.340760][ T6876] RBP: 00007f3bb8ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 104.348758][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.357275][ T6876] R13: 0000000000000000 R14: 00007f3bb9135f80 R15: 00007ffc3d796ad8 [ 104.365289][ T6876] [ 104.394389][ T6933] loop4: detected capacity change from 0 to 256 [ 104.477813][ T6876] Mem-Info: [ 104.480982][ T6876] active_anon:5420 inactive_anon:0 isolated_anon:0 [ 104.480982][ T6876] active_file:11014 inactive_file:46333 isolated_file:0 [ 104.480982][ T6876] unevictable:768 dirty:554 writeback:0 [ 104.480982][ T6876] slab_reclaimable:10856 slab_unreclaimable:97946 [ 104.480982][ T6876] mapped:21555 shmem:1804 pagetables:822 [ 104.480982][ T6876] sec_pagetables:0 bounce:0 [ 104.480982][ T6876] kernel_misc_reclaimable:0 [ 104.480982][ T6876] free:1308806 free_pcp:2053 free_cma:0 [ 104.535621][ T6876] Node 0 active_anon:21680kB inactive_anon:0kB active_file:44056kB inactive_file:185456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86220kB dirty:2212kB writeback:0kB shmem:5680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10348kB pagetables:3288kB sec_pagetables:0kB all_unreclaimable? no [ 104.568831][ T6876] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 104.599668][ T6876] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.626913][ T6876] lowmem_reserve[]: 0 2463 2464 0 0 [ 104.632206][ T6876] Node 0 DMA32 free:1285444kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:21444kB inactive_anon:0kB active_file:44056kB inactive_file:186184kB unevictable:1536kB writepending:2212kB present:3129332kB managed:2550456kB mlocked:0kB bounce:0kB free_pcp:9060kB local_pcp:5684kB free_cma:0kB [ 104.663456][ T6876] lowmem_reserve[]: 0 0 0 0 0 [ 104.668778][ T6876] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:572kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 104.697545][ T6876] lowmem_reserve[]: 0 0 0 0 0 [ 104.702377][ T6876] Node 1 Normal free:3930388kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1332kB local_pcp:280kB free_cma:0kB [ 104.732669][ T6876] lowmem_reserve[]: 0 0 0 0 0 [ 104.737614][ T6876] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.750542][ T6876] Node 0 DMA32: 58*4kB (UME) 31*8kB (UM) 19*16kB (UME) 44*32kB (UE) 14*64kB (UM) 42*128kB (UM) 27*256kB (UM) 13*512kB (ME) 5*1024kB (UME) 2*2048kB (ME) 307*4096kB (ME) = 1288720kB [ 104.769232][ T6876] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 104.781425][ T6876] Node 1 Normal: 5*4kB (UM) 26*8kB (UME) 21*16kB (UE) 167*32kB (UE) 86*64kB (UME) 25*128kB (UE) 4*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 953*4096kB (UM) = 3930388kB [ 104.799845][ T6876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.809552][ T6876] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.819003][ T6876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.829034][ T6876] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.838492][ T6876] 59244 total pagecache pages [ 104.843295][ T6876] 0 pages in swap cache [ 104.847577][ T6876] Free swap = 124996kB [ 104.851851][ T6876] Total swap = 124996kB [ 104.856714][ T6876] 2097051 pages RAM [ 104.861171][ T6876] 0 pages HighMem/MovableOnly [ 104.865989][ T6876] 427651 pages reserved [ 104.870248][ T6876] 0 pages cma reserved [ 105.754721][ T6950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.229305][ T6974] netlink: 'syz.0.673': attribute type 6 has an invalid length. [ 106.256011][ T6972] loop1: detected capacity change from 0 to 4096 [ 106.366404][ T6975] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.441241][ T6972] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 106.508171][ T6972] Remounting filesystem read-only [ 106.911427][ T6958] loop3: detected capacity change from 0 to 32768 [ 106.988726][ T6958] JBD2: Ignoring recovery information on journal [ 107.073549][ T6984] loop4: detected capacity change from 0 to 256 [ 107.197178][ T6958] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 107.357004][ T6979] loop0: detected capacity change from 0 to 32768 [ 107.395791][ T6979] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.675 (6979) [ 107.479913][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 107.494095][ T6990] netlink: 3 bytes leftover after parsing attributes in process `syz.4.679'. [ 107.604814][ T5240] ocfs2: Unmounting device (7,3) on (node local) [ 108.595732][ T7006] loop3: detected capacity change from 0 to 4096 [ 109.034237][ T7015] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.060867][ T7006] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 109.215308][ T7006] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=12) [ 109.263228][ T7006] Remounting filesystem read-only [ 109.289137][ T7006] NILFS (loop3): error -5 truncating bmap (ino=12) [ 109.357870][ T7021] IPv6: sit1: Disabled Multicast RS [ 109.368297][ T5240] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 109.567376][ T7023] loop1: detected capacity change from 0 to 2048 [ 109.611624][ T7023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.682970][ T7023] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0 [ 109.855981][ T7031] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.071663][ T7037] loop4: detected capacity change from 0 to 32768 [ 111.078460][ T5326] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.128707][ T7037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.700 (7037) [ 111.224028][ T7037] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.234858][ T7037] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 111.249167][ T7037] BTRFS info (device loop4): using free-space-tree [ 111.257286][ T6979] BTRFS error (device loop0): open_ctree failed [ 111.352166][ T5326] usb 4-1: Using ep0 maxpacket: 16 [ 111.372664][ T5326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.385850][ T5326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58880, setting to 1024 [ 111.397941][ T5326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.411309][ T5326] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 111.420595][ T5326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.447044][ T5326] usb 4-1: config 0 descriptor?? [ 111.525681][ T7045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.669857][ T5326] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 111.833946][ T7063] cgroup: No subsys list or none specified [ 111.911351][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.922186][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.936921][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.988292][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.015345][ T5326] usb 4-1: USB disconnect, device number 4 [ 112.015491][ C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 112.032956][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 112.044870][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.177361][ T7065] vcan0 speed is unknown, defaulting to 1000 [ 112.286227][ T5235] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.310737][ T7086] loop0: detected capacity change from 0 to 256 [ 112.373239][ T7086] FAT-fs (loop0): Directory bread(block 64) failed [ 112.382368][ T7086] FAT-fs (loop0): Directory bread(block 65) failed [ 112.398512][ T7086] FAT-fs (loop0): Directory bread(block 66) failed [ 112.419797][ T7086] FAT-fs (loop0): Directory bread(block 67) failed [ 112.433638][ T7086] FAT-fs (loop0): Directory bread(block 68) failed [ 112.458290][ T7086] FAT-fs (loop0): Directory bread(block 69) failed [ 112.475693][ T7086] FAT-fs (loop0): Directory bread(block 70) failed [ 112.482408][ T7086] FAT-fs (loop0): Directory bread(block 71) failed [ 112.526069][ T7086] FAT-fs (loop0): Directory bread(block 72) failed [ 112.587676][ T7086] FAT-fs (loop0): Directory bread(block 73) failed [ 113.499612][ T7104] No source specified [ 113.610038][ T7106] loop0: detected capacity change from 0 to 256 [ 113.639134][ T7108] netlink: 'syz.1.726': attribute type 13 has an invalid length. [ 113.746108][ T7106] FAT-fs (loop0): Directory bread(block 64) failed [ 113.764990][ T7106] FAT-fs (loop0): Directory bread(block 65) failed [ 113.796058][ T7106] FAT-fs (loop0): Directory bread(block 66) failed [ 113.844624][ T7106] FAT-fs (loop0): Directory bread(block 67) failed [ 113.860916][ T7106] FAT-fs (loop0): Directory bread(block 68) failed [ 113.882412][ T7106] FAT-fs (loop0): Directory bread(block 69) failed [ 113.919674][ T7106] FAT-fs (loop0): Directory bread(block 70) failed [ 113.947209][ T7106] FAT-fs (loop0): Directory bread(block 71) failed [ 113.986764][ T7106] FAT-fs (loop0): Directory bread(block 72) failed [ 114.020211][ T7106] FAT-fs (loop0): Directory bread(block 73) failed [ 114.131595][ T5248] Bluetooth: hci5: command tx timeout [ 114.252536][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 114.458352][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.517161][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.551745][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.560119][ T7065] bridge_slave_0: entered allmulticast mode [ 114.567279][ T7065] bridge_slave_0: entered promiscuous mode [ 114.577322][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.584682][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.592393][ T7065] bridge_slave_1: entered allmulticast mode [ 114.602528][ T7065] bridge_slave_1: entered promiscuous mode [ 114.630346][ T8] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 114.644459][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.656246][ T8] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 114.666061][ T5326] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.679163][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.692462][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.702175][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 114.778068][ T8] usb 4-1: config 0 has no interface number 0 [ 114.794372][ T8] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 114.812783][ T8] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.824937][ T5326] usb 2-1: Using ep0 maxpacket: 16 [ 114.837585][ T8] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 114.862288][ T5326] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 114.873771][ T5326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.883099][ T5326] usb 2-1: Product: syz [ 114.887471][ T8] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 114.897684][ T5326] usb 2-1: Manufacturer: syz [ 114.902690][ T5326] usb 2-1: SerialNumber: syz [ 114.907717][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.921909][ T5326] usb 2-1: config 0 descriptor?? [ 114.931761][ T8] usb 4-1: config 0 descriptor?? [ 114.950466][ T8] gspca_main: spca561-2.14.0 probing abcd:cdee [ 115.062489][ T7065] team0: Port device team_slave_0 added [ 115.128189][ T7065] team0: Port device team_slave_1 added [ 115.154957][ T8] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 115.192768][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.252052][ T5326] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v92 fw v159.0.0 (1 channels) [ 115.263696][ T8] usb 4-1: MIDIStreaming interface descriptor not found [ 115.436948][ T8] usb 4-1: USB disconnect, device number 5 [ 115.453135][ T5326] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 115.507894][ T5326] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 115.539272][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.546260][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.589306][ T7083] udevd[7083]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.646160][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.841129][ T7131] netlink: 'syz.0.735': attribute type 21 has an invalid length. [ 115.867315][ T5326] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 115.900853][ T5326] usb 2-1: USB disconnect, device number 3 [ 115.917103][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.924646][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.118413][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.206521][ T5248] Bluetooth: hci5: command tx timeout [ 117.233919][ T7065] hsr_slave_0: entered promiscuous mode [ 117.253145][ T7065] hsr_slave_1: entered promiscuous mode [ 117.273854][ T7065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.331195][ T7065] Cannot create hsr debugfs directory [ 117.583300][ T7162] loop1: detected capacity change from 0 to 256 [ 117.654202][ T7162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.707783][ T7162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.730021][ T7164] QAT: Stopping all acceleration devices. [ 117.743195][ T7162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.804932][ T29] audit: type=1800 audit(1727762512.461:9): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.748" name="file1" dev="loop1" ino=1048607 res=0 errno=0 [ 118.181728][ T7065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.304278][ T5248] Bluetooth: hci5: command tx timeout [ 118.432964][ T5313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.586694][ T7065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.632569][ T5313] usb 1-1: Using ep0 maxpacket: 8 [ 118.664902][ T5313] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 118.705518][ T5313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.772803][ T5313] usb 1-1: config 0 has no interface number 0 [ 118.812132][ T5313] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 118.888717][ T5313] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 118.969119][ T5313] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 118.994463][ T7065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.028299][ T5313] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.127267][ T5313] usb 1-1: config 0 interface 52 has no altsetting 0 [ 119.162680][ T5313] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 119.231829][ T5313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.303445][ T5313] usb 1-1: config 0 descriptor?? [ 119.339217][ T7154] loop3: detected capacity change from 0 to 32768 [ 119.355745][ T7065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.421412][ T7154] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.745 (7154) [ 119.479688][ T7186] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 119.866415][ T5313] usb 1-1: USB disconnect, device number 4 [ 119.942718][ T7193] netlink: 'syz.4.763': attribute type 5 has an invalid length. [ 120.143513][ T7065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.211761][ T7065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.253742][ T7197] loop4: detected capacity change from 0 to 8 [ 120.289517][ T7065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.349535][ T7065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.361485][ T7197] SQUASHFS error: Failed to read block 0x1ec: -5 [ 120.379862][ T5248] Bluetooth: hci5: command tx timeout [ 120.422515][ T7197] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 120.864478][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.967235][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.074674][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.081853][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.202253][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.209569][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.391943][ T7216] loop4: detected capacity change from 0 to 128 [ 121.461649][ T7216] vfat: Bad value for 'time_offset' [ 121.547551][ T7216] loop4: detected capacity change from 0 to 736 [ 121.638648][ T7216] iso9660: Unexpected value for 'utf8' [ 122.044613][ T7228] netlink: 10 bytes leftover after parsing attributes in process `syz.4.779'. [ 122.311892][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.567079][ T7065] veth0_vlan: entered promiscuous mode [ 122.639804][ T7154] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.663414][ T7065] veth1_vlan: entered promiscuous mode [ 122.691787][ T7154] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 122.751804][ T7154] BTRFS info (device loop3): using free-space-tree [ 122.811265][ T7154] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 122.832299][ T7154] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 122.895368][ T7065] veth0_macvtap: entered promiscuous mode [ 122.948227][ T7154] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 122.948490][ T7154] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 122.998220][ T7154] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 123.044829][ T7065] veth1_macvtap: entered promiscuous mode [ 123.087163][ T7154] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 123.087427][ T7154] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 123.195399][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.238750][ T7154] BTRFS error (device loop3): open_ctree failed [ 123.292892][ T7247] loop1: detected capacity change from 0 to 4096 [ 123.305340][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.336635][ T7247] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 123.357803][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.403793][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.451098][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.483590][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.513178][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.548202][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.572405][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.602022][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.672149][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.721241][ T7252] netlink: 20 bytes leftover after parsing attributes in process `syz.4.785'. [ 123.774292][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.864661][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.925990][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.940141][ T7225] loop0: detected capacity change from 0 to 32768 [ 123.995579][ T7225] XFS: noikeep mount option is deprecated. [ 124.006221][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.046708][ T7225] XFS: attr2 mount option is deprecated. [ 124.072862][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.137846][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.164331][ T7225] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.192544][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.246859][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.313195][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.379624][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.452011][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.516814][ T7225] XFS (loop0): Ending clean mount [ 124.528710][ T7065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.585408][ T7065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.597488][ T7225] XFS (loop0): Quotacheck needed: Please wait. [ 124.637513][ T7065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.689396][ T7225] XFS (loop0): Quotacheck: Done. [ 124.694726][ T7065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.029641][ T7275] netlink: 'syz.4.790': attribute type 2 has an invalid length. [ 125.058208][ T7275] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.790'. [ 125.563462][ T7271] loop3: detected capacity change from 0 to 32768 [ 125.828296][ T5241] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.018772][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.105193][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.185318][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.195313][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.616059][ T7285] loop4: detected capacity change from 0 to 32768 [ 126.702522][ T7285] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.893857][ T5235] ocfs2: Unmounting device (7,4) on (node local) [ 127.020106][ T7310] loop3: detected capacity change from 0 to 1024 [ 127.317424][ T5240] hfsplus: bad catalog entry type [ 127.336453][ T5240] hfsplus: bad catalog entry type [ 127.597419][ T7312] loop1: detected capacity change from 0 to 32768 [ 127.624457][ T2974] hfsplus: b-tree write err: -5, ino 4 [ 127.624822][ T7326] loop0: detected capacity change from 0 to 1024 [ 127.636798][ T7312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.807 (7312) [ 127.995042][ T7328] loop4: detected capacity change from 0 to 32768 [ 128.015519][ T7312] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.027181][ T7326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.071649][ T7312] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 128.098714][ T7328] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.099323][ T7326] EXT4-fs error (device loop0): ext4_empty_dir:3128: inode #11: block 33: comm syz.0.814: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0 [ 128.112537][ T7312] BTRFS info (device loop1): using free-space-tree [ 128.127182][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.212549][ T7345] capability: warning: `syz.2.818' uses deprecated v2 capabilities in a way that may be insecure [ 128.280442][ T5241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.421064][ T7328] XFS (loop4): Ending clean mount [ 128.596673][ T5235] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.813014][ T5229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.821781][ T1138] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.001744][ T1138] usb 1-1: Using ep0 maxpacket: 8 [ 129.057010][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.071814][ T1138] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 129.084477][ T1138] usb 1-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 129.114138][ T1138] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 129.144527][ T1138] usb 1-1: config 0 has no interface number 0 [ 129.185812][ T1138] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.234924][ T1138] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 129.300807][ T1138] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.340104][ T1138] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 129.362856][ T1138] usb 1-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 129.411405][ T1138] usb 1-1: Product: syz [ 129.419653][ T1138] usb 1-1: Manufacturer: syz [ 129.441992][ T1138] usb 1-1: config 0 descriptor?? [ 129.453461][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.480161][ T7367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.756741][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.769067][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.780096][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.791230][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.806040][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.820455][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.875396][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.952819][ T7391] netlink: 236 bytes leftover after parsing attributes in process `syz.2.833'. [ 129.984297][ T1138] usb 1-1: USB disconnect, device number 5 [ 130.022958][ T7388] vcan0 speed is unknown, defaulting to 1000 [ 130.194968][ T7393] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.222804][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.563682][ T7385] loop1: detected capacity change from 0 to 32768 [ 130.603321][ T7385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.831 (7385) [ 130.627449][ T52] bridge_slave_1: left allmulticast mode [ 130.644244][ T52] bridge_slave_1: left promiscuous mode [ 130.653511][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.675997][ T7385] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.723941][ T52] bridge_slave_0: left allmulticast mode [ 130.740398][ T1138] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 130.749537][ T52] bridge_slave_0: left promiscuous mode [ 130.760495][ T7385] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 130.799863][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.821783][ T7385] BTRFS info (device loop1): using free-space-tree [ 130.905478][ T7383] loop4: detected capacity change from 0 to 32768 [ 131.129789][ T1138] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 131.140252][ T1138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.174614][ T1138] usb 3-1: config 0 descriptor?? [ 131.216146][ T7383] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.286548][ T1138] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 131.310999][ T7383] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (3, expected 74) [ 131.318892][ T1138] dvb-usb: bulk message failed: -22 (3/0) [ 131.333265][ T7383] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 131.347854][ T7383] OCFS2: File system is now read-only. [ 131.353478][ T7383] (syz.4.830,7383,0):ocfs2_search_chain:1814 ERROR: status = -30 [ 131.384728][ T1138] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 131.397656][ T1138] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 131.406241][ T1138] usb 3-1: media controller created [ 131.411945][ T1138] dvb-usb: bulk message failed: -22 (5/0) [ 131.417743][ T1138] dvb-usb: MAC address reading failed. [ 131.426225][ T1138] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.442922][ T1138] dvb-usb: bulk message failed: -22 (6/0) [ 131.456935][ T7383] (syz.4.830,7383,1):ocfs2_search_chain:1926 ERROR: status = -30 [ 131.465501][ T1138] dvb-usb: bulk message failed: -22 (6/0) [ 131.474307][ T1138] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 131.524201][ T7383] (syz.4.830,7383,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 131.534377][ T5229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.559180][ T7383] (syz.4.830,7383,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 131.569031][ T7383] (syz.4.830,7383,0):ocfs2_claim_new_inode:2273 ERROR: status = -30 [ 131.578203][ T7383] (syz.4.830,7383,0):ocfs2_claim_new_inode:2288 ERROR: status = -30 [ 131.586776][ T7383] (syz.4.830,7383,0):ocfs2_mknod_locked:637 ERROR: status = -30 [ 131.594745][ T7383] (syz.4.830,7383,0):ocfs2_mknod:383 ERROR: status = -30 [ 131.612220][ T7383] (syz.4.830,7383,1):ocfs2_mknod:500 ERROR: status = -30 [ 131.634814][ T7383] (syz.4.830,7383,1):ocfs2_create:674 ERROR: status = -30 [ 131.686260][ T1138] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 131.726503][ T1138] dvb-usb: schedule remote query interval to 100 msecs. [ 131.733632][ T1138] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 131.758228][ T1138] usb 3-1: USB disconnect, device number 5 [ 131.799843][ T7383] syz.4.830 (7383) used greatest stack depth: 15864 bytes left [ 131.922173][ T5248] Bluetooth: hci4: command tx timeout [ 132.114209][ T7445] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 132.313487][ T5235] ocfs2: Unmounting device (7,4) on (node local) [ 132.321959][ T1138] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 132.519557][ T5284] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.579510][ T7451] loop4: detected capacity change from 0 to 16 [ 132.625654][ T7451] erofs: (device loop4): mounted with root inode @ nid 36. [ 132.642211][ T7451] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 132.666758][ T7451] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 132.687938][ T7451] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 132.689639][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.703290][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.880456][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 132.912684][ T5284] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 132.922147][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.939804][ T5284] usb 2-1: Product: syz [ 132.959903][ T5284] usb 2-1: Manufacturer: syz [ 132.965849][ T5284] usb 2-1: SerialNumber: syz [ 132.992625][ T5284] usb 2-1: config 0 descriptor?? [ 133.077021][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.090950][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.106241][ T52] bond0 (unregistering): Released all slaves [ 133.131524][ T7388] chnl_net:caif_netlink_parms(): no params data found [ 133.417226][ T5284] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 133.424513][ T5284] airspy 2-1:0.0: Could not detect board [ 133.430577][ T5284] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 133.462069][ T5284] usb 2-1: USB disconnect, device number 4 [ 133.660621][ T7464] loop0: detected capacity change from 0 to 256 [ 133.719402][ T7464] exfat: Deprecated parameter 'utf8' [ 133.724767][ T7464] exfat: Deprecated parameter 'utf8' [ 133.746116][ T7464] exfat: Deprecated parameter 'utf8' [ 133.772056][ T7464] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 133.831994][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.876968][ T7469] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 133.880441][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.915762][ T7388] bridge_slave_0: entered allmulticast mode [ 133.935362][ T7388] bridge_slave_0: entered promiscuous mode [ 133.948658][ T5248] Bluetooth: hci4: command tx timeout [ 133.969644][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.986603][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.018748][ T7388] bridge_slave_1: entered allmulticast mode [ 134.027551][ T7388] bridge_slave_1: entered promiscuous mode [ 134.217482][ T29] audit: type=1326 audit(1727762528.877:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafcb7dff9 code=0x7ffc0000 [ 134.239861][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.258428][ T29] audit: type=1326 audit(1727762528.877:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafcb7dff9 code=0x7ffc0000 [ 134.298401][ T29] audit: type=1326 audit(1727762528.907:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcafcb7dff9 code=0x7ffc0000 [ 134.321190][ T29] audit: type=1326 audit(1727762528.907:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafcb7dff9 code=0x7ffc0000 [ 134.345074][ T29] audit: type=1326 audit(1727762528.917:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7483 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafcb7dff9 code=0x7ffc0000 [ 134.672462][ T7500] usb usb8: usbfs: process 7500 (syz.1.862) did not claim interface 0 before use [ 134.734768][ T52] hsr_slave_0: left promiscuous mode [ 134.777320][ T52] hsr_slave_1: left promiscuous mode [ 134.789633][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.828998][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.879355][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.886844][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.943649][ T52] veth1_macvtap: left promiscuous mode [ 134.972753][ T52] veth0_macvtap: left promiscuous mode [ 135.010620][ T52] veth1_vlan: left promiscuous mode [ 135.017710][ T52] veth0_vlan: left promiscuous mode [ 135.297877][ T1138] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.479061][ T1138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 135.498615][ T1138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 135.517732][ T1138] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 135.526928][ T1138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.544682][ T1138] usb 3-1: config 0 descriptor?? [ 135.568351][ T7513] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.578459][ T1138] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.851593][ T52] team0 (unregistering): Port device team_slave_1 removed [ 135.910119][ T1138] usb 3-1: USB disconnect, device number 6 [ 136.010272][ T52] team0 (unregistering): Port device team_slave_0 removed [ 136.028333][ T5248] Bluetooth: hci4: command tx timeout [ 136.849520][ T7388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.881739][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.867'. [ 136.921794][ T7388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.069308][ T7388] team0: Port device team_slave_0 added [ 137.082053][ T7388] team0: Port device team_slave_1 added [ 137.128782][ T7527] loop4: detected capacity change from 0 to 256 [ 137.203973][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.222962][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.294923][ T7527] FAT-fs (loop4): Directory bread(block 64) failed [ 137.313987][ T7527] FAT-fs (loop4): Directory bread(block 65) failed [ 137.337093][ T7527] FAT-fs (loop4): Directory bread(block 66) failed [ 137.351388][ T7527] FAT-fs (loop4): Directory bread(block 67) failed [ 137.358422][ T7388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.369516][ T7527] FAT-fs (loop4): Directory bread(block 68) failed [ 137.381046][ T7525] netlink: 'syz.1.874': attribute type 8 has an invalid length. [ 137.428780][ T7527] FAT-fs (loop4): Directory bread(block 69) failed [ 137.457689][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.479977][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.489073][ T7527] FAT-fs (loop4): Directory bread(block 70) failed [ 137.491909][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.495791][ T7527] FAT-fs (loop4): Directory bread(block 71) failed [ 137.504456][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.517444][ T7527] FAT-fs (loop4): Directory bread(block 72) failed [ 137.518513][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.523998][ T7527] FAT-fs (loop4): Directory bread(block 73) failed [ 137.532575][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.545345][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.561184][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.597566][ T7388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.049906][ T7388] hsr_slave_0: entered promiscuous mode [ 138.073173][ T7388] hsr_slave_1: entered promiscuous mode [ 138.100013][ T7388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.167299][ T7388] Cannot create hsr debugfs directory [ 138.190165][ T5248] Bluetooth: hci4: command tx timeout [ 138.218035][ T7532] vcan0 speed is unknown, defaulting to 1000 [ 139.107652][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.114682][ T7566] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 139.244125][ T7538] loop1: detected capacity change from 0 to 32768 [ 139.305858][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.517270][ T7538] [ 139.517270][ T7538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.517270][ T7538] [ 139.572754][ T7538] [ 139.572754][ T7538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.572754][ T7538] [ 139.583925][ T7538] [ 139.583925][ T7538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.583925][ T7538] [ 139.594964][ T7538] [ 139.594964][ T7538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.594964][ T7538] [ 139.607407][ T7538] [ 139.607407][ T7538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.607407][ T7538] [ 139.618893][ T7538] [ 139.618893][ T7538] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.618893][ T7538] [ 139.656530][ T113] [ 139.656530][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.656530][ T113] [ 139.707436][ T5248] Bluetooth: hci3: command tx timeout [ 139.755989][ T5229] [ 139.755989][ T5229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.755989][ T5229] [ 139.786494][ T5229] [ 139.786494][ T5229] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 139.786494][ T5229] [ 140.007205][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.228145][ T7587] netlink: 'syz.4.892': attribute type 2 has an invalid length. [ 140.333781][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 140.352231][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.442589][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 140.667750][ T7603] loop1: detected capacity change from 0 to 2048 [ 140.677539][ T25] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 140.725208][ T7605] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.839107][ T7603] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 140.885559][ T25] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 140.904612][ T25] usb 5-1: config 0 has no interface number 0 [ 140.921054][ T25] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 140.957020][ T7603] Remounting filesystem read-only [ 140.966171][ T7603] syz.1.896: attempt to access beyond end of device [ 140.966171][ T7603] loop1: rw=0, sector=343245196361800, nr_sectors = 2 limit=2048 [ 140.977611][ T25] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 140.985659][ T7603] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 140.998714][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.007083][ T25] usb 5-1: Product: syz [ 141.011262][ T25] usb 5-1: Manufacturer: syz [ 141.015967][ T25] usb 5-1: SerialNumber: syz [ 141.024355][ T25] usb 5-1: config 0 descriptor?? [ 141.038396][ T7596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.057606][ T25] usb-storage 5-1:0.20: USB Mass Storage device detected [ 141.098784][ T25] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 141.363561][ T25] scsi host1: usb-storage 5-1:0.20 [ 141.426565][ T52] bridge_slave_1: left allmulticast mode [ 141.432667][ T52] bridge_slave_1: left promiscuous mode [ 141.439980][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.463288][ T52] bridge_slave_0: left allmulticast mode [ 141.470895][ T52] bridge_slave_0: left promiscuous mode [ 141.476893][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.591282][ T8] usb 5-1: USB disconnect, device number 5 [ 141.715086][ T7621] loop1: detected capacity change from 0 to 512 [ 141.754033][ T7621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.787802][ T7621] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.794202][ T5248] Bluetooth: hci3: command tx timeout [ 141.904305][ T7621] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #12: comm syz.1.900: invalid size [ 142.000681][ T5229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.333321][ T7632] loop4: detected capacity change from 0 to 1024 [ 142.377249][ T7632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.502634][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.838714][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.860680][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.875454][ T52] bond0 (unregistering): Released all slaves [ 142.903073][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.915083][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.931856][ T7532] bridge_slave_0: entered allmulticast mode [ 142.942447][ T7532] bridge_slave_0: entered promiscuous mode [ 142.984028][ T7647] binder: 7646:7647 ioctl c018620b 0 returned -14 [ 143.025510][ T7645] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 