last executing test programs: 7.981029836s ago: executing program 4 (id=1396): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 7.82426297s ago: executing program 4 (id=1400): r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x5279b4d4, 0x700) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/145) 7.49526091s ago: executing program 4 (id=1408): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {@gqnoenforce}, {@nolazytime}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrget93/t+3HvPOc+zO9PVVTXV/1931cxUT/eS8yw258DA6ANDm2JgxG69a86FNt5xziv33WmvU6cYc/zJh00etsCkwy5OOmjYx5EGBgZGGraeYdPGeuykk0caGOW96f9orDHGHDTOwMB0wy7OPuzjTEM/TPT48PneHaERN3TQ3y8O2n7ov/cab8iXGPLJ0rdcdO7AwMD471t+yCLT/MsNlbbkHPPO8w+rv7sNsRo87PP3/xt16L+JHhwYmOi+Ab5/vH/eQR/BTRryNcff8aHR1/0Ivvb/uJacY975RvAf8lgcedi0mYY8xkd8DBob8X5+yyqz7jFsCN+7vw0MDNnF/dNj5X9ES84xzwIDH7yfH3hkzHHPfPe9/eZYzw0MjPX8wMBYLwwMjPXiwMBYLw0MjPXyR+1S/3fNMef0cw55vA+/PIx9+H15fLpf7Lv6S/sMDAyMNnSesd4ZerwYe4rhx4Sqqqr6790cc04/Fxz/R/+w4/9WW89xW8f/qqqq/7nNN8ec0w85jo9w/B/7w47/P7jppjWG/u5/9pmGLvXOR3sjqqqq6j/VPPPh8X/8Dzv+j7fDDQd0/K+qqvqf26ILvnf8H3uE4//EH3b8X2P+uy4fNt/w7xveft8q33v+2LDpb75v+sjvm/7G+6YPft963j//qO+b/tr7po8+MDDWY8Omv/WPyWM9N2SZf13PWK/84/k4k47yvumvvm/6qO+b/tqwbRoyfbT3TX/7ffOP/o/pYw/5b4phX/f1Dxnqqqqq/zYtOv08cw2873n2wyYPf2I/Pi/02GO3vvuj2t6qqqqqqqqq+s/3ztNnnPOPv/n+9MD7/nb173/DOuz3AoOOO++66z6yDf3v0aB//X3IFh/1Nv3fNsR59COmGBhYa4mPelPqI+h/zN+q1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/v/vf/8/cN9Xdhg26yyT3XX/Yv9YctKB1YZ9dutdcy602kew7R9B/1vP/w+sNmhgYJjv+EMsF5pj0cWnGhgYWOz+uyabceDv18085LpZJxz5vT/mHBiY6r3/B0/6AWse9i4L7725w8R/X8dx761/vnf3H3nQCBvxvmY794GDV13y1RlG/PilD74df39/iaVe2X/K4X/LMtIIM43+AQsPX//w2zKi87Btn2rItk+9wZrrTL3+xpt8fbU1l19lpVVWWmu66aadYfoZZ5jum7NMvfJqa6w0zdD/P2DMhr51xcj/zpiNPeKYPT3H+8dsxNs2wSkH45j967t6/NMq3lvj+bM9csXwMRvl3xyz4V9v5A8fsylWG/aFJh0YPLDce0MzaGBg0lEGD2w05MK0ow0MTDp42LyTDpn32xOONDCw4z9u6KBhLzY6dJ5BWwyZ57/Z+5bMMmxENh0+34ivsz7ihv5H71ty4ti73DXC+5b8v+r/6Pj/L14zD/r7QA1/A4Rh8wz1+ojfZ+JftneKUd47yH3Q9n7I6+K8F92/1lz18SX+q14Xh7Z37A/Z3g95Hb8P3N6ppn12z6Gr+i/b3hH2dQsMvfLf2dcNfPi+bmRafqWrJx9xXzf/B2/iPz2Oh4/RaCPM9EH7uh3nP3/zIesf+PB93QKrDXvxgH/s60YaGJh05OH7uiE7vlEHD+w45MJ0Qy6MNnjgsCEXpn/vwhgD5w258I0V1l5jxUHvvczAsPVOM2S9s084aOgD6OaDVx1tl3ffHWXYtrwy1j9v67D7xxTvP57PMeGwwRy27PD1Dpl1+Hpf22bodaMOW++r/4n1Dl+WtnfSs4deN9qw9b42wnoHf8h6hy/7L4+HqQb90xNVYX/zkb6vET1+R/+Q7f2Q1+HG+9t77lMu+8h/wetwD/qg7R3lw7f3g9435AO394krntzvv+p1w+l+dt++Q+8row+7n739n7j/Dl92xP3Y0BcCGbrbH/3f2Y9N8S/7sS1HHmmEwX5fH/R97oow/7BHxN/XtuJBr642fOwHj7De/+j73PfdlkGwHxt/hJ/nBm2+38AgGvPH1nhxw3d2/vAxHzzwzz9bDB/z4ct+2JiP9u+M+ac+fMxH/D75g8Z8qs8PvX7wCNv//jFfZLfZbx4+5qOOsN7/aMxH+/Bjx7+O+cDAYBrzHScbOm4ftj/9oDEfvuzwMR/ydWadcJSBuQcGBqYcNuaj/jtjPul/zf18TJh/6Ocr/X3SczMu/LXhYz7iGP9HYz7qf3LMN7vv7/fzKd+77nMjDYw66sBGy2+wwXrTDv1/+MXphv7P+6LnVhw6zh92LP0go+HLftjjYpR/x2j8f8to0H9kNNkoH2T0j4fWyAcv+vz/6b5olP+s0Xm8Lzpt3qHj9mHfF33QmA9flo6DE79v+RF/Dv2Q18/C2/Te+My/7fCf9/47vH7W8J93/0e+ftbw30muNuJOvv7d+v2/u/zd5e8uf3f5i/uA8/9TDD///+7YB04y7IfOwVfPfNvsH/X2fsT9rz7/P8z3n87/z37bzFcP+dFq2HUfen526Dz/Lc/PzjT0w0SPD59vxPODI27of3R+dt9dN7j6/6fzs/9HDX+s/hs/F7f/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/0wx/HsDDiy/0w2EnQgdvOu3Rm37U2/sR97/6/P8w3386/7/p0dNuOtLA36/70PP/Q+dxnP9/YMHNl/nvfP5/+GO18//1H5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/sw9/HsCRs839heHPB7hxu/33/Ki39yPuf+v5/97/31v7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4Yef/B0Z4m8SFu19gcP7/f3Yf4L9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5Q/ZvH/cf6YxX/J/DGL/1L5Yxb/n+SPWfx/mj9m8V86f8ziv0z+mMV/2fwxi//P8scs/svlj1n8l88fs/j/PH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9F/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/1/mj1n8f5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f549Z/H+TP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/zR+z+G+VP2bx/13+mMV/6/wxi//v88cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/4f8MYv/H/PHLP475I9Z/P+UP2bx/3P+mMV/x/wxi/9O+WMW/7/kj1n8d84fs/jvkj9m8d81f8zi/9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388ck/oMG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/e5/m/69Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6YxX+K/DGL/2fzxyz+n8sfs/h/Pn/M4j9l/pjF/wv5Yxb/L+aPWfy/lD9m8Z8qf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/N/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfxnyx+z+H8nf8zi/938MYv/7PljFv858scs/nPmj1n858ofs/h/L3/M4j93/pjFf578MYv/vPljFv/v549Z/OfLH7P4/yB/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4/zB+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yh+z+P84f8ziv2T+mMV/qfwxi/9P8scs/j/NH7P4L50/ZvFfJn/M4r9s/pjF/2f5Yxb/5fLHLP7L549Z/H+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yJ/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/L/PHLP6/yh+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6/zxyz+v8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjF//f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Q/6Yxf+P+WMW/x3yxyz+f8ofs/j/OX/M4r9j/pjFf6f8MYv/X/LHLP47549Z/HfJH7P475o/ZvH/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/kQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOI/Sf6Yxf/j+WMW/0nzxyz+n8gfs/hPlj9m8f9k/pjF/1P5Yxb/yfPHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzJ/zOL/hfwxi/8X88cs/l/KH7P4T5U/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+b+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/1b+mMV/1vwxi/+388cs/rPlj1n8v5M/ZvH/bv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+XP2bxnzt/zOI/T/6YxX/e/DGL//fzxyz+8+WPWfx/kD9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/x/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/lj1n8f5w/ZvFfMn/M4r9U/pjF/yf5Yxb/n+aPWfyXzh+z+C+TP2bxXzZ/zOL/s/wxi/9y+WMW/+Xzxyz+P88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/kT9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+X+WMW/1/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/1/ljFv/f5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/b/PHLP5b5Y9Z/H+XP2bx3zp/zOL/+/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8hf8zi/8f8MYv/DvljFv8/5Y9Z/P+cP2bx3zF/zOK/U/6Yxf8v+WMW/53zxyz+u+SPWfx3zR+z+P81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif8oA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8Z8kf8zi//H8MYv/pPljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/+fyxyz+n88fs/hPmT9m8f9C/pjF/4v5Yxb/L+WPWfynyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/838MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/K3/M4j9r/pjF/9v5Yxb/2fLHLP7fyR+z+H83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+38sfs/jPnT9m8Z8nf8ziP2/+mMX/+/ljFv/58scs/j/IH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/D/PHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/j/LHLP4/zh+z+C+ZP2bxXyp/zOL/k/wxi/9P88cs/kvnj1n8l8kfs/gvmz9m8f9Z/pjFf7n8MYv/8vljFv+f549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/r/IH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/8v8MYv/r/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v/r/DGL/2/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf+3+WMW/63yxyz+v8sfs/hvnT9m8f99/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8/5A/ZvH/Y/6YxX+H/DGL/5/yxyz+f84fs/jvmD9m8d8pf8zi/5f8MYv/zvljFv9d8scs/rvmj1n8/5o/ZvH/W/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdSB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I82kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv8p8scs/p/NH7P4fy5/zOL/+fwxi/+U+WMW/y/kj1n8v5g/ZvH/Uv6YxX+q/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+38wfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+38scs/rPmj1n8v50/ZvGfLX/M4v+d/DGL/3fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/vfwxi//c+WMW/3nyxyz+8+aPWfy/nz9m8Z8vf8zi/4P8MYv//PljFv8F8scs/gvmj1n8F8ofs/j/MH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/KH/M4v/j/DGL/5L5Yxb/pfLHLP4/yR+z+P80f8ziv3T+mMV/mfwxi/+y+WMW/5/lj1n8l8sfs/gvnz9m8f95/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/4v8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+v8wfs/j/Kn/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/OH7P4/yZ/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+bP2bx3yp/zOL/u/wxi//W+WMW/9/nj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/D/ljFv8/5o9Z/HfIH7P4/yl/zOL/5/wxi/+O+WMW/53yxyz+f8kfs/jvnD9m8d8lf8ziv2v+mMX/r/ljFv+/5Y9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938scs/u/mj0n8Rx/IH7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOI/Wf6Yxf+T+WMW/0/lj1n8J88fs/h/On/M4v+Z/DGL/xT5Yxb/z+aPWfw/lz9m8f98/pjFf8r8MYv/F/LHLP5fzB+z+H8pf8ziP1X+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv9v5o9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+M+WP2bx/07+mMX/u/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9e/pjFf+78MYv/PPljFv9588cs/t/PH7P4z5c/ZvH/Qf6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/H+YP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/H+UP2bx/3H+mMV/yfwxi/9S+WMW/5/kj1n8f5o/ZvFfOn/M4r9M/pjFf9n8MYv/z/LHLP7L5Y9Z/JfPH7P4/zx/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Rf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9f5o9Z/H+VP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/X+ePWfx/kz9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/7/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+H/DGL/x/zxyz+O+SPWfz/lD9m8f9z/pjFf8f8MYv/TvljFv+/5I9Z/HfOH7P475I/ZvHfNX/M4v/X/DGL/9/yxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5Yxb/d/PHJP5jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMV/ivwxi/9n88cs/p/LH7P4fz5/zOI/Zf6Yxf8L+WMW/y/mj1n8v5Q/ZvGfKn/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/zfzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8Z8sfs/h/J3/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fy9/zOI/d/6YxX+e/DGL/7z5Yxb/7+ePWfznyx+z+P8gf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+P8wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/j/OH/M4r9k/pjFf6n8MYv/T/LHLP4/zR+z+C+dP2bxXyZ/zOK/bP6Yxf9n+WMW/+Xyxyz+y+ePWfx/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8if8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/zEH8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/WAP5Yxb/QfljFv+R8scs/iPnj1n8R8kfs/gPzh+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfwnyx+z+H8yf8zi/6n8MYv/5PljFv9P549Z/D+TP2bxnyJ/zOL/2fwxi//n8scs/p/PH7P4T5k/ZvH/Qv6Yxf+L+WMW/y/lj1n8p8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v/N/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/9nyxyz+38kfs/h/N3/M4j97/pjFf478MYv/nPljFv+58scs/t/LH7P4z50/ZvGfJ3/M4j9v/pjF//v5Yxb/+fLHLP4/yB+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/w/zxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/4/yxyz+P84fs/gvmT9m8V8qf8zi/5P8MYv/T/PHLP5L549Z/JfJH7P4L5s/ZvH/Wf6YxX+5/DGL//L5Yxb/n+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6/yB+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v/L/DGL/6/yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/6/wxi/9v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvH/ff6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/P+QP2bx/2P+mMV/h/wxi/+f8scs/n/OH7P475g/ZvHfKX/M4v+X/DGL/875Yxb/XfLHLP675o9Z/P+aP2bx/1v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/zOL/bv6YxH/sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/pPlj1n8P5k/ZvH/VP6YxX/y/DGL/6fzxyz+n8kfs/hPkT9m8f9s/pjF/3P5Yxb/z+ePWfynzB+z+H8hf8zi/8X8MYv/l/LHLP5T5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/2b+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/bPljFv/v5I9Z/L+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+WPWfznzh+z+M+TP2bxnzd/zOL//fwxi/98+WMW/x/kj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/h/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/R/ljFv8f549Z/JfMH7P4L5U/ZvH/Sf6Yxf+n+WMW/6Xzxyz+y+SPWfyXzR+z+P8sf8ziv1z+mMV/+fwxi//P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/1/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/2X+mMX/V/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8f91/pjF/zf5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+P8+f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+f8gfs/j/MX/M4r9D/pjF/0/5Yxb/P+ePWfx3zB+z+O+UP2bx/0v+mMV/5/wxi/8u+WMW/13zxyz+f80fs/j/LX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f0ziP85A/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdyB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I83kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PH/j/26MEADAQAAtjbGuBt27Zt27Zt27Zt27ZtW3UXuAl6yQpp+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/qOW/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T9q+f/bf9Ty/4//qOX/X/9Ry/9//qOW///9Ry3/A/xHLf8D/Uct/4P8Ry3/g/1HLf9D/Ect/0P9Ry3/w/xHJf8TjeQ/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+NcP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCcvbuNzass/Dh+urZ7+rN/N+fwGjIYbLqJK1u7MhlsPtTHgqk6FgMmkC2sjEph7iG4gVoNSgzGMBkJIuo2dRNIjBkvhgkIK4lKnIrGiWiIQ1AXMTVMZETjUnO3vUt7r23Wq17XXuzzedHe55Tf6bbku3PK1gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//r0PLXg==") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4) 6.394499955s ago: executing program 3 (id=1428): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x0, [0x0, 0x70a, 0x0, 0x974, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffff, 0x0, 0xfffd], 0xa}) 6.223236798s ago: executing program 3 (id=1429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 6.135240159s ago: executing program 3 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x4}]}}}]}, 0x38}}, 0x0) 6.131895149s ago: executing program 3 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 6.079310996s ago: executing program 3 (id=1432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="600000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067726574617000002000028005001300010000000400120005000a0000000000080014000000000008000a00", @ANYRESDEC], 0x60}}, 0x0) 5.686620508s ago: executing program 3 (id=1440): syz_mount_image$sysv(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x1000011, &(0x7f0000000380)=ANY=[], 0x1, 0x9e85, &(0x7f0000008400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.614136963s ago: executing program 4 (id=1448): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x551f, &(0x7f0000005a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) 2.830381074s ago: executing program 1 (id=1460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0) 2.643188668s