last executing test programs: 7.160586852s ago: executing program 3 (id=3038): r0 = syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x96db, &(0x7f0000009b40)="$eJzs2gm8pnMBsP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjkrKUVLSipFAR0absW7ayhLK1kuwtlBAqa6TFNsz/c8wZxnRRvb3/V7mu6/M553me+7nv+/ye3/dezmE2mbTBxMFgjsG0xg1m7pyrJ08Zc+W6tx+x+fxHL3Py3fs+esVFx488Thh5nDgYDEaNvD00bdnYwSmnjhrM+tDyR5p7zrmG5h0Mlh15ObKfwYrTHua9bPp6U2dq5oEOPfJtz2lfDzXf8I8YfnLovrsfNhgMxsyw/dBgMLTLP3xQaZtMmDzpEauH3YatRo88n/Frtmlf8144GMx7+oCPjxnXHXoCPtLwz9zlRWePXvcJ+Nn/c20yYfJaM/kPn4uzjCxbcfgcn/kcNDbzcX7rYpuuPDKFDx1vg8HwJe5R58r/RJtMmLT24LGv84MjVjl/z6nTrpuzD6bdKOYcDAZzjVxf53miXeo/a8LE5R66Z09/PcI+/VjehY6L49564oPDN+nBYLDAYDB2zen3gqqqqvrfaMLE5VaD+/8cj3f/P+mkhU/v/l9VVfW/21oTJi43fK+f6f4/z+Pd/3dY+ILdpv23//ErTtvqwSf2Q1RVVdW/1aS18P4/5vHu/yuudsna3f+rqqr+d1t/nYfu//PMdP9f8PHu/286cZVFRtab/nvDAzPscmiG/59w/wzLZ5lh+X0zLB89w35mXH+2GZbfM8Py2Yffg/XHDQZjp/97wSmPLB47bvi9keX3zrB8/CP/TmfR1WdYPmGG5ZNmWD5xZKzDyyfPsHzyDOuv+ThTXVVV9V/T+stNWm0ww7+zH1m80PT36f5/3hnXLPlEjbeqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqr+N3vw9jPPHgwGQ4PBYNRgMGUw8nzGx8HUqVOnDr8+6dxLL33CBvrf0dA5V0+eMubKdW8/YvP5j17m5Lv3fWSW/mf73/8E9Z807D/HseMGg+02eqKHUk9Anf/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn934D/6iRhHPTF1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xT14+5lnjxwDowaDKYOR57tMfzxjnze+eWTVlTc++c4DHtly0fFbjzw75+rJU7Z+Asb+BDQ0/FnHXLnu7UdsPv/Ry5x8975PgrPnf/8T1H/SQ/5bDw0GI+f3mOFzed0J62+4xGAwOODOkzdeYfDweysNv7fK2FkGszy06RIPfV9jUd7xLmtOexw//G3Bh/dx0kP7X2vqIbMMzTSIGXrFOdcf8c5N7l5+5sfFH/tzjJr+5LBrT7tr6tSpUx+1cKQ5HmPj6fuf/llmPs9Hxr7E8NiX2nHb9yz1vp0/tOTW22621ZZbbbndMsuttPwKyy6zwsovW+odW2+z5dLTvj/GnI176Ptq/8qczTPznN0+YcY5m/mzPdacjXv8OXtoj1M+NLTh9Dmb9d+cs9Uef87GbT3ygxYdP3qw6UNTMzQYLLr66MFOwy+WmX0wWHSNkXUXGl531bGjBoN9Hvmgw89mf/gYHNpleJ1NJm0w8ZGR/eMn/Ifr9KNWXHT8yOOEkceJ04Y4bvDIoTh2cMqpo4bn4lHTPPeccw3NOxgsO/JyZD+DlUfePXj6elNnauaBDj3ybc9pXw813/BOhp+8a+kzrxo+F2fa/v+P/o+u///gtdLQwxM1NPI1ss40rwmT13rkZz00DcNzN8vIshWHTWaes/+b/cN4x806GPM445201sTlhhfPNP/TN8Hj647Fzv/wtGNr/IrTtnrw/xiFxjvP44x3rQk43nkeb7zHfuTiU6ft6v/aeGe61q390Pfx/8q1bvD417pZaAdbXrTIzNe61zz2EB91Hk+fo9lnWumxrnU7HbjsLsP7H//417q1h8c++lHXulGDwaKrTb/WDV/4Jo0e7DP8YtnhF5NHD44efrHcQy/mHJw7/OKlb99+my2GF6w5fU6WHt7v+LFDD7mfv+Iti0/db+rU1UfGMn7so8c6cnyMm/F+PmHstMmcvu30/Q6vOn2/Nz192nuTRvY74d/Y7/Rtabx3zjftvckj+504035HP85+p2/7D+fDEkMPX7ge43ozaabrzcjfONN/3KO+Zpv2Ne+Fg8G8p5PvTOv+02smnb9zPM54J0xcbrXh8c10/j58ONL5e/HkK4fvFfMOBoMFBoOxa04f+7/Z0GONd9bHH+9EGO+sjzfey4/Zdp3/C+MdzDDeRx1nm6w/7VhZc+Q4m/xvHL/Tt535Ojb6oXenXfbX/FeuY+P+4Tq26yyjZprsGXqs39m2gPWnPV/okd9zrz7hqOlzP3qm/f6z39lm+CxDcB0bM9Pf86PWvG4wRHO+y7GrXjK0/+PP+ejBo/+2mD7n07d9vDmf/K/M+bMef87/1d+Tl3j+tPdHzzT+Ged8vb2fudf0OZ9tpv3+szmf/Pj3jn+c8/GD0TTnS983bd4e73r6WHM+fdvpcz78EVcZO+tgjeF71sicT/pX5nyh/zvH+Vyw/rTnWz686KwjTn799DmfeY7/2ZxP+nfnfNzDx/miD733vFGD2WYb7LTZjjvusMy079NfLjvtO1+L7rl62jw/3r30sYymb/t458Xq/4rRmH/JaOifGS0862MZPXJqHb79Dk/7P70Wrf7vGg34WnTlUdPm7fF+L3qsOZ++Ld0HF5xh+5n/Dl1/nYd+755npvvg9E3wPnjWGWvvMX2XI5s9MNMwp99X759h+SwzLL9vhuWjZ9jPjOvPNsPye2ZYPvwRZpth/ems44b/5h1ZPuWR1ccO//I0bmT5vTMsH//ItouuPsPyCTMsnzTD8omPHBqLTp5h+eQZ1l9z8G82/b9Jbz3zRb7+1frvv+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MU9ePuZZ48cA6MGgymDac+HRh4Huwytd9urhh8Hg8HoFY+fut4TPd4nuKFzrp48ZcyV695+xObzH73MyXfv+yQ4e/73P0H9Jz3kv/XQYDByfo/ZejAYrDth/Q2XGAwG6009fsVRg4ffW2j4vVXHjhoM9hl61A5mf3idoV2G19lk0gYTB4M5RtYY9w8/9B/Oo0etuOj4kccJI48Tp12fxg0eOV7HDk45ddRg1oeWP9Lcc841NO9gsOzIy5H9DFac9jDvZdPXmzpTMw906JFve077eqj5hn/E8JOdtpr87OG5mmn7/5qmX6u3HvVPV+38d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3EP3n7m2SPHwKjBYMpg2vOhXUYeB0MnnvLCkUNk9M5XHHnIEz3eJ7ihc66ePGXMlevefsTm8x+9zMl37/skOHv+9z9B/Sc95L/10GAwcn6P2XowGKw7Yf0NlxgMBoccecXOowYPv7fQ8Hurjh01GOwz9KgdzP7wOkO7DK+zyaQNJg4Gc4ysMe4ffug/nEePWnHR8SOPE0YeJ067Po0bPHK8jh2ccuqowawPLX+kueeca2jewWDZkZcj+xmsOO1h3sumrzd1pmYe6NAj3/ac9vVQ8w3/iOEnu89z9YnDczXT9v81Tb9Wbz3qn67a+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd/RP/d/+/Gkc9MXX+u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf34O1nnj1yDIwaDKYMpj0fNfI4tMuNN3xsw+HH4dfzr7nH1U/0eJ/ghs65evKUMVeue/sRm89/9DIn373vk+Ds+d//BPWfNOw/x7HjBoPtNnqih1JPQJ3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u/u3/Wf9/2cc9cTU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4h68/cyzR56OemTpqF06LrChc66ePGXMlevefsTm8x+9zMl37/tED+g/7TH8d80fs/jvlj9m8f9E/pjF/5P5Yxb/3fPHLP6fyh+z+O+RP2bx/3T+mMX/M/ljFv8988cs/nvlj1n8984fs/h/Nn/M4v+5/DGL/+fzxyz+++SPWfz3zR+z+H8hf8ziv1/+mMV///wxi/8X88cs/gfkj1n8D8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4n9Q/pjF/+v5Yxb/b+SPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4v/N/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvH/Vv6Yxf/b+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bx/07+mMX/9Pwxi/8Z+WMW/zPzxyz+380fs/h/L3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8v58/ZvH/Qf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf/8/DGL/wX5Yxb/n+aPWfwvzB+z+P8sf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxvzJ/zOJ/Vf6Yxf/X+WMW/9/kj1n8r84fs/j/Nn/M4n9N/pjF/9r8MYv/dfljFv/f5Y9Z/K/PH7P435A/ZvG/MX/M4v/7/DGL/x/yxyz+f8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8ofs/jfkT9m8b8zf8zi/+f8MYv/XfljFv+/5I9Z/P+aP2bx/1v+mMX/7/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/LIP8MYv/UP6YxX9U/pjFf5b8MYv/rPljFv/R+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/p+SPWfznyx+z+I+x+b963n9pNYv//Db/fzGL/9j8MYv/AvljFv8F88cs/k/NH7P4Py1/zOL/9Pwxi/9C+WMW/2c8pv9H/t+M6780i//Cnf+Yxf+Z+WMW/2flj1n8F8kfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv2j+mMV/sfwxi/8L8scs/ovnj1n8l8gfs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvmT9m8X9p/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8X9Z/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8X54/ZvFfJX/M4r9q/pjF/xX5Yxb/V+aPWfxflT9m8R+fP2bxn5A/ZvGfmD9m8V8tf8ziv3r+mMV/jfwxi/+k/DGL/+T8MYv/mvljFv+18scs/q/OH7P4vyZ/zOK/dv6YxX+d/DGL/7r5Yxb/1+aPWfzXyx+z+L8uf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+r88fs/hvnD9m8d8kf8zi/4b8MYv/G/PHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+aP2bx3yx/zOK/ef6Yxf/t+WMW/y3yxyz+W+aPWfzfkT9m8d8qf8zi/878MYv/1vljFv935Y9Z/N+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/9+SPWfzfmz9m8d8hf8zi/778MYv/jvljFv/3549Z/D+QP2bx/2D+mMV/p/wxi//O+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8P54/ZvHfJX/M4r9r/pjFf7f8MYv/J/LHLP6fzB+z+O+eP2bx/1T+mMV/j/wxi/+n88cs/p/JH7P475k/ZvHfK3/M4r93/pjF/7P5Yxb/z+WPWfw/nz9m8d8nf8ziv2/+mMX/C/ljFv/98scs/vvnj1n8v5g/ZvE/IH/M4n9g/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/g/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+ePWfwvyB+z+P80f8zif2H+mMX/Z/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+V+WMW/6vyxyz+v84fs/j/Jn/M4n91/pjF/7f5Yxb/a/LHLP7X5o9Z/K/LH7P4/y5/zOJ/ff6Yxf+G/DGL/435Yxb/3+ePWfz/kD9m8f9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8f9T/pjF/478MYv/nfljFv8/549Z/O/KH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8p+WMW/wfyxyz+D+aPWfyn5o9J/Gcd5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8lf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/NH7P4Py1/zOL/9Pwxi/9C+WMW/2fkj1n8F84fs/g/M3/M4v+s/DGL/yL5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n549Z/BfNH7P4L5Y/ZvF/Qf6YxX/x/DGL/xL5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/JfPHLP4vzR+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4vyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/8vzxyz+q+SPWfxXzR+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf/V+WMW/9fkj1n8184fs/ivkz9m8V83f8zi/9r8MYv/evljFv/X5Y9Z/NfPH7P4b5A/ZvHf0OM/+t9Z2eK/kcf/38ri//r8MYv/xvljFv9N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi/+m+WMW/83yxyz+m+ePWfzfnj9m8d8if8ziv2X+mMX/HfljFv+t8scs/u/MH7P4b50/ZvF/V/6Yxf/d+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bxf0/+mMX/vfljFv8d8scs/u/LH7P475g/ZvF/f/6Yxf8D+WMW/w/mj1n8d8ofs/jvnD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjF/+P5Yxb/XfLHLP675o9Z/HfLH7P4fyJ/zOL/yfwxi//u+WMW/0/lj1n898gfs/h/On/M4v+Z/DGL/575Yxb/vfLHLP57549Z/D+bP2bx/1z+mMX/8/ljFv998scs/vvmj1n8v5A/ZvHfL3/M4r9//pjF/4v5Yxb/A/LHLP4H5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxPyh/zOL/9fwxi/838scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/2b+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+H8rf8zi/+38MYv/yfljFv9T8scs/qfmj1n8T8sfs/h/J3/M4n96/pjF/4z8MYv/mfljFv/v5o9Z/L+XP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif37+mMX/gvwxi/9P88cs/hfmj1n8f5Y/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfmT9m8b8qf8zi/+v8MYv/b/LHLP5X549Z/H+bP2bxvyZ/zOJ/bf6Yxf+6/DGL/+/yxyz+1+ePWfxvyB+z+N+YP2bx/33+mMX/D/ljFv8/5o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv8/5Y9Z/O/IH7P435k/ZvH/c/6Yxf+u/DGL/1/yxyz+f80fs/j/LX/M4v/3/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH/0IH/M4j+UP2bxH5U/ZvGfJX/M4j9r/pjFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf8p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X9q/pjF/2n5Yxb/p+ePWfwXyh+z+D8jf8ziv3D+mMX/mfljFv9n5Y9Z/BfJH7P4Pzt/zOL/nPwxi/+4/DGL/3Pzxyz+z3vYf9wTM67/0iz+z+/8xyz+i+aPWfwXyx+z+L8gf8ziv3j+mMV/ifwxi/8L88cs/i/KH5vmP8dgMHhy+784f8xy/r8kf8ziv2T+mMX/pfljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/ZfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X95/pjFf5X8MYv/qvljFv9X5I9Z/F+ZP2bxf1X+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/On/M4v+a/DGL/9r5Yxb/dfLHLP7r5o9Z/F+bP2bxXy9/zOL/uvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8+f8ziv3H+mMV/k/wxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOK/af6YxX+z/DGL/+b5Yxb/t+ePWfy3yB+z+G+ZP2bxf0f+mMV/q/wxi/8788cs/lvnj1n835U/ZvF/d/6YxX+b/DGL/7b5Yxb/7fLHLP7b5z8rLbT4vyd/zOL/3vwxi/8O+WMW//flj1n8d8wfs/i/P3/M4v+B/DGL/wfzxyz+O+WPWfx3zh+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/LvljFv9d88cs/rvlj1n8P5E/ZvH/ZP6YxX/3/DGL/6fyxyz+e+SPWfw/nT9m8f9M/pjFf8/8MYv/XvljFv+988cs/p/NH7P4fy5/zOL/+fwxi/8++WMW/33zxyz+X8gfs/jvlz9m8d8/f8zi/8X8MYv/AfljFv8D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4H5Q/ZvH/ev6Yxf8b+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4fzN/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/L+VP2bx/3b+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfy/kz9m8T89f8zif0b+mMX/zPwxi/9388cs/t/LH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bxPz9/zOJ/Qf6Yxf+n+WMW/wvzxyz+P8sfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfyvzB+z+F+VP2bx/3X+2DUS/9/kj1nO/6vzxyz+v80fs/hfkz9m8b82f8zif13+mMX/d/ljFv/r88cs/jfkj1n8b8wfs/j/Pn/M4v+H/DGL/x/zxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/5/yxyz+d+SPWfzvzB+z+P85f8zif1f+mMX/L/ljFv+/5o9Z/P+WP2bx/3v+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP9sgf8ziP5Q/ZvEflT9m8Z8lf8ziP2v+mMV/dP6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjF/yn5Yxb/+fLHLP5j8scs/vPnj1n8x+aPWfwXyB+z+C+YP2bxf2r+mMX/afljFv+n549Z/BfKH7P4PyN/zOK/cP6Yxf+Z+WMW/2flj1n8F8kfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv2j+mMV/sfwxi/8L8scs/ovnj1n8l8gfs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvmT9m8X9p/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/gvnz9m8X9Z/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8X54/ZvFfJX/M4r9q/pjF/xX5Yxb/V+aPWfxflT9m8R+fP2bxn5A/ZvGfmD9m8V8tf8ziv3r+mMV/jfwxi/+k/DGL/+T8MYv/mvljFv+18scs/q/OH7P4vyZ/zOK/dv6YxX+d/DGL/7r5Yxb/1+aPWfzXyx+z+L8uf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+r88fs/hvnD9m8d8kf8zi/4b8MYv/G/PHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+aP2bx3yx/zOK/ef6Yxf/t+WMW/y3yxyz+W+aPWfzfkT9m8d8qf8zi/878MYv/1vljFv935Y9Z/N+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/9+SPWfzfmz9m8d8hf8zi/778MYv/jvljFv/3549Z/D+QP2bx/2D+mMV/p/wxi//O+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8P54/ZvHfJX/M4r9r/pjFf7f8MYv/J/LHLP6fzB+z+O+eP2bx/1T+mMV/j/wxi/+n88cs/p/JH7P475k/ZvHfK3/M4r93/pjF/7P5Yxb/z+WPWfw/nz9m8d8nf8ziv2/+mMX/C/ljFv/98scs/vvnj1n8v5g/ZvE/IH/M4n9g/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/g/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Y4/4j3pS+5+VP2Y5/8/OH7P4n5M/ZvE/N3/M4n9e/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfzPzx+z+F+QP2bx/2n+mMX/wvwxi//P8scs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/yvzxyz+V+WPWfx/nT9m8f9N/pjF/+r8MYv/b/PHLP7X5I9Z/K/NH7P4X5c/ZvH/Xf6Yxf/6/DGL/w35Yxb/G/PHLP6/zx+z+P8hf8zi/8f8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zi/6f8MYv/HfljFv8788cs/n/OH7P435U/ZvH/S/6Yxf+v+WMW/7/lj1n8/54/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/lPyxyz+D+SPWfwfzB+z+E/NH5P4zz7IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf0r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n5o/ZvF/Wv6Yxf/p+WMW/4Xyxyz+z8gfs/gvnD9m8X9m/pjF/1n5Yxb/RfLHLP7Pzh+z+D8nf8ziPy5/zOL/3Pwxi//z8scs/s/PH7P4L5o/ZvFfLH/M4v+C/DGL/+L5Yxb/JfLHLP4vzB+z+L8of8zi/+L8MYv/S/LHLP5L5o9Z/F+aP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/l+ePWfxXyR+z+K+aP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/6vzxyz+r8kfs/ivnT9m8V8nf8ziv27+mMX/tfljFv/18scs/q/LH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/6/PHLP4b549Z/DfJH7P4v8HiP+u/t7rF/40W/38zi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvmj1n8N8sfs/hvnj9m8X97/pjFf4v8MYv/lvljFv935I9Z/LfKH7P4vzN/zOK/df6Yxf9d+WMW/3fnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/PfljFv/35o9Z/HfIH7P4vy9/zOK/Y/6Yxf/9+WMW/w/kj1n8P5g/ZvHfKX/M4r9z/pjF/0P5Y09q/0fAZ/9w/tiT2v+RpbN/JH/M4v/R/DGL/8fyxyz+H88fs/jvkj9m8d81f8ziv1v+mMX/E/ljFv9P5o9Z/HfPH7P4fyp/zOK/R/6Yxf/T+WMW/8/kj1n898wfs/jvlT9m8d87f8zi/9n8MYv/5/LHLP6fzx+z+O+TP2bx3zd/zOL/hfwxi/9++WMW//3zxyz+X8wfs/gfkD9m8T8wf8zi/6X8MYv/l/PHLP5fyR+z+H81f8zi/7X8MYv/QfljFv+v549Z/L+RP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/N/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/1v5Yxb/b+ePWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf87+WMW/9Pzxyz+Z+SPWfzPzB+z+H83f8zi/738MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/8/PHLP4X5I9Z/H+aP2bxvzB/zOL/s/wxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/K/DGL/1X5Yxb/X+ePWfx/kz9m8b86f8zi/9v8MYv/NfljFv9r88cs/tflj1n8f5c/ZvG/Pn/M4n9D/pjF/8b8MYv/7/PHLP5/yB+z+P8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+P8pf8zif0f+mMX/zvwxi/+f88cs/nflj1n8/5I/ZvH/a/6Yxf9v+WMW/7/nj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMM8scs/kP5Yxb/UfljFv9Z8scs/rPmj1n8R+ePWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/J+SP2bxny9/zOI/Jn/M4j9//pjFf2z+mMV/gfwxi/+C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+h/DGL/zPyxyz+C+ePWfyfmT9m8X9W/pjFf5H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovmj1n8F8sfs/i/IH/M4r94/pjFf4n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/kvljFv+X5o9Z/JfKH7P4L50/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv+X5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/+X5Yxb/VfLHLP6r5o9Z/F+RP2bxf2X+mMX/VfljFv/x+WMW/wn5Yxb/ifljFv/V8scs/qvnj1n818gfs/hPyh+z+E/OH7P4r5k/ZvFfK3/M4v/q/DGL/2vyxyz+a+ePWfzXyR+z+K+bP2bxf23+mMV/vfwxi//r8scs/uvnj1n8N8gfs/hvmD9m8d8of8zi//r8MYv/xvljFv9N8scs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi/+m+WMW/83yxyz+m+ePWfzfnj9m8d8if8ziv2X+mMX/HfljFv+t8scs/u/MH7P4b50/ZvF/V/6Yxf/d+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bxf0/+mMX/vfljFv8d8scs/u/LH7P475g/ZvF/f/6Yxf8D+WMW/w/mj1n8d8ofs/jvnD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjF/+P5Yxb/XfLHLP675o9Z/HfLH7P4fyJ/zOL/yfwxi//u+WMW/0/lj1n898gfs/h/On/M4v+Z/DGL/575Yxb/vfLHLP57549Z/D+bP2bx/1z+mMX/8/ljFv998scs/vvmj1n8v5A/ZvHfL3/M4r9//pjF/4v5Yxb/A/LHLP4H5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxPyh/zOL/9fwxi/838scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/2b+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+H8rf8zi/+38MYv/yfljFv9T8scs/qfmj1n8T8sfs/h/J3/M4n96/pjF/4z8MYv/mfljFv/v5o9Z/L+XP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif37+mMX/gvwxi/9P88cs/hfmj1n8f5Y/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfmT9m8b8qf8zi/+v8MYv/b/LHLP5X549Z/H+bP2bxvyZ/zOJ/bf6Yxf+6/DGL/+/yxyz+1+ePWfxvyB+z+N+YP2bx/33+mMX/D/ljFv8/5o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv8/5Y9Z/O/IH7P435k/ZvH/c/6Yxf+u/DGL/1/yxyz+f80fs/j/LX/M4v/3/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH/OQf6YxX8of8ziPyp/zOI/S/6YxX/W/DGL/+j8MYv/bPljFv/Z88cs/nPkj83gP+uT2X/O/DHL+T9X/pjFf+78MYv/PPljFv9588cs/k/JH7P4z5c/ZvEfkz9m8Z8/f8ziPzZ/zOK/QP6YxX/B/DGL/1Pzxyz+T8sfs/g/PX/M4r9Q/pjF/xn5Yxb/hfPHLP7PzB+z+D8rf8ziv0j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/0Xzxyz+i+WPWfxfkD9m8V88f8ziv0T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/yfwxi/9L88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//L8scs/ivkj1n8V8wfs/ivlD9m8V85f8zi//L8MYv/KvljFv9V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/9q+WMW/9Xzxyz+a+SPWfwn5Y9Z/Cfnj1n818wfs/ivlT9m8X91/pjF/zX5Yxb/tcH/7qn/Lwf235nFf53Of8ziv27+mMX/tfljFv/18scs/q/LH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/6/PHLP4b549Z/DfJH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvmj1n8N8sfs/hvnj9m8X97/pjFf4v8MYv/lvljFv935I9Z/LfKH7P4vzN/zOK/df6Yxf9d+WMW/3fnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/PfljFv/35o9Z/HfIH7P4vy9/zOK/Y/6Yxf/9+WMW/w/kj1n8P5g/ZvHfKX/M4r9z/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/j+ePWfx3yR+z+O+aP2bx3y1/zOL/ifwxi/8n88cs/rvnj1n8P5U/ZvHfI3/M4v/p/DGL/2fyxyz+e+aPWfz3yh+z+O+dP2bx/2z+mMX/c/ljFv/P549Z/PfJH7P475s/ZvH/Qv6YxX+//DGL//75Yxb/L+aPWfwPyB+z+B+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/oPwxi//X88cs/t/IH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/m/ljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/638MYv/t/PHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4v+d/DGL/+n5Yxb/M/LHLP5n5o9Z/L+bP2bx/17+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/+fljFv8L8scs/j/NH7P4X5g/ZvH/Wf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9l/pjF/6r8MYv/r/PHLP6/yR+z+F+dP2bx/23+mMX/mvwxi/+1+WMW/+vyxyz+v8sfs/hfnz9m8b8hf8zif2P+mMX/9/ljFv8/5I9Z/P+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+UP2bxvyN/zOJ/Z/6Yxf/P+WMW/7vyxyz+f8kfs/j/NX/M4v+3/DGL/9/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS/7kG+WMW/6H8MYv/qPwxi/8s+WMW/1nzxyz+o/PHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/k/JH7P4z5c/ZvEfkz9m8Z8/f8ziPzZ/zOK/QP6YxX/B/DGL/1Pzxyz+T8sfs/g/PX/M4r9Q/pjF/xn5Yxb/hfPHLP7PzB+z+D8rf8ziv0j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/0Xzxyz+i+WPWfxfkD9m8V88f8ziv0T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/yfwxi/9L88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//L8scs/ivkj1n8V8wfs/ivlD9m8V85f8zi//L8MYv/KvljFv9V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/9q+WMW/9Xzxyz+a+SPWfwn5Y9Z/Cfnj1n818wfs/ivlT9m8X91/pjF/zX5Yxb/tfPHLP7r5I9Z/NfNH7P4vzZ/zOK/Xv6Yxf91+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bxf33+mMV/4/wxi/8m+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvF/W/6YxX/T/DGL/2b5Yxb/zfPHLP5vzx+z+G+RP2bx3zJ/zOL/jvwxi/9W+WMW/3fmj1n8t84fs/i/6x/9X/n/dFz/pVn83935j1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/PfljFv/35o9Z/HfIH7P4vy9/zOK/Y/6Yxf/9+WMW/w/kj1n8P5g/ZvHfKX/M4r9z/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/j+ePWfx3yR+z+O+aP/bk9Z86NKP/bvljT17/R5//n8gfs/h/Mn/M4r97/pjF/1P5Yxb/PfLHLP6fzh+z+H8mf8ziv2f+mMV/r/wxi//e+WMW/8/mj1n8P5c/ZvH/fP6YxX+f/DGL/775Yxb/L+SPWfz3yx+z+O+fP2bx/2L+mMX/gPwxi/+B+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8D8ofs/h/PX/M4v+N/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8v5k/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/t/KH7P4fzt/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP7fyR+z+J+eP2bxPyN/zOJ/Zv6Yxf+7+WMW/+/lj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n58/ZvG/IH/M4v/T/DGL/4X5Yxb/n+WPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP5X5o9Z/K/KH7P4/zp/zOL/m/wxi//V+WMW/9/mj1n8r8kfs/hfmz9m8b8uf8zi/7v8MYv/9fljFv8b8scs/jfmj1n8f58/ZvH/Q/6Yxf+P+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf9P+WMW/zvyxyz+d+aPWfz/nD9m8b8rf8zi/5f8MYv/X/PHLP5/yx+z+P89f8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z97kD9m8R/KH7P4j8ofs/jPkj9m8Z81f8ziPzp/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v+U/DGL/3z5Yxb/MfljFv/588cs/mPzxyz+C+SPWfwXzB+z+D81f8zi/7T8MYv/0/PHLP4L5Y9Z/J+RP2bxXzh/zOL/zPwxi/+z8scs/ovkj1n8n50/ZvF/Tv6YxX9c/pjF/7n5Yxb/5+WPWfyfnz9m8V80f8ziv1j+mMX/BfljFv/F88dm8J9tMBg8af2XyB+znP8vzB+z+L8of8zi/+L8MYv/S/LHLP5L5o9Z/F+aP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+WP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/l+ePWfxXyR+z+K+aP2bxf0X+mMX/lfljFv9X5Y9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/6vzxyz+r8kfs/ivnT9m8V8nf8ziv27+mMX/tfljFv/18scs/q/LH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/6/PHLP4b549Z/DfJH7P4vyF/zOL/xvwxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/pvmj1n8N8sfs/hvnj9m8X97/pjFf4v8MYv/lvljFv935I9Z/LfKH7P4vzN/zOK/df6Yxf9d+WMW/3fnj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/PfljFv/35o9Z/HfIH7P4vy9/zOK/Y/6Yxf/9+WMW/w/kj1n8P5g/ZvHfKX/M4r9z/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/j+ePWfx3yR+z+O+aP2bx3y1/zOL/ifwxi/8n88cs/rvnj1n8P5U/ZvHfI3/M4v/p/DGL/2fyxyz+e+aPWfz3yh+z+O+dP2bx/2z+mMX/c/ljFv/P549Z/PfJH7P475s/ZvH/Qv6YxX+//DGL//75Yxb/L+aPWfwPyB+z+B+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/oPwxi//X88eenP6zP/R0Rv9v5I89Of2nNaP/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfy/mf/0HjUNFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zi/638MYv/t/PHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4v+d/DGL/+n5Yxb/M/LHLP5n5o9Z/L+bP2bx/17+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+H8/f8zi/4P8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/+fljFv8L8scs/j/NH7P4X5g/ZvH/Wf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9l/pjF/6r8MYv/r/PHLP6/yR+z+F+dP2bx/23+mMX/mvwxi/+1+WMW/+vyxyz+v8sfs/hfnz9m8b8hf8zif2P+mMX/9/ljFv8/5I9Z/P+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+UP2bxvyN/zOJ/Z/6Yxf/P+WMW/7vyxyz+f8kfs/j/NX/M4v+3/DGL/9/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS/3kG+WMW/6H8MYv/qPwxi/8s+WMW/1nzxyz+o/PHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/k/JH7P4z5c/ZvEfkz9m8Z8/f8ziPzZ/zOK/QP6YxX/B/DGL/1Pzxyz+T8sfs/g/PX/M4r9Q/pjF/xn5Yxb/hfPHLP7PzB+z+D8rf8ziv0j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/0Xzxyz+i+WPWfxfkD9m8V88f8ziv0T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/yfwxi/9L88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi//L8scs/ivkj1n8V8wfs/ivlD9m8V85f8zi//L8MYv/KvljFv9V88cs/q/IH7P4vzJ/zOL/qvwxi//4/DGL/4T8MYv/xPwxi/9q+WMW/9Xzxyz+a+SPWfwn5Y9Z/Cfnj1n818wfs/ivlT9m8X91/pjF/zX5Yxb/tfPHLP7r5I9Z/NfNH7P4vzZ/zOK/Xv6Yxf91+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bxf33+mMV/4/wxi/8m+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvF/W/6YxX/T/DGL/2b5Yxb/zfPHLP5vzx+z+G+RP2bx3zJ/zOL/jvwxi/9W+WMW/3fmj1n8t84fs/i/K3/M4v/u/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P4vyd/zOL/3vwxi/8O+WMW//flj1n8d8wfs/i/P3/M4v+B/DGL/wfzxyz+O+WPWfx3zh+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/LvljFv9d88cs/rvlj1n8P5E/ZvH/ZP6YxX/3/DGL/6fyxyz+e+SPWfw/nT9m8f9M/pjFf8/8MYv/XvljFv+988cs/p/NH7P4fy5/zOL/+fwxi/8++WMW/33zxyz+X8gfs/jvlz9m8d8/f8zi/8X8MYv/AfljFv8D88cs/l/KH7P4fzl/zOL/lfwxi/9X88eG/QeDwS5Pdv+v5Y9Zzv+D8scs/l/PH7P4fyN/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv9v5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/t/LHLP7fzh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/3fyxyz+p+ePWfzPyB+z+J+ZP2bx/27+mMX/e/ljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP7n549Z/C/IH7P4/zR/zOJ/Yf6Yxf9n+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/5X5Yxb/q/LHLP6/zh+z+P8mf8zif3X+mMX/t/ljFv9r8scs/tfmj1n8r8sfs/j/Ln/M4n99/pjF/4b8MYv/jfljFv/f549Z/P+QP2bx/2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/1P+mMX/jvwxi/+d+WMW/z/nj1n878ofs/j/JX/M4v/X/DGL/9/yxyz+f88fs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n85x3kj1n8h/LHLP6j8scs/rPkj1n8Z80fs/iPzh+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4PyV/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T80fs/g/LX/M4v/0/DGL/0L5Yxb/Z+SPWfwXzh+z+D8zf8zi/6z8MYv/IvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+WMW/+fnT+06kPgvmj9mOf8Xyx+z+L8gf8ziv3j+mMV/ifwxi/8L88cs/i/KH7P4vzh/zOL/kvwxi/+S+WMW/5fmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/5flj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/5fljFv9V8scs/qvmj1n8X5E/ZvF/Zf6Yxf9V+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/+r8MYv/a/LHLP5r549Z/NfJH7P4r5s/ZvF/bf6YxX+9/DGL/+vyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/+vwxi//G+WMW/03yxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/6b5Yxb/zfLHLP6b549Z/N+eP2bx3yJ/zOK/Zf6Yxf8d+WMW/63yxyz+78wfs/hvnT9m8X9X/pjF/935Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvF/T/6Yxf+9+WMW/x3yxyz+78sfs/jvmD9m8X9//pjF/wP5Yxb/D+aPWfx3yh+z+O+cP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMX/4/ljFv9d8scs/rvmj1n8d8sfs/h/In/M4v/J/DGL/+75Yxb/T+WPWfz3yB+z+H86f8zi/5n8MYv/nvljFv+98scs/nvnj1n8P5s/ZvH/XP6Yxf/z+WMW/33yxyz+++aPWfy/kD9m8d8vf8ziv3/+mMX/i/ljFv8D8scs/gfmj1n8vyT3n+0xllv8vyz3f6ws/l/JH7P4fzV/zOL/tfwxi/9B+WMW/6/nj1n8v5E/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/8388cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/W/ljFv9v549Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF/zv5Yxb/0/PHLP5n5I9Z/M/MH7P4fzd/zOL/vfwxi/9Z+U/roJvHbjPDS4v/2fljFv9z8scs/ufmj1n8z8sfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL//n5Yxb/C/LHLP4/zR+z+F+YP2bx/1n+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOJ/Zf6Yxf+q/DGL/6/zxyz+v8kfs/hfnT9m8f9t/pjF/5r8MYv/tfljFv/r8scs/r/LH7P4X58/ZvG/IX/M4n9j/pjF//f5Yxb/P+SPWfz/mD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/lD9m8b8jf8zif2f+mMX/z/ljFv+78scs/n/JH7P4/zV/zOL/t/wxi//f88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+nDPLHLP5D+WMW/1H5Yxb/WfLHLP6z5o9Z/Efnj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfyfkj9m8Z8vf8ziPyZ/zOI/f/6YxX9s/pjFf4H8MYv/gvljFv+n5o9Z/J+WP2bxf3r+mMV/ofwxi/8z8scs/gvnj1n8n5k/ZvF/Vv6YxX+R/DGL/7Pzxyz+z8kfs/iPyx+z+D83f8zi/7z8MYv/8/PHLP6L5o9Z/BfLH7P4vyB/zOK/eP6YxX+J/DGL/wvzxyz+L8ofs/i/OH/M4r/hEzWe//Is/kt2/mMW/5fmj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/5flj1n8V8gfs/ivmP+jmj43Fv+V8scs/ivnj1n8X54/ZvFfJX/M4r9q/pjF/xX5Yxb/V+aPWfxflT9m8R+fP2bxn5A/ZvGfmD9m8V8tf8ziv3r+mMV/jfwxi/+k/DGL/+T8MYv/mvljFv+18scs/q/OH7P4vyZ/zOK/dv6YxX+d/DGL/7r5Yxb/1+aPWfzXyx+z+L8uf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+r88fs/hvnD9m8d8kf8zi/4b8MYv/G/PHLP5vyh+z+L85f8zi/5b8MYv/W/PHLP5vyx+z+G+aP2bx3yx/zOK/ef6Yxf/t+WMW/y3yxyz+W+aPWfzfkT9m8d8qf8zi/878MYv/1vljFv935Y9Z/N+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/9+SPWfzfmz9m8d8hf8zi/778MYv/jvljFv/3549Z/D+QP2bx/2D+mMV/p/wxi//O+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8P54/ZvHfJX/M4r9r/pjFf7f8MYv/J/LHLP6fzB+z+O+eP2bx/1T+mMV/j/wxi/+n88cs/p/JH7P475k/ZvHfK3/M4r93/pjF/7P5Yxb/z+WPWfw/nz9m8d8nf8ziv2/+mMX/C/ljFv/98scs/vvnj1n8v5g/ZvE/IH/M4n9g/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/g/LHLP5fzx+z+H8jf8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/b+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/7fyxyz+384fs/ifnD9m8T8lf8zif2r+mMX/tPwxi/938scs/qfnj1n8z8gfs/ifmT9m8f9u/pjF/3v5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+ePWfwvyB+z+P80f8zif2H+mMX/Z/ljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+V+WMW/6vyxyz+v84fs/j/Jn/M4n91/pjF/7f5Yxb/a/LHLP7X5o9Z/K/LH7P4/y5/zOJ/ff6Yxf+G/DGL/435Yxb/3+ePWfz/kD9m8f9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8f9T/pjF/478MYv/nfljFv8/549Z/O/KH7P4/yV/zOL/1/wxi//f8scs/n/PH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8p+WMW/wfyxyz+D+aPWfyn5o9J/Ocb5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8lf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/NH7P4Py1/zOL/9Pwxi/9C+WMW/2fkj1n8F84fs/g/M3/M4v+s/DGL/yL5Yxb/Z+ePWfyfkz9m8R+XP2bxf27+mMX/efljFv/n549Z/BfNH7P4L5Y/ZvF/Qf6YxX/x/DGL/xL5Yxb/F+aPWfxflD9m8X9x/pjF/yX5Yxb/JfPHLP4vzR+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4vyx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/8vzxyz+q+SPWfxXzR+z+L8if8zi/8r8MYv/q/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf/V+WMW/9fkj1n8184fs/ivkz9m8V83f8zi/9r8MYv/evljFv/X5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF//X5Yxb/jfPHLP6b5I9Z/N+QP2bxf2P+mMX/TfljFv83549Z/N+SP2bxf2v+mMX/bfljFv9N88cs/pvlj1n8N88fs/i/PX/M4r9F/pjFf8v8MYv/O/LHLP5b5Y9Z/N+ZP2bx3zp/zOL/rvwxi/+788cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/578MYv/e/PHLP475I9Z/N+XP2bx3zF/zOL//vyxmfxHPdHj+Y97DP8P/H/s08MbGIgVxdGmSlOmttuxbdu2bc/Eydi2bdu2bdu2ZzazvH9B7jmr973t77v6Ry37H6J/1NJ/qP5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0H6N/1NJ/W/2jlv7b6R+19N9e/6il/w76Ry39d9Q/aum/k/5RS/+d9Y9a+u+if9TSf1f9o5b+u+kftfTfXf+opf8e+kct/ffUP2rpv5f+UUv/vfWPWvrvo3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/UP2jlv6H6R+19D9c/6il/xH6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+x+kftfQ/Xv+opf8J+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/wX6Ry39L9Q/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfS/XP+opf8V+kct/a/UP2rpf5X+UUv/q/WPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r636J/1NL/Vv2jlv636R+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/1NL/Wf2jlv7P6R+19H9e/6il/wv6Ry39X9Q/aun/kv5RS/+X9Y9a+r+if9TS/1X9o5b+r+kftfR/Xf+opf8b+kct/d/UP2rp/5b+UUv/t/WPWvq/o3/U0v9d/aOW/u/pH7X0f1//qKX/B/pHLf0/1D9q6f+R/lFL/4/1j1r6f6J/1NL/U/2jlv6f6R+19P9c/6il/xf6Ry39v9Q/aun/lf5RS/+v9Y9a+n+jf1TSf/D39I9a+g/QP2rp/339o5b+P9A/aun/Q/2jlv4/0j9q6f9j/aOW/gP1j1r6/0T/qKX/IP2jlv4/1T9q6f8z/aOW/j/XP2rp/wv9o5b+v9Q/aun/K/2jlv6D9Y9a+v9a/6il/2/0j1r6/1b/qKX/7/SPWvr/Xv+opf8f9I9a+v9R/6il/5/0j1r6/1n/qKX/X/SPWvr/Vf+opf/f9I9a+v9d/6il/z/0j1r6/1P/qKX/v/SPWvr/W/+opf9/9I9a+v9X/6il///0j1r6/1//qKX/OPpHLf3H1T9q6T+e/lFL//H1j1r6T6B/1NJ/Qv2jlv4T6R+19J9Y/6il/yT6Ry39J9U/auk/mf5RS//J9Y9a+k+hf9TSf0r9o5b+U+kftfSfWv+opf80+kct/afVP2rpP53+UUv/6fWPWvrPoH/U0n9G/aOW/jPpH7X0n1n/qKX/LPX9B8ZvS/9Z6/tnLf1n0z9q6T+7/lFL/zn0j1r6z6l/1NJ/Lv2jlv5z6x+19J9H/6il/7z6Ry3959M/auk/v/5RS/8F9I9a+i+of9TSfyH9o5b+C+sftfRfRP+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/svpHLf2X0z9q6b+8/lFL/xX0j1r6r6h/1NJ/Jf2jlv4r6x+19F9F/6il/6r6Ry39V9M/aum/uv5RS/819I9a+q+pf9TSfy39o5b+a+sftfRfR/+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH80YNB3x1jefyP9o5b9b6x/1NJ/E/2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+m+tf9TSfxv9o5b+Q/SPWvoP1T9q6T9M/6il/3D9o5b+I/SPWvqP1D9q6T9K/6il/2j9o5b+Y/SPxrr+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN+yb7exdZaFH8fvbusY+/NPRlxwGZpscqGQCLPdQ8YLwiZjWx1043kMcHRrNzbabXYddgXcw4tJhPAgySRLlChbhhJmQiMxEKwgokEXNdHgAyAKUTROhKBb4mLNaU9Le+waz1Wva1E+nxc9577Pfve2Jt/d9wIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Cc7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZB9G4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+kKN7h") setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)=""/79}, 0x20) ioctl$FS_IOC_GETFSMAP(r0, 0x4008586f, &(0x7f00000000c0)=ANY=[]) 5.342255261s ago: executing program 3 (id=3050): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000500)={[{@codepage={'codepage', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x6}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x1, 0x2e3, &(0x7f0000006040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.21435901s ago: executing program 3 (id=3059): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@can_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_FILTER={0xc}, @CGW_SRC_IF={0x8}]}, 0x30}}, 0x0) 3.904941017s ago: executing program 3 (id=3061): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="e40005"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.628380799s ago: executing program 0 (id=3072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 2.436632097s ago: executing program 0 (id=3074): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.328785606s ago: executing program 1 (id=3076): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a00)={'veth0_virt_wifi\x00', &(0x7f00000009c0)=@ethtool_gstrings={0x1b, 0x4}}) 2.273391531s ago: executing program 0 (id=3077): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES8, @ANYRES8], 0x8, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 2.030545142s ago: executing program 0 (id=3079): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000001c0)={[{@discard}, {@block_validity}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000044c0)='./file0\x00', r0, 0xffffffffffffffff) 2.030201422s ago: executing program 1 (id=3080): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb+LE0EUx78zu9mchwg2FjYWHniit9ndqFxzRQRLQYiilsGsIbpJJFkhCQgGGxtLC8HWxtLCwsrCv8BWCxUEC1PaCSMzO7s7JpsQf2BE3wdu7jszb+fNe7DfYgOCIP5bPrz/8u7B2d2LJwHsxxbKev2TlcdwI/7to9snHu6de/zszZNX3QN3XsyexwAIsXp+B8DLmoUYzE5Wvn96y7iC1rgEjuNaXwaDm8ivQpFMQjBc1TE3DN3bp0UUutd6UfN6Owo9OfhyCORQNfPLS00nDE0AG+p2QjBjfzAa32xEUdifFSWR5pnb+lGxrH/qfjWOPaTdE0I268r9exM5172BB571zweHr3UVDHWtd1GG67p5S4z6D9v5+dYq9a9XPFXi4M6fSpq+I39D7f+wKP2Wc9jsinyhs5VD09QDzZiPa6/954UyLgBzW683o+j8L5zsFDQqE7k/SWc/ZviTDTvzj0rcuVUZjMY77U6jFbbCbhBUz3inPO90UFFGlIxL/G9D+dOmcX5pQazDHAwbcdz3h0Dc97N5kIyG49af9z6rZ7jyP47to2qqPFWVXS7OwfQfV/+l2raKI+8urIkgCIIgCIIgCIIgCIIgCKKYI2BIfgkTTH8QLSK4oL5QfgsAAP//g4hmcg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0xf40f}) 1.700535021s ago: executing program 1 (id=3081): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x100002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 1.700202561s ago: executing program 4 (id=3082): openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x64, 0x4, 0x388, 0xffffffff, 0x0, 0x118, 0x118, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [0xff, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'batadv_slave_1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x8, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 1.626408378s ago: executing program 0 (id=3083): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0x5, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) 1.618113378s ago: executing program 3 (id=3084): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 1.421957846s ago: executing program 1 (id=3085): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0059dd05209a1e9dda2200db8392c350eb09"], 0x1, 0x5e0, &(0x7f0000000680)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) creat(&(0x7f0000000240)='./file1\x00', 0x0) 1.306419305s ago: executing program 4 (id=3086): unshare(0x2a020480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe) 1.216526194s ago: executing program 2 (id=3087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ef000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.210978334s ago: executing program 0 (id=3088): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") r1 = openat(r0, &(0x7f0000000080)='./bus\x00', 0x804c0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='j'}) 1.009500202s ago: executing program 4 (id=3089): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001040), 0x200000, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000001080)=r0, 0x4) 848.485266ms ago: executing program 1 (id=3090): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 847.969036ms ago: executing program 3 (id=3091): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 691.53534ms ago: executing program 2 (id=3092): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 639.460164ms ago: executing program 4 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8}, @NFTA_HASH_SREG={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x3ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 524.357394ms ago: executing program 1 (id=3094): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x40, &(0x7f0000000100)={[{@pqnoenforce}, {@discard}, {@nodiscard}, {@pqnoenforce}, {@ikeep}, {@prjquota}, {@noikeep}]}, 0x1, 0x98d4, &(0x7f0000013140)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffff7fffffc, 0x0, 0x0, 0x0, 0x4040c404}) unlink(&(0x7f0000000000)='./file1\x00') 523.974115ms ago: executing program 2 (id=3095): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x800, @fixed, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 420.995294ms ago: executing program 4 (id=3096): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x2}}) 343.98754ms ago: executing program 2 (id=3097): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 178.614235ms ago: executing program 2 (id=3098): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fgetxattr(r0, &(0x7f0000000740)=@known='system.sockprotoname\x00', 0x0, 0x2) 8.58577ms ago: executing program 2 (id=3099): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x452, &(0x7f0000000780)="$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") 0s ago: executing program 4 (id=3100): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000300)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@delalloc}, {@bh}]}, 0x10, 0x4d3, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) kernel console output (not intermixed with test programs): =3, sector=8112497619608, nr_sectors = 8388600 limit=2048 [ 318.220969][ T9354] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 318.221981][ T8270] syz.4.1742: attempt to access beyond end of device [ 318.221981][ T8270] loop4: rw=3, sector=8112506008208, nr_sectors = 8388600 limit=2048 [ 318.244971][ T9374] Sensor A: Test Pattern: 75% Colorbar [ 318.264979][ T9372] EXT4-fs (loop0): Remounting filesystem read-only [ 318.271766][ T9372] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.2198: couldn't read orphan inode 15 (err -117) [ 318.293479][ T9354] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 318.301011][ T9374] Sensor A: Show Information: [ 318.302197][ T9354] BTRFS info (device loop3): using free space tree [ 318.361180][ T9372] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 318.364433][ T9374] All [ 318.373875][ T9374] Sensor A: Vertical Flip: false [ 318.378886][ T9374] Sensor A: Horizontal Flip: false [ 318.384199][ T9374] Sensor A: Brightness: 128 [ 318.390733][ T9374] Sensor A: Contrast: 128 [ 318.395283][ T9374] Sensor A: Hue: 0 [ 318.399049][ T9374] Sensor A: Saturation: 128 [ 318.403824][ T9374] Sensor A: ================== END STATUS ================== [ 318.444372][ T9372] EXT4-fs error (device loop0): ext4_empty_dir:3134: inode #2: comm syz.0.2198: invalid size [ 318.475977][ T9372] EXT4-fs (loop0): Remounting filesystem read-only [ 318.593108][ T9354] BTRFS info (device loop3): enabling ssd optimizations [ 318.702261][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 318.984638][ T7269] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 319.003646][ T3654] Bluetooth: hci5: command 0x0406 tx timeout [ 319.568286][ T9207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 319.609549][ T9404] device veth0_vlan left promiscuous mode [ 319.633182][ T9404] device veth0_vlan entered promiscuous mode [ 319.688398][ T9207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 319.794461][ T9207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 319.906691][ T9207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 319.987260][ T9417] binder: 9416:9417 ioctl 40046210 0 returned -14 [ 320.029132][ T9417] binder: 9416:9417 ioctl c0306201 20000280 returned -11 [ 320.127714][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.143295][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 320.164305][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.185830][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.249966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 320.268202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.290956][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.298131][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.346573][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 320.355410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 320.372973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.402148][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.409368][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.425785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 320.447568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.486923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.530016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.553110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.581107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.638047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.676307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.711618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.753467][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.779588][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.810626][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.893510][ T3688] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 321.283572][ T3688] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 321.309375][ T3688] usb 4-1: config 0 has no interface number 0 [ 321.315881][ T3688] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.350053][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.373248][ T3688] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.383561][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.395925][ T9427] loop0: detected capacity change from 0 to 32768 [ 321.422457][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.429355][ T3688] usb 4-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.429407][ T3688] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 321.429435][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.431386][ T3688] usb 4-1: config 0 descriptor?? [ 321.518139][ T9427] XFS (loop0): Mounting V5 Filesystem [ 321.547889][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.582693][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.704011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.714830][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.724403][ T9427] XFS (loop0): Ending clean mount [ 321.765586][ T9207] device veth0_vlan entered promiscuous mode [ 321.790534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.821305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.862254][ T3640] XFS (loop0): Unmounting Filesystem [ 321.871108][ T9207] device veth1_vlan entered promiscuous mode [ 321.917731][ T14] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 321.951082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.014142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.043107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.100052][ T3688] uclogic 0003:28BD:1903.0042: interface is invalid, ignoring [ 322.112928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.148551][ T9207] device veth0_macvtap entered promiscuous mode [ 322.177971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.186357][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 322.225329][ T9207] device veth1_macvtap entered promiscuous mode [ 322.303516][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.307091][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.331839][ T14] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 322.360487][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.371902][ T3862] usb 4-1: USB disconnect, device number 26 [ 322.383251][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.393096][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.413400][ T14] usb 2-1: config 0 descriptor?? [ 322.475746][ T14] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 322.484203][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.513328][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.543377][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.583897][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.623620][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.653347][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.693387][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.733313][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.763328][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.789926][ T9461] loop0: detected capacity change from 0 to 512 [ 322.809765][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.819722][ T9461] EXT4-fs: Ignoring removed oldalloc option [ 322.860857][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.884644][ T8476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.893315][ T6697] bio_check_eod: 109205 callbacks suppressed [ 322.893332][ T6697] syz.1.1114: attempt to access beyond end of device [ 322.893332][ T6697] loop1: rw=3, sector=15600304585808, nr_sectors = 8388600 limit=2048 [ 322.903142][ T8270] syz.4.1742: attempt to access beyond end of device [ 322.903142][ T8270] loop4: rw=3, sector=8498650043408, nr_sectors = 8388600 limit=2048 [ 322.934973][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.945754][ T6697] syz.1.1114: attempt to access beyond end of device [ 322.945754][ T6697] loop1: rw=3, sector=15600312974408, nr_sectors = 8388600 limit=2048 [ 322.980237][ T9461] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2223: Parent and EA inode have the same ino 15 [ 323.001149][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.011994][ T6697] syz.1.1114: attempt to access beyond end of device [ 323.011994][ T6697] loop1: rw=3, sector=15600321363008, nr_sectors = 8388600 limit=2048 [ 323.039237][ T9461] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2223: Parent and EA inode have the same ino 15 [ 323.060096][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.101289][ T6697] syz.1.1114: attempt to access beyond end of device [ 323.101289][ T6697] loop1: rw=3, sector=15600329751608, nr_sectors = 8388600 limit=2048 [ 323.103669][ T8270] syz.4.1742: attempt to access beyond end of device [ 323.103669][ T8270] loop4: rw=3, sector=8498658432008, nr_sectors = 8388600 limit=2048 [ 323.123588][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.131828][ T9461] EXT4-fs (loop0): 1 orphan inode deleted [ 323.149716][ T6697] syz.1.1114: attempt to access beyond end of device [ 323.149716][ T6697] loop1: rw=3, sector=15600338140208, nr_sectors = 8388600 limit=2048 [ 323.163308][ T9461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 323.173296][ T14] gspca_vc032x: reg_r err -71 [ 323.175511][ T6697] syz.1.1114: attempt to access beyond end of device [ 323.175511][ T6697] loop1: rw=3, sector=15600346528808, nr_sectors = 8388600 limit=2048 [ 323.178690][ T14] vc032x: probe of 2-1:0.0 failed with error -71 [ 323.201777][ T14] usb 2-1: USB disconnect, device number 21 [ 323.207079][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.212480][ T8270] syz.4.1742: attempt to access beyond end of device [ 323.212480][ T8270] loop4: rw=3, sector=8498666820608, nr_sectors = 8388600 limit=2048 [ 323.232972][ T8270] syz.4.1742: attempt to access beyond end of device [ 323.232972][ T8270] loop4: rw=3, sector=8498675209208, nr_sectors = 8388600 limit=2048 [ 323.277617][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.320562][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.370123][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.393292][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.404118][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.423332][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.443280][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.481882][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.511844][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 323.525581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.545338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.577828][ T9207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.597089][ T9207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.616781][ T9207] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.661546][ T9207] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.955539][ T8476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.983236][ T8476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.055218][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.082358][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.122991][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.148901][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.344144][ T9475] netlink: 22 bytes leftover after parsing attributes in process `syz.2.2131'. [ 325.057050][ T9471] loop0: detected capacity change from 0 to 32768 [ 325.170717][ T9473] loop3: detected capacity change from 0 to 40427 [ 325.207434][ T9473] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 325.207615][ T9471] XFS (loop0): Mounting V5 Filesystem [ 325.288873][ T9473] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 325.360145][ T9471] XFS (loop0): Ending clean mount [ 325.371236][ T9473] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 325.407713][ T9471] XFS (loop0): Quotacheck needed: Please wait. [ 325.438783][ T9473] F2FS-fs (loop3): invalid crc value [ 325.505419][ T9473] F2FS-fs (loop3): Found nat_bits in checkpoint [ 325.516491][ T9471] XFS (loop0): Quotacheck: Done. [ 325.696303][ T3640] XFS (loop0): Unmounting Filesystem [ 325.717973][ T9473] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 325.728568][ T9473] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 325.903555][ T3214] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 326.153524][ T3214] usb 3-1: Using ep0 maxpacket: 16 [ 326.402868][ T9505] loop0: detected capacity change from 0 to 1024 [ 326.433451][ T3214] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 326.450733][ T9505] hfsplus: bad catalog entry type [ 326.453260][ T3214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.493254][ T3214] usb 3-1: Product: syz [ 326.507677][ T3214] usb 3-1: Manufacturer: syz [ 326.512405][ T3214] usb 3-1: SerialNumber: syz [ 326.533753][ T3696] hfsplus: b-tree write err: -5, ino 4 [ 326.546530][ T3214] usb 3-1: config 0 descriptor?? [ 326.649136][ T3214] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 327.082724][ T9517] sp0: Synchronizing with TNC [ 327.091363][ T3214] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 327.127980][ T9516] [U] è [ 327.292174][ T14] usb 3-1: USB disconnect, device number 28 [ 327.317493][ T14] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 327.365089][ T14] visor 3-1:0.0: device disconnected [ 327.545650][ T9526] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 327.642264][ T9507] loop0: detected capacity change from 0 to 32768 [ 327.664730][ T9507] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2241 (9507) [ 327.693378][ T153] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 327.742771][ T9507] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.782588][ T9507] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 327.830671][ T9507] BTRFS info (device loop0): enabling auto defrag [ 327.863404][ T9507] BTRFS info (device loop0): disabling auto defrag [ 327.870756][ T9507] BTRFS info (device loop0): max_inline at 0 [ 327.902237][ T9507] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 327.908986][ T8270] bio_check_eod: 92793 callbacks suppressed [ 327.909005][ T8270] syz.4.1742: attempt to access beyond end of device [ 327.909005][ T8270] loop4: rw=3, sector=8881757405408, nr_sectors = 8388600 limit=2048 [ 327.920580][ T6697] syz.1.1114: attempt to access beyond end of device [ 327.920580][ T6697] loop1: rw=3, sector=16006639981208, nr_sectors = 8388600 limit=2048 [ 327.949339][ T153] usb 4-1: Using ep0 maxpacket: 16 [ 327.963928][ T9507] BTRFS info (device loop0): trying to use backup root at mount time [ 327.983355][ T9507] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 327.993590][ T8270] syz.4.1742: attempt to access beyond end of device [ 327.993590][ T8270] loop4: rw=3, sector=8881765794008, nr_sectors = 8388600 limit=2048 [ 328.009250][ T6697] syz.1.1114: attempt to access beyond end of device [ 328.009250][ T6697] loop1: rw=3, sector=16006648369808, nr_sectors = 8388600 limit=2048 [ 328.024679][ T9507] BTRFS info (device loop0): use lzo compression, level 0 [ 328.031853][ T9507] BTRFS info (device loop0): enabling ssd optimizations [ 328.055010][ T8270] syz.4.1742: attempt to access beyond end of device [ 328.055010][ T8270] loop4: rw=3, sector=8881774182608, nr_sectors = 8388600 limit=2048 [ 328.070960][ T9507] BTRFS info (device loop0): not using ssd optimizations [ 328.081103][ T9507] BTRFS info (device loop0): allowing degraded mounts [ 328.088399][ T153] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.102115][ T6697] syz.1.1114: attempt to access beyond end of device [ 328.102115][ T6697] loop1: rw=3, sector=16006656758408, nr_sectors = 8388600 limit=2048 [ 328.123226][ T153] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.133134][ T9507] BTRFS info (device loop0): using free space tree [ 328.143343][ T8270] syz.4.1742: attempt to access beyond end of device [ 328.143343][ T8270] loop4: rw=3, sector=8881782571208, nr_sectors = 8388600 limit=2048 [ 328.158994][ T153] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.180025][ T6697] syz.1.1114: attempt to access beyond end of device [ 328.180025][ T6697] loop1: rw=3, sector=16006665147008, nr_sectors = 8388600 limit=2048 [ 328.196474][ T153] usb 4-1: config 0 interface 0 has no altsetting 0 [ 328.203138][ T153] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 328.223316][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.233279][ T153] usb 4-1: config 0 descriptor?? [ 328.243580][ T8270] syz.4.1742: attempt to access beyond end of device [ 328.243580][ T8270] loop4: rw=3, sector=8881790959808, nr_sectors = 8388600 limit=2048 [ 328.258898][ T8270] syz.4.1742: attempt to access beyond end of device [ 328.258898][ T8270] loop4: rw=3, sector=8881799348408, nr_sectors = 8388600 limit=2048 [ 328.539846][ T3640] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 328.729754][ T153] hid-generic 0003:045E:05DA.0043: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0 [ 328.967967][ T153] usb 4-1: USB disconnect, device number 27 [ 330.040430][ T9557] loop2: detected capacity change from 0 to 40427 [ 330.072451][ T9565] loop3: detected capacity change from 0 to 256 [ 330.093140][ T9557] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 330.101545][ T9557] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 330.171151][ T9557] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 330.191347][ T3718] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.219482][ T9557] F2FS-fs (loop2): Found nat_bits in checkpoint [ 330.244283][ T9565] loop3: detected capacity change from 0 to 256 [ 330.275789][ T9565] exfat: Deprecated parameter 'codepage' [ 330.313088][ T9565] exfat: Unknown parameter 'shortname' [ 330.366767][ T9559] loop0: detected capacity change from 0 to 32768 [ 330.457566][ T9559] XFS (loop0): Mounting V5 Filesystem [ 330.484061][ T9557] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 330.511496][ T9557] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 330.603066][ T9559] XFS (loop0): Ending clean mount [ 330.626425][ T9559] XFS (loop0): Quotacheck needed: Please wait. [ 330.784956][ T9559] XFS (loop0): Quotacheck: Done. [ 330.809425][ T9585] program syz.3.2264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.950135][ T3640] XFS (loop0): Unmounting Filesystem [ 331.313289][ T3688] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 331.553293][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 331.833666][ T3688] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 331.842858][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.882022][ T3688] usb 4-1: Product: syz [ 331.893814][ T3688] usb 4-1: Manufacturer: syz [ 331.908855][ T3688] usb 4-1: SerialNumber: syz [ 331.930133][ T3688] usb 4-1: config 0 descriptor?? [ 331.995518][ T3688] gspca_main: sq905-2.14.0 probing 2770:9120 [ 332.004346][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'. [ 332.088330][ T9615] loop2: detected capacity change from 0 to 16 [ 332.128562][ T9615] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 332.643383][ T3688] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 332.650716][ T3688] sq905: probe of 4-1:0.0 failed with error -71 [ 332.682953][ T3688] usb 4-1: USB disconnect, device number 28 [ 332.754999][ T9625] loop0: detected capacity change from 0 to 4096 [ 332.791905][ T9625] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 332.885167][ T9629] loop2: detected capacity change from 0 to 1024 [ 332.913557][ T9629] EXT4-fs: Invalid uid value -1 [ 332.945791][ T6697] bio_check_eod: 89264 callbacks suppressed [ 332.945811][ T6697] syz.1.1114: attempt to access beyond end of device [ 332.945811][ T6697] loop1: rw=3, sector=16403496258608, nr_sectors = 8388600 limit=2048 [ 332.968136][ T8270] syz.4.1742: attempt to access beyond end of device [ 332.968136][ T8270] loop4: rw=3, sector=9247366147808, nr_sectors = 8388600 limit=2048 [ 332.991770][ T8270] syz.4.1742: attempt to access beyond end of device [ 332.991770][ T8270] loop4: rw=3, sector=9247374536408, nr_sectors = 8388600 limit=2048 [ 333.001228][ T3718] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 333.048453][ T6697] syz.1.1114: attempt to access beyond end of device [ 333.048453][ T6697] loop1: rw=3, sector=16403504647208, nr_sectors = 8388600 limit=2048 [ 333.078958][ T8270] syz.4.1742: attempt to access beyond end of device [ 333.078958][ T8270] loop4: rw=3, sector=9247382925008, nr_sectors = 8388600 limit=2048 [ 333.124789][ T8270] syz.4.1742: attempt to access beyond end of device [ 333.124789][ T8270] loop4: rw=3, sector=9247391313608, nr_sectors = 8388600 limit=2048 [ 333.133275][ T6697] syz.1.1114: attempt to access beyond end of device [ 333.133275][ T6697] loop1: rw=3, sector=16403513035808, nr_sectors = 8388600 limit=2048 [ 333.193783][ T8270] syz.4.1742: attempt to access beyond end of device [ 333.193783][ T8270] loop4: rw=3, sector=9247399702208, nr_sectors = 8388600 limit=2048 [ 333.203765][ T6697] syz.1.1114: attempt to access beyond end of device [ 333.203765][ T6697] loop1: rw=3, sector=16403521424408, nr_sectors = 8388600 limit=2048 [ 333.260102][ T8270] syz.4.1742: attempt to access beyond end of device [ 333.260102][ T8270] loop4: rw=3, sector=9247408090808, nr_sectors = 8388600 limit=2048 [ 333.414907][ T9635] loop2: detected capacity change from 0 to 2048 [ 333.463444][ T9635] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.486657][ T27] audit: type=1800 audit(1726141590.607:41): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2288" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 333.851314][ T9643] loop2: detected capacity change from 0 to 16 [ 333.853470][ T4668] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 333.881557][ T9643] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 334.123367][ T4668] usb 4-1: Using ep0 maxpacket: 8 [ 334.243563][ T4668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.281900][ T4668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.312907][ T4668] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 334.341223][ T4668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.372810][ T4668] usb 4-1: config 0 descriptor?? [ 334.440209][ T9631] loop0: detected capacity change from 0 to 40427 [ 334.458956][ T9631] F2FS-fs (loop0): invalid crc value [ 334.469381][ T9631] F2FS-fs (loop0): Found nat_bits in checkpoint [ 334.513487][ T153] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 334.582172][ T9631] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 334.773469][ T153] usb 3-1: Using ep0 maxpacket: 16 [ 334.877060][ T4668] waltop 0003:172F:0034.0044: collection stack underflow [ 334.893587][ T153] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 334.901643][ T153] usb 3-1: config 0 has no interface number 0 [ 334.903295][ T4668] waltop 0003:172F:0034.0044: item 0 0 0 12 parsing failed [ 334.933897][ T4668] waltop: probe of 0003:172F:0034.0044 failed with error -22 [ 334.938349][ T153] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.994455][ T153] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.043409][ T153] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 335.060150][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.086447][ T4668] usb 4-1: USB disconnect, device number 29 [ 335.087095][ T153] usb 3-1: config 0 descriptor?? [ 335.151212][ T9655] netlink: 'syz.1.2298': attribute type 29 has an invalid length. [ 335.189896][ T9655] netlink: 'syz.1.2298': attribute type 29 has an invalid length. [ 335.233675][ T9656] netlink: 'syz.1.2298': attribute type 29 has an invalid length. [ 335.514272][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 335.805866][ T153] usb 3-1: USB disconnect, device number 29 [ 336.350637][ T9660] loop0: detected capacity change from 0 to 40427 [ 336.413299][ T9660] F2FS-fs (loop0): invalid crc value [ 336.491749][ T9660] F2FS-fs (loop0): Found nat_bits in checkpoint [ 336.672118][ T9660] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 336.719174][ T9660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 336.770805][ T27] audit: type=1326 audit(1726141593.887:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.2.2311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x0 [ 336.894867][ T9692] loop3: detected capacity change from 0 to 256 [ 337.368598][ T4671] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 337.539696][ T9705] loop0: detected capacity change from 0 to 64 [ 337.710462][ T3640] hfs: node 4:3 still has 1 user(s)! [ 337.753492][ T4671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 337.793369][ T4671] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 337.820581][ T4671] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 337.844272][ T4671] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 337.960169][ T8270] bio_check_eod: 98296 callbacks suppressed [ 337.960196][ T8270] syz.4.1742: attempt to access beyond end of device [ 337.960196][ T8270] loop4: rw=3, sector=9716179836008, nr_sectors = 8388600 limit=2048 [ 337.983512][ T6697] syz.1.1114: attempt to access beyond end of device [ 337.983512][ T6697] loop1: rw=3, sector=16772795985008, nr_sectors = 8388600 limit=2048 [ 338.021787][ T8270] syz.4.1742: attempt to access beyond end of device [ 338.021787][ T8270] loop4: rw=3, sector=9716188224608, nr_sectors = 8388600 limit=2048 [ 338.046629][ T8270] syz.4.1742: attempt to access beyond end of device [ 338.046629][ T8270] loop4: rw=3, sector=9716196613208, nr_sectors = 8388600 limit=2048 [ 338.050362][ T6697] syz.1.1114: attempt to access beyond end of device [ 338.050362][ T6697] loop1: rw=3, sector=16772804373608, nr_sectors = 8388600 limit=2048 [ 338.081946][ T8270] syz.4.1742: attempt to access beyond end of device [ 338.081946][ T8270] loop4: rw=3, sector=9716205001808, nr_sectors = 8388600 limit=2048 [ 338.097398][ T4671] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 338.130083][ T4671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.148742][ T8270] syz.4.1742: attempt to access beyond end of device [ 338.148742][ T8270] loop4: rw=3, sector=9716213390408, nr_sectors = 8388600 limit=2048 [ 338.169262][ T4671] usb 4-1: Product: syz [ 338.179543][ T9722] Bluetooth: MGMT ver 1.22 [ 338.183294][ T4671] usb 4-1: Manufacturer: syz [ 338.188682][ T4671] usb 4-1: SerialNumber: syz [ 338.202340][ T6697] syz.1.1114: attempt to access beyond end of device [ 338.202340][ T6697] loop1: rw=3, sector=16772812762208, nr_sectors = 8388600 limit=2048 [ 338.207081][ T4671] usb 4-1: config 0 descriptor?? [ 338.250788][ T8270] syz.4.1742: attempt to access beyond end of device [ 338.250788][ T8270] loop4: rw=3, sector=9716221779008, nr_sectors = 8388600 limit=2048 [ 338.287593][ T4671] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 338.293912][ T6697] syz.1.1114: attempt to access beyond end of device [ 338.293912][ T6697] loop1: rw=3, sector=16772821150808, nr_sectors = 8388600 limit=2048 [ 338.336952][ T9725] mkiss: ax0: crc mode is auto. [ 338.568124][ T4671] ums-isd200: probe of 4-1:0.0 failed with error -22 [ 338.712927][ T4671] usb 4-1: USB disconnect, device number 30 [ 339.377246][ T9743] loop3: detected capacity change from 0 to 64 [ 339.574176][ T9745] loop2: detected capacity change from 0 to 1024 [ 339.699429][ T9745] hfsplus: bad catalog entry type [ 339.774996][ T11] hfsplus: b-tree write err: -5, ino 4 [ 339.899963][ T9753] loop2: detected capacity change from 0 to 8 [ 340.353963][ T27] audit: type=1326 audit(1726141597.477:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 340.359314][ T9761] loop3: detected capacity change from 0 to 4096 [ 340.420811][ T27] audit: type=1326 audit(1726141597.477:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 340.511365][ T27] audit: type=1326 audit(1726141597.507:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 340.597174][ T9761] ntfs: (device loop3): parse_options(): NLS character set iso not found. Using previous one cp950. [ 340.603339][ T27] audit: type=1326 audit(1726141597.507:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f930c77df33 code=0x7ffc0000 [ 340.669358][ T9761] ntfs: volume version 3.1. [ 340.713433][ T27] audit: type=1326 audit(1726141597.507:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f930c77c9df code=0x7ffc0000 [ 340.807228][ T27] audit: type=1326 audit(1726141597.557:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f930c77df87 code=0x7ffc0000 [ 340.872359][ T27] audit: type=1326 audit(1726141597.557:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f930c77c890 code=0x7ffc0000 [ 340.965081][ T27] audit: type=1326 audit(1726141597.557:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f930c77dafb code=0x7ffc0000 [ 340.994773][ T9773] tipc: Started in network mode [ 341.023398][ T9773] tipc: Node identity e0000001, cluster identity 4711 [ 341.049978][ T27] audit: type=1326 audit(1726141597.557:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9762 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f930c77dafb code=0x7ffc0000 [ 341.083893][ T9773] tipc: Enabling of bearer rejected, failed to enable media [ 341.350159][ T9785] loop3: detected capacity change from 0 to 512 [ 341.441337][ T9785] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.548608][ T9785] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.2355: Failed to acquire dquot type 0 [ 341.724533][ T9785] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 341.804313][ T9785] EXT4-fs (loop3): 1 truncate cleaned up [ 341.810127][ T9785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 341.973388][ T3862] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 341.980566][ T9802] loop2: detected capacity change from 0 to 256 [ 342.033693][ T9802] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 342.119845][ T7269] EXT4-fs (loop3): unmounting filesystem. [ 342.233443][ T3862] usb 2-1: Using ep0 maxpacket: 16 [ 342.370276][ T9808] loop3: detected capacity change from 0 to 512 [ 342.393353][ T3862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.424782][ T3862] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 342.463260][ T3862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.494205][ T3862] usb 2-1: config 0 descriptor?? [ 342.505862][ T9808] EXT4-fs (loop3): orphan cleanup on readonly fs [ 342.510312][ T9810] netlink: 'syz.4.2365': attribute type 8 has an invalid length. [ 342.560223][ T9808] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.2363: casefold flag without casefold feature [ 342.662327][ T9810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.703268][ T9808] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2363: couldn't read orphan inode 15 (err -117) [ 342.725778][ T9808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 342.973428][ T6697] bio_check_eod: 116997 callbacks suppressed [ 342.973445][ T6697] syz.1.1114: attempt to access beyond end of device [ 342.973445][ T6697] loop1: rw=3, sector=17229278431208, nr_sectors = 8388600 limit=2048 [ 342.989174][ T8270] syz.4.1742: attempt to access beyond end of device [ 342.989174][ T8270] loop4: rw=3, sector=10261698882608, nr_sectors = 8388600 limit=2048 [ 343.012309][ T7269] EXT4-fs (loop3): unmounting filesystem. [ 343.056684][ T6697] syz.1.1114: attempt to access beyond end of device [ 343.056684][ T6697] loop1: rw=3, sector=17229286819808, nr_sectors = 8388600 limit=2048 [ 343.073340][ T8270] syz.4.1742: attempt to access beyond end of device [ 343.073340][ T8270] loop4: rw=3, sector=10261707271208, nr_sectors = 8388600 limit=2048 [ 343.142379][ T6697] syz.1.1114: attempt to access beyond end of device [ 343.142379][ T6697] loop1: rw=3, sector=17229295208408, nr_sectors = 8388600 limit=2048 [ 343.167104][ T3862] creative-sb0540 0003:041E:3100.0046: item fetching failed at offset 4/5 [ 343.210452][ T8270] syz.4.1742: attempt to access beyond end of device [ 343.210452][ T8270] loop4: rw=3, sector=10261715659808, nr_sectors = 8388600 limit=2048 [ 343.212137][ T6697] syz.1.1114: attempt to access beyond end of device [ 343.212137][ T6697] loop1: rw=3, sector=17229303597008, nr_sectors = 8388600 limit=2048 [ 343.226497][ T3862] creative-sb0540 0003:041E:3100.0046: parse failed [ 343.292958][ T8270] syz.4.1742: attempt to access beyond end of device [ 343.292958][ T8270] loop4: rw=3, sector=10261724048408, nr_sectors = 8388600 limit=2048 [ 343.300963][ T9828] loop3: detected capacity change from 0 to 256 [ 343.307866][ T3862] creative-sb0540: probe of 0003:041E:3100.0046 failed with error -22 [ 343.324858][ T6697] syz.1.1114: attempt to access beyond end of device [ 343.324858][ T6697] loop1: rw=3, sector=17229311985608, nr_sectors = 8388600 limit=2048 [ 343.360931][ T6697] syz.1.1114: attempt to access beyond end of device [ 343.360931][ T6697] loop1: rw=3, sector=17229320374208, nr_sectors = 8388600 limit=2048 [ 343.392126][ T9828] exfat: Deprecated parameter 'namecase' [ 343.446107][ T9830] loop0: detected capacity change from 0 to 64 [ 343.462781][ T4670] usb 2-1: USB disconnect, device number 22 [ 343.482246][ T9828] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 343.847274][ T9837] loop0: detected capacity change from 0 to 256 [ 344.341893][ T9850] netlink: 'syz.4.2384': attribute type 12 has an invalid length. [ 344.443363][ T9850] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2384'. [ 344.676794][ T9864] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.806092][ T9870] loop0: detected capacity change from 0 to 64 [ 345.686699][ T9889] loop0: detected capacity change from 0 to 4096 [ 345.716287][ T9889] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 345.793701][ T9893] binder: BINDER_SET_CONTEXT_MGR already set [ 345.863336][ T9893] binder: 9892:9893 ioctl 40046207 0 returned -16 [ 345.974297][ T9884] loop3: detected capacity change from 0 to 8192 [ 346.053754][ T9884] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 346.103028][ T9884] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 346.213346][ T9884] REISERFS (device loop3): using ordered data mode [ 346.219922][ T9884] reiserfs: using flush barriers [ 346.282329][ T9884] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 346.382675][ T9884] REISERFS (device loop3): checking transaction log (loop3) [ 346.436882][ T9884] REISERFS (device loop3): Using r5 hash to sort names [ 346.462060][ T9874] loop2: detected capacity change from 0 to 40427 [ 346.499068][ T9874] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 346.521779][ T9874] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 346.530843][ T9884] reiserfs: enabling write barrier flush mode [ 346.616640][ T9874] F2FS-fs (loop2): Found nat_bits in checkpoint [ 346.618376][ T9884] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 346.792647][ T9884] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 346.831636][ T9874] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 346.833231][ T9884] REISERFS (device loop3): Remounting filesystem read-only [ 346.847840][ T9874] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 346.903934][ T9884] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 346.970985][ T9884] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 347.040507][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 347.043528][ T9884] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 347.109693][ T9884] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 347.176128][ T9884] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 347.253590][ T9884] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 347.300877][ T9884] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 347.373978][ T9884] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 347.573366][ T9884] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 347.693759][ T9884] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 347.757539][ T9884] REISERFS (device loop3): Remounting filesystem read-only [ 347.798103][ T9884] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 347.985557][ T6697] bio_check_eod: 78762 callbacks suppressed [ 347.985577][ T6697] syz.1.1114: attempt to access beyond end of device [ 347.985577][ T6697] loop1: rw=3, sector=17576373533408, nr_sectors = 8388600 limit=2048 [ 348.017882][ T8270] syz.4.1742: attempt to access beyond end of device [ 348.017882][ T8270] loop4: rw=3, sector=10586530640408, nr_sectors = 8388600 limit=2048 [ 348.073673][ T6697] syz.1.1114: attempt to access beyond end of device [ 348.073673][ T6697] loop1: rw=3, sector=17576381922008, nr_sectors = 8388600 limit=2048 [ 348.096433][ T8270] syz.4.1742: attempt to access beyond end of device [ 348.096433][ T8270] loop4: rw=3, sector=10586539029008, nr_sectors = 8388600 limit=2048 [ 348.182377][ T6697] syz.1.1114: attempt to access beyond end of device [ 348.182377][ T6697] loop1: rw=3, sector=17576390310608, nr_sectors = 8388600 limit=2048 [ 348.213384][ T8270] syz.4.1742: attempt to access beyond end of device [ 348.213384][ T8270] loop4: rw=3, sector=10586547417608, nr_sectors = 8388600 limit=2048 [ 348.288791][ T6697] syz.1.1114: attempt to access beyond end of device [ 348.288791][ T6697] loop1: rw=3, sector=17576398699208, nr_sectors = 8388600 limit=2048 [ 348.321501][ T8270] syz.4.1742: attempt to access beyond end of device [ 348.321501][ T8270] loop4: rw=3, sector=10586555806208, nr_sectors = 8388600 limit=2048 [ 348.353639][ T6697] syz.1.1114: attempt to access beyond end of device [ 348.353639][ T6697] loop1: rw=3, sector=17576407087808, nr_sectors = 8388600 limit=2048 [ 348.406118][ T9950] loop2: detected capacity change from 0 to 64 [ 348.409770][ T8270] syz.4.1742: attempt to access beyond end of device [ 348.409770][ T8270] loop4: rw=3, sector=10586564194808, nr_sectors = 8388600 limit=2048 [ 349.416018][ T9966] loop2: detected capacity change from 0 to 64 [ 349.687153][ T9970] loop2: detected capacity change from 0 to 64 [ 349.949104][ T9975] loop2: detected capacity change from 0 to 512 [ 350.013922][ T9975] EXT4-fs: Ignoring removed oldalloc option [ 350.108205][ T9975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 350.171267][ T9975] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 350.215959][ T9979] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 350.397290][ T9207] EXT4-fs (loop2): unmounting filesystem. [ 351.219754][ T9973] loop3: detected capacity change from 0 to 32768 [ 351.326789][ T9973] XFS (loop3): Mounting V5 Filesystem [ 351.558726][ T9973] XFS (loop3): Ending clean mount [ 351.578984][ T9984] loop2: detected capacity change from 0 to 32768 [ 351.579477][ T9973] XFS (loop3): Quotacheck needed: Please wait. [ 351.747945][ T9973] XFS (loop3): Quotacheck: Done. [ 351.927007][ T7269] XFS (loop3): Unmounting Filesystem [ 352.324098][ T9992] loop0: detected capacity change from 0 to 40427 [ 352.356462][ T9992] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 352.379129][ T9992] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 352.431095][ T9992] F2FS-fs (loop0): invalid crc value [ 352.465831][ T9992] F2FS-fs (loop0): Found nat_bits in checkpoint [ 352.636749][ T9992] F2FS-fs (loop0): Start checkpoint disabled! [ 352.687913][ T9992] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 352.703224][ T9992] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 352.994499][ T6697] bio_check_eod: 99398 callbacks suppressed [ 352.994560][ T6697] syz.1.1114: attempt to access beyond end of device [ 352.994560][ T6697] loop1: rw=3, sector=18018192706808, nr_sectors = 8388600 limit=2048 [ 353.052023][ T8270] syz.4.1742: attempt to access beyond end of device [ 353.052023][ T8270] loop4: rw=3, sector=10998436066208, nr_sectors = 8388600 limit=2048 [ 353.094980][ T8476] kworker/u4:8: attempt to access beyond end of device [ 353.094980][ T8476] loop0: rw=1, sector=53248, nr_sectors = 16 limit=40427 [ 353.109970][ T8270] syz.4.1742: attempt to access beyond end of device [ 353.109970][ T8270] loop4: rw=3, sector=10998444454808, nr_sectors = 8388600 limit=2048 [ 353.155152][ T8476] kworker/u4:8: attempt to access beyond end of device [ 353.155152][ T8476] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 353.223338][ T6697] syz.1.1114: attempt to access beyond end of device [ 353.223338][ T6697] loop1: rw=3, sector=18018201095408, nr_sectors = 8388600 limit=2048 [ 353.254133][ T8270] syz.4.1742: attempt to access beyond end of device [ 353.254133][ T8270] loop4: rw=3, sector=10998452843408, nr_sectors = 8388600 limit=2048 [ 353.291888][ T6697] syz.1.1114: attempt to access beyond end of device [ 353.291888][ T6697] loop1: rw=3, sector=18018209484008, nr_sectors = 8388600 limit=2048 [ 353.355639][ T8270] syz.4.1742: attempt to access beyond end of device [ 353.355639][ T8270] loop4: rw=3, sector=10998461232008, nr_sectors = 8388600 limit=2048 [ 353.422528][ T8270] syz.4.1742: attempt to access beyond end of device [ 353.422528][ T8270] loop4: rw=3, sector=10998469620608, nr_sectors = 8388600 limit=2048 [ 354.123555][T10058] netlink: 'syz.3.2473': attribute type 1 has an invalid length. [ 354.246461][T10028] loop2: detected capacity change from 0 to 40427 [ 354.278149][T10028] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 354.313227][T10028] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 354.368742][T10028] F2FS-fs (loop2): invalid crc value [ 354.413234][T10028] F2FS-fs (loop2): Found nat_bits in checkpoint [ 354.551231][T10028] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 354.560780][T10028] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 355.218920][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2478'. [ 355.256649][T10063] loop3: detected capacity change from 0 to 32768 [ 355.353592][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 355.353609][ T27] audit: type=1326 audit(1726141612.467:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 355.357512][T10063] XFS (loop3): Mounting V5 Filesystem [ 355.362639][ T27] audit: type=1326 audit(1726141612.477:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 355.565264][T10063] XFS (loop3): Ending clean mount [ 355.587713][T10063] XFS (loop3): Quotacheck needed: Please wait. [ 355.687204][T10063] XFS (loop3): Quotacheck: Done. [ 355.694240][ T27] audit: type=1326 audit(1726141612.477:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 355.793913][ T27] audit: type=1326 audit(1726141612.477:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 355.840242][ T7269] XFS (loop3): Unmounting Filesystem [ 355.873811][ T27] audit: type=1326 audit(1726141612.477:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 356.509738][T10090] loop2: detected capacity change from 0 to 32768 [ 356.777521][T10101] loop3: detected capacity change from 0 to 4096 [ 356.857241][T10101] ntfs: volume version 3.1. [ 358.003212][ T6697] bio_check_eod: 118606 callbacks suppressed [ 358.003233][ T6697] syz.1.1114: attempt to access beyond end of device [ 358.003233][ T6697] loop1: rw=3, sector=18455213601008, nr_sectors = 8388600 limit=2048 [ 358.041645][ T8270] syz.4.1742: attempt to access beyond end of device [ 358.041645][ T8270] loop4: rw=3, sector=11567418027008, nr_sectors = 8388600 limit=2048 [ 358.077630][ T8270] syz.4.1742: attempt to access beyond end of device [ 358.077630][ T8270] loop4: rw=3, sector=11567426415608, nr_sectors = 8388600 limit=2048 [ 358.123440][ T8270] syz.4.1742: attempt to access beyond end of device [ 358.123440][ T8270] loop4: rw=3, sector=11567434804208, nr_sectors = 8388600 limit=2048 [ 358.131058][ T6697] syz.1.1114: attempt to access beyond end of device [ 358.131058][ T6697] loop1: rw=3, sector=18455221989608, nr_sectors = 8388600 limit=2048 [ 358.163862][ T8270] syz.4.1742: attempt to access beyond end of device [ 358.163862][ T8270] loop4: rw=3, sector=11567443192808, nr_sectors = 8388600 limit=2048 [ 358.173286][ T6697] syz.1.1114: attempt to access beyond end of device [ 358.173286][ T6697] loop1: rw=3, sector=18455230378208, nr_sectors = 8388600 limit=2048 [ 358.192765][ T8270] syz.4.1742: attempt to access beyond end of device [ 358.192765][ T8270] loop4: rw=3, sector=11567451581408, nr_sectors = 8388600 limit=2048 [ 358.209232][ T8270] syz.4.1742: attempt to access beyond end of device [ 358.209232][ T8270] loop4: rw=3, sector=11567459970008, nr_sectors = 8388600 limit=2048 [ 358.263507][ T8270] syz.4.1742: attempt to access beyond end of device [ 358.263507][ T8270] loop4: rw=3, sector=11567468358608, nr_sectors = 8388600 limit=2048 [ 358.303356][ T4671] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 358.563499][ T4671] usb 2-1: Using ep0 maxpacket: 32 [ 358.653810][T10137] loop2: detected capacity change from 0 to 1024 [ 358.683565][ T4671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.683602][ T4671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.683673][ T4671] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 358.683699][ T4671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.685515][ T4671] usb 2-1: config 0 descriptor?? [ 359.053996][T10125] loop0: detected capacity change from 0 to 40427 [ 359.069876][T10125] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 359.069904][T10125] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 359.084870][T10125] F2FS-fs (loop0): invalid crc value [ 359.121945][T10125] F2FS-fs (loop0): Found nat_bits in checkpoint [ 359.165605][ T4671] apple 0003:05AC:022B.0047: unbalanced collection at end of report description [ 359.166129][ T4671] apple 0003:05AC:022B.0047: parse failed [ 359.166169][ T4671] apple: probe of 0003:05AC:022B.0047 failed with error -22 [ 359.178716][T10134] loop3: detected capacity change from 0 to 32768 [ 359.207972][T10141] loop2: detected capacity change from 0 to 4096 [ 359.269443][T10141] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 359.269475][T10141] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 359.269524][T10141] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 359.270421][T10141] ntfs: volume version 3.1. [ 359.272893][T10141] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 359.272918][T10141] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 359.367503][ T4670] usb 2-1: USB disconnect, device number 23 [ 359.384518][T10125] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 359.384562][T10125] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 360.664125][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2515'. [ 361.067955][T10149] loop2: detected capacity change from 0 to 32768 [ 361.221164][T10149] XFS (loop2): Mounting V5 Filesystem [ 361.457085][T10149] XFS (loop2): Ending clean mount [ 361.593659][T10178] loop0: detected capacity change from 0 to 32768 [ 361.604005][ T9207] XFS (loop2): Unmounting Filesystem [ 361.895032][T10193] ceph: Unexpected value for 'acl' [ 362.530400][T10182] loop3: detected capacity change from 0 to 32768 [ 362.668774][T10182] XFS (loop3): Mounting V5 Filesystem [ 362.713462][ T4671] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 362.748856][T10182] XFS (loop3): Ending clean mount [ 362.766138][T10182] XFS (loop3): Quotacheck needed: Please wait. [ 362.860219][T10182] XFS (loop3): Quotacheck: Done. [ 362.930450][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 362.973403][ T4671] usb 3-1: Using ep0 maxpacket: 8 [ 363.013297][ T8270] bio_check_eod: 100864 callbacks suppressed [ 363.013319][ T8270] syz.4.1742: attempt to access beyond end of device [ 363.013319][ T8270] loop4: rw=3, sector=11952807088208, nr_sectors = 8388600 limit=2048 [ 363.041257][ T7269] XFS (loop3): Unmounting Filesystem [ 363.044841][ T6697] syz.1.1114: attempt to access beyond end of device [ 363.044841][ T6697] loop1: rw=3, sector=18922894828208, nr_sectors = 8388600 limit=2048 [ 363.066490][ T8270] syz.4.1742: attempt to access beyond end of device [ 363.066490][ T8270] loop4: rw=3, sector=11952815476808, nr_sectors = 8388600 limit=2048 [ 363.148707][ T6697] syz.1.1114: attempt to access beyond end of device [ 363.148707][ T6697] loop1: rw=3, sector=18922903216808, nr_sectors = 8388600 limit=2048 [ 363.174869][ T6697] syz.1.1114: attempt to access beyond end of device [ 363.174869][ T6697] loop1: rw=3, sector=18922911605408, nr_sectors = 8388600 limit=2048 [ 363.223268][ T8270] syz.4.1742: attempt to access beyond end of device [ 363.223268][ T8270] loop4: rw=3, sector=11952823865408, nr_sectors = 8388600 limit=2048 [ 363.253612][ T4671] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 363.263581][ T6697] syz.1.1114: attempt to access beyond end of device [ 363.263581][ T6697] loop1: rw=3, sector=18922919994008, nr_sectors = 8388600 limit=2048 [ 363.281797][ T4671] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 363.290204][ T4671] usb 3-1: Product: syz [ 363.295163][ T8270] syz.4.1742: attempt to access beyond end of device [ 363.295163][ T8270] loop4: rw=3, sector=11952832254008, nr_sectors = 8388600 limit=2048 [ 363.312857][ T4671] usb 3-1: Manufacturer: syz [ 363.317801][ T4671] usb 3-1: SerialNumber: syz [ 363.339163][ T4671] usb 3-1: config 0 descriptor?? [ 363.344249][ T8270] syz.4.1742: attempt to access beyond end of device [ 363.344249][ T8270] loop4: rw=3, sector=11952840642608, nr_sectors = 8388600 limit=2048 [ 363.371793][ T6697] syz.1.1114: attempt to access beyond end of device [ 363.371793][ T6697] loop1: rw=3, sector=18922928382608, nr_sectors = 8388600 limit=2048 [ 363.427348][ T4671] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 363.438683][T10231] block device autoloading is deprecated and will be removed. [ 363.943617][T10244] vivid-008: disconnect [ 363.972568][T10243] vivid-008: reconnect [ 364.081846][T10247] loop0: detected capacity change from 0 to 2048 [ 364.088557][ T4671] gspca_zc3xx: reg_w_i err -71 [ 364.093652][ T4671] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 364.105514][ T4671] usb 3-1: USB disconnect, device number 30 [ 364.194805][T10247] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 364.396657][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 364.660225][T10258] loop0: detected capacity change from 0 to 4096 [ 364.779277][T10258] ntfs3: loop0: ino=5, "/" directory corrupted [ 365.080073][T10256] loop3: detected capacity change from 0 to 32768 [ 365.364544][T10256] XFS (loop3): Mounting V5 Filesystem [ 365.494594][T10256] XFS (loop3): Ending clean mount [ 365.668269][ T7269] XFS (loop3): Unmounting Filesystem [ 366.427513][T10273] loop2: detected capacity change from 0 to 32768 [ 367.232303][T10299] loop3: detected capacity change from 0 to 1024 [ 367.265860][T10299] EXT4-fs: Ignoring removed oldalloc option [ 367.355674][T10299] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.516601][T10292] loop0: detected capacity change from 0 to 40427 [ 367.545331][T10292] F2FS-fs (loop0): invalid crc value [ 367.566148][ T7269] EXT4-fs (loop3): unmounting filesystem. [ 367.631697][T10292] F2FS-fs (loop0): Found nat_bits in checkpoint [ 367.795459][T10292] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 367.832796][T10292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 367.875445][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 367.875461][ T27] audit: type=1800 audit(1726141624.997:66): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2565" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 367.943379][ T4670] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 368.037324][ T6697] bio_check_eod: 99807 callbacks suppressed [ 368.037345][ T6697] syz.1.1114: attempt to access beyond end of device [ 368.037345][ T6697] loop1: rw=3, sector=19292681093408, nr_sectors = 8388600 limit=2048 [ 368.053324][ T8270] syz.4.1742: attempt to access beyond end of device [ 368.053324][ T8270] loop4: rw=3, sector=12432643396808, nr_sectors = 8388600 limit=2048 [ 368.082712][ T6697] syz.1.1114: attempt to access beyond end of device [ 368.082712][ T6697] loop1: rw=3, sector=19292689482008, nr_sectors = 8388600 limit=2048 [ 368.110421][ T6697] syz.1.1114: attempt to access beyond end of device [ 368.110421][ T6697] loop1: rw=3, sector=19292697870608, nr_sectors = 8388600 limit=2048 [ 368.127740][ T6697] syz.1.1114: attempt to access beyond end of device [ 368.127740][ T6697] loop1: rw=3, sector=19292706259208, nr_sectors = 8388600 limit=2048 [ 368.143996][ T6697] syz.1.1114: attempt to access beyond end of device [ 368.143996][ T6697] loop1: rw=3, sector=19292714647808, nr_sectors = 8388600 limit=2048 [ 368.155234][ T8270] syz.4.1742: attempt to access beyond end of device [ 368.155234][ T8270] loop4: rw=3, sector=12432651785408, nr_sectors = 8388600 limit=2048 [ 368.167242][ T6697] syz.1.1114: attempt to access beyond end of device [ 368.167242][ T6697] loop1: rw=3, sector=19292723036408, nr_sectors = 8388600 limit=2048 [ 368.189431][ T6697] syz.1.1114: attempt to access beyond end of device [ 368.189431][ T6697] loop1: rw=3, sector=19292731425008, nr_sectors = 8388600 limit=2048 [ 368.204125][ T8270] syz.4.1742: attempt to access beyond end of device [ 368.204125][ T8270] loop4: rw=3, sector=12432660174008, nr_sectors = 8388600 limit=2048 [ 368.363598][ T4670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.374821][ T4668] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 368.402772][ T4670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.420592][ T4670] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 368.432040][ T4670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.473407][ T4670] usb 3-1: config 0 descriptor?? [ 368.613401][ T4668] usb 4-1: Using ep0 maxpacket: 32 [ 368.737984][ T4668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.767662][ T4668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.798091][ T4668] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 368.820579][ T4668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.847301][ T4668] usb 4-1: config 0 descriptor?? [ 368.977145][ T4670] wacom 0003:056A:032B.0048: unknown main item tag 0x0 [ 369.006353][ T4670] wacom 0003:056A:032B.0048: unknown main item tag 0x0 [ 369.030086][ T4670] wacom 0003:056A:032B.0048: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.2-1/input0 [ 369.179832][ T4670] usb 3-1: USB disconnect, device number 31 [ 369.593761][ T4667] usb 4-1: USB disconnect, device number 31 [ 370.506783][T10359] loop2: detected capacity change from 0 to 128 [ 370.539331][T10359] EXT4-fs: Ignoring removed nobh option [ 370.614378][T10359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 370.662293][T10359] ext4 filesystem being mounted at mnt:[4026533321] supports timestamps until 2038 (0x7fffffff) [ 370.686662][T10359] EXT4-fs (loop2): unmounting filesystem. [ 370.986781][T10371] loop2: detected capacity change from 0 to 64 [ 373.074779][ T6697] bio_check_eod: 126317 callbacks suppressed [ 373.074806][ T6697] syz.1.1114: attempt to access beyond end of device [ 373.074806][ T6697] loop1: rw=3, sector=19827907327808, nr_sectors = 8388600 limit=2048 [ 373.133405][ T8270] syz.4.1742: attempt to access beyond end of device [ 373.133405][ T8270] loop4: rw=3, sector=12982415463608, nr_sectors = 8388600 limit=2048 [ 373.193551][ T8270] syz.4.1742: attempt to access beyond end of device [ 373.193551][ T8270] loop4: rw=3, sector=12982423852208, nr_sectors = 8388600 limit=2048 [ 373.248686][ T6697] syz.1.1114: attempt to access beyond end of device [ 373.248686][ T6697] loop1: rw=3, sector=19827915716408, nr_sectors = 8388600 limit=2048 [ 373.264668][ T8270] syz.4.1742: attempt to access beyond end of device [ 373.264668][ T8270] loop4: rw=3, sector=12982432240808, nr_sectors = 8388600 limit=2048 [ 373.278317][T10402] loop2: detected capacity change from 0 to 40427 [ 373.280211][ T6697] syz.1.1114: attempt to access beyond end of device [ 373.280211][ T6697] loop1: rw=3, sector=19827924105008, nr_sectors = 8388600 limit=2048 [ 373.301126][ T8270] syz.4.1742: attempt to access beyond end of device [ 373.301126][ T8270] loop4: rw=3, sector=12982440629408, nr_sectors = 8388600 limit=2048 [ 373.316955][ T8270] syz.4.1742: attempt to access beyond end of device [ 373.316955][ T8270] loop4: rw=3, sector=12982449018008, nr_sectors = 8388600 limit=2048 [ 373.342307][ T6697] syz.1.1114: attempt to access beyond end of device [ 373.342307][ T6697] loop1: rw=3, sector=19827932493608, nr_sectors = 8388600 limit=2048 [ 373.361711][T10402] F2FS-fs (loop2): invalid crc value [ 373.367791][ T8270] syz.4.1742: attempt to access beyond end of device [ 373.367791][ T8270] loop4: rw=3, sector=12982457406608, nr_sectors = 8388600 limit=2048 [ 373.392428][T10402] F2FS-fs (loop2): Found nat_bits in checkpoint [ 373.581136][T10402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 373.943374][ T3865] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 374.204088][ T3865] usb 4-1: Using ep0 maxpacket: 8 [ 374.343461][ T3865] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 374.363285][ T3865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.403228][ T3865] usb 4-1: config 0 has no interface number 0 [ 374.419574][ T3865] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 374.453353][ T3865] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 374.473786][ T3656] Bluetooth: hci2: unknown advertising packet type: 0x6e [ 374.491100][ T3865] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.572592][ T3865] usb 4-1: config 0 interface 52 has no altsetting 0 [ 374.668103][ T3865] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 374.693332][ T3865] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 374.723964][ T3865] usb 4-1: Manufacturer: syz [ 374.741051][ T3865] usb 4-1: config 0 descriptor?? [ 375.010583][ T3865] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 375.033385][ T3865] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 375.213979][ T153] usb 4-1: USB disconnect, device number 32 [ 375.323292][ T3656] Bluetooth: hci4: command 0x0406 tx timeout [ 376.321389][T10498] atomic_op ffff88801e649998 conn xmit_atomic 0000000000000000 [ 377.324499][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2672'. [ 377.351636][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2672'. [ 377.416200][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 377.461104][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 377.548565][T10539] loop0: detected capacity change from 0 to 1764 [ 378.090296][ T6697] bio_check_eod: 98094 callbacks suppressed [ 378.090315][ T6697] syz.1.1114: attempt to access beyond end of device [ 378.090315][ T6697] loop1: rw=3, sector=20271462941408, nr_sectors = 8388600 limit=2048 [ 378.134338][ T8270] syz.4.1742: attempt to access beyond end of device [ 378.134338][ T8270] loop4: rw=3, sector=13387182190808, nr_sectors = 8388600 limit=2048 [ 378.179275][ T6697] syz.1.1114: attempt to access beyond end of device [ 378.179275][ T6697] loop1: rw=3, sector=20271471330008, nr_sectors = 8388600 limit=2048 [ 378.230369][ T6697] syz.1.1114: attempt to access beyond end of device [ 378.230369][ T6697] loop1: rw=3, sector=20271479718608, nr_sectors = 8388600 limit=2048 [ 378.236323][ T8270] syz.4.1742: attempt to access beyond end of device [ 378.236323][ T8270] loop4: rw=3, sector=13387190579408, nr_sectors = 8388600 limit=2048 [ 378.274535][ T4670] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 378.291139][T10561] loop3: detected capacity change from 0 to 1024 [ 378.339460][ T6697] syz.1.1114: attempt to access beyond end of device [ 378.339460][ T6697] loop1: rw=3, sector=20271488107208, nr_sectors = 8388600 limit=2048 [ 378.364987][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.371396][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.398457][ T27] audit: type=1800 audit(1726141635.517:67): pid=10561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2689" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 378.422007][ T6697] syz.1.1114: attempt to access beyond end of device [ 378.422007][ T6697] loop1: rw=3, sector=20271496495808, nr_sectors = 8388600 limit=2048 [ 378.437617][ T8270] syz.4.1742: attempt to access beyond end of device [ 378.437617][ T8270] loop4: rw=3, sector=13387198968008, nr_sectors = 8388600 limit=2048 [ 378.468960][ T8270] syz.4.1742: attempt to access beyond end of device [ 378.468960][ T8270] loop4: rw=3, sector=13387207356608, nr_sectors = 8388600 limit=2048 [ 378.504737][ T6697] syz.1.1114: attempt to access beyond end of device [ 378.504737][ T6697] loop1: rw=3, sector=20271504884408, nr_sectors = 8388600 limit=2048 [ 378.513302][ T4670] usb 3-1: Using ep0 maxpacket: 32 [ 378.570199][ T102] hfsplus: b-tree write err: -5, ino 4 [ 378.673645][ T4670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 378.734873][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2694'. [ 378.860167][ T4670] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 378.893268][ T4670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.943967][ T4670] usb 3-1: Product: syz [ 378.948724][ T4670] usb 3-1: Manufacturer: syz [ 378.953947][ T4670] usb 3-1: SerialNumber: syz [ 378.978198][ T4670] usb 3-1: config 0 descriptor?? [ 378.998403][T10578] loop0: detected capacity change from 0 to 64 [ 379.035984][T10578] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 379.261224][ T3862] usb 3-1: USB disconnect, device number 32 [ 379.273202][ T153] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 379.683411][ T153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.704904][ T153] usb 4-1: config 0 has no interfaces? [ 379.710490][ T153] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 379.733273][ T153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.759616][ T153] usb 4-1: config 0 descriptor?? [ 380.011049][ T4667] usb 4-1: USB disconnect, device number 33 [ 380.807407][T10615] loop0: detected capacity change from 0 to 256 [ 380.888461][T10615] FAT-fs (loop0): Directory bread(block 64) failed [ 380.919392][T10615] FAT-fs (loop0): Directory bread(block 65) failed [ 380.929600][T10615] FAT-fs (loop0): Directory bread(block 66) failed [ 380.946871][T10615] FAT-fs (loop0): Directory bread(block 67) failed [ 380.986655][T10615] FAT-fs (loop0): Directory bread(block 68) failed [ 381.000977][T10615] FAT-fs (loop0): Directory bread(block 69) failed [ 381.018619][T10615] FAT-fs (loop0): Directory bread(block 70) failed [ 381.073486][T10615] FAT-fs (loop0): Directory bread(block 71) failed [ 381.114827][T10615] FAT-fs (loop0): Directory bread(block 72) failed [ 381.121404][T10615] FAT-fs (loop0): Directory bread(block 73) failed [ 381.195107][T10625] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2720'. [ 381.246612][T10625] tipc: Invalid UDP bearer configuration [ 381.246655][T10625] tipc: Enabling of bearer rejected, failed to enable media [ 381.656260][T10639] support for cryptoloop has been removed. Use dm-crypt instead. [ 381.713519][ T4670] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 381.993522][T10649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2731'. [ 382.006289][T10651] overlayfs: empty lowerdir [ 382.035835][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2731'. [ 382.090372][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2733'. [ 382.093514][ T4670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.099884][ T3862] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 382.150464][ T4670] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.190960][ T4670] usb 4-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 382.231456][ T4670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.266863][ T4670] usb 4-1: config 0 descriptor?? [ 382.500183][ T3862] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 382.531982][ T3862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3009, setting to 64 [ 382.583764][ T3862] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 4 [ 382.603668][ T3862] usb 3-1: config 1 interface 1 has no altsetting 0 [ 382.639119][ T3862] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 382.650601][ T3862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.703517][T10643] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.724678][ T3862] hub 3-1:1.0: bad descriptor, ignoring hub [ 382.730638][ T3862] hub: probe of 3-1:1.0 failed with error -5 [ 382.751961][ T3862] cdc_wdm 3-1:1.0: skipping garbage [ 382.759226][ T4670] hid-generic 0003:0EEF:C002.004A: hidraw0: USB HID v0.00 Device [HID 0eef:c002] on usb-dummy_hcd.3-1/input0 [ 382.770856][ T3862] cdc_wdm 3-1:1.0: skipping garbage [ 382.783440][ T3862] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 382.821058][ T3862] cdc_wdm 3-1:1.0: Unknown control protocol [ 382.872951][ T3862] hub 3-1:1.1: bad descriptor, ignoring hub [ 382.892168][ T3862] hub: probe of 3-1:1.1 failed with error -5 [ 382.967775][ T4670] usb 4-1: USB disconnect, device number 34 [ 383.116609][ T6697] bio_check_eod: 107046 callbacks suppressed [ 383.116629][ T6697] syz.1.1114: attempt to access beyond end of device [ 383.116629][ T6697] loop1: rw=3, sector=20775114485408, nr_sectors = 8388600 limit=2048 [ 383.150307][T10675] loop0: detected capacity change from 0 to 128 [ 383.171667][ T8270] syz.4.1742: attempt to access beyond end of device [ 383.171667][ T8270] loop4: rw=3, sector=13808273133608, nr_sectors = 8388600 limit=2048 [ 383.213832][ T6697] syz.1.1114: attempt to access beyond end of device [ 383.213832][ T6697] loop1: rw=3, sector=20775122874008, nr_sectors = 8388600 limit=2048 [ 383.263800][ T8270] syz.4.1742: attempt to access beyond end of device [ 383.263800][ T8270] loop4: rw=3, sector=13808281522208, nr_sectors = 8388600 limit=2048 [ 383.306950][ T6697] syz.1.1114: attempt to access beyond end of device [ 383.306950][ T6697] loop1: rw=3, sector=20775131262608, nr_sectors = 8388600 limit=2048 [ 383.362495][ T8270] syz.4.1742: attempt to access beyond end of device [ 383.362495][ T8270] loop4: rw=3, sector=13808289910808, nr_sectors = 8388600 limit=2048 [ 383.368701][ T4670] usb 3-1: USB disconnect, device number 33 [ 