143.052671][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.092579][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.123844][ T7532] bridge_slave_1: entered allmulticast mode [ 143.165961][ T7532] bridge_slave_1: entered promiscuous mode [ 143.378141][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.396141][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.916'. [ 143.489655][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.764301][ T7674] loop4: detected capacity change from 0 to 1024 [ 143.794182][ T7679] netlink: 300 bytes leftover after parsing attributes in process `syz.2.921'. [ 143.891890][ T5248] Bluetooth: hci3: command tx timeout [ 143.911729][ T7388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.968419][ T7388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.991437][ T7532] team0: Port device team_slave_0 added [ 144.024919][ T7532] team0: Port device team_slave_1 added [ 144.138887][ T7388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.208211][ T7388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.429288][ T7697] loop4: detected capacity change from 0 to 256 [ 144.463679][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.497531][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.511790][ T7697] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 144.551346][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.599205][ T52] hsr_slave_0: left promiscuous mode [ 144.612143][ T52] hsr_slave_1: left promiscuous mode [ 144.619122][ T7697] exFAT-fs (loop4): error, in sector 160, dentry 12 should be unused, but 0x85 [ 144.635275][ T7697] exFAT-fs (loop4): Filesystem has been set read-only [ 144.644037][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.657820][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.702196][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.744694][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.820126][ T52] veth1_macvtap: left promiscuous mode [ 144.836916][ T52] veth0_macvtap: left promiscuous mode [ 144.853710][ T52] veth0_vlan: left promiscuous mode [ 145.951596][ T5248] Bluetooth: hci3: command tx timeout [ 145.965988][ T7747] devtmpfs: Cannot enable quota on remount [ 146.238572][ T52] team0 (unregistering): Port device team_slave_1 removed [ 146.379555][ T52] team0 (unregistering): Port device team_slave_0 removed [ 146.583949][ T5284] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.762034][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 146.806517][ T5284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.824967][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.863842][ T5284] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 146.872944][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.896620][ T5284] usb 3-1: config 0 descriptor?? [ 146.928988][ T5284] qmi_wwan 3-1:0.0: bogus CDC Union: master=10, slave=0 [ 146.945902][ T5284] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 147.224140][ T5284] usb 3-1: USB disconnect, device number 7 [ 147.466468][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.473460][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.526285][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.782410][ T7532] hsr_slave_0: entered promiscuous mode [ 147.844877][ T7532] hsr_slave_1: entered promiscuous mode [ 147.891693][ T7532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.919356][ T7532] Cannot create hsr debugfs directory [ 148.501612][ T7388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.700553][ T7388] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.822211][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.829424][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.864568][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.871759][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.992675][ T7821] loop1: detected capacity change from 0 to 32768 [ 149.059538][ T7821] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 149.059538][ T7821] [ 149.072547][ T7821] ialloc: diAlloc returned -5! [ 149.091628][ T7388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.377870][ T7845] Invalid ELF header magic: != ELF [ 149.924946][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 149.940784][ T7869] warning: `syz.4.968' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.156270][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.227211][ T7532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.251863][ T7532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.296118][ T7532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.341487][ T7532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.481837][ T7388] veth0_vlan: entered promiscuous mode [ 150.529646][ T7388] veth1_vlan: entered promiscuous mode [ 150.671714][ T7388] veth0_macvtap: entered promiscuous mode [ 150.715474][ T7388] veth1_macvtap: entered promiscuous mode [ 150.739934][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.808254][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.829470][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.849695][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.863132][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.887680][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.918744][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.943323][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.973299][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.020821][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.058162][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.096580][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.127897][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.164068][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.205151][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.236539][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.262502][ T7883] loop4: detected capacity change from 0 to 32768 [ 151.282892][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.296322][ T7883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.972 (7883) [ 151.330171][ T7906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.977'. [ 151.331690][ T7388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.367515][ T7906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.977'. [ 151.389709][ T7388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.401970][ T7883] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.424527][ T7883] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 151.436864][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.460612][ T7883] BTRFS info (device loop4): using free-space-tree [ 151.515914][ T7388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.532886][ T7388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.583376][ T7388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.592126][ T7388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.636249][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.643559][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.894958][ T5235] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.975828][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.983020][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.068961][ T7532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.123300][ T7532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.323492][ T7943] loop4: detected capacity change from 0 to 512 [ 152.436752][ T7943] EXT4-fs (loop4): 1 truncate cleaned up [ 152.447168][ T7943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.516355][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.529039][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.553860][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.688909][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.715794][ T29] audit: type=1326 audit(1727762547.382:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 152.762067][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.792902][ T29] audit: type=1326 audit(1727762547.422:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 152.900696][ T29] audit: type=1326 audit(1727762547.422:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 153.003120][ T29] audit: type=1326 audit(1727762547.422:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 153.010995][ T7965] loop4: detected capacity change from 0 to 2048 [ 153.036985][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.116448][ T29] audit: type=1326 audit(1727762547.422:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 153.181766][ T7965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.200958][ T29] audit: type=1326 audit(1727762547.432:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 153.224897][ T29] audit: type=1326 audit(1727762547.432:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 153.245139][ T7532] veth0_vlan: entered promiscuous mode [ 153.247789][ T29] audit: type=1326 audit(1727762547.432:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd37dff9 code=0x7ffc0000 [ 153.277316][ T29] audit: type=1800 audit(1727762547.892:23): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.987" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 153.358432][ T7532] veth1_vlan: entered promiscuous mode [ 153.373495][ T7975] loop1: detected capacity change from 0 to 16 [ 153.398374][ T7975] erofs: (device loop1): erofs_read_inode: bogus i_mode (3) @ nid 36 [ 153.482671][ T7532] veth0_macvtap: entered promiscuous mode [ 153.490097][ T5235] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.507861][ T7532] veth1_macvtap: entered promiscuous mode [ 