ago: executing program 1 (id=1462): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f00000003c0)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 2.227171471s ago: executing program 2 (id=1465): r0 = io_uring_setup(0x198f, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x2, 0x0) 2.226882748s ago: executing program 0 (id=1466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x3c}}, 0x0) 2.180784188s ago: executing program 2 (id=1467): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x2808415, &(0x7f0000000080)={[{@usrquota}, {@jqfmt_vfsold}, {@balloc_notest4}, {}, {@grpjquota, 0x3d}], [], 0x2}, 0x1, 0x110e, &(0x7f0000000140)="$eJzs2b9qFFEUB+Df/Mkaq9UR7RwEGyuJCPYWFnkHO7FLZScI8TF8AB9H8gYS8gCCAWtH5s5MJMFFJGtg4fvgzp45d8+9d8tzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCpxse9OumWTPO9ZPv+5PAsSb/k73xZTcHtOfG1POtU46iXxbpnj/e759303bkiR0dv311s2Of0vETtVn/IcdJsmtzf5k4AAACwW4ZrW19dsp2vFG5ofwAAAOBvtn2fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCvhvXvuEuyN4UP71ZJ358cniXpN1bfH27giAAAAMA1Vanzev2nfPLiwcXr0JS7garkl/GjSuoc5PNYv7pU/vHS297/Oz8AAADshnb+XG2Y/1S657HfrpM8SZthGI6X2Udp8/RKf/3tZdK8f5WD3JoS5U/+nzk9//BmGVXp6AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sQMHAgAAAACC/K0HuQAAAAAAAAAAAAAAAADgrQAAAP//o4zYQg==") 1.985605574s ago: executing program 0 (id=1468): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x0, 0xffffffff00000000}) 1.81594661s ago: executing program 0 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x6}]}}}]}, 0x3c}}, 0x0) 1.599346328s ago: executing program 0 (id=1470): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8202, &(0x7f0000000080)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@grpid}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@minixdf}, {@noauto_da_alloc}]}, 0x0, 0x5fe, &(0x7f0000001040)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBCDhaW5AivbGHJEDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnbHXla78kbWaiTP5wO7eu/NaN/76ulp3uzo7QRQWZPZUxpxOCIuJRETbdvGo7lxsrXfw+/uXM4eSTQa//s2iaRVVuz/qPV1f/aURIxGxKdnI35f21jv6q3bV+fqjaZXI6bXllemV2/dPr60PHdl4crCtdkT/zx5auZfsydntyXOIq5z5//7p7dee+kfi5/VjydxOi4OvzIfHXFsl8mYjEetENvLhyLiVJbo8nPZa4oQkpLbwdbUWr+PwxFxKCailueaJmLpzVIbBwxUoxbRACoqMf6hoop5QHFuP4jz4N3swZnmCdDG+Iea743EaH5utO9h0nZm1DzfPbAN9Wd1/HznyHvZI3q8DzG0DfX0sn43Iv7YLf4kb9uB/F2cLP400rbvy9IzETHS+lmkW6x/siO/079/vyb+9n7I4j3d+pqVn91i/WXHD0A13T/TOpCvZ7knx79sZljMf6LL/Ge8y7FrK8o+/vWe/xXH+9H8PfK0Yx6WzXkudH/J4c6Cr944906v+tvnf9kjq7+YC+6EB3cjjnTE/3o+mUse93/Spf+zXS71Wcd/Pv/mXK9tZcffuBdxtOv5z5MrWllqem15pSjruD45vbhUX5hpPnet46NPXvygV/1lx5/1f/SIf7P+z8pW+qzjwwv3lnttG39q/OnXI8nFPDXSKnl5bm3txmzESHK+tUtb+YnN21LsU7xGFv+xv3Yf/5vEn3f0ep/xr/z/6sNe2/ru/w1/VXKPGn22oZcs/vkt9v/bfdbxwws3/9xRNFYkNot/7BljAwAAAAAAgKpJ82uwSTr1OJ2mU1PNNbx/iH1p/frq2t8Wr9+8Nh9xLP9/yOG0uNI90cwnWX629f+wRf5ER/7vEXEwIt6tjeX5qcvX6/NlBw8AAAAAAAAAAAAAAAAAAAC7xP7W+v/iPtXf15rr//uydmjArQMGbpA3mAN2N+Mfqisf/1u9gyuwpzn+Q3UZ/1Bdxj9Ul/EP1WX8Q3UZ/1Bdxj9Ul/EPAAAAAM+lg3+5/2USEev/HssfmZHWtuFSWwYMmjEO1VUruwFAaR5f+rf8Hyqnr/n/j60PBxx8c4ASJN0K88lBY/PBf7/rdwIAAAAAAAAAAAAAA3D0sPX/UFVpfFx2E4CSPMP6fx8dAHucj/6H6nKODzxtFf9orw3W/wMAAAAAAAAAAADAjhnPH0k61boF6Hik6dRUxG8j4kAMJ4tL9YWZiPhdRHxRG/5Nlp8tu9EAAAAAAAAAAAAAAAAAAADwnFm9dfvqXL2+cKM98dOGkuc7UdwFdbe0pz0Ryc5XOhYRuyH2wSSG2kqSiPWs53dFw26sxq5oRpo3o+Q/TAAAAAAAAAAAAAAAAAAAUEFta4+7O/L+DrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbek/v/bz2RPOV1yo4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANibfgkAAP//4DE4gw==") ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 1.36235454s ago: executing program 1 (id=1471): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x5}) 1.178377784s ago: executing program 4 (id=1472): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.155341355s ago: executing program 2 (id=1473): r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x2a, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0}) 827.383253ms ago: executing program 1 (id=1474): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80a800, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=prefer:', @ANYRESOCT=r0]) 806.152506ms ago: executing program 0 (id=1475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 796.158878ms ago: executing program 2 (id=1476): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 563.400223ms ago: executing program 1 (id=1477): unshare(0x400) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 563.25818ms ago: executing program 2 (id=1478): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x4, 0x0, [], 0x0, 0x0, 0x0}, 0x530) 340.933555ms ago: executing program 4 (id=1479): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x54, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) 279.639232ms ago: executing program 2 (id=1480): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002780)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8f800000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b51328ac152bd7edc66d4e962cbc2d2b0c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8df68b97f4dcb5652f2b13aa941b7ff56c48fb7162e91ef53c70938a92e4bf55d65319f74766a309722f767fc8f3db2a194a2f098336601be2edcbcc9b562f2fc64e2deff9a16e84f1e8bc5fb82c91f4d10e34f5a093fc4fcbdb89342274857c8e6aa8864b3214f51b9e515bf645235007cede80ff5931bff340780a3b43bc0466340c195a515f779d0333dd467bb665508d9c89e18e86d1975e273f937e3bd1", @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$eJzslU1rE0EYx3+zO2kazaFnTwWD7UXbbEH8BvYD+AEM6VqLG1+6AU0oGL304kH8EgU/hQdB7x5EBC/1oKCHiqeKrMzOM9MNicRKeyjMH5bnZZ6XeZ7ZeeZ2/iCvA78PdrosUELR5KNSaGBJWd3hnKU/hBaCL9rKbdG/FPpZaD4Yvntm2eGdTpal2/lgBqMUzLLJCiwj6Rk30lOSOcuZod8+HdcophpHwD/VcyKMyTax1I9tSZNez8c09Wk24stpb74mef7LffEY/42t1DI/m+O/xNeTrqvGaZ97pWO/mn87piJ2/fnwwrbZL0nbMcaxuDcmbspZY6JjeeXI+MqvP4n4XgrvD3a6hrkpU8zoNuznrkRpY4TXFZsLGkagYgofR5fTEpaAlX7v/ko+GF7e6nU20830bpKsXV19c15OoXgMW1m6qirbMJcaN5cAc08blXVzdT4drY+oQMnWpEDOgXK8c3HDeflixbEBUaUsR4/ivvL566KL6XGDS8wDD0dqERJst1qYaJpbprR1FLEIbV3ZJxwSMV8uXOneyzZ2USjntof2Mdr71LyQiGASpWvXfPm7QltC14XuCd0X6t4u9ybpMsI3kZZHMMejTr+/XT5elvO6xOuSBZ85kqzuNXQNb9UJCAgICAgICDgj+BMAAP//duk56A==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 99.335118ms ago: executing program 1 (id=1481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0) 0s ago: executing program 0 (id=1482): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0x4) kernel console output (not intermixed with test programs): ck_info instead [ 77.986427][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 78.201016][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.242701][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.275431][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 78.299154][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 78.358093][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.367980][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.376929][ T9] usb 1-1: SerialNumber: syz [ 78.390392][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 78.580415][ T5280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.618929][ T1174] usb 1-1: USB disconnect, device number 3 [ 78.796828][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 78.804946][ T5280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.809631][ T51] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.836215][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.847073][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 78.866856][ T5280] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 78.876435][ T5280] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 78.884467][ T5280] usb 5-1: Manufacturer: syz [ 78.898269][ T5280] usb 5-1: config 0 descriptor?? [ 78.976169][ T5284] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.016103][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 79.025474][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.048920][ T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.066283][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 79.076557][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.089769][ T51] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 79.099187][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.119038][ T51] usb 3-1: config 0 descriptor?? [ 79.124427][ T5280] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 79.131235][ T51] hso 3-1:0.0: Can't find BULK IN endpoint [ 79.150217][ T5280] usb 5-1: USB disconnect, device number 2 [ 79.166201][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 79.177282][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.206627][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 79.239317][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.268014][ T5284] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 79.286192][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.306986][ T5284] usb 4-1: config 0 descriptor?? [ 79.313450][ T5512] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 79.323893][ T5284] hub 4-1:0.0: USB hub found [ 79.364594][ T5239] usb 3-1: USB disconnect, device number 2 [ 79.402986][ T5518] loop0: detected capacity change from 0 to 4096 [ 79.479521][ T5516] loop1: detected capacity change from 0 to 32768 [ 79.521579][ T5516] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.538022][ T5284] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 79.580691][ T5518] ntfs3: loop0: ino=21, The size of extended attributes must not exceed 64KiB [ 79.591768][ T5516] XFS (loop1): Ending clean mount [ 79.654656][ T5227] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.776373][ T5284] usbhid 4-1:0.0: can't add hid device: -71 [ 79.802994][ T5284] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 79.908854][ T5284] usb 4-1: USB disconnect, device number 2 [ 80.152294][ T5534] netlink: 'syz.1.97': attribute type 32 has an invalid length. [ 80.284971][ T5539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.101'. [ 80.944113][ T5566] loop4: detected capacity change from 0 to 256 [ 81.044500][ T5528] loop0: detected capacity change from 0 to 40427 [ 81.116090][ T5528] F2FS-fs (loop0): Invalid log sectors per block(3) log sectorsize(10) [ 81.125006][ T5528] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.256301][ T5528] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045589454292453) [ 81.286950][ T5581] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.348602][ T5573] loop1: detected capacity change from 0 to 4096 [ 81.350180][ T5581] xt_TCPMSS: Only works on TCP SYN packets [ 81.395816][ T5573] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 81.524923][ T5528] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.580709][ T5528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.605440][ T5573] ntfs3: loop1: failed to convert "c46c" to cp863 [ 81.856949][ T25] cfg80211: failed to load regulatory.db [ 82.051767][ T5605] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 82.400181][ T5613] 9pnet_virtio: no channels available for device syz [ 82.504960][ T5619] loop3: detected capacity change from 0 to 2048 [ 82.546356][ T5239] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.587304][ T5619] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.136: bad orphan inode 8192 [ 82.656588][ T5630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.664765][ T5619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.746184][ T5239] usb 3-1: Using ep0 maxpacket: 8 [ 82.769347][ T5239] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.793716][ T5239] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 82.803622][ T5239] usb 3-1: config 0 has no interface number 0 [ 82.826321][ T5239] usb 3-1: config 0 interface 125 has no altsetting 0 [ 82.843488][ T5239] usb 3-1: string descriptor 0 read error: -22 [ 82.882804][ T5637] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 82.886411][ T29] audit: type=1400 audit(1724332811.010:2): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=5634 comm="syz.1.142" [ 82.907353][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.925587][ T5239] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 82.973264][ T5239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.018971][ T5239] usb 3-1: config 0 descriptor?? [ 83.062477][ T5239] hub 3-1:0.125: bad descriptor, ignoring hub [ 83.086035][ T5239] hub 3-1:0.125: probe with driver hub failed with error -5 [ 83.095315][ T5239] usb 3-1: Found UVC 0.00 device (17dc:0202) [ 83.139958][ T5239] usb 3-1: No valid video chain found. [ 83.501368][ T9] usb 3-1: USB disconnect, device number 3 [ 83.979141][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.155303][ T5683] loop1: detected capacity change from 0 to 128 [ 84.239916][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.250829][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 84.260167][ T25] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 84.269365][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.287761][ T25] usb 4-1: config 0 descriptor?? [ 84.308590][ T5688] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 84.385236][ T5227] sysv_free_block: flc_count > flc_size [ 84.409855][ T5227] sysv_free_block: flc_count > flc_size [ 84.415488][ T5227] sysv_free_block: flc_count > flc_size [ 84.456039][ T5227] sysv_free_block: flc_count > flc_size [ 84.462575][ T5227] sysv_free_block: flc_count > flc_size [ 84.485678][ T5227] sysv_free_block: flc_count > flc_size [ 84.508819][ T5227] sysv_free_block: flc_count > flc_size [ 84.530740][ T5227] sysv_free_block: flc_count > flc_size [ 84.546044][ T5227] sysv_free_block: flc_count > flc_size [ 84.556412][ T5227] sysv_free_block: flc_count > flc_size [ 84.563744][ T5227] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 84.713566][ T25] Bluetooth: Can't get state to change to load configuration err [ 84.722236][ T25] Bluetooth: Loading sysconfig file failed [ 84.728332][ T25] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 84.768091][ T25] usb 4-1: USB disconnect, device number 3 [ 84.981118][ T5709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 85.329771][ T5719] loop0: detected capacity change from 0 to 1024 [ 85.331314][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 85.396120][ T5721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.184'. [ 85.521485][ T5692] loop2: detected capacity change from 0 to 32768 [ 85.546959][ T5692] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.170 (5692) [ 85.641905][ T5692] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.660876][ T5692] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 85.698253][ T5692] BTRFS info (device loop2): using free-space-tree [ 85.944240][ T5692] BTRFS info (device loop2): checking UUID tree [ 86.260659][ T5242] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.496906][ T5731] loop0: detected capacity change from 0 to 32768 [ 86.520772][ T5731] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.188 (5731) [ 86.548469][ T5731] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.573181][ T5771] loop1: detected capacity change from 0 to 256 [ 86.583203][ T5731] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 86.613303][ T5731] BTRFS info (device loop0): using free-space-tree [ 87.036718][ T29] audit: type=1326 audit(1724332815.