383.386894][ T6697] syz.1.1114: attempt to access beyond end of device [ 383.386894][ T6697] loop1: rw=3, sector=20775139651208, nr_sectors = 8388600 limit=2048 [ 383.445002][ T6697] syz.1.1114: attempt to access beyond end of device [ 383.445002][ T6697] loop1: rw=3, sector=20775148039808, nr_sectors = 8388600 limit=2048 [ 383.488191][ T8270] syz.4.1742: attempt to access beyond end of device [ 383.488191][ T8270] loop4: rw=3, sector=13808298299408, nr_sectors = 8388600 limit=2048 [ 383.532010][ T6697] syz.1.1114: attempt to access beyond end of device [ 383.532010][ T6697] loop1: rw=3, sector=20775156428408, nr_sectors = 8388600 limit=2048 [ 384.015653][T10695] loop2: detected capacity change from 0 to 64 [ 384.202466][ T9207] Trying to free block not in datazone [ 385.263301][ T3862] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 385.633473][ T3862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.661642][ T3862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 385.713416][ T3862] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 385.757715][ T3862] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 385.772182][ T3862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.809077][ T3862] usb 2-1: config 0 descriptor?? [ 385.849234][T10719] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.208010][ T4670] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 386.328687][ T3862] aureal 0003:0755:2626.004B: unknown main item tag 0x6 [ 386.351357][ T3862] aureal 0003:0755:2626.004B: report_id 29495 is invalid [ 386.371432][ T3862] aureal 0003:0755:2626.004B: item 0 2 1 8 parsing failed [ 386.392173][ T3862] aureal: probe of 0003:0755:2626.004B failed with error -22 [ 386.403374][ T3688] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 386.559229][ T3865] usb 2-1: USB disconnect, device number 24 [ 386.583460][ T4670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 386.623263][ T4670] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 386.651998][ T4670] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 386.673301][ T4670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.707048][ T4670] usb 3-1: config 0 descriptor?? [ 386.784088][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.802556][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.851459][ T3688] usb 4-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 386.921734][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.960357][ T3688] usb 4-1: config 0 descriptor?? [ 386.986424][ T3865] usb 3-1: USB disconnect, device number 34 [ 387.460829][ T3688] wacom 0003:056A:00B0.004C: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 387.500229][ T3688] wacom 0003:056A:00B0.004C: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.3-1/input0 [ 387.541789][ T3688] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B0.004C/input/input42 [ 387.658492][ T3688] usb 4-1: USB disconnect, device number 35 [ 388.123367][ T8270] bio_check_eod: 123206 callbacks suppressed [ 388.123450][ T8270] syz.4.1742: attempt to access beyond end of device [ 388.123450][ T8270] loop4: rw=3, sector=14312268610208, nr_sectors = 8388600 limit=2048 [ 388.142583][ T6697] syz.1.1114: attempt to access beyond end of device [ 388.142583][ T6697] loop1: rw=3, sector=21340875223808, nr_sectors = 8388600 limit=2048 [ 388.175817][ T8270] syz.4.1742: attempt to access beyond end of device [ 388.175817][ T8270] loop4: rw=3, sector=14312276998808, nr_sectors = 8388600 limit=2048 [ 388.205631][ T6697] syz.1.1114: attempt to access beyond end of device [ 388.205631][ T6697] loop1: rw=3, sector=21340883612408, nr_sectors = 8388600 limit=2048 [ 388.228937][ T8270] syz.4.1742: attempt to access beyond end of device [ 388.228937][ T8270] loop4: rw=3, sector=14312285387408, nr_sectors = 8388600 limit=2048 [ 388.264315][ T6697] syz.1.1114: attempt to access beyond end of device [ 388.264315][ T6697] loop1: rw=3, sector=21340892001008, nr_sectors = 8388600 limit=2048 [ 388.309005][ T8270] syz.4.1742: attempt to access beyond end of device [ 388.309005][ T8270] loop4: rw=3, sector=14312293776008, nr_sectors = 8388600 limit=2048 [ 388.353905][ T8270] syz.4.1742: attempt to access beyond end of device [ 388.353905][ T8270] loop4: rw=3, sector=14312302164608, nr_sectors = 8388600 limit=2048 [ 388.373618][ T6697] syz.1.1114: attempt to access beyond end of device [ 388.373618][ T6697] loop1: rw=3, sector=21340900389608, nr_sectors = 8388600 limit=2048 [ 388.414529][ T8270] syz.4.1742: attempt to access beyond end of device [ 388.414529][ T8270] loop4: rw=3, sector=14312310553208, nr_sectors = 8388600 limit=2048 [ 388.761398][T10802] block nbd2: Unsupported socket: shutdown callout must be supported. [ 388.846319][T10806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2807'. [ 389.280495][T10812] loop2: detected capacity change from 0 to 2048 [ 389.421947][T10816] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.591515][T10816] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 389.613240][T10816] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 389.663264][T10816] Remounting filesystem read-only [ 389.673360][ T46] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 389.683276][ T46] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 389.703221][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 389.745352][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 389.769096][T10795] loop0: detected capacity change from 0 to 32768 [ 389.775749][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 389.805069][ T46] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 389.812391][T10795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2803 (10795) [ 389.856481][ T46] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 389.876555][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 389.891948][T10795] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 389.926414][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 389.935894][T10795] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 389.935941][T10795] BTRFS info (device loop0): setting nodatacow, compression disabled [ 389.935980][T10795] BTRFS info (device loop0): turning on flush-on-commit [ 389.936007][T10795] BTRFS info (device loop0): enabling auto defrag [ 389.936057][T10795] BTRFS info (device loop0): max_inline at 0 [ 389.936078][T10795] BTRFS info (device loop0): using free space tree [ 389.964483][T10805] loop3: detected capacity change from 0 to 32768 [ 390.009988][T10805] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.2808 (10805) [ 390.079041][T10805] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 390.089901][T10805] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 390.098996][T10805] BTRFS info (device loop3): using free space tree [ 390.164575][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 390.174195][ T46] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 390.180946][ T46] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 390.219433][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 390.296293][T10795] BTRFS info (device loop0): enabling ssd optimizations [ 390.309144][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 390.326456][T10805] BTRFS info (device loop3): enabling ssd optimizations [ 390.368263][ T46] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 390.424067][ T9207] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 390.435196][ T9207] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 390.494673][ T9207] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 390.517024][ T7269] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 390.544911][ T9207] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 390.552268][ T9207] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 390.614020][ T9207] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 390.693433][ T3656] Bluetooth: hci6: command 0x0406 tx timeout [ 390.993651][ T3640] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 391.722791][ T27] audit: type=1326 audit(1726141648.837:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 391.726542][ T27] audit: type=1326 audit(1726141648.847:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 391.726876][ T27] audit: type=1326 audit(1726141648.847:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 391.727159][ T27] audit: type=1326 audit(1726141648.847:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 391.727361][ T27] audit: type=1326 audit(1726141648.847:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10886 comm="syz.4.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930c77def9 code=0x7ffc0000 [ 391.743386][ T4669] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 391.878970][T10891] loop3: detected capacity change from 0 to 1024 [ 391.932188][T10891] hfsplus: bad catalog entry type [ 392.031361][ T8476] hfsplus: b-tree write err: -5, ino 4 [ 392.109967][ T4669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.314662][T10901] netlink: 'syz.0.2836': attribute type 27 has an invalid length. [ 392.318212][T10903] loop3: detected capacity change from 0 to 64 [ 392.342095][ T4669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.342142][ T4669] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 392.342171][ T4669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.354819][ T4669] usb 3-1: config 0 descriptor?? [ 392.837667][ T4669] kye 0003:0458:5015.004D: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.2-1/input0 [ 392.889321][ T4669] kye 0003:0458:5015.004D: tablet-enabling feature report not found [ 392.915735][ T4669] kye 0003:0458:5015.004D: tablet enabling failed [ 393.040856][ T4669] usb 3-1: USB disconnect, device number 35 [ 393.133239][ T8270] bio_check_eod: 73350 callbacks suppressed [ 393.133257][ T8270] syz.4.1742: attempt to access beyond end of device [ 393.133257][ T8270] loop4: rw=3, sector=14645673517208, nr_sectors = 8388600 limit=2048 [ 393.155334][ T6697] syz.1.1114: attempt to access beyond end of device [ 393.155334][ T6697] loop1: rw=3, sector=21635885508608, nr_sectors = 8388600 limit=2048 [ 393.193256][ T8270] syz.4.1742: attempt to access beyond end of device [ 393.193256][ T8270] loop4: rw=3, sector=14645681905808, nr_sectors = 8388600 limit=2048 [ 393.238984][ T6697] syz.1.1114: attempt to access beyond end of device [ 393.238984][ T6697] loop1: rw=3, sector=21635893897208, nr_sectors = 8388600 limit=2048 [ 393.253307][ T8270] syz.4.1742: attempt to access beyond end of device [ 393.253307][ T8270] loop4: rw=3, sector=14645690294408, nr_sectors = 8388600 limit=2048 [ 393.293591][ T8270] syz.4.1742: attempt to access beyond end of device [ 393.293591][ T8270] loop4: rw=3, sector=14645698683008, nr_sectors = 8388600 limit=2048 [ 393.326129][ T6697] syz.1.1114: attempt to access beyond end of device [ 393.326129][ T6697] loop1: rw=3, sector=21635902285808, nr_sectors = 8388600 limit=2048 [ 393.373754][ T8270] syz.4.1742: attempt to access beyond end of device [ 393.373754][ T8270] loop4: rw=3, sector=14645707071608, nr_sectors = 8388600 limit=2048 [ 393.374012][ T6697] syz.1.1114: attempt to access beyond end of device [ 393.374012][ T6697] loop1: rw=3, sector=21635910674408, nr_sectors = 8388600 limit=2048 [ 393.408152][ T6697] syz.1.1114: attempt to access beyond end of device [ 393.408152][ T6697] loop1: rw=3, sector=21635919063008, nr_sectors = 8388600 limit=2048 [ 393.653448][ T3688] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 393.958273][T10913] loop3: detected capacity change from 0 to 40427 [ 393.983730][T10913] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 394.012133][T10913] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 394.053695][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.078661][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.090891][T10913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 394.145344][ T3688] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 394.164799][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.191625][T10942] netlink: 'syz.2.2854': attribute type 3 has an invalid length. [ 394.201530][ T3688] usb 2-1: config 0 descriptor?? [ 394.272218][T10913] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 394.281799][T10913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 394.362594][T10913] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 394.391664][T10945] program syz.4.2855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.662729][T10949] loop0: detected capacity change from 0 to 256 [ 394.669207][ T4669] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 394.782534][T10951] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2859'. [ 394.822576][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2859'. [ 394.923511][ T4669] usb 3-1: Using ep0 maxpacket: 32 [ 394.990342][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 395.003508][ T3688] hid-led: probe of 0003:0FC5:B080.004E failed with error -71 [ 395.023423][ T3688] usb 2-1: USB disconnect, device number 25 [ 395.053425][ T4669] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 395.074535][ T4669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.102825][ T4669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.131587][ T4669] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 395.172148][ T4669] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 395.200527][ T4669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.255837][ T4669] usb 3-1: config 0 descriptor?? [ 395.535364][T10947] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 395.666106][ T4669] usbhid 3-1:0.0: can't add hid device: -71 [ 395.666207][ T4669] usbhid: probe of 3-1:0.0 failed with error -71 [ 395.680675][ T4669] usb 3-1: USB disconnect, device number 36 [ 395.843318][ T3214] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 396.083543][ T3214] usb 4-1: Using ep0 maxpacket: 16 [ 396.203572][ T3214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.217445][T10977] loop2: detected capacity change from 0 to 256 [ 396.233462][ T3214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.281384][ T3214] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 396.324157][T10961] loop0: detected capacity change from 0 to 40427 [ 396.329395][ T3214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.351646][T10961] F2FS-fs (loop0): invalid crc value [ 396.362528][T10961] F2FS-fs (loop0): Found nat_bits in checkpoint [ 396.375899][ T3214] usb 4-1: config 0 descriptor?? [ 396.548029][T10961] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 396.856194][ T3214] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 396.883642][ T3214] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 396.901074][ T3214] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 396.911210][ T3214] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 396.925186][ T3214] elecom 0003:056E:00FE.004F: unknown main item tag 0x0 [ 396.965980][ T3214] elecom 0003:056E:00FE.004F: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 397.060588][ T3214] usb 4-1: USB disconnect, device number 36 [ 397.447341][T10998] netlink: 'syz.4.2881': attribute type 6 has an invalid length. [ 397.561205][T11000] loop0: detected capacity change from 0 to 1024 [ 397.663270][T11000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 397.671604][T11000] System zones: 0-1, 3-12 [ 397.732161][T11000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 397.860924][T10988] loop2: detected capacity change from 0 to 40427 [ 397.905994][T10988] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 397.908594][T11013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2886'. [ 397.950537][T10988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 397.993283][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 398.124221][T10988] F2FS-fs (loop2): Found nat_bits in checkpoint [ 398.147364][ T8270] bio_check_eod: 112993 callbacks suppressed [ 398.147383][ T8270] syz.4.1742: attempt to access beyond end of device [ 398.147383][ T8270] loop4: rw=3, sector=15023621890208, nr_sectors = 8388600 limit=2048 [ 398.183271][ T6697] syz.1.1114: attempt to access beyond end of device [ 398.183271][ T6697] loop1: rw=3, sector=22225830580808, nr_sectors = 8388600 limit=2048 [ 398.261560][ T6697] syz.1.1114: attempt to access beyond end of device [ 398.261560][ T6697] loop1: rw=3, sector=22225838969408, nr_sectors = 8388600 limit=2048 [ 398.286262][T10988] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 398.289844][ T8270] syz.4.1742: attempt to access beyond end of device [ 398.289844][ T8270] loop4: rw=3, sector=15023630278808, nr_sectors = 8388600 limit=2048 [ 398.300075][T10988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 398.336750][ T6697] syz.1.1114: attempt to access beyond end of device [ 398.336750][ T6697] loop1: rw=3, sector=22225847358008, nr_sectors = 8388600 limit=2048 [ 398.371359][ T6697] syz.1.1114: attempt to access beyond end of device [ 398.371359][ T6697] loop1: rw=3, sector=22225855746608, nr_sectors = 8388600 limit=2048 [ 398.397791][ T8270] syz.4.1742: attempt to access beyond end of device [ 398.397791][ T8270] loop4: rw=3, sector=15023638667408, nr_sectors = 8388600 limit=2048 [ 398.416734][ T6697] syz.1.1114: attempt to access beyond end of device [ 398.416734][ T6697] loop1: rw=3, sector=22225864135208, nr_sectors = 8388600 limit=2048 [ 398.457109][ T8270] syz.4.1742: attempt to access beyond end of device [ 398.457109][ T8270] loop4: rw=3, sector=15023647056008, nr_sectors = 8388600 limit=2048 [ 398.483792][ T9207] syz-executor: attempt to access beyond end of device [ 398.483792][ T9207] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 398.513429][ T22] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 398.783275][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 398.913424][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.942119][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.990769][ T22] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 399.019350][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.039991][ T22] usb 4-1: config 0 descriptor?? [ 399.460702][T11045] netlink: 'syz.2.2900': attribute type 6 has an invalid length. [ 399.533252][T11045] netlink: 14557 bytes leftover after parsing attributes in process `syz.2.2900'. [ 399.551862][ T22] apple 0003:05AC:027D.0050: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 399.737828][ T22] usb 4-1: USB disconnect, device number 37 [ 399.748912][T11051] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 400.010273][T11034] loop0: detected capacity change from 0 to 40427 [ 400.056523][T11034] F2FS-fs (loop0): invalid crc value [ 400.076497][T11034] F2FS-fs (loop0): Found nat_bits in checkpoint [ 400.265998][T11034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 400.334737][ T27] audit: type=1800 audit(1726141657.457:73): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2896" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 400.906980][T11058] loop2: detected capacity change from 0 to 32768 [ 400.950395][T11058] XFS: ikeep mount option is deprecated. [ 401.077906][T11058] XFS (loop2): Mounting V5 Filesystem [ 401.192036][T11058] XFS (loop2): Ending clean mount [ 401.215338][T11058] XFS (loop2): Quotacheck needed: Please wait. [ 401.291817][T11058] XFS (loop2): Quotacheck: Done. [ 401.475899][ T9207] XFS (loop2): Unmounting Filesystem [ 401.927220][T11078] loop3: detected capacity change from 0 to 8192 [ 401.978332][T11078] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 402.072248][T11078] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 402.161962][T11078] REISERFS (device loop3): using ordered data mode [ 402.218546][T11078] reiserfs: using flush barriers [ 402.253085][T11078] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 402.267885][T11094] MPTCP: kernel_bind error, err=-99 [ 402.299799][T11078] REISERFS (device loop3): checking transaction log (loop3) [ 402.339335][T11078] REISERFS (device loop3): Using r5 hash to sort names [ 402.384488][T11078] REISERFS (device loop3): using 3.5.x disk format [ 402.402105][T11078] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 402.479474][T11101] loop2: detected capacity change from 0 to 1024 [ 402.693443][ T4398] hfsplus: b-tree write err: -5, ino 4 [ 403.103375][ T153] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 403.160764][ T8270] bio_check_eod: 