153.557974][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.569602][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.583440][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.594400][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.642639][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.677042][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.708832][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.729826][ T7983] loop4: detected capacity change from 0 to 1024 [ 153.743181][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.772632][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.814244][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.830923][ T7987] loop3: detected capacity change from 0 to 8 [ 153.846510][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.890064][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.937974][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.969033][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.992959][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.011672][ T7992] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 154.019155][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.062503][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.086797][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.113136][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.136117][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.150848][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.179063][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.189739][ T8000] loop1: detected capacity change from 0 to 16 [ 154.223273][ T7532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.234893][ T8000] erofs: (device loop1): mounted with root inode @ nid 36. [ 154.255917][ T7532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.301484][ T7532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.335937][ T7532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.493313][ T8008] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1005'. [ 154.528862][ T8008] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 154.599127][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.632247][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.689295][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.717476][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.854032][ T5313] IPVS: starting estimator thread 0... [ 154.963512][ T8022] IPVS: using max 19 ests per chain, 45600 per kthread [ 154.965136][ T8026] random: crng reseeded on system resumption [ 155.031302][ T5314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.305180][ T5314] usb 4-1: Using ep0 maxpacket: 16 [ 155.329514][ T8039] tipc: Started in network mode [ 155.334872][ T8039] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 155.340881][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.342549][ T8039] tipc: Enabled bearer , priority 0 [ 155.362145][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.422446][ T5314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.422497][ T5314] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 155.422524][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.512526][ T5314] usb 4-1: config 0 descriptor?? [ 155.715031][ T8048] capability: warning: `syz.2.1022' uses 32-bit capabilities (legacy support in use) [ 155.802299][ T5313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.919331][ T8052] loop1: detected capacity change from 0 to 4096 [ 155.939193][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 155.962307][ T5313] usb 5-1: Using ep0 maxpacket: 32 [ 155.969045][ T8057] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.975975][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.006946][ T5313] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 156.017861][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.036616][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.059393][ T5313] usb 5-1: Product: syz [ 156.064379][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.071198][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.078597][ T5313] usb 5-1: Manufacturer: syz [ 156.083348][ T5313] usb 5-1: SerialNumber: syz [ 156.098811][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.108765][ T5313] usb 5-1: config 0 descriptor?? [ 156.127100][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.135373][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.142946][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.178148][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.190849][ T8059] loop0: detected capacity change from 0 to 256 [ 156.197573][ T5314] ryos 0003:1E7D:31CE.0001: unknown main item tag 0x0 [ 156.239260][ T5314] ryos 0003:1E7D:31CE.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0 [ 156.327162][ T8061] loop1: detected capacity change from 0 to 2048 [ 156.358300][ T5314] usb 4-1: USB disconnect, device number 6 [ 156.428781][ T5313] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 156.437713][ T5313] eb 9a 3b 80 9b e4 7a f0 [ 156.442421][ T5313] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 156.474082][ T5284] tipc: Node number set to 11578026 [ 156.582670][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 156.631241][ T5326] usb 5-1: USB disconnect, device number 6 [ 156.707955][ T8067] process 'syz.1.1031' launched './file1' with NULL argv: empty string added [ 156.756934][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 156.756970][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 156.756998][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 156.757020][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 156.759452][ T8] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 156.759486][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.759509][ T8] usb 3-1: Product: syz [ 156.759525][ T8] usb 3-1: Manufacturer: syz [ 156.759541][ T8] usb 3-1: SerialNumber: syz [ 156.762888][ T8] usb 3-1: config 0 descriptor?? [ 156.765208][ T8] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 156.861220][ T8072] binder: 8071:8072 ioctl c018620c 200002c0 returned -22 [ 157.021187][ T8] scsi host1: usb-storage 3-1:0.0 [ 157.371588][ T8084] vivid-000: disconnect [ 157.393371][ T8083] vivid-000: reconnect [ 157.462266][ T25] usb 3-1: USB disconnect, device number 8 [ 157.734716][ T8076] loop3: detected capacity change from 0 to 32768 [ 157.742033][ T8076] XFS: noikeep mount option is deprecated. [ 157.749150][ T8076] XFS: attr2 mount option is deprecated. [ 158.009339][ T8098] loop1: detected capacity change from 0 to 1024 [ 158.170811][ T8076] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.227881][ T8098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.321096][ T8098] VFS: Lookup of 'file0' in ext4 loop1 would have caused loop [ 158.409343][ T8121] loop0: detected capacity change from 0 to 1024 [ 158.422518][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.490852][ T5229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.592951][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 158.600014][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.605509][ T8076] XFS (loop3): Ending clean mount [ 158.616801][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.630647][ T8121] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 158.647304][ T8076] XFS (loop3): Quotacheck needed: Please wait. [ 158.648090][ T8] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 158.657734][ T8121] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 158.675347][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.700466][ T8] usb 5-1: config 0 descriptor?? [ 158.807495][ T8076] XFS (loop3): Quotacheck: Done. [ 158.833578][ T1172] hfsplus: b-tree write err: -5, ino 4 [ 159.107084][ T8135] loop1: detected capacity change from 0 to 128 [ 159.229449][ T8] hid-alps 0003:044E:120C.0002: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.4-1/input0 [ 159.245149][ T7388] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.276093][ T8137] loop0: detected capacity change from 0 to 256 [ 159.292562][ T8137] exfat: Deprecated parameter 'namecase' [ 159.298295][ T8137] exfat: Deprecated parameter 'utf8' [ 159.303942][ T8137] exfat: Deprecated parameter 'namecase' [ 159.419239][ T8137] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 159.601068][ T25] usb 5-1: USB disconnect, device number 7 [ 159.763707][ T8148] netlink: 'syz.0.1063': attribute type 2 has an invalid length. [ 159.963727][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1066'. [ 160.042841][ T8154] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1066'. [ 160.095625][ T8154] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1066'. [ 160.555407][ T8180] loop1: detected capacity change from 0 to 64 [ 160.565322][ T8179] loop3: detected capacity change from 0 to 512 [ 160.642462][ T8182] overlayfs: lower data-only dirs require metacopy support. [ 160.673953][ T8179] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 160.757282][ T8179] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 160.802313][ T8179] System zones: 0-1, 15-15, 18-18, 34-34 [ 160.808420][ T8179] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.878881][ T8179] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 160.935765][ T8179] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 160.995965][ T8179] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 161.021712][ T8179] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1077: bad orphan inode 16 [ 161.054343][ T8179] ext4_test_bit(bit=15, block=18) = 1 [ 161.070067][ T8179] is_bad_inode(inode)=0 [ 161.076893][ T8179] NEXT_ORPHAN(inode)=0 [ 161.089585][ T8179] max_ino=32 [ 161.102603][ T8179] i_nlink=2 [ 161.103524][ T8179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.164629][ T8179] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 161.165421][ T8179] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 161.184983][ T7388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.231799][ T5326] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 161.381682][ T5326] usb 2-1: Using ep0 maxpacket: 32 [ 161.386526][ T5326] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 161.386560][ T5326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.386582][ T5326] usb 2-1: Product: syz [ 161.386597][ T5326] usb 2-1: Manufacturer: syz [ 161.386613][ T5326] usb 2-1: SerialNumber: syz [ 161.388620][ T5326] usb 2-1: config 0 descriptor?? [ 161.598764][ T5326] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 161.809610][ T8] usb 2-1: USB disconnect, device number 5 [ 161.917669][ T8217] netlink: 186996 bytes leftover after parsing attributes in process `syz.0.1095'. [ 161.942147][ T8217] netlink: 4420 bytes leftover after parsing attributes in process `syz.0.1095'. [ 161.951632][ T25] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 162.113184][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 162.124130][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.147972][ T8222] loop0: detected capacity change from 0 to 512 [ 162.163506][ T25] usb 4-1: config 0 descriptor?? [ 162.182517][ T25] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 162.196580][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 162.204233][ T8222] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 162.215575][ T25] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 162.226249][ T8222] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.247112][ T25] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 162.259503][ T8222] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 162.286591][ T25] usb 4-1: media controller created [ 162.292414][ T8222] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.317668][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 162.337717][ T25] dvb-usb: MAC address reading failed. [ 162.344568][ T8222] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 162.356219][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.418540][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 162.426198][ T8222] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #16: comm syz.0.1097: casefold flag without casefold feature [ 162.455215][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 162.463320][ T25] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 162.473679][ T8222] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1097: couldn't read orphan inode 16 (err -117) [ 162.489855][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 162.509577][ T8222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.530777][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 162.551560][ T25] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 162.593277][ T25] usb 4-1: USB disconnect, device number 7 [ 162.652843][ T7532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.672355][ T25] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 162.827887][ T29] audit: type=1326 audit(1727762557.484:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8232 comm="syz.0.1102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b8ed7dff9 code=0x0 [ 163.190821][ T8241] loop1: detected capacity change from 0 to 1764 [ 164.192846][ T8283] openvswitch: netlink: Unknown key attributes 1 [ 164.498362][ T8259] loop1: detected capacity change from 0 to 32768 [ 164.550125][ T8259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1113 (8259) [ 164.595682][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1131'. [ 164.616729][ T8259] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.651426][ T8297] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1131'. [ 164.659161][ T8259] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.690404][ T8259] BTRFS info (device loop1): using free-space-tree [ 164.831968][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 164.848819][ T8306] veth2: entered promiscuous mode [ 164.854778][ T8306] veth2: entered allmulticast mode [ 165.103557][ T8328] x_tables: ip_tables: udp match: only valid for protocol 17 [ 165.356891][ T8259] BTRFS info (device loop1): balance: start -sconvert=raid0,profiles=data|system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=8,devid=0,vrange=0..0,stripes=0..0 [ 165.380330][ T8259] BTRFS info (device loop1): balance: ended with status: 0 [ 165.502886][ T5229] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.942096][ T1138] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.108170][ T1138] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.126764][ T1138] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 166.166694][ T1138] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.194576][ T1138] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 166.230921][ T1138] usb 5-1: config 1 interface 1 has no altsetting 0 [ 166.254255][ T1138] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.279011][ T1138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.302418][ T1138] usb 5-1: Product: syz [ 166.306639][ T1138] usb 5-1: Manufacturer: syz [ 166.331282][ T1138] usb 5-1: SerialNumber: syz [ 166.363510][ T8362] loop3: detected capacity change from 0 to 4096 [ 166.392423][ T8362] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 166.566310][ T8362] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 166.611444][ T1138] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 166.635739][ T1138] usb 5-1: MIDIStreaming interface descriptor not found [ 166.677423][ T8352] loop0: detected capacity change from 0 to 32768 [ 166.738045][ T1138] usb 5-1: USB disconnect, device number 8 [ 166.850141][ T8372] loop1: detected capacity change from 0 to 4096 [ 166.904968][ T8372] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 166.946706][ T8352] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 167.100413][ T8352] XFS (loop0): Ending clean mount [ 167.114550][ T8352] XFS (loop0): Quotacheck needed: Please wait. [ 167.153758][ T8372] ntfs3: loop1: failed to convert "c46c" to macroman [ 167.195551][ T8352] XFS (loop0): Quotacheck: Done. [ 167.379355][ T8398] usb usb8: usbfs: process 8398 (syz.3.1166) did not claim interface 0 before use [ 167.410372][ T7532] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 167.551259][ T1138] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.741756][ T1138] usb 5-1: Using ep0 maxpacket: 16 [ 167.749391][ T1138] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.797852][ T1138] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.849078][ T1138] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.871174][ T5314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.902943][ T1138] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.909627][ T1138] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 167.920969][ T1138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.931648][ T1138] usb 5-1: config 0 descriptor?? [ 168.062136][ T5314] usb 4-1: Using ep0 maxpacket: 16 [ 168.072832][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.084909][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.111130][ T5314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 168.130723][ T5314] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 168.179661][ T5314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.227696][ T5314] usb 4-1: config 0 descriptor?? [ 168.385257][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.403518][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.419603][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.428864][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.439020][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.454393][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.468204][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.480699][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.488956][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.507824][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.515864][ T1138] hid-generic 0003:045E:05DA.0003: unknown main item tag 0x0 [ 168.531677][ T1138] hid-generic 0003:045E:05DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.4-1/input0 [ 168.645079][ T8] usb 5-1: USB disconnect, device number 9 [ 168.664701][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.701894][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.711150][ T5326] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.734270][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.741779][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.752429][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.759834][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.767814][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.775913][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.784119][ T5314] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 168.802032][ T5314] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 168.815883][ T5314] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 168.858687][ T5314] microsoft 0003:045E:07DA.0004: no inputs found [ 168.877114][ T5314] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 168.891272][ T5326] usb 1-1: Using ep0 maxpacket: 16 [ 168.911669][ T5314] usb 4-1: USB disconnect, device number 8 [ 168.919395][ T5326] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.939868][ T5326] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.972253][ T5326] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 169.001175][ T5326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.019464][ T5326] usb 1-1: Product: syz [ 169.034260][ T5326] usb 1-1: Manufacturer: syz [ 169.039003][ T5326] usb 1-1: SerialNumber: syz [ 169.062147][ T5326] usb 1-1: config 0 descriptor?? [ 169.078531][ T5326] hub 1-1:0.0: bad descriptor, ignoring hub [ 169.098057][ T5326] hub 1-1:0.0: probe with driver hub failed with error -5 [ 169.136335][ T5326] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 169.178947][ T2999] usb 1-1: Failed to submit usb control message: -71 [ 169.208535][ T2999] usb 1-1: unable to send the bmi data to the device: -71 [ 169.217539][ T8433] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1180'. [ 169.247708][ T2999] usb 1-1: unable to get target info from device [ 169.266586][ T8433] openvswitch: netlink: Multiple metadata blocks provided [ 169.279901][ T2999] usb 1-1: could not get target info (-71) [ 169.321867][ T2999] usb 1-1: could not probe fw (-71) [ 169.411693][ T5326] usb 1-1: USB disconnect, device number 6 [ 170.054119][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.081878][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.100910][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.108840][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.111273][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.122632][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135662][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135699][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135728][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135755][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135784][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135812][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135840][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135868][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135895][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135923][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135950][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.135977][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136005][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136032][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136060][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136087][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136115][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136142][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136170][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136198][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136226][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136253][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136278][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136306][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136334][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136361][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136388][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136416][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136443][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136471][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136498][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136532][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136559][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136587][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136613][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136641][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136669][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136697][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136725][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136752][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136780][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136808][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136835][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136863][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136890][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136917][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136944][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.136972][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.137000][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.137027][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.137056][ T25] hid-generic 0006:0000:0000.0005: unknown main item tag 0x0 [ 170.143828][ T1138] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.322646][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.334190][ T25] hid-generic 0006:0000:0000.0005: hidraw0: VIRTUAL HID v0.07 Device [syz0] on syz0 [ 170.357117][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.561052][ T1138] usb 5-1: Using ep0 maxpacket: 8 [ 170.595718][ T1138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.595756][ T1138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.595787][ T1138] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 170.595813][ T1138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.597759][ T1138] usb 5-1: config 0 descriptor?? [ 170.676258][ T8460] loop0: detected capacity change from 0 to 64 [ 170.769675][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.769711][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.785171][ T8] usb 2-1: config 0 descriptor?? [ 170.839339][ T5313] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c7: 0000 [#1] PREEMPT SMP KASAN PTI [ 170.839366][ T5313] KASAN: null-ptr-deref in range [0x0000000000000638-0x000000000000063f] [ 170.839383][ T5313] CPU: 1 UID: 0 PID: 5313 Comm: kworker/1:6 Not tainted 6.12.0-rc1-next-20241001-syzkaller #0 [ 170.839404][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.839416][ T5313] Workqueue: events_long flush_mdb [ 170.839453][ T5313] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 170.839478][ T5313] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 8c 0f 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 fa f2 73 ff 4d 8b 34 24 49 8d 6e [ 170.839499][ T5313] RSP: 0018:ffffc90004417b40 EFLAGS: 00010202 [ 170.839515][ T5313] RAX: ffffffff828ac694 RBX: 00000000000000c7 RCX: ffff888032fd3c00 [ 170.839529][ T5313] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 170.839541][ T5313] RBP: ffffc90004417dc0 R08: ffff888026e6a9eb R09: 1ffff11004dcd53d [ 170.839554][ T5313] R10: dffffc0000000000 R11: ffffed1004dcd53e R12: 0000000000000638 [ 170.839567][ T5313] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 170.839580][ T5313] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 170.839596][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.839608][ T5313] CR2: 000000002000e000 CR3: 0000000068aa2000 CR4: 00000000003526f0 [ 170.839625][ T5313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.839637][ T5313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.839649][ T5313] Call Trace: [ 170.839655][ T5313] [ 170.839663][ T5313] ? __die_body+0x5f/0xb0 [ 170.839681][ T5313] ? die_addr+0xb0/0xe0 [ 170.839698][ T5313] ? exc_general_protection+0x3dd/0x5d0 [ 170.839727][ T5313] ? asm_exc_general_protection+0x26/0x30 [ 170.839754][ T5313] ? hfs_mdb_commit+0x24/0xfd0 [ 170.839775][ T5313] ? hfs_mdb_commit+0x37/0xfd0 [ 170.839799][ T5313] ? process_scheduled_works+0x976/0x1850 [ 170.839822][ T5313] ? _raw_spin_unlock+0x28/0x50 [ 170.839843][ T5313] ? process_scheduled_works+0x976/0x1850 [ 170.839866][ T5313] process_scheduled_works+0xa63/0x1850 [ 170.839898][ T5313] ? __pfx_process_scheduled_works+0x10/0x10 [ 170.839924][ T5313] ? assign_work+0x364/0x3d0 [ 170.839947][ T5313] worker_thread+0x870/0xd30 [ 170.839972][ T5313] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 170.839996][ T5313] ? __kthread_parkme+0x169/0x1d0 [ 170.840020][ T5313] ? __pfx_worker_thread+0x10/0x10 [ 170.840043][ T5313] kthread+0x2f0/0x390 [ 170.840059][ T5313] ? __pfx_worker_thread+0x10/0x10 [ 170.840081][ T5313] ? __pfx_kthread+0x10/0x10 [ 170.840098][ T5313] ret_from_fork+0x4b/0x80 [ 170.840121][ T5313] ? __pfx_kthread+0x10/0x10 [ 170.840138][ T5313] ret_from_fork_asm+0x1a/0x30 [ 170.840165][ T5313] [ 170.840172][ T5313] Modules linked in: [ 170.840185][ T5313] ---[ end trace 0000000000000000 ]--- [ 170.840200][ T5313] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 170.840223][ T5313] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 8c 0f 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 fa f2 73 ff 4d 8b 34 24 49 8d 6e [ 170.840238][ T5313] RSP: 0018:ffffc90004417b40 EFLAGS: 00010202 [ 170.840254][ T5313] RAX: ffffffff828ac694 RBX: 00000000000000c7 RCX: ffff888032fd3c00 [ 170.840268][ T5313] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 170.840281][ T5313] RBP: ffffc90004417dc0 R08: ffff888026e6a9eb R09: 1ffff11004dcd53d [ 170.840295][ T5313] R10: dffffc0000000000 R11: ffffed1004dcd53e R12: 0000000000000638 [ 170.840308][ T5313] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 170.840322][ T5313] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 170.840338][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.840351][ T5313] CR2: 000000002000e000 CR3: 0000000068aa2000 CR4: 00000000003526f0 [ 170.840367][ T5313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 170.840378][ T5313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.840392][ T5313] Kernel panic - not syncing: Fatal exception [ 170.840820][ T5313] Kernel Offset: disabled