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b6579e79 code=0x7ffc0000 [ 87.125058][ T29] audit: type=1326 audit(1724332815.180:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b6579e79 code=0x7ffc0000 [ 87.156655][ T5230] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.240492][ T29] audit: type=1326 audit(1724332815.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd942d79e79 code=0x7ffc0000 [ 87.376555][ T29] audit: type=1326 audit(1724332815.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd942d79e79 code=0x7ffc0000 [ 87.486402][ T5814] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.496035][ T29] audit: type=1326 audit(1724332815.200:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd942d79e79 code=0x7ffc0000 [ 87.650468][ T29] audit: type=1326 audit(1724332815.200:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fa3b6579e79 code=0x7ffc0000 [ 87.692865][ T29] audit: type=1326 audit(1724332815.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5801 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd942d79e79 code=0x7ffc0000 [ 87.721419][ T29] audit: type=1326 audit(1724332815.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b6579e79 code=0x7ffc0000 [ 87.773054][ T29] audit: type=1326 audit(1724332815.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5797 comm="syz.4.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b6579e79 code=0x7ffc0000 [ 87.999446][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.060657][ T5830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.223'. [ 88.249690][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 88.259200][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.275987][ T9] usb 4-1: Product: syz [ 88.280226][ T9] usb 4-1: Manufacturer: syz [ 88.306140][ T9] usb 4-1: SerialNumber: syz [ 88.331786][ T5834] loop2: detected capacity change from 0 to 4096 [ 88.347138][ T9] usb 4-1: config 0 descriptor?? [ 88.376170][ T5834] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 88.448971][ T5834] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 88.549816][ T5845] netlink: 'syz.4.229': attribute type 21 has an invalid length. [ 88.575329][ T9] hso 4-1:0.0: Can't find BULK IN endpoint [ 88.593682][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 88.596155][ T5845] netlink: 'syz.4.229': attribute type 6 has an invalid length. [ 88.664232][ T5845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.229'. [ 88.798137][ T9] usb 4-1: USB disconnect, device number 4 [ 88.943730][ T5856] UBIFS error (pid: 5856): cannot open "", error -22 [ 89.022768][ T5817] loop1: detected capacity change from 0 to 40427 [ 89.055198][ T5817] F2FS-fs (loop1): Invalid log sectors per block(3) log sectorsize(10) [ 89.063781][ T5817] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 89.114249][ T5817] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045589454292453) [ 89.228514][ T5871] overlayfs: missing 'lowerdir' [ 89.293291][ T5873] syz.2.241 uses old SIOCAX25GETINFO [ 89.305897][ T5817] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.313154][ T5817] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.483277][ T5881] netlink: 5 bytes leftover after parsing attributes in process `syz.3.244'. [ 89.839608][ T5900] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.254'. [ 90.185871][ T5911] xt_l2tp: v2 sid > 0xffff: 100663296 [ 90.358487][ T5920] loop2: detected capacity change from 0 to 736 [ 90.406725][ T5280] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.627336][ T5280] usb 1-1: Using ep0 maxpacket: 32 [ 90.694102][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.705324][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.715355][ T5280] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.724513][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.737239][ T5280] usb 1-1: config 0 descriptor?? [ 90.748219][ T5280] hub 1-1:0.0: USB hub found [ 90.763205][ T5920] rock: directory entry would overflow storage [ 90.807918][ T5920] rock: sig=0x5850, size=36, remaining=14 [ 90.951363][ T5280] hub 1-1:0.0: 1 port detected [ 91.160957][ T5280] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 91.167904][ T5280] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 91.189427][ T5280] usbhid 1-1:0.0: can't add hid device: -71 [ 91.216896][ T5280] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 91.287532][ T5280] usb 1-1: USB disconnect, device number 4 [ 91.467821][ T5964] loop3: detected capacity change from 0 to 1024 [ 91.476614][ T5964] EXT4-fs: Ignoring removed oldalloc option [ 91.533137][ T5964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000080000000 r/w without journal. Quota mode: writeback. [ 91.605004][ T5964] EXT4-fs error (device loop3): __ext4_new_inode:1070: comm syz.3.280: reserved inode found cleared - inode=1 [ 91.673063][ T5974] loop4: detected capacity change from 0 to 64 [ 91.807703][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000080000000. [ 91.814496][ T5974] hfs: unable to locate alternate MDB [ 91.851788][ T5974] hfs: continuing without an alternate MDB [ 92.399121][ T6004] loop3: detected capacity change from 0 to 128 [ 92.622174][ T5238] sysv_free_block: flc_count > flc_size [ 92.666087][ T5238] sysv_free_block: flc_count > flc_size [ 92.686793][ T5238] sysv_free_block: flc_count > flc_size [ 92.692407][ T5238] sysv_free_block: flc_count > flc_size [ 92.746161][ T5238] sysv_free_block: flc_count > flc_size [ 92.751786][ T5238] sysv_free_block: flc_count > flc_size [ 92.816026][ T5238] sysv_free_block: flc_count > flc_size [ 92.831660][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 92.835995][ T5238] sysv_free_block: flc_count > flc_size [ 92.936108][ T5238] sysv_free_block: flc_count > flc_size [ 92.941725][ T5238] sysv_free_block: flc_count > flc_size [ 92.957801][ T5238] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 93.143599][ T6008] loop2: detected capacity change from 0 to 32768 [ 93.309866][ T6008] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.312689][ T5239] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.541329][ T6008] XFS (loop2): Ending clean mount [ 93.562669][ T5239] usb 5-1: Using ep0 maxpacket: 8 [ 93.570478][ T6008] XFS (loop2): Quotacheck needed: Please wait. [ 93.606117][ T5239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.639342][ T5239] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 93.676267][ T5239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 93.700986][ T5239] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 93.701304][ T6008] XFS (loop2): Quotacheck: Done. [ 93.805805][ T5239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 93.815330][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.823711][ T5239] usb 5-1: SerialNumber: syz [ 93.885417][ T5242] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.903807][ T6020] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.917982][ T5239] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 93.918328][ T5239] usb-storage 5-1:1.0: USB Mass Storage device detected [ 93.996817][ T5239] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 94.033336][ T5239] scsi host1: usb-storage 5-1:1.0 [ 94.144174][ T5239] usb 5-1: USB disconnect, device number 3 [ 94.474472][ T6082] loop1: detected capacity change from 0 to 4096 [ 94.660515][ T6091] loop0: detected capacity change from 0 to 256 [ 94.668543][ T6073] loop3: detected capacity change from 0 to 32768 [ 94.679068][ T6091] exfat: Deprecated parameter 'utf8' [ 94.687634][ T6073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.330 (6073) [ 94.692842][ T6082] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 94.771448][ T6073] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.784821][ T6073] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 94.797815][ T6073] BTRFS info (device loop3): using free-space-tree [ 94.822816][ T6091] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 94.891199][ T6091] overlay: filesystem on ./file0 not supported [ 95.214074][ T6118] Illegal XDP return value 4294967274 on prog (id 13) dev N/A, expect packet loss! [ 95.249075][ T6082] ntfs3: loop1: failed to convert "c46c" to macroman [ 95.539077][ T6133] netlink: 7 bytes leftover after parsing attributes in process `syz.2.350'. [ 95.957694][ T6141] netlink: 'syz.2.355': attribute type 5 has an invalid length. [ 95.965415][ T6141] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.355'. [ 96.104829][ T6145] loop4: detected capacity change from 0 to 1024 [ 96.206975][ T6145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.229778][ T6152] netlink: 292 bytes leftover after parsing attributes in process `syz.2.359'. [ 96.239112][ T6152] netlink: 144 bytes leftover after parsing attributes in process `syz.2.359'. [ 96.414739][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 96.431112][ T6159] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 96.600538][ T6164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 96.610103][ T5238] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.623889][ T5228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.779885][ T6163] loop2: detected capacity change from 0 to 4096 [ 96.820784][ T6163] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 96.839298][ T6172] IPv6: sit1: Disabled Multicast RS [ 96.912702][ T6175] loop4: detected capacity change from 0 to 1024 [ 96.985627][ T6175] EXT4-fs: Ignoring removed oldalloc option [ 97.050136][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 97.063515][ T6175] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 97.068358][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.370'. [ 97.186455][ T6175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.399526][ T5228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.415724][ T6187] loop0: detected capacity change from 0 to 256 [ 98.102209][ T6215] loop2: detected capacity change from 0 to 4096 [ 98.136648][ T6215] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 98.184874][ T6223] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 98.221295][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 98.294264][ T6215] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 98.349708][ T6215] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 98.362713][ T6215] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 98.464115][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.478821][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 98.504958][ T9] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 98.516455][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.557517][ T9] usb 1-1: config 0 descriptor?? [ 98.580743][ T6213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.603088][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.926489][ T9] usb 1-1: USB disconnect, device number 5 [ 99.125195][ T6241] loop1: detected capacity change from 0 to 1024 [ 99.297331][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 99.326272][ T6241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.599318][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.193519][ T6284] QAT: failed to copy from user cfg_data. [ 100.271172][ T6288] loop4: detected capacity change from 0 to 256 [ 100.589777][ T6249] loop3: detected capacity change from 0 to 32768 [ 100.634375][ T6249] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.768307][ T6314] loop4: detected capacity change from 0 to 512 [ 100.804069][ T6314] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.858404][ T6314] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 100.926266][ T5239] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.950045][ T6249] XFS (loop3): Ending clean mount [ 100.950076][ T6314] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 100.959514][ T6249] XFS (loop3): Quotacheck needed: Please wait. [ 100.990546][ T6249] XFS (loop3): Quotacheck: Done. [ 101.013304][ T6314] System zones: 0-2, 18-18, 34-34 [ 101.028084][ T6314] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 101.061179][ T5238] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.101860][ T6314] EXT4-fs (loop4): 1 truncate cleaned up [ 101.119998][ T6314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.133332][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.141917][ T5239] usb 3-1: Using ep0 maxpacket: 32 [ 101.151102][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 101.162735][ T5239] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 101.176174][ T5239] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 101.189561][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 101.215703][ T5239] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 101.219664][ T6314] EXT4-fs error (device loop4): ext4_generic_delete_entry:2678: inode #2: block 3: comm syz.4.431: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 101.229401][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.250565][ T6327] loop0: detected capacity change from 0 to 8 [ 101.259753][ T6314] EXT4-fs error (device loop4) in ext4_delete_entry:2749: Corrupt filesystem [ 101.296162][ T5239] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 101.310587][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.321558][ T5239] usb 3-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 101.336158][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 101.344457][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.364622][ T5239] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 101.374097][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 101.384513][ T6327] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 101.393841][ T5239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.405130][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.413788][ T5239] usb 3-1: Product: syz [ 101.419151][ T5239] usb 3-1: Manufacturer: syz [ 101.424802][ T5239] usb 3-1: SerialNumber: syz [ 101.432189][ T25] usb 2-1: config 0 descriptor?? [ 101.451905][ T5239] usb 3-1: config 0 descriptor?? [ 101.484006][ T6307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.491367][ C1] hrtimer: interrupt took 159880 ns [ 101.695207][ T25] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -22 [ 101.726288][ T6329] loop3: detected capacity change from 0 to 32768 [ 101.744736][ T6327] cramfs: Error -3 while decompressing! [ 101.752623][ T6327] cramfs: ffffffff950c9788(18)->ffff888060765000(4096) [ 101.759734][ T6327] cramfs: Error -3 while decompressing! [ 101.765442][ T6327] cramfs: ffffffff950c9788(18)->ffff888060765000(4096) [ 101.788728][ T5239] cxacru 3-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 101.798140][ T29] audit: type=1800 audit(1724332829.940:12): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.436" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 101.803168][ T5228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.832405][ T5239] cxacru 3-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 101.841131][ T5239] cxacru 3-1:0.0: probe with driver cxacru failed with error -22 [ 101.841421][ T6329] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.858635][ T5239] usb 3-1: USB disconnect, device number 4 [ 101.922431][ T51] usb 2-1: USB disconnect, device number 2 [ 102.144906][ T6329] XFS (loop3): Ending clean mount [ 102.232780][ T5238] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.442013][ T6352] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.086705][ T6373] loop2: detected capacity change from 0 to 512 [ 103.116537][ T6373] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 103.136564][ T6344] loop4: detected capacity change from 0 to 32768 [ 103.311365][ T6383] netlink: 'syz.0.456': attribute type 21 has an invalid length. [ 103.336421][ T6373] EXT4-fs (loop2): failed to open journal device unknown-block(2940,205839) -6 [ 103.340450][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 103.415450][ T6387] ceph: No source [ 103.427287][ T6373] loop2: detected capacity change from 0 to 512 [ 103.444986][ T6373] EXT4-fs (loop2): unable to read superblock [ 103.765226][ T6400] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 103.815375][ T6391] loop0: detected capacity change from 0 to 1024 [ 103.894425][ T6406] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.468'. [ 104.012991][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.039363][ T12] hfsplus: b-tree write err: -5, ino 4 [ 104.217794][ T51] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 104.226662][ T51] usb 2-1: config 0 has no interface number 0 [ 104.244607][ T51] usb 2-1: config 0 interface 122 has no altsetting 0 [ 104.289533][ T51] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 104.312275][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.346161][ T51] usb 2-1: Product: syz [ 104.350406][ T51] usb 2-1: Manufacturer: syz [ 104.355034][ T51] usb 2-1: SerialNumber: syz [ 104.399317][ T51] usb 2-1: config 0 descriptor?? [ 104.405562][ T6427] IPv6: Can't replace route, no match found [ 104.818342][ T5239] usb 2-1: USB disconnect, device number 3 [ 104.843668][ T5239] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 105.394423][ T6444] loop3: detected capacity change from 0 to 32768 [ 105.464235][ T6444] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.485 (6444) [ 105.496912][ T6458] loop0: detected capacity change from 0 to 32768 [ 105.529717][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.555611][ T6458] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.492 (6458) [ 105.572427][ T6444] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.588753][ T6444] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 105.603869][ T6458] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.626080][ T6444] BTRFS info (device loop3): disk space caching is enabled [ 105.645345][ T6458] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 105.655823][ T6458] BTRFS info (device loop0): using free-space-tree [ 105.656426][ T6444] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 105.748465][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.758976][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.768443][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.779810][ T9] usb 5-1: config 1 interface 0 has no altsetting 1 [ 105.790701][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.879093][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.897254][ T9] usb 5-1: Product: syz [ 105.901574][ T9] usb 5-1: Manufacturer: syz [ 105.906598][ T9] usb 5-1: SerialNumber: syz [ 105.946845][ T9] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 105.976047][ T9] cdc_ncm 5-1:1.0: bind() failure [ 106.122944][ T6501] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.499'. [ 106.123621][ T6444] BTRFS info (device loop3): rebuilding free space tree [ 106.147458][ T8] usb 5-1: USB disconnect, device number 4 [ 106.240169][ T5230] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.257403][ T6444] BTRFS info (device loop3): disabling free space tree [ 106.274665][ T6444] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 106.300201][ T6444] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.589093][ T5238] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 107.159493][ T6480] loop1: detected capacity change from 0 to 32768 [ 107.277495][ T6480] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.585551][ T6480] XFS (loop1): Ending clean mount [ 107.746215][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.750017][ T5227] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.956066][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 107.992217][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.004558][ T6533] loop4: detected capacity change from 0 to 32768 [ 108.011332][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.025992][ T6533] XFS: ikeep mount option is deprecated. [ 108.046851][ T9] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 108.067519][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.083498][ T9] usb 1-1: config 0 descriptor?? [ 108.094293][ T6533] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.123862][ T9] qmi_wwan 1-1:0.0: bogus CDC Union: master=10, slave=0 [ 108.132887][ T6555] netlink: 'syz.2.518': attribute type 4 has an invalid length. [ 108.141017][ T6555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 108.176157][ T9] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 108.346190][ T5239] usb 1-1: USB disconnect, device number 6 [ 108.425692][ T6533] XFS (loop4): Ending clean mount [ 108.455853][ T6533] XFS (loop4): Quotacheck needed: Please wait. [ 108.542124][ T6533] XFS (loop4): Quotacheck: Done. [ 108.557423][ T6544] loop3: detected capacity change from 0 to 32768 [ 108.721926][ T6567] netlink: 'syz.1.523': attribute type 8 has an invalid length. [ 108.730877][ T6567] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.523'. [ 108.760026][ T5228] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.838987][ T6560] loop2: detected capacity change from 0 to 32768 [ 108.921795][ T6560] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.019781][ T6560] XFS (loop2): Ending clean mount [ 109.399055][ T6581] loop1: detected capacity change from 0 to 4096 [ 109.481531][ T6596] sctp: [Deprecated]: syz.0.533 (pid 6596) Use of int in max_burst socket option. [ 109.481531][ T6596] Use struct sctp_assoc_value instead [ 109.505210][ T5242] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.911532][ T6609] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 109.919574][ T6609] nbd: couldn't find a device at index 20 [ 109.955347][ T6612] loop1: detected capacity change from 0 to 512 [ 110.059991][ T6612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.298362][ T6612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.334354][ T6612] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.342953][ T6626] netlink: 'syz.3.546': attribute type 23 has an invalid length. [ 110.618458][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.734548][ T6641] loop0: detected capacity change from 0 to 4096 [ 110.787176][ T6641] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 110.846220][ T6641] ntfs3: loop0: failed to convert "c46c" to cp863 [ 111.294508][ T6652] loop3: detected capacity change from 0 to 4096 [ 111.386579][ T6640] loop4: detected capacity change from 0 to 32768 [ 111.393863][ T6640] XFS: ikeep mount option is deprecated. [ 111.416813][ T6640] XFS: ikeep mount option is deprecated. [ 111.440545][ T6653] loop1: detected capacity change from 0 to 4096 [ 111.551710][ T6640] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.886018][ T5284] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.913063][ T5247] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 111.919752][ T5247] Bluetooth: Wrong link type (-22) [ 111.968025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.057935][ T6640] XFS (loop4): Ending clean mount [ 112.217175][ T5228] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.268752][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 112.279694][ T5284] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.293220][ T5284] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.342978][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 112.354516][ T5284] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 112.380799][ T5284] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 112.391071][ T5284] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 112.433914][ T5284] usb 1-1: Manufacturer: syz [ 112.459966][ T5284] usb 1-1: config 0 descriptor?? [ 112.711546][ T5284] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 112.757542][ T5284] usb 1-1: USB disconnect, device number 7 [ 112.844016][ T6713] kAFS: unparsable volume name [ 113.173215][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.591'. [ 113.456089][ T6730] loop3: detected capacity change from 0 to 4096 [ 113.475437][ T6730] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 113.489695][ T6740] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 113.562953][ T6738] loop0: detected capacity change from 0 to 2048 [ 113.598389][ T6738] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.606170][ T6730] ntfs3: loop3: failed to convert "c46c" to cp863 [ 113.646554][ T5235] udevd[5235]: incorrect nilfs2 checksum on /dev/loop0 [ 113.651887][ T6738] NILFS (loop0): mounting unchecked fs [ 113.682589][ T6738] NILFS (loop0): recovery required for readonly filesystem [ 113.698795][ T6738] NILFS (loop0): write access will be enabled during recovery [ 113.765497][ T6738] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 113.820385][ T6738] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state [ 114.347063][ T6767] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (72) [ 114.403771][ T6734] loop1: detected capacity change from 0 to 32768 [ 114.445158][ T6734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.594 (6734) [ 114.476061][ T6734] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.531844][ T6734] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 114.569602][ T6734] BTRFS info (device loop1): using free-space-tree [ 114.850579][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'. [ 114.883021][ T5239] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.913659][ T6734] BTRFS error (device loop1): balance: invalid convert metadata profile single [ 115.016182][ T5227] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.191349][ T5239] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 115.200796][ T5239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.208966][ T5239] usb 3-1: Product: syz [ 115.213395][ T5239] usb 3-1: Manufacturer: syz [ 115.218124][ T5239] usb 3-1: SerialNumber: syz [ 115.256326][ T5239] r8152-cfgselector 3-1: Unknown version 0x0000 [ 115.262654][ T5239] r8152-cfgselector 3-1: config 0 descriptor?? [ 115.670041][ T6830] @: renamed from veth0_vlan (while UP) [ 115.705865][ T25] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 115.927277][ T5239] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.108646][ T6839] infiniband syz2: set down [ 116.118794][ T6839] infiniband syz2: added ipvlan1 [ 116.126175][ T5239] usb 4-1: Using ep0 maxpacket: 8 [ 116.133578][ T5239] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 116.146132][ T5239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.166755][ T5239] usb 4-1: config 0 has no interface number 0 [ 116.184131][ T5239] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 116.212988][ T5239] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.246951][ T5239] usb 4-1: config 0 interface 52 has no altsetting 0 [ 116.264217][ T5239] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 116.274645][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 116.283389][ T5239] usb 4-1: Product: syz [ 116.291104][ T5239] usb 4-1: SerialNumber: syz [ 116.298796][ T5239] usb 4-1: config 0 descriptor?? [ 116.311942][ T6839] RDS/IB: syz2: added [ 116.317669][ T6839] smc: adding ib device syz2 with port count 1 [ 116.324164][ T6839] smc: ib device syz2 port 1 has pnetid [ 116.743983][ T5280] usb 4-1: USB disconnect, device number 5 [ 116.853689][ T6865] netlink: 84 bytes leftover after parsing attributes