133127 callbacks suppressed [ 403.160783][ T8270] syz.4.1742: attempt to access beyond end of device [ 403.160783][ T8270] loop4: rw=3, sector=15618935666408, nr_sectors = 8388600 limit=2048 [ 403.182181][ T6697] syz.1.1114: attempt to access beyond end of device [ 403.182181][ T6697] loop1: rw=3, sector=22789838101808, nr_sectors = 8388600 limit=2048 [ 403.225258][ T6697] syz.1.1114: attempt to access beyond end of device [ 403.225258][ T6697] loop1: rw=3, sector=22789846490408, nr_sectors = 8388600 limit=2048 [ 403.290869][ T6697] syz.1.1114: attempt to access beyond end of device [ 403.290869][ T6697] loop1: rw=3, sector=22789854879008, nr_sectors = 8388600 limit=2048 [ 403.323800][ T8270] syz.4.1742: attempt to access beyond end of device [ 403.323800][ T8270] loop4: rw=3, sector=15618944055008, nr_sectors = 8388600 limit=2048 [ 403.352289][T11102] loop0: detected capacity change from 0 to 32768 [ 403.389432][ T8270] syz.4.1742: attempt to access beyond end of device [ 403.389432][ T8270] loop4: rw=3, sector=15618952443608, nr_sectors = 8388600 limit=2048 [ 403.404562][T11102] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2922 (11102) [ 403.423241][ T6697] syz.1.1114: attempt to access beyond end of device [ 403.423241][ T6697] loop1: rw=3, sector=22789863267608, nr_sectors = 8388600 limit=2048 [ 403.446753][T11102] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.477593][T11102] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 403.493822][ T153] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 403.513216][ T8270] syz.4.1742: attempt to access beyond end of device [ 403.513216][ T8270] loop4: rw=3, sector=15618960832208, nr_sectors = 8388600 limit=2048 [ 403.528804][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.537415][ T6697] syz.1.1114: attempt to access beyond end of device [ 403.537415][ T6697] loop1: rw=3, sector=22789871656208, nr_sectors = 8388600 limit=2048 [ 403.555077][T11102] BTRFS info (device loop0): using free space tree [ 403.563639][ T8270] syz.4.1742: attempt to access beyond end of device [ 403.563639][ T8270] loop4: rw=3, sector=15618969220808, nr_sectors = 8388600 limit=2048 [ 403.565389][ T153] usb 3-1: config 0 descriptor?? [ 403.624624][ T153] cp210x 3-1:0.0: cp210x converter detected [ 403.843586][T11102] BTRFS info (device loop0): enabling ssd optimizations [ 403.966847][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'. [ 403.984945][ T3640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 404.217542][T11147] loop3: detected capacity change from 0 to 256 [ 404.251698][T11147] exfat: Deprecated parameter 'utf8' [ 404.270005][T11147] exfat: Deprecated parameter 'utf8' [ 404.283565][ T153] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 404.291275][ T153] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 404.299596][T11147] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 404.324884][ T153] usb 3-1: cp210x converter now attached to ttyUSB0 [ 404.369077][ T153] usb 3-1: USB disconnect, device number 37 [ 404.384423][ T27] audit: type=1800 audit(1726141661.507:74): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2937" name="bus" dev="loop3" ino=1048782 res=0 errno=0 [ 404.394086][ T153] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.479285][ T153] cp210x 3-1:0.0: device disconnected [ 404.843217][T11150] loop3: detected capacity change from 0 to 1024 [ 405.027013][ T11] hfsplus: b-tree write err: -5, ino 4 [ 405.637207][T11152] loop0: detected capacity change from 0 to 32768 [ 405.657477][T11152] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.2936 (11152) [ 405.721419][T11152] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 405.763300][T11152] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 405.802149][T11152] BTRFS info (device loop0): using free space tree [ 405.995232][T11152] BTRFS info (device loop0): enabling ssd optimizations [ 406.168774][ T3640] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 406.623972][T11160] loop3: detected capacity change from 0 to 32768 [ 407.638432][T11192] loop2: detected capacity change from 0 to 32768 [ 407.693325][T11192] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2950 (11192) [ 407.727889][T11192] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 407.774146][T11192] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 407.812527][T11192] BTRFS info (device loop2): setting nodatacow, compression disabled [ 407.843336][T11192] BTRFS info (device loop2): setting datacow [ 407.850539][T11192] BTRFS info (device loop2): doing ref verification [ 407.899367][T11192] BTRFS info (device loop2): setting nodatacow, compression disabled [ 407.943316][T11192] BTRFS info (device loop2): turning off barriers [ 407.949895][T11192] BTRFS info (device loop2): enabling ssd optimizations [ 407.993999][T11192] BTRFS info (device loop2): using spread ssd allocation scheme [ 408.001703][T11192] BTRFS info (device loop2): not using ssd optimizations [ 408.033075][T11192] BTRFS info (device loop2): not using spread ssd allocation scheme [ 408.061744][T11192] BTRFS info (device loop2): using free space tree [ 408.173472][ T8270] bio_check_eod: 102289 callbacks suppressed [ 408.173492][ T8270] syz.4.1742: attempt to access beyond end of device [ 408.173492][ T8270] loop4: rw=3, sector=16157458620608, nr_sectors = 8388600 limit=2048 [ 408.227165][ T6697] syz.1.1114: attempt to access beyond end of device [ 408.227165][ T6697] loop1: rw=3, sector=23127974179208, nr_sectors = 8388600 limit=2048 [ 408.253609][ T6697] syz.1.1114: attempt to access beyond end of device [ 408.253609][ T6697] loop1: rw=3, sector=23127982567808, nr_sectors = 8388600 limit=2048 [ 408.283987][ T8270] syz.4.1742: attempt to access beyond end of device [ 408.283987][ T8270] loop4: rw=3, sector=16157467009208, nr_sectors = 8388600 limit=2048 [ 408.313411][ T6697] syz.1.1114: attempt to access beyond end of device [ 408.313411][ T6697] loop1: rw=3, sector=23127990956408, nr_sectors = 8388600 limit=2048 [ 408.352466][T11205] loop3: detected capacity change from 0 to 40427 [ 408.372624][ T8270] syz.4.1742: attempt to access beyond end of device [ 408.372624][ T8270] loop4: rw=3, sector=16157475397808, nr_sectors = 8388600 limit=2048 [ 408.388199][ T6697] syz.1.1114: attempt to access beyond end of device [ 408.388199][ T6697] loop1: rw=3, sector=23127999345008, nr_sectors = 8388600 limit=2048 [ 408.426232][T11205] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 408.448024][ T8270] syz.4.1742: attempt to access beyond end of device [ 408.448024][ T8270] loop4: rw=3, sector=16157483786408, nr_sectors = 8388600 limit=2048 [ 408.453414][T11205] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 408.464765][ T8270] syz.4.1742: attempt to access beyond end of device [ 408.464765][ T8270] loop4: rw=3, sector=16157492175008, nr_sectors = 8388600 limit=2048 [ 408.486254][ T8270] syz.4.1742: attempt to access beyond end of device [ 408.486254][ T8270] loop4: rw=3, sector=16157500563608, nr_sectors = 8388600 limit=2048 [ 408.498427][T11205] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 408.589681][T11205] F2FS-fs (loop3): Found nat_bits in checkpoint [ 408.630553][T11242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2963'. [ 408.652023][T11242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2963'. [ 408.755753][ T9207] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 408.776929][T11205] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 408.784233][T11205] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 408.835723][T11205] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 409.416295][T11249] loop2: detected capacity change from 0 to 16 [ 409.480328][T11249] erofs: (device loop2): mounted with root inode @ nid 36. [ 409.506210][T11249] erofs: (device loop2): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 409.552089][T11249] erofs: (device loop2): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 409.601666][T11249] erofs: (device loop2): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 409.639468][T11249] erofs: (device loop2): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 409.659161][T11249] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 409.684003][T11249] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 409.704428][T11249] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 410.427900][T11263] loop3: detected capacity change from 0 to 16 [ 410.464574][T11263] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 410.773369][ T153] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 410.886356][T11273] loop0: detected capacity change from 0 to 2048 [ 410.950360][T11253] loop2: detected capacity change from 0 to 32768 [ 411.017852][T11277] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.030796][ T153] usb 5-1: Using ep0 maxpacket: 16 [ 411.164198][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.205104][ T153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.223617][ T153] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.303257][ T153] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 411.312441][ T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.364954][ T153] usb 5-1: config 0 descriptor?? [ 411.491880][T11285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2985'. [ 411.907412][ T153] wacom 0003:056A:0022.0051: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 411.965875][ T153] wacom 0003:056A:0022.0051: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.4-1/input0 [ 412.030688][ T153] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0022.0051/input/input45 [ 412.192837][T11309] loop2: detected capacity change from 0 to 256 [ 412.193391][ T4665] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 412.238308][ T153] usb 5-1: USB disconnect, device number 19 [ 412.303026][T11309] FAT-fs (loop2): Directory bread(block 64) failed [ 412.369229][T11309] FAT-fs (loop2): Directory bread(block 65) failed [ 412.421082][T11309] FAT-fs (loop2): Directory bread(block 66) failed [ 412.451264][T11309] FAT-fs (loop2): Directory bread(block 67) failed [ 412.483429][ T4665] usb 2-1: Using ep0 maxpacket: 8 [ 412.495347][T11309] FAT-fs (loop2): Directory bread(block 68) failed [ 412.501916][T11309] FAT-fs (loop2): Directory bread(block 69) failed [ 412.533772][T11309] FAT-fs (loop2): Directory bread(block 70) failed [ 412.574055][T11309] FAT-fs (loop2): Directory bread(block 71) failed [ 412.580728][T11309] FAT-fs (loop2): Directory bread(block 72) failed [ 412.627909][T11309] FAT-fs (loop2): Directory bread(block 73) failed [ 412.790322][ T4665] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 412.800827][ T4665] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.839534][ T4665] usb 2-1: Product: syz [ 412.853943][ T4665] usb 2-1: Manufacturer: syz [ 412.858608][ T4665] usb 2-1: SerialNumber: syz [ 412.910760][ T4665] usb 2-1: config 0 descriptor?? [ 412.965925][ T4665] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 412.986055][ T4665] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 413.203582][ T4665] radio-raremono 2-1:0.0: Thanko's Raremono connected: (10C4:818A) [ 413.215024][ T8270] bio_check_eod: 111486 callbacks suppressed [ 413.215041][ T8270] syz.4.1742: attempt to access beyond end of device [ 413.215041][ T8270] loop4: rw=3, sector=16714067396408, nr_sectors = 8388600 limit=2048 [ 413.233231][ T6697] syz.1.1114: attempt to access beyond end of device [ 413.233231][ T6697] loop1: rw=3, sector=23531541336608, nr_sectors = 8388600 limit=2048 [ 413.257520][ T6697] syz.1.1114: attempt to access beyond end of device [ 413.257520][ T6697] loop1: rw=3, sector=23531549725208, nr_sectors = 8388600 limit=2048 [ 413.333386][ T6697] syz.1.1114: attempt to access beyond end of device [ 413.333386][ T6697] loop1: rw=3, sector=23531558113808, nr_sectors = 8388600 limit=2048 [ 413.348279][T11336] loop2: detected capacity change from 0 to 1024 [ 413.371595][ T8270] syz.4.1742: attempt to access beyond end of device [ 413.371595][ T8270] loop4: rw=3, sector=16714075785008, nr_sectors = 8388600 limit=2048 [ 413.408514][T11336] hfsplus: bad catalog entry type [ 413.426430][ T4665] radio-raremono 2-1:0.0: V4L2 device registered as radio32 [ 413.450330][ T6697] syz.1.1114: attempt to access beyond end of device [ 413.450330][ T6697] loop1: rw=3, sector=23531566502408, nr_sectors = 8388600 limit=2048 [ 413.491245][ T6697] syz.1.1114: attempt to access beyond end of device [ 413.491245][ T6697] loop1: rw=3, sector=23531574891008, nr_sectors = 8388600 limit=2048 [ 413.513218][ T8270] syz.4.1742: attempt to access beyond end of device [ 413.513218][ T8270] loop4: rw=3, sector=16714084173608, nr_sectors = 8388600 limit=2048 [ 413.528441][ T6697] syz.1.1114: attempt to access beyond end of device [ 413.528441][ T6697] loop1: rw=3, sector=23531583279608, nr_sectors = 8388600 limit=2048 [ 413.528632][ T3696] hfsplus: b-tree write err: -5, ino 4 [ 413.583883][ T6697] syz.1.1114: attempt to access beyond end of device [ 413.583883][ T6697] loop1: rw=3, sector=23531591668208, nr_sectors = 8388600 limit=2048 [ 413.697636][T11343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.710332][ T4669] usb 2-1: USB disconnect, device number 26 [ 413.723639][ T4669] radio-raremono 2-1:0.0: Thanko's Raremono disconnected [ 413.872722][T11340] loop3: detected capacity change from 0 to 8192 [ 413.962021][T11340] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 413.970141][T11350] loop0: detected capacity change from 0 to 256 [ 414.001553][T11340] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 414.056416][T11340] REISERFS (device loop3): using ordered data mode [ 414.063001][T11340] reiserfs: using flush barriers [ 414.136645][T11350] FAT-fs (loop0): Directory bread(block 1285) failed [ 414.148889][T11340] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 414.166331][T11350] FAT-fs (loop0): Directory bread(block 1285) failed [ 414.243980][T11340] REISERFS (device loop3): checking transaction log (loop3) [ 414.406253][T11358] loop0: detected capacity change from 0 to 16 [ 414.453599][T11358] erofs: (device loop0): mounted with root inode @ nid 36. [ 414.536743][T11340] REISERFS (device loop3): Using tea hash to sort names [ 414.583632][T11340] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 415.042708][T11367] loop2: detected capacity change from 0 to 4096 [ 415.121827][T11374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.183865][ T27] audit: type=1800 audit(1726141672.307:75): pid=11367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3023" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 415.379025][T11379] loop3: detected capacity change from 0 to 8192 [ 415.459098][T11379] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 415.495562][ T4669] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 415.604217][T11379] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 415.624000][T11379] REISERFS (device loop3): using ordered data mode [ 415.630560][T11379] reiserfs: using flush barriers [ 415.664198][T11379] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 415.713587][T11379] REISERFS (device loop3): checking transaction log (loop3) [ 415.793459][ T4669] usb 2-1: Using ep0 maxpacket: 32 [ 415.933396][ T4669] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.968385][T11379] REISERFS (device loop3): Using tea hash to sort names [ 415.994618][T11379] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 416.113446][ T4669] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.139347][ T4669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.173427][T11398] loop2: detected capacity change from 0 to 64 [ 416.182127][ T4669] usb 2-1: Product: syz [ 416.192261][ T4669] usb 2-1: Manufacturer: syz [ 416.201591][ T4669] usb 2-1: SerialNumber: syz [ 416.274318][ T4669] cdc_ether 2-1:1.0: skipping garbage [ 416.279871][ T4669] usb 2-1: bad CDC descriptors [ 416.425849][ T27] audit: type=1800 audit(1726141673.547:76): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3036" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 416.445362][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.493816][ T4669] usb 2-1: USB disconnect, device number 27 [ 416.515599][T11402] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3039'. [ 416.593251][T11402] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3039'. [ 417.642437][T11418] tipc: Cannot configure node identity twice [ 417.661867][T11406] loop3: detected capacity change from 0 to 32768 [ 417.729362][T11406] XFS (loop3): Mounting V5 Filesystem [ 417.888006][T11406] XFS (loop3): Ending clean mount [ 417.956723][T11431] loop2: detected capacity change from 0 to 1024 [ 418.001532][T11431] EXT4-fs: Ignoring removed oldalloc option [ 418.057708][ T7269] XFS (loop3): Unmounting Filesystem [ 418.082702][T11431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 418.226056][ T8270] bio_check_eod: 131558 callbacks suppressed [ 418.226080][ T8270] syz.4.1742: attempt to access beyond end of device [ 418.226080][ T8270] loop4: rw=3, sector=17335486495808, nr_sectors = 8388600 limit=2048 [ 418.246965][ T6697] syz.1.1114: attempt to access beyond end of device [ 418.246965][ T6697] loop1: rw=3, sector=24033204782408, nr_sectors = 8388600 limit=2048 [ 418.247020][ T6697] syz.1.1114: attempt to access beyond end of device [ 418.247020][ T6697] loop1: rw=3, sector=24033213171008, nr_sectors = 8388600 limit=2048 [ 418.305867][ T9207] EXT4-fs (loop2): unmounting filesystem. [ 418.332184][ T8270] syz.4.1742: attempt to access beyond end of device [ 418.332184][ T8270] loop4: rw=3, sector=17335494884408, nr_sectors = 8388600 limit=2048 [ 418.397509][ T6697] syz.1.1114: attempt to access beyond end of device [ 418.397509][ T6697] loop1: rw=3, sector=24033221559608, nr_sectors = 8388600 limit=2048 [ 418.442809][ T6697] syz.1.1114: attempt to access beyond end of device [ 418.442809][ T6697] loop1: rw=3, sector=24033229948208, nr_sectors = 8388600 limit=2048 [ 418.460738][ T8270] syz.4.1742: attempt to access beyond end of device [ 418.460738][ T8270] loop4: rw=3, sector=17335503273008, nr_sectors = 8388600 limit=2048 [ 418.490870][ T6697] syz.1.1114: attempt to access beyond end of device [ 418.490870][ T6697] loop1: rw=3, sector=24033238336808, nr_sectors = 8388600 limit=2048 [ 418.491132][T11443] MPTCP: kernel_bind error, err=-99 [ 418.547698][ T8270] syz.4.1742: attempt to access beyond end of device [ 418.547698][ T8270] loop4: rw=3, sector=17335511661608, nr_sectors = 8388600 limit=2048 [ 418.554126][ T6697] syz.1.1114: attempt to access beyond end of device [ 418.554126][ T6697] loop1: rw=3, sector=24033246725408, nr_sectors = 8388600 limit=2048 [ 418.663258][ T4669] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 419.036481][T11452] loop3: detected capacity change from 0 to 64 [ 419.044114][ T4669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.065688][ T4669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.103291][ T4669] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 419.150953][ T4669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.184361][ T4669] usb 2-1: config 0 descriptor?? [ 419.284720][T11457] loop2: detected capacity change from 0 to 128 [ 419.320503][T11457] EXT4-fs (loop2): Test dummy encryption mode enabled [ 419.351413][T11457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 419.363660][T11457] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038 (0x7fffffff) [ 419.688002][ T4669] isku 0003:1E7D:319C.0052: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 419.793908][T11457] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 419.835761][T11457] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 419.863252][ T3687] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 419.908005][ T153] usb 2-1: USB disconnect, device number 28 [ 419.944295][ T9207] EXT4-fs (loop2): unmounting filesystem. [ 420.123394][ T3687] usb 4-1: Using ep0 maxpacket: 8 [ 420.132388][T11476] loop0: detected capacity change from 0 to 64 [ 420.149384][T11478] MPTCP: kernel_bind error, err=-99 [ 420.263640][ T3687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.296845][ T3687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.317908][ T3687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.331717][ T27] audit: type=1800 audit(1726141677.447:77): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3065" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 