in process `syz.2.649'. [ 117.042911][ T6869] loop2: detected capacity change from 0 to 1024 [ 117.050095][ T6869] EXT4-fs: Ignoring removed oldalloc option [ 117.096196][ T6869] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 117.201619][ T6847] loop4: detected capacity change from 0 to 32768 [ 117.222400][ T6847] btrfs: Deprecated parameter 'usebackuproot' [ 117.228919][ T6847] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.242814][ T6847] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.642 (6847) [ 117.273605][ T6847] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 117.293019][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.302411][ T6847] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 117.339091][ T6869] 9pnet: Unknown protocol version 9 [ 117.379447][ T6847] BTRFS info (device loop4): disk space caching is enabled [ 117.398099][ T6847] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 117.528363][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.885156][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 117.972860][ T6847] BTRFS error (device loop4): failed to load root extent [ 117.983937][ T6847] BTRFS warning (device loop4): try to load backup roots slot 1 [ 118.241203][ T6892] loop0: detected capacity change from 0 to 32768 [ 118.268530][ T6892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.659 (6892) [ 118.363564][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 118.416603][ T6892] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.427345][ T6892] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 118.436636][ T6892] BTRFS info (device loop0): using free-space-tree [ 118.625587][ T6847] BTRFS info (device loop4 state M): disabling free space tree [ 118.643821][ T6847] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.658444][ T6847] BTRFS info (device loop4 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.839497][ T6847] BTRFS info (device loop4 state M): use compression, level 0 [ 118.856562][ T5239] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.920749][ T5228] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 119.189643][ T5239] usb 4-1: Using ep0 maxpacket: 32 [ 119.191970][ T5239] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 119.192002][ T5239] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 119.192027][ T5239] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 119.192053][ T5239] usb 4-1: config 1 has no interface number 0 [ 119.192092][ T5239] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.192123][ T5239] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.192149][ T5239] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 119.192190][ T5239] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 119.192219][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.225851][ T5239] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 119.395490][ T5230] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.433696][ T5239] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 119.434819][ T5239] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 119.435160][ T5239] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 119.845117][ T5280] usb 4-1: USB disconnect, device number 6 [ 120.027800][ T6981] loop0: detected capacity change from 0 to 256 [ 120.080982][ T6981] FAT-fs (loop0): Directory bread(block 64) failed [ 120.090147][ T6976] SET target dimension over the limit! [ 120.103033][ T6981] FAT-fs (loop0): Directory bread(block 65) failed [ 120.110087][ T6981] FAT-fs (loop0): Directory bread(block 66) failed [ 120.132852][ T6981] FAT-fs (loop0): Directory bread(block 67) failed [ 120.184524][ T6981] FAT-fs (loop0): Directory bread(block 68) failed [ 120.193538][ T6981] FAT-fs (loop0): Directory bread(block 69) failed [ 120.200742][ T6981] FAT-fs (loop0): Directory bread(block 70) failed [ 120.216889][ T6981] FAT-fs (loop0): Directory bread(block 71) failed [ 120.256366][ T6981] FAT-fs (loop0): Directory bread(block 72) failed [ 120.263538][ T6981] FAT-fs (loop0): Directory bread(block 73) failed [ 120.382757][ T6992] ɶƣ0GCTw: entered promiscuous mode [ 120.404816][ T6988] netlink: 'syz.1.693': attribute type 4 has an invalid length. [ 120.444346][ T6988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.693'. [ 120.675011][ T7000] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 121.246511][ T7030] loop1: detected capacity change from 0 to 256 [ 121.349421][ T7030] FAT-fs (loop1): Directory bread(block 64) failed [ 121.377741][ T7030] FAT-fs (loop1): Directory bread(block 65) failed [ 121.396385][ T7030] FAT-fs (loop1): Directory bread(block 66) failed [ 121.402992][ T7030] FAT-fs (loop1): Directory bread(block 67) failed [ 121.443641][ T7030] FAT-fs (loop1): Directory bread(block 68) failed [ 121.476169][ T7030] FAT-fs (loop1): Directory bread(block 69) failed [ 121.482946][ T7030] FAT-fs (loop1): Directory bread(block 70) failed [ 121.562614][ T7030] FAT-fs (loop1): Directory bread(block 71) failed [ 121.584828][ T7030] FAT-fs (loop1): Directory bread(block 72) failed [ 121.633460][ T7043] loop2: detected capacity change from 0 to 2048 [ 121.641092][ T7030] FAT-fs (loop1): Directory bread(block 73) failed [ 121.651985][ T7043] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.693315][ T7043] NILFS (loop2): mounting unchecked fs [ 121.712593][ T7043] NILFS (loop2): recovery required for readonly filesystem [ 121.736821][ T5235] udevd[5235]: incorrect nilfs2 checksum on /dev/loop2 [ 121.766465][ T7043] NILFS (loop2): write access will be enabled during recovery [ 121.780514][ T7043] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 121.805527][ T7043] NILFS (loop2): couldn't remount because the filesystem is in an incomplete recovery state [ 122.592753][ T7012] syz.3.704: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 122.611677][ T7012] CPU: 0 UID: 0 PID: 7012 Comm: syz.3.704 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 122.622167][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 122.632542][ T7012] Call Trace: [ 122.635864][ T7012] [ 122.638850][ T7012] dump_stack_lvl+0x241/0x360 [ 122.643700][ T7012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.649169][ T7012] ? __pfx__printk+0x10/0x10 [ 122.653835][ T7012] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 122.660404][ T7012] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 122.666970][ T7012] warn_alloc+0x278/0x410 [ 122.671424][ T7012] ? __pfx_warn_alloc+0x10/0x10 [ 122.676342][ T7012] ? vb2_vmalloc_alloc+0xf2/0x340 [ 122.681386][ T7012] ? __get_vm_area_node+0x23d/0x270 [ 122.686608][ T7012] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 122.692536][ T7012] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 122.698537][ T7012] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.704877][ T7012] ? vb2_vmalloc_alloc+0xf2/0x340 [ 122.709922][ T7012] ? __get_vm_area_node+0x23d/0x270 [ 122.715158][ T7012] __vmalloc_node_range_noprof+0x5bc/0x1400 [ 122.721069][ T7012] ? vb2_vmalloc_alloc+0xf2/0x340 [ 122.726129][ T7012] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.732470][ T7012] ? __kasan_kmalloc+0x98/0xb0 [ 122.737373][ T7012] ? vb2_vmalloc_alloc+0xb5/0x340 [ 122.742415][ T7012] vmalloc_user_noprof+0x74/0x80 [ 122.747378][ T7012] ? vb2_vmalloc_alloc+0xf2/0x340 [ 122.752420][ T7012] vb2_vmalloc_alloc+0xf2/0x340 [ 122.757289][ T7012] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 122.762758][ T7012] __vb2_queue_alloc+0xa0b/0x16f0 [ 122.767819][ T7012] vb2_core_create_bufs+0x825/0x1040 [ 122.773124][ T7012] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 122.778881][ T7012] ? __pfx___might_resched+0x10/0x10 [ 122.784181][ T7012] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 122.789757][ T7012] vb2_create_bufs+0x60e/0xdd0 [ 122.794535][ T7012] ? __pfx_vb2_create_bufs+0x10/0x10 [ 122.799829][ T7012] ? __mutex_lock+0x2ef/0xd70 [ 122.804549][ T7012] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 122.810475][ T7012] vb2_ioctl_create_bufs+0x2ba/0x400 [ 122.815801][ T7012] v4l_create_bufs+0x18b/0x2a0 [ 122.820622][ T7012] __video_do_ioctl+0xc26/0xde0 [ 122.825502][ T7012] ? __pfx___video_do_ioctl+0x10/0x10 [ 122.830914][ T7012] ? __might_fault+0xc6/0x120 [ 122.835611][ T7012] video_usercopy+0x89b/0x1180 [ 122.840405][ T7012] ? __pfx___video_do_ioctl+0x10/0x10 [ 122.845899][ T7012] ? __pfx_video_usercopy+0x10/0x10 [ 122.851141][ T7012] ? __fget_files+0x29/0x470 [ 122.855754][ T7012] ? __fget_files+0x3f6/0x470 [ 122.860447][ T7012] ? __fget_files+0x29/0x470 [ 122.865056][ T7012] v4l2_ioctl+0x18c/0x1e0 [ 122.869406][ T7012] ? __pfx_v4l2_ioctl+0x10/0x10 [ 122.874278][ T7012] __se_sys_ioctl+0xfc/0x170 [ 122.878890][ T7012] do_syscall_64+0xf3/0x230 [ 122.883412][ T7012] ? clear_bhb_loop+0x35/0x90 [ 122.888195][ T7012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.894109][ T7012] RIP: 0033:0x7fc342379e79 [ 122.898628][ T7012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.918443][ T7012] RSP: 002b:00007fc3430cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.926882][ T7012] RAX: ffffffffffffffda RBX: 00007fc342515f80 RCX: 00007fc342379e79 [ 122.934863][ T7012] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000003 [ 122.942845][ T7012] RBP: 00007fc3423e7916 R08: 0000000000000000 R09: 0000000000000000 [ 122.950848][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.958923][ T7012] R13: 0000000000000000 R14: 00007fc342515f80 R15: 00007ffc1ca1dab8 [ 122.966933][ T7012] [ 122.971591][ T7012] Mem-Info: [ 122.974747][ T7012] active_anon:6105 inactive_anon:0 isolated_anon:0 [ 122.974747][ T7012] active_file:1590 inactive_file:38194 isolated_file:0 [ 122.974747][ T7012] unevictable:768 dirty:300 writeback:0 [ 122.974747][ T7012] slab_reclaimable:8871 slab_unreclaimable:97976 [ 122.974747][ T7012] mapped:21606 shmem:2871 pagetables:850 [ 122.974747][ T7012] sec_pagetables:0 bounce:0 [ 122.974747][ T7012] kernel_misc_reclaimable:0 [ 122.974747][ T7012] free:1350240 free_pcp:2178 free_cma:0 [ 123.021059][ T7012] Node 0 active_anon:25360kB inactive_anon:0kB active_file:6360kB inactive_file:152660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86424kB dirty:1296kB writeback:4kB shmem:10920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10180kB pagetables:3372kB sec_pagetables:0kB all_unreclaimable? no [ 123.054440][ T7012] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 123.085557][ T7012] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.112961][ T7012] lowmem_reserve[]: 0 2559 2560 0 0 [ 123.118327][ T7012] Node 0 DMA32 free:1418632kB boost:0kB min:34992kB low:43740kB high:52488kB reserved_highatomic:0KB active_anon:32016kB inactive_anon:0kB active_file:6360kB inactive_file:151336kB unevictable:1536kB writepending:1300kB present:3129332kB managed:2648716kB mlocked:0kB bounce:0kB free_pcp:13492kB local_pcp:8176kB free_cma:0kB [ 123.149248][ T7012] lowmem_reserve[]: 0 0 1 0 0 [ 123.155593][ T7012] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 123.183022][ T7012] lowmem_reserve[]: 0 0 0 0 0 [ 123.187891][ T7012] Node 1 Normal free:3953472kB boost:0kB min:54892kB low:68612kB high:82332kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 123.215210][ T7045] loop0: detected capacity change from 0 to 40427 [ 123.217357][ T7012] lowmem_reserve[]: 0 0 0 0 0 [ 123.228587][ T7012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 123.241859][ T7012] Node 0 DMA32: 8*4kB (UE) 15*8kB (UE) 8*16kB (UE) 39*32kB (UME) 7*64kB (UME) 3*128kB (UE) 6*256kB (UME) 16*512kB (UME) 3*1024kB (M) 3*2048kB (M) 340*4096kB (M) = 1413944kB [ 123.262153][ T7012] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 123.274345][ T7012] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 5*16kB (UM) 9*32kB (UM) 11*64kB (UM) 7*128kB (UM) 6*256kB (UM) 7*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 962*4096kB (M) = 3953620kB [ 123.291732][ T7012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.309739][ T7012] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.319482][ T7012] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.329497][ T7012] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.339208][ T7045] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 123.348827][ T7012] 46546 total pagecache pages [ 123.353543][ T7012] 0 pages in swap cache [ 123.386040][ T7012] Free swap = 124996kB [ 123.390411][ T7012] Total swap = 124996kB [ 123.397270][ T7045] F2FS-fs (loop0): heap/no_heap options were deprecated [ 123.404930][ T7012] 2097051 pages RAM [ 123.410670][ T7045] F2FS-fs (loop0): invalid crc value [ 123.410705][ T7012] 0 pages HighMem/MovableOnly [ 123.423124][ T7045] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.458936][ T7012] 402894 pages reserved [ 123.474100][ T7012] 0 pages cma reserved [ 123.503360][ T7045] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.546822][ T7045] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 123.636036][ T51] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.834502][ T51] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 123.844193][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.881976][ T51] usb 3-1: config 0 descriptor?? [ 123.915130][ T51] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 123.925492][ T7058] loop1: detected capacity change from 0 to 32768 [ 123.941925][ T7058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.720 (7058) [ 124.003893][ T7058] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.049338][ T7058] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 124.087769][ T7058] BTRFS info (device loop1): using free-space-tree [ 124.309116][ T51] gspca_cpia1: usb_control_msg 03, error -71 [ 124.316366][ T51] gspca_cpia1: usb_control_msg 01, error -71 [ 124.322841][ T51] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 124.359836][ T51] usb 3-1: USB disconnect, device number 6 [ 124.564676][ T5227] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.588981][ T7103] loop4: detected capacity change from 0 to 8 [ 124.642424][ T7103] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 124.759249][ T7103] cramfs: Error -3 while decompressing! [ 