420.331758][ T3687] usb 4-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 420.404578][ T3687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.434158][ T3687] usb 4-1: config 0 descriptor?? [ 421.144018][ T3214] usb 4-1: USB disconnect, device number 38 [ 421.189754][T11501] loop0: detected capacity change from 0 to 64 [ 421.516064][T11505] loop0: detected capacity change from 0 to 1024 [ 421.593019][T11505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 421.765620][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 421.910880][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'. [ 422.014959][T11495] loop2: detected capacity change from 0 to 32768 [ 422.903238][ T3214] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 423.163373][ T3214] usb 4-1: Using ep0 maxpacket: 32 [ 423.216437][T11524] loop0: detected capacity change from 0 to 32768 [ 423.241348][ T6697] bio_check_eod: 109565 callbacks suppressed [ 423.241366][ T6697] syz.1.1114: attempt to access beyond end of device [ 423.241366][ T6697] loop1: rw=3, sector=24565360789208, nr_sectors = 8388600 limit=2048 [ 423.261137][ T8270] syz.4.1742: attempt to access beyond end of device [ 423.261137][ T8270] loop4: rw=3, sector=17738684554808, nr_sectors = 8388600 limit=2048 [ 423.266618][T11524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3088 (11524) [ 423.293463][ T3214] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.313918][ T3214] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.332667][ T6697] syz.1.1114: attempt to access beyond end of device [ 423.332667][ T6697] loop1: rw=3, sector=24565369177808, nr_sectors = 8388600 limit=2048 [ 423.340470][ T3214] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 423.387323][ T8270] syz.4.1742: attempt to access beyond end of device [ 423.387323][ T8270] loop4: rw=3, sector=17738692943408, nr_sectors = 8388600 limit=2048 [ 423.413216][ T3214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.447383][T11524] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.447474][ T8270] syz.4.1742: attempt to access beyond end of device [ 423.447474][ T8270] loop4: rw=3, sector=17738701332008, nr_sectors = 8388600 limit=2048 [ 423.472517][ T6697] syz.1.1114: attempt to access beyond end of device [ 423.472517][ T6697] loop1: rw=3, sector=24565377566408, nr_sectors = 8388600 limit=2048 [ 423.472566][ T6697] syz.1.1114: attempt to access beyond end of device [ 423.472566][ T6697] loop1: rw=3, sector=24565385955008, nr_sectors = 8388600 limit=2048 [ 423.489390][ T27] audit: type=1326 audit(1726141680.607:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 423.513754][T11524] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 423.542618][ T27] audit: type=1326 audit(1726141680.607:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 423.555658][T11550] loop2: detected capacity change from 0 to 512 [ 423.573395][ T8270] syz.4.1742: attempt to access beyond end of device [ 423.573395][ T8270] loop4: rw=3, sector=17738709720608, nr_sectors = 8388600 limit=2048 [ 423.573609][ T6697] syz.1.1114: attempt to access beyond end of device [ 423.573609][ T6697] loop1: rw=3, sector=24565394343608, nr_sectors = 8388600 limit=2048 [ 423.588925][T11524] BTRFS info (device loop0): using free space tree [ 423.611484][ T3214] hub 4-1:4.0: USB hub found [ 423.634149][ T27] audit: type=1326 audit(1726141680.617:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 423.653005][ T8270] syz.4.1742: attempt to access beyond end of device [ 423.653005][ T8270] loop4: rw=3, sector=17738718109208, nr_sectors = 8388600 limit=2048 [ 423.668666][ T27] audit: type=1326 audit(1726141680.617:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 423.693668][T11550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 423.739510][T11550] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.3099: invalid indirect mapped block 4294967295 (level 0) [ 423.751326][ T27] audit: type=1326 audit(1726141680.617:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 423.776355][ T27] audit: type=1326 audit(1726141680.657:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f293b17def9 code=0x7ffc0000 [ 423.799199][ T27] audit: type=1326 audit(1726141680.657:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f293b17df33 code=0x7ffc0000 [ 423.800361][T11550] EXT4-fs (loop2): Remounting filesystem read-only [ 423.825764][ T27] audit: type=1326 audit(1726141680.657:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f293b17c9df code=0x7ffc0000 [ 423.830938][ T28] INFO: task segctord:6700 blocked for more than 143 seconds. [ 423.850834][ T27] audit: type=1326 audit(1726141680.657:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11549 comm="syz.2.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f293b17df87 code=0x7ffc0000 [ 423.901159][ T28] Not tainted 6.1.110-syzkaller #0 [ 423.903017][ T3214] hub 4-1:4.0: 2 ports detected [ 423.907519][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.916379][T11550] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.3099: invalid indirect mapped block 4294967295 (level 1) [ 423.920883][ T28] task:segctord state:D [ 423.935887][ T3214] usb 4-1: selecting invalid altsetting 1 [ 423.936502][ T28] stack:28248 pid:6700 ppid:2 flags:0x00004000 [ 423.940676][ T3214] hub 4-1:4.0: Using single TT (err -22) [ 423.968814][ T28] Call Trace: [ 423.972351][ T28] [ 423.980391][ T28] __schedule+0x143f/0x4570 [ 423.997571][ T28] ? release_firmware_map_entry+0x186/0x186 [ 424.015761][T11550] EXT4-fs (loop2): 1 orphan inode deleted [ 424.046367][ T28] ? print_irqtrace_events+0x210/0x210 [ 424.058797][T11550] EXT4-fs (loop2): 1 truncate cleaned up [ 424.073246][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 424.073341][T11524] BTRFS info (device loop0): enabling ssd optimizations [ 424.086132][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 424.103232][T11550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 424.104853][ T28] schedule+0xbf/0x180 [ 424.143358][ T3214] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 424.151063][ T3214] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 424.165492][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 424.188119][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 424.209546][ T28] ? down_write_killable_nested+0x90/0x90 [ 424.224453][ T3214] usb 4-1: USB disconnect, device number 39 [ 424.239866][ T28] ? read_lock_is_recursive+0x10/0x10 [ 424.259430][ T28] ? rcu_is_watching+0x11/0xb0 [ 424.268936][ T28] nilfs_transaction_lock+0x25c/0x4f0 [ 424.282399][ T28] nilfs_segctor_thread+0x547/0x11a0 [ 424.299276][ T28] ? print_irqtrace_events+0x210/0x210 [ 424.310588][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 424.326718][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 424.338305][ T28] ? release_firmware_map_entry+0x186/0x186 [ 424.347801][ T28] ? wake_bit_function+0x210/0x210 [ 424.358691][ T28] ? _raw_spin_unlock+0x40/0x40 [ 424.365971][ T28] ? __kthread_parkme+0x168/0x1c0 [ 424.373541][ T28] kthread+0x28d/0x320 [ 424.379963][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 424.387569][ T28] ? kthread_blkcg+0xd0/0xd0 [ 424.394699][ T28] ret_from_fork+0x1f/0x30 [ 424.401513][ T28] [ 424.406944][ T28] INFO: task segctord:8279 blocked for more than 143 seconds. [ 424.418022][ T28] Not tainted 6.1.110-syzkaller #0 [ 424.447281][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 424.457266][T11524] fs-verity: sha256 using implementation "sha256-avx2" [ 424.484830][ T28] task:segctord state:D stack:28248 pid:8279 ppid:2 flags:0x00004000 [ 424.497621][T11524] fs-verity (loop0, inode 263): fs-verity keyring is empty, rejecting signed file! [ 424.518936][ T28] Call Trace: [ 424.530723][ T28] [ 424.541729][ T28] __schedule+0x143f/0x4570 [ 424.552710][ T28] ? release_firmware_map_entry+0x186/0x186 [ 424.569136][ T28] ? print_irqtrace_events+0x210/0x210 [ 424.586752][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 424.602314][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 424.636522][ T28] schedule+0xbf/0x180 [ 424.656652][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 424.676162][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 424.695827][ T28] ? down_write_killable_nested+0x90/0x90 [ 424.710288][ T28] ? read_lock_is_recursive+0x10/0x10 [ 424.721665][ T28] ? rcu_is_watching+0x11/0xb0 [ 424.737919][ T28] nilfs_transaction_lock+0x25c/0x4f0 [ 424.753382][ T28] nilfs_segctor_thread+0x547/0x11a0 [ 424.766952][ T28] ? print_irqtrace_events+0x210/0x210 [ 424.781512][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 424.792506][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 424.811976][ T28] ? release_firmware_map_entry+0x186/0x186 [ 424.822731][ T28] ? wake_bit_function+0x210/0x210 [ 424.838053][ T28] ? _raw_spin_unlock+0x40/0x40 [ 424.856852][ T28] ? __kthread_parkme+0x168/0x1c0 [ 424.870572][ T28] kthread+0x28d/0x320 [ 424.880530][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 424.898490][ T28] ? kthread_blkcg+0xd0/0xd0 [ 424.914579][ T28] ret_from_fork+0x1f/0x30 [ 424.929992][ T28] [ 424.943229][ T28] [ 424.943229][ T28] Showing all locks held in the system: [ 424.947976][ T9207] EXT4-fs (loop2): unmounting filesystem. [ 424.984794][ T28] 1 lock held by rcu_tasks_kthre/12: [ 425.033750][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 425.047967][ T3640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.079399][ T28] 1 lock held by rcu_tasks_trace/13: [ 425.100578][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 425.112598][ T28] 1 lock held by khungtaskd/28: [ 425.135488][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 425.179955][ T28] 2 locks held by kworker/0:3/3214: [ 425.203236][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.238265][ T28] #1: ffffc900031efd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.280240][ T28] 2 locks held by getty/3399: [ 425.296169][ T28] #0: ffff88807e0e0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 425.335062][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 425.368062][ T28] 2 locks held by kworker/0:4/3683: [ 425.384207][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.442787][ T28] #1: ffffc900042afd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.455469][ T28] 2 locks held by kworker/0:5/3685: [ 425.460884][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.472836][ T28] #1: ffffc900042cfd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.493307][ T28] 2 locks held by kworker/0:7/3692: [ 425.498563][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.523210][ T28] #1: ffffc9000433fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.593217][ T28] 2 locks held by kworker/0:8/3720: [ 425.598478][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.633341][ T28] #1: ffffc90003e1fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.660905][ T28] 2 locks held by kworker/0:9/4660: [ 425.673051][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.691519][ T28] #1: ffffc9000380fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.712567][ T28] 2 locks held by kworker/0:11/4663: [ 425.717946][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.737097][ T28] #1: ffffc90004ae7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.758571][ T28] 3 locks held by kworker/0:12/4665: [ 425.772379][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.783042][ T28] #1: ffffc9000490fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.795981][ T28] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 425.807176][ T28] 2 locks held by kworker/0:14/4667: [ 425.812909][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.823775][ T28] #1: ffffc90004b17d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.836415][ T28] 2 locks held by kworker/0:15/4668: [ 425.841941][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.852661][ T28] #1: ffffc90004b57d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.875761][ T28] 3 locks held by kworker/0:16/4669: [ 425.887185][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.908937][ T28] #1: ffffc90004b67d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 425.936326][ T28] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 425.958687][ T28] 2 locks held by kworker/0:17/4670: [ 425.971053][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.011114][ T28] #1: ffffc90004b87d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.046676][ T28] 2 locks held by kworker/0:18/4671: [ 426.066489][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.102778][ T28] #1: ffffc90004bb7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.143171][ T28] 3 locks held by syz.1.1114/6697: [ 426.148381][ T28] 1 lock held by segctord/6700: [ 426.163169][ T28] #0: ffff888052af32a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 426.179608][ T28] 2 locks held by kworker/0:19/7446: [ 426.193233][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.213291][ T28] #1: ffffc90003db7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.243195][ T28] 2 locks held by kworker/0:20/7447: [ 426.248558][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.273234][ T28] #1: ffffc90003dc7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 426.303323][ T28] 2 locks held by syz.4.1742/8270: [ 426.308480][ T28] 1 lock held by segctord/8279: [ 426.323204][ T28] #0: ffff88805a9812a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 426.343266][ T28] [ 426.345628][ T28] ============================================= [ 426.345628][ T28] [ 426.377648][ T28] NMI backtrace for cpu 1 [ 426.382030][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0 [ 426.389946][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.400024][ T28] Call Trace: [ 426.403321][ T28] [ 426.406294][ T28] dump_stack_lvl+0x1e3/0x2cb [ 426.411014][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 426.416535][ T28] ? panic+0x764/0x764 [ 426.420626][ T28] ? vprintk_emit+0x622/0x740 [ 426.425353][ T28] ? printk_sprint+0x490/0x490 [ 426.430152][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 426.435380][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 426.440346][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 426.446543][ T28] ? _printk+0xd1/0x111 [ 426.450719][ T28] ? panic+0x764/0x764 [ 426.454814][ T28] ? __wake_up_klogd+0xcc/0x100 [ 426.459689][ T28] ? panic+0x764/0x764 [ 426.463786][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 426.469895][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 426.476031][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 426.482033][ T28] watchdog+0xf88/0xfd0 [ 426.486274][ T28] ? watchdog+0x1f8/0xfd0 [ 426.490643][ T28] kthread+0x28d/0x320 [ 426.494737][ T28] ? hungtask_pm_notify+0x50/0x50 [ 426.499791][ T28] ? kthread_blkcg+0xd0/0xd0 [ 426.504409][ T28] ret_from_fork+0x1f/0x30 [ 426.508898][ T28] [ 426.511965][ C1] vkms_vblank_simulate: vblank timer overrun [ 426.519271][ T28] Sending NMI from CPU 1 to CPUs 0: [ 426.524859][ C0] NMI backtrace for cpu 0 [ 426.524870][ C0] CPU: 0 PID: 3696 Comm: kworker/u4:5 Not tainted 6.1.110-syzkaller #0 [ 426.524888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.524899][ C0] Workqueue: phy6 ieee80211_iface_work [ 426.524932][ C0] RIP: 0010:lock_release+0xcf/0xa20 [ 426.524959][ C0] Code: 0d 0f 86 c2 05 00 00 89 db 48 89 d8 48 c1 e8 06 48 8d 3c c5 a8 e4 99 8e be 08 00 00 00 e8 99 88 77 00 48 0f a3 1d 89 3a 2f 0d <73> 0d e8 ca be 08 00 84 c0 0f 84 c5 05 00 00 48 c7 c0 64 19 9a 8e [ 426.524974][ C0] RSP: 0018:ffffc9000434f620 EFLAGS: 00000057 [ 426.524996][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff816aaa17 [ 426.525007][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e99e4a8 [ 426.525019][ C0] RBP: ffffc9000434f750 R08: dffffc0000000000 R09: fffffbfff1d33c96 [ 426.525032][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000869ed0 [ 426.525044][ C0] R13: ffffffff843e5655 R14: ffffc9000434f780 R15: dffffc0000000000 [ 426.525057][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 426.525071][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.525083][ C0] CR2: 00007f4342708178 CR3: 000000005dfc3000 CR4: 00000000003506f0 [ 426.525098][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 426.525108][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 426.525119][ C0] Call Trace: [ 426.525124][ C0] [ 426.525130][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 426.525147][ C0] ? read_lock_is_recursive+0x10/0x10 [ 426.525174][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 426.525191][ C0] ? nmi_handle+0x25/0x440 [ 426.525225][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 426.525252][ C0] ? nmi_handle+0x12e/0x440 [ 426.525277][ C0] ? nmi_handle+0x25/0x440 [ 426.525302][ C0] ? lock_release+0xcf/0xa20 [ 426.525326][ C0] ? default_do_nmi+0x62/0x150 [ 426.525344][ C0] ? exc_nmi+0xa8/0x100 [ 426.525360][ C0] ? end_repeat_nmi+0x16/0x31 [ 426.525386][ C0] ? debug_check_no_obj_freed+0x455/0x4e0 [ 426.525415][ C0] ? lock_release+0xc7/0xa20 [ 426.525440][ C0] ? lock_release+0xcf/0xa20 [ 426.525463][ C0] ? lock_release+0xcf/0xa20 [ 426.525488][ C0] ? lock_release+0xcf/0xa20 [ 426.525512][ C0] [ 426.525517][ C0] [ 426.525524][ C0] ? read_lock_is_recursive+0x10/0x10 [ 426.525549][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 426.525577][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 426.525601][ C0] ? __rwlock_init+0x140/0x140 [ 426.525619][ C0] ? _raw_spin_lock_irqsave+0xac/0x120 [ 426.525641][ C0] _raw_spin_unlock_irqrestore+0x75/0x130 [ 426.525661][ C0] ? _raw_spin_unlock+0x40/0x40 [ 426.525679][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 426.525708][ C0] debug_check_no_obj_freed+0x455/0x4e0 [ 426.525734][ C0] ? __local_bh_enable_ip+0x164/0x1f0 [ 426.525759][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b2d/0x2dd0 [ 426.525780][ C0] __kmem_cache_free+0x205/0x3c0 [ 426.525800][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1b35/0x2dd0 [ 426.525821][ C0] ieee80211_ibss_rx_queued_mgmt+0x1b35/0x2dd0 [ 426.525849][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0 [ 426.525869][ C0] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 426.525892][ C0] ? mark_lock+0x9a/0x340 [ 426.525917][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 426.525941][ C0] ? print_irqtrace_events+0x210/0x210 [ 426.525964][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 426.525982][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 426.526008][ C0] ? skb_dequeue+0x10f/0x140 [ 426.526026][ C0] ieee80211_iface_work+0x7aa/0xce0 [ 426.526049][ C0] ? process_one_work+0x7a9/0x11d0 [ 426.526085][ C0] process_one_work+0x8a9/0x11d0 [ 426.526113][ C0] ? worker_detach_from_pool+0x260/0x260 [ 426.526135][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 426.526156][ C0] ? kthread_data+0x4e/0xc0 [ 426.526182][ C0] ? wq_worker_running+0x97/0x190 [ 426.526199][ C0] worker_thread+0xa47/0x1200 [ 426.526224][ C0] ? _raw_spin_unlock+0x40/0x40 [ 426.526251][ C0] kthread+0x28d/0x320 [ 426.526265][ C0] ? worker_clr_flags+0x190/0x190 [ 426.526284][ C0] ? kthread_blkcg+0xd0/0xd0 [ 426.526300][ C0] ret_from_fork+0x1f/0x30 [ 426.526330][ C0] [ 426.673199][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 426.673219][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.110-syzkaller #0 [ 426.673251][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 426.673266][ T28] Call Trace: [ 426.673274][ T28] [ 426.673284][ T28] dump_stack_lvl+0x1e3/0x2cb [ 426.673328][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 426.673366][ T28] ? panic+0x764/0x764 [ 426.673392][ T28] ? llist_add_batch+0x160/0x1d0 [ 426.673430][ T28] ? vscnprintf+0x59/0x80 [ 426.673462][ T28] panic+0x318/0x764 [ 426.673490][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 426.673515][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 426.673548][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 426.673571][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 426.673610][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 426.673637][ T28] watchdog+0xfc7/0xfd0 [ 426.673673][ T28] ? watchdog+0x1f8/0xfd0 [ 426.673706][ T28] kthread+0x28d/0x320 [ 426.673727][ T28] ? hungtask_pm_notify+0x50/0x50 [ 426.673755][ T28] ? kthread_blkcg+0xd0/0xd0 [ 426.673779][ T28] ret_from_fork+0x1f/0x30 [ 426.673822][ T28] [ 426.674972][ T28] Kernel Offset: disabled [ 427.068757][ T28] Rebooting in 86400 seconds..