124.816060][ T7103] cramfs: ffffffff950cd788(18)->ffff88805d349000(4096) [ 124.852386][ T7103] cramfs: Error -3 while decompressing! [ 124.903900][ T7103] cramfs: ffffffff950cd788(18)->ffff88805d349000(4096) [ 125.016678][ T29] audit: type=1800 audit(1724332853.150:13): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.735" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 125.279953][ T7117] loop3: detected capacity change from 0 to 512 [ 125.311253][ T7117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.326536][ T7117] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.423397][ T7117] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 125.481503][ T7117] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 125.546718][ T7117] EXT4-fs (loop3): 1 truncate cleaned up [ 125.553525][ T7117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.608421][ T7117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.056170][ T7115] loop2: detected capacity change from 0 to 40427 [ 126.078570][ T7115] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 126.136820][ T7115] F2FS-fs (loop2): heap/no_heap options were deprecated [ 126.202191][ T7115] F2FS-fs (loop2): invalid crc value [ 126.210051][ T7115] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.483016][ T7130] loop1: detected capacity change from 0 to 32768 [ 126.515136][ T7130] [ 126.515136][ T7130] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.515136][ T7130] [ 126.541322][ T7115] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.577616][ T7130] ialloc: diAlloc returned -5! [ 126.649166][ T7115] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 126.676375][ T5227] [ 126.676375][ T5227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.676375][ T5227] [ 126.708577][ T5227] [ 126.708577][ T5227] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.708577][ T5227] [ 127.877331][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.773'. [ 128.570267][ T7227] loop4: detected capacity change from 0 to 2048 [ 128.639696][ T7229] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.675484][ T7227] NILFS (loop4): failed to count free inodes: err=-34 [ 128.691888][ T7221] loop0: detected capacity change from 0 to 512 [ 128.796221][ T7221] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.786: corrupted in-inode xattr: bad e_name length [ 128.870101][ T7233] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 128.886491][ T7221] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.786: couldn't read orphan inode 15 (err -117) [ 128.947835][ T7221] EXT4-fs (loop0): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.214441][ T5230] EXT4-fs (loop0): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 129.303622][ T7198] loop1: detected capacity change from 0 to 32768 [ 129.327328][ T7198] XFS: ikeep mount option is deprecated. [ 129.343270][ T7228] loop3: detected capacity change from 0 to 32768 [ 129.583612][ T7249] loop4: detected capacity change from 0 to 256 [ 129.590226][ T7225] loop2: detected capacity change from 0 to 32768 [ 129.591444][ T7249] exfat: Deprecated parameter 'namecase' [ 129.602967][ T7249] exfat: Deprecated parameter 'utf8' [ 129.610020][ T7249] exfat: Deprecated parameter 'namecase' [ 129.615710][ T7249] exfat: Deprecated parameter 'utf8' [ 129.633361][ T7249] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 129.843192][ T7242] loop0: detected capacity change from 0 to 32768 [ 129.850452][ T7242] btrfs: Deprecated parameter 'usebackuproot' [ 129.856749][ T7242] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.872311][ T7225] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.790 (7225) [ 129.931257][ T7198] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.998214][ T7242] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.794 (7242) [ 130.011414][ T7225] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.022340][ T7225] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 130.031711][ T7225] BTRFS info (device loop2): using free-space-tree [ 130.114923][ T7242] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 130.131679][ T7198] XFS (loop1): Ending clean mount [ 130.143842][ T7242] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 130.156039][ T7198] XFS (loop1): Quotacheck needed: Please wait. [ 130.184380][ T7242] BTRFS info (device loop0): disk space caching is enabled [ 130.228630][ T7198] XFS (loop1): Quotacheck: Done. [ 130.246212][ T7242] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 130.394751][ T79] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 130.475500][ T5227] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.505038][ T7242] BTRFS error (device loop0): failed to load root extent [ 130.514175][ T7242] BTRFS warning (device loop0): try to load backup roots slot 1 [ 130.559449][ T5242] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.676904][ T7242] BTRFS info (device loop0 state M): disabling free space tree [ 130.752672][ T7242] BTRFS info (device loop0 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.775289][ T7242] BTRFS info (device loop0 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.932320][ T7242] BTRFS info (device loop0 state M): use compression, level 0 [ 131.160158][ T5230] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 131.689731][ T7330] capability: warning: `syz.2.818' uses deprecated v2 capabilities in a way that may be insecure [ 131.918736][ T7336] loop4: detected capacity change from 0 to 1024 [ 132.180613][ T7346] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 132.191427][ T79] hfsplus: b-tree write err: -5, ino 4 [ 132.314769][ T7313] loop3: detected capacity change from 0 to 32768 [ 132.430936][ T7357] netlink: 'syz.1.829': attribute type 21 has an invalid length. [ 132.552700][ T7313] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.580976][ T7366] netlink: 'syz.0.830': attribute type 23 has an invalid length. [ 132.763160][ T7313] XFS (loop3): Ending clean mount [ 132.801011][ T7313] XFS (loop3): Quotacheck needed: Please wait. [ 132.883435][ T7378] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.841'. [ 132.951877][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.958920][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.126432][ T7385] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 133.213556][ T7313] XFS (loop3): Quotacheck: Done. [ 133.325380][ T5238] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.531988][ T7377] loop4: detected capacity change from 0 to 32768 [ 133.585363][ T7377] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.839 (7377) [ 133.613215][ T7403] process 'syz.2.853' launched './file0' with NULL argv: empty string added [ 133.668565][ T7377] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.711068][ T7400] nvme_fabrics: missing parameter 'transport=%s' [ 133.738949][ T7400] nvme_fabrics: missing parameter 'nqn=%s' [ 133.749775][ T7377] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 133.775616][ T7377] BTRFS info (device loop4): using free-space-tree [ 133.876549][ T7377] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.908631][ T5284] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.131005][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 134.187987][ T5284] usb 1-1: config 253 has an invalid interface number: 157 but max is 3 [ 134.213697][ T5284] usb 1-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 134.239258][ T7430] kAFS: unparsable volume name [ 134.250031][ T5284] usb 1-1: config 253 has an invalid interface number: 213 but max is 3 [ 134.276651][ T5284] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 134.308485][ T5284] usb 1-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 134.355477][ T5284] usb 1-1: config 253 has no interface number 0 [ 134.375791][ T5284] usb 1-1: config 253 has no interface number 1 [ 134.396260][ T5284] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 134.415514][ T5284] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 134.469322][ T5284] usb 1-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 134.516505][ T5284] usb 1-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 134.551020][ T7442] netlink: 'syz.1.861': attribute type 13 has an invalid length. [ 134.576079][ T5284] usb 1-1: config 253 interface 157 has no altsetting 0 [ 134.610408][ T5284] usb 1-1: config 253 interface 213 has no altsetting 0 [ 134.923471][ T7436] loop4: detected capacity change from 0 to 32768 [ 134.968070][ T7436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.860 (7436) [ 134.996107][ T5284] usb 1-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 135.021397][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.030263][ T5284] usb 1-1: Product: syz [ 135.035141][ T5284] usb 1-1: Manufacturer: syz [ 135.046500][ T5284] usb 1-1: SerialNumber: syz [ 135.124249][ T7436] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.156185][ T7436] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 135.164999][ T7436] BTRFS info (device loop4): using free-space-tree [ 135.183057][ T7448] loop2: detected capacity change from 0 to 4096 [ 135.301026][ T5284] r8712u: register rtl8712_netdev_ops to netdev_ops [ 135.308692][ T5284] usb 1-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 135.323269][ T5284] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 135.340683][ T5284] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 135.352384][ T5284] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 135.524768][ T5284] usb 1-1: Found UVC 0.00 device syz (0b05:1791) [ 135.585580][ T5284] usb 1-1: No valid video chain found. [ 135.602121][ T5284] r8712u: register rtl8712_netdev_ops to netdev_ops [ 135.619650][ T5284] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 135.682955][ T5284] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 135.691161][ T5284] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 135.711126][ T5284] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 135.889386][ T5284] usb 1-1: USB disconnect, device number 8 [ 136.007563][ T5228] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.694114][ T7518] loop0: detected capacity change from 0 to 2048 [ 136.858104][ T7529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.035656][ T7518] NILFS (loop0): failed to count free inodes: err=-34 [ 137.216048][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.406057][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 137.414207][ T9] usb 2-1: config 253 has an invalid interface number: 157 but max is 3 [ 137.450097][ T9] usb 2-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 137.464227][ T9] usb 2-1: config 253 has an invalid interface number: 213 but max is 3 [ 137.472922][ T9] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 137.483607][ T9] usb 2-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 137.493945][ T9] usb 2-1: config 253 has no interface number 0 [ 137.501189][ T9] usb 2-1: config 253 has no interface number 1 [ 137.507946][ T9] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 137.519385][ T9] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 137.530776][ T9] usb 2-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 137.541871][ T9] usb 2-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 137.555347][ T9] usb 2-1: config 253 interface 157 has no altsetting 0 [ 137.562426][ T9] usb 2-1: config 253 interface 213 has no altsetting 0 [ 137.602538][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 137.633857][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.646177][ T9] usb 2-1: Product: syz [ 137.650681][ T9] usb 2-1: Manufacturer: syz [ 137.655322][ T9] usb 2-1: SerialNumber: syz [ 137.794410][ T5280] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.896465][ T9] r8712u: register rtl8712_netdev_ops to netdev_ops [ 137.909648][ T9] usb 2-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 137.927986][ T9] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 137.934706][ T9] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 137.956864][ T9] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 138.005780][ T9] usb 2-1: Found UVC 0.00 device syz (0b05:1791) [ 138.017841][ T9] usb 2-1: No valid video chain found. [ 138.027799][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.046966][ T5280] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 138.076530][ T9] r8712u: register rtl8712_netdev_ops to netdev_ops [ 138.092818][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.124514][ T9] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 138.153035][ T5280] usb 4-1: config 0 descriptor?? [ 138.176069][ T9] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 138.207339][ T9] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 138.214959][ T9] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 138.306190][ T9] usb 2-1: USB disconnect, device number 4 [ 138.406710][ T5280] ath6kl: Failed to submit usb control message: -71 [ 138.414410][ T5280] ath6kl: unable to send the bmi data to the device: -71 [ 138.422584][ T5280] ath6kl: Unable to send get target info: -71 [ 138.439352][ T5280] ath6kl: Failed to init ath6kl core: -71 [ 138.447971][ T5280] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 138.526210][ T5280] usb 4-1: USB disconnect, device number 7 [ 138.630386][ T7586] loop2: detected capacity change from 0 to 8192 [ 138.645839][ T7586] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.667468][ T7588] netlink: 'syz.4.912': attribute type 8 has an invalid length. [ 138.695711][ T7590] loop1: detected capacity change from 0 to 2048 [ 138.940636][ T7566] loop0: detected capacity change from 0 to 32768 [ 138.947964][ T7566] XFS: ikeep mount option is deprecated. [ 138.954109][ T7566] XFS: ikeep mount option is deprecated. [ 138.964345][ T7596] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.010363][ T7590] NILFS (loop1): failed to count free inodes: err=-34 [ 139.090188][ T7566] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.350086][ T7566] XFS (loop0): Ending clean mount [ 139.506964][ T5230] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.676638][ T5284] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.890780][ T7592] loop4: detected capacity change from 0 to 32768 [ 139.903270][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 139.911710][ T5284] usb 2-1: config 0 has an invalid interface descriptor of length 3, skipping [ 139.933007][ T5284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.985748][ T5284] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.989538][ T7627] loop0: detected capacity change from 0 to 4096 [ 139.996404][ T5239] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.010514][ T5284] usb 2-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=c0.7b [ 140.021107][ T7592] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.031047][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.047114][ T5284] usb 2-1: config 0 descriptor?? [ 140.079019][ T7592] XFS (loop4): Ending clean mount [ 140.173335][ T5228] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.206708][ T5239] usb 3-1: Using ep0 maxpacket: 16 [ 140.238498][ T5239] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 140.248239][ T5239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.256783][ T5239] usb 3-1: Product: syz [ 140.260994][ T5239] usb 3-1: Manufacturer: syz [ 140.265625][ T5239] usb 3-1: SerialNumber: syz [ 140.289769][ T5239] usb 3-1: config 0 descriptor?? [ 140.295623][ T51] usb 2-1: USB disconnect, device number 5 [ 140.307534][ T5239] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 140.727979][ T5239] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 140.735847][ T5239] visor 3-1:0.0: probe with driver visor failed with error -71 [ 140.752326][ T5239] usb 3-1: USB disconnect, device number 7 [ 140.819134][ T7651] loop0: detected capacity change from 0 to 512 [ 140.876643][ T7651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.900283][ T7651] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.911882][ T7653] loop4: detected capacity change from 0 to 256 [ 140.927386][ T7651] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002] [ 140.954976][ T7651] System zones: 0-2, 18-18, 34-34 [ 141.025095][ T7651] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 141.146208][ T7651] EXT4-fs (loop0): 1 truncate cleaned up [ 141.156815][ T7651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.210263][ T7651] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 13: comm syz.0.931: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 141.238423][ T7651] EXT4-fs (loop0): Remounting filesystem read-only [ 141.245023][ T7651] EXT4-fs warning (device loop0): ext4_empty_dir:3096: inode #12: comm syz.0.931: directory missing '.' [ 141.296324][ T7645] loop3: detected capacity change from 0 to 32768 [ 141.336723][ T7645] btrfs: Deprecated parameter 'usebackuproot' [ 141.342877][ T7645] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.362498][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.427616][ T7645] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.929 (7645) [ 141.542538][ T7645] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 141.571467][ T7645] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 141.604777][ T7645] BTRFS info (device loop3): disk space caching is enabled [ 141.626251][ T7645] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 141.666381][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.772375][ T2991] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xab36da95f7d629ca8cc302fd0fd3c25f2e0c358a27b6cae5b3699304a6c15a5c level 0 [ 141.814390][ T7645] BTRFS error (device loop3): failed to load root extent [ 141.825589][ T7645] BTRFS warning (device loop3): try to load backup roots slot 1 [ 141.924770][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 141.941276][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 142.006137][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.074962][ T9] usb 5-1: Product: syz [ 142.083044][ T9] usb 5-1: Manufacturer: syz [ 142.090873][ T7645] BTRFS info (device loop3 state M): disabling free space tree [ 142.099405][ T9] usb 5-1: SerialNumber: syz [ 142.105282][ T7645] BTRFS info (device loop3 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.116593][ T7645] BTRFS info (device loop3 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.230844][ T9] usb 5-1: config 0 descriptor?? [ 142.256333][ T7645] BTRFS info (device loop3 state M): use compression, level 0 [ 142.395786][ T7674] loop0: detected capacity change from 0 to 32768 [ 142.469187][ T7674] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.487219][ T5238] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 142.710378][ T9] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 142.719681][ T9] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 142.901099][ T7721] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.007723][ T7674] XFS (loop0): Ending clean mount [ 143.048591][ T9] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 143.102992][ T7674] XFS (loop0): Quotacheck needed: Please wait. [ 143.116196][ T9] usb 5-1: USB disconnect, device number 5 [ 143.232471][ T7733] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 143.246398][ T7674] XFS (loop0): Quotacheck: Done. [ 143.469462][ T5230] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.522727][ T7742] dvmrp0: entered allmulticast mode [ 143.735280][ T7751] netlink: 199356 bytes leftover after parsing attributes in process `syz.1.969'. [ 144.567720][ T7765] loop2: detected capacity change from 0 to 32768 [ 144.595191][ T7765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.977 (7765) [ 144.638991][ T7765] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.649590][ T7765] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 144.659362][ T7765] BTRFS info (device loop2): using free-space-tree [ 144.913213][ T7765] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 145.081896][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.086571][ T7805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.285602][ T29] audit: type=1326 audit(1724332873.420:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0241d79e79 code=0x7ffc0000 [ 145.297577][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 145.325320][ T25] usb 4-1: config 253 has an invalid interface number: 157 but max is 3 [ 145.342798][ T29] audit: type=1326 audit(1724332873.420:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0241d79e79 code=0x7ffc0000 [ 145.355086][ T25] usb 4-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 145.434318][ T29] audit: type=1326 audit(1724332873.480:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f0241d79e79 code=0x7ffc0000 [ 145.457539][ T25] usb 4-1: config 253 has an invalid interface number: 213 but max is 3 [ 145.484526][ T25] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 145.510979][ T25] usb 4-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 145.533520][ T25] usb 4-1: config 253 has no interface number 0 [ 145.546084][ T25] usb 4-1: config 253 has no interface number 1 [ 145.566044][ T25] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 145.586501][ T25] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 145.605067][ T25] usb 4-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 145.618893][ T25] usb 4-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 145.618935][ T25] usb 4-1: config 253 interface 157 has no altsetting 0 [ 145.618958][ T25] usb 4-1: config 253 interface 213 has no altsetting 0 [ 145.632149][ T29] audit: type=1326 audit(1724332873.480:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0241d79e79 code=0x7ffc0000 [ 145.632194][ T29] audit: type=1326 audit(1724332873.480:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7806 comm="syz.1.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0241d79e79 code=0x7ffc0000 [ 145.638575][ T25] usb 4-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 145.638613][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.638638][ T25] usb 4-1: Product: syz [ 145.638657][ T25] usb 4-1: Manufacturer: syz [ 145.638676][ T25] usb 4-1: SerialNumber: syz [ 145.686599][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'. [ 145.859065][ T7830] netlink: 'syz.2.999': attribute type 10 has an invalid length. [ 145.975294][ T25] r8712u: register rtl8712_netdev_ops to netdev_ops [ 145.991600][ T7834] netlink: 'syz.4.1001': attribute type 3 has an invalid length. [ 145.999559][ T25] usb 4-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 145.999884][ T7830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.999'. [ 146.015233][ T25] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 146.028359][ T25] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 146.036446][ T7830] team0: entered promiscuous mode [ 146.040815][ T25] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 146.050714][ T7830] team_slave_0: entered promiscuous mode [ 146.062233][ T7834] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1001'. [ 146.080722][ T7830] team_slave_1: entered promiscuous mode [ 146.080870][ T25] usb 4-1: Found UVC 0.00 device syz (0b05:1791) [ 146.102525][ T7830] team0: entered allmulticast mode [ 146.108271][ T25] usb 4-1: No valid video chain found. [ 146.114352][ T25] r8712u: register rtl8712_netdev_ops to netdev_ops [ 146.121717][ T7830] team_slave_0: entered allmulticast mode [ 146.128459][ T25] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 146.135116][ T7830] team_slave_1: entered allmulticast mode [ 146.143125][ T25] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 146.162092][ T7830] bridge0: port 3(team0) entered blocking state [ 146.171305][ T25] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 146.183952][ T7830] bridge0: port 3(team0) entered disabled state [ 146.193121][ T25] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 146.199615][ T7830] bridge0: port 3(team0) entered blocking state [ 146.207898][ T7830] bridge0: port 3(team0) entered forwarding state [ 146.229144][ T25] usb 4-1: USB disconnect, device number 8 [ 147.127008][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.405714][ T7891] netlink: 'syz.3.1029': attribute type 11 has an invalid length. [ 147.433249][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.443778][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 147.454973][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.474377][ T25] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.562723][ T25] usb 2-1: config 1 interface 1 has no altsetting 0 [ 147.618446][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.628506][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.651376][ T25] usb 2-1: Product: syz [ 147.655760][ T25] usb 2-1: Manufacturer: syz [ 147.708157][ T25] usb 2-1: SerialNumber: syz [ 147.808586][ T7907] loop3: detected capacity change from 0 to 256 [ 147.971473][ T25] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 147.988252][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 148.092420][ T25] usb 2-1: USB disconnect, device number 6 [ 148.183512][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.399480][ T7920] loop4: detected capacity change from 0 to 4096 [ 148.420584][ T7920] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 148.596129][ T7920] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 148.866450][ T1174] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.893731][ T7941] netlink: 'syz.1.1052': attribute type 4 has an invalid length. [ 149.048633][ T1174] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.065989][ T1174] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 149.075191][ T1174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.147125][ T1174] usb 4-1: config 0 descriptor?? [ 149.158582][ T1174] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 149.193133][ T1174] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 149.223639][ T1174] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 149.241232][ T1174] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 149.404960][ T1174] usb 4-1: USB disconnect, device number 9 [ 149.550318][ T7922] loop0: detected capacity change from 0 to 40427 [ 149.566657][ T7922] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 149.621646][ T7922] F2FS-fs (loop0): Found nat_bits in checkpoint [ 149.746749][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.763191][ T7922] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.913170][ T7976] loop1: detected capacity change from 0 to 512 [ 149.956555][ T7976] EXT4-fs (loop1): Test dummy encryption mode enabled [ 149.959349][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 149.973410][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 149.983925][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 149.994749][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 150.004703][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 150.013829][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.049662][ T8] usb 5-1: config 0 descriptor?? [ 150.092190][ T7976] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 150.104580][ T7976] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1068: attempt to clear invalid blocks 2 len 1 [ 150.132551][ T7976] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 150.155274][ T7976] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1068: invalid indirect mapped block 1819239214 (level 0) [ 150.219247][ T7976] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1068: invalid indirect mapped block 1819239214 (level 1) [ 150.269610][ T7976] EXT4-fs (loop1): 1 truncate cleaned up [ 150.280570][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.304138][ T8] hdpvr 5-1:0.0: firmware version 0x15 dated mҝR( ry|A3je{)7}-S8N [ 150.361703][ T7976] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 150.484930][ T7974] loop2: detected capacity change from 0 to 32768 [ 150.548702][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.604909][ T8] hdpvr 5-1:0.0: device init failed [ 150.611027][ T8] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 150.623788][ T8] usb 5-1: USB disconnect, device number 6 [ 150.648272][ T7974] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.960185][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 150.977843][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1079'. [ 151.010985][ T7974] XFS (loop2): Ending clean mount [ 151.123226][ T5242] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.605722][ T8025] loop3: detected capacity change from 0 to 8192 [ 151.626574][ T8025] REISERFS warning (device loop3): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 151.718018][ T8037] ip6t_srh: unknown srh invflags 7D00 [ 151.756374][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.980522][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.001410][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 152.022723][ T8] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.043459][ T8] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.057167][ T8] usb 1-1: config 1 interface 1 has no altsetting 0 [ 152.084756][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.094004][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.102405][ T8] usb 1-1: Product: syz [ 152.106907][ T8] usb 1-1: Manufacturer: syz [ 152.112419][ T8] usb 1-1: SerialNumber: syz [ 152.127864][ T8051] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 152.196247][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.210101][ T8055] loop2: detected capacity change from 0 to 16 [ 152.264925][ T8055] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.293003][ T8055] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 152.309619][ T8055] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 152.356066][ T8055] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 152.405560][ T8059] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 152.420014][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 152.445277][ T8] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 152.446494][ T8059] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.455996][ T8] usb 1-1: MIDIStreaming interface descriptor not found [ 152.468176][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.492228][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.530161][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.566802][ T8] usb 1-1: USB disconnect, device number 9 [ 152.575961][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 152.626075][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.635291][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 152.685582][ T9] usb 5-1: SerialNumber: syz [ 152.725431][ T5229] udevd[5229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.021096][ T8] usb 5-1: USB disconnect, device number 7 [ 153.103410][ T8079] loop2: detected capacity change from 0 to 128 [ 153.164385][ T8079] befs: (loop2): invalid magic header [ 153.341678][ T8090] netlink: 'syz.2.1117': attribute type 21 has an invalid length. [ 153.368079][ T8090] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.376762][ T8090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.384013][ T8090] IPv6: NLM_F_CREATE should be set when creating new route [ 153.391371][ T8090] IPv6: NLM_F_CREATE should be set when creating new route [ 153.398673][ T8090] IPv6: NLM_F_CREATE should be set when creating new route [ 153.461801][ T8093] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1119'. [ 153.558053][ T8091] loop3: detected capacity change from 0 to 4096 [ 153.605006][ T8091] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 153.784127][ T8109] binder: 8107:8109 ioctl c018620c 200013c0 returned -22 [ 154.021485][ T8091] ntfs3: loop3: failed to convert "c46c" to maccyrillic [ 154.027101][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.059546][ T8120] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 154.145148][ T8122] netlink: 'syz.0.1132': attribute type 32 has an invalid length. [ 154.228633][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.259254][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 154.271902][ T8126] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1135'. [ 154.318444][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 154.329293][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.345680][ T8] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.359065][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1135'. [ 154.393654][ T8130] loop0: detected capacity change from 0 to 512 [ 154.407417][ T8] usb 3-1: config 1 interface 1 has no altsetting 0 [ 154.428298][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.431738][ T8130] EXT4-fs (loop0): DAX unsupported by block device. [ 154.446001][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.454081][ T8] usb 3-1: Product: syz [ 154.462140][ T8] usb 3-1: Manufacturer: syz [ 154.516344][ T8] usb 3-1: SerialNumber: syz [ 154.751122][ T8] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 154.764294][ T8] usb 3-1: MIDIStreaming interface descriptor not found [ 154.852562][ T8] usb 3-1: USB disconnect, device number 8 [ 154.986565][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.046522][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.181295][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 155.196031][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 155.236504][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.244630][ T9] usb 5-1: Product: syz [ 155.246097][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 155.255990][ T9] usb 5-1: Manufacturer: syz [ 155.267082][ T9] usb 5-1: SerialNumber: syz [ 155.282060][ T25] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 155.291561][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.298289][ T9] usb 5-1: config 0 descriptor?? [ 155.306637][ T25] usb 2-1: Product: syz [ 155.310892][ T25] usb 2-1: Manufacturer: syz [ 155.347333][ T25] usb 2-1: SerialNumber: syz [ 155.353202][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 155.361970][ T8130] loop0: detected capacity change from 0 to 32768 [ 155.362332][ T25] usb 2-1: config 0 descriptor?? [ 155.396798][ T25] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 155.410541][ T8130] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section errors: entry with count 0 (id clean_but_journal_not_empty) [ 155.410541][ T8130] errors (size 64): [ 155.410541][ T8130] clean_but_journal_not_empty 0 0 [ 155.410541][ T8130] (unknown error 25442) 133476496583272 12315680807489264408 [ 155.410541][ T8130] (unknown error 55044) 248102311844487 202532834100012515 [ 155.410541][ T8130] [ 155.535514][ T8157] ip6t_srh: unknown srh invflags 7D00 [ 155.555656][ T8130] bcachefs: bch2_fs_get_tree() error: invalid_sb_errors [ 155.740314][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 155.750382][ T9] gspca_sn9c20x: Device initialization failed [ 155.757247][ T9] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 155.776925][ T9] usb 5-1: USB disconnect, device number 8 [ 155.803029][ T25] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 155.828878][ T25] visor 2-1:0.0: probe with driver visor failed with error -71 [ 155.942039][ T25] usb 2-1: USB disconnect, device number 7 [ 156.782076][ T8200] loop1: detected capacity change from 0 to 2048 [ 156.911366][ T8200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.322939][ T8189] loop0: detected capacity change from 0 to 32768 [ 157.364166][ T8217] tmpfs: Bad value for 'mpol' [ 157.385733][ T8221] loop2: detected capacity change from 0 to 256 [ 157.525143][ T8221] FAT-fs (loop2): Directory bread(block 64) failed [ 157.533409][ T8221] FAT-fs (loop2): Directory bread(block 65) failed [ 157.596372][ T8221] FAT-fs (loop2): Directory bread(block 66) failed [ 157.606040][ T8221] FAT-fs (loop2): Directory bread(block 67) failed [ 157.641319][ T8221] FAT-fs (loop2): Directory bread(block 68) failed [ 157.683613][ T8221] FAT-fs (loop2): Directory bread(block 69) failed [ 157.713555][ T8221] FAT-fs (loop2): Directory bread(block 70) failed [ 157.774153][ T8221] FAT-fs (loop2): Directory bread(block 71) failed [ 157.785867][ T8221] FAT-fs (loop2): Directory bread(block 72) failed [ 157.804212][ T8221] FAT-fs (loop2): Directory bread(block 73) failed [ 158.050669][ T8249] netlink: 'syz.4.1197': attribute type 7 has an invalid length. [ 158.060823][ T8249] netlink: 'syz.4.1197': attribute type 8 has an invalid length. [ 158.179057][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.187008][ T8254] tc_dump_action: action bad kind [ 158.300703][ T8256] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1199'. [ 158.352004][ T8259] loop1: detected capacity change from 0 to 256 [ 158.379865][ T9] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 158.391725][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.432046][ T8259] FAT-fs (loop1): Directory bread(block 64) failed [ 158.453638][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1202'. [ 158.466571][ T8259] FAT-fs (loop1): Directory bread(block 65) failed [ 158.473284][ T8259] FAT-fs (loop1): Directory bread(block 66) failed [ 158.501927][ T9] usb 4-1: config 0 descriptor?? [ 158.506292][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1202'. [ 158.525037][ T9] gspca_main: spca505-2.14.0 probing 0733:0430 [ 158.532513][ T8259] FAT-fs (loop1): Directory bread(block 67) failed [ 158.556157][ T8259] FAT-fs (loop1): Directory bread(block 68) failed [ 158.573577][ T8259] FAT-fs (loop1): Directory bread(block 69) failed [ 158.586419][ T8259] FAT-fs (loop1): Directory bread(block 70) failed [ 158.597606][ T8266] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1188'. [ 158.614111][ T8259] FAT-fs (loop1): Directory bread(block 71) failed [ 158.621411][ T8266] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 158.633168][ T8259] FAT-fs (loop1): Directory bread(block 72) failed [ 158.663025][ T8259] FAT-fs (loop1): Directory bread(block 73) failed [ 158.840902][ T8268] loop4: detected capacity change from 0 to 4096 [ 158.874812][ T8268] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 158.950224][ T9] gspca_spca505: reg write: error -71 [ 158.955778][ T9] spca505 4-1:0.0: probe with driver spca505 failed with error -5 [ 158.969263][ T9] usb 4-1: USB disconnect, device number 10 [ 159.058184][ T8268] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 159.494688][ T8300] xt_hashlimit: invalid rate [ 159.692170][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'. [ 159.872370][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 160.080929][ T8326] netlink: 'syz.1.1231': attribute type 7 has an invalid length. [ 160.107352][ T8332] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 160.136055][ T8332] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1235'. [ 160.147961][ T8332] nbd: couldn't find device at index 131082 [ 160.498421][ T8331] loop2: detected capacity change from 0 to 32768 [ 160.518454][ T8331] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1234 (8331) [ 160.580504][ T8346] cgroup: name respecified [ 160.598481][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1243'. [ 160.902323][ T8362] netlink: 'syz.1.1249': attribute type 2 has an invalid length. [ 160.946447][ T8362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1249'. [ 160.952089][ T8331] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.033877][ T8331] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 161.061088][ T8331] BTRFS info (device loop2): using free-space-tree [ 161.072084][ T8369] loop4: detected capacity change from 0 to 256 [ 161.149551][ T8379] tmpfs: Bad value for 'mpol' [ 161.163343][ T8369] FAT-fs (loop4): Directory bread(block 64) failed [ 161.195841][ T8369] FAT-fs (loop4): Directory bread(block 65) failed [ 161.202664][ T8369] FAT-fs (loop4): Directory bread(block 66) failed [ 161.335075][ T8369] FAT-fs (loop4): Directory bread(block 67) failed [ 161.356428][ T8369] FAT-fs (loop4): Directory bread(block 68) failed [ 161.363041][ T8369] FAT-fs (loop4): Directory bread(block 69) failed [ 161.369793][ T8369] FAT-fs (loop4): Directory bread(block 70) failed [ 161.394391][ T8369] FAT-fs (loop4): Directory bread(block 71) failed [ 161.403395][ T8394] loop0: detected capacity change from 0 to 64 [ 161.437300][ T8369] FAT-fs (loop4): Directory bread(block 72) failed [ 161.445041][ T8369] FAT-fs (loop4): Directory bread(block 73) failed [ 161.806329][ T5242] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.060067][ T8418] IPv6: sit2: Disabled Multicast RS [ 162.825114][ T8452] netlink: 'syz.2.1284': attribute type 3 has an invalid length. [ 162.833097][ T8451] loop0: detected capacity change from 0 to 64 [ 162.863606][ T8452] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1284'. [ 163.056074][ T8465] netlink: 'syz.1.1293': attribute type 2 has an invalid length. [ 163.138009][ T8467] loop0: detected capacity change from 0 to 256 [ 163.243932][ T8471] ieee802154 phy0 wpan0: encryption failed: -90 [ 163.301786][ T8467] FAT-fs (loop0): Directory bread(block 64) failed [ 163.308798][ T8467] FAT-fs (loop0): Directory bread(block 65) failed [ 163.315419][ T8467] FAT-fs (loop0): Directory bread(block 66) failed [ 163.322166][ T8467] FAT-fs (loop0): Directory bread(block 67) failed [ 163.329145][ T8467] FAT-fs (loop0): Directory bread(block 68) failed [ 163.336067][ T8467] FAT-fs (loop0): Directory bread(block 69) failed [ 163.342707][ T8467] FAT-fs (loop0): Directory bread(block 70) failed [ 163.349730][ T8467] FAT-fs (loop0): Directory bread(block 71) failed [ 163.356699][ T8467] FAT-fs (loop0): Directory bread(block 72) failed [ 163.363572][ T8467] FAT-fs (loop0): Directory bread(block 73) failed [ 163.423207][ T29] audit: type=1326 audit(1724332891.560:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc342379e79 code=0x7ffc0000 [ 163.473386][ T8483] netlink: 'syz.3.1302': attribute type 6 has an invalid length. [ 163.481548][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1302'. [ 163.482439][ T29] audit: type=1326 audit(1724332891.560:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc342379e79 code=0x7ffc0000 [ 163.624493][ T8485] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1305'. [ 163.646326][ T8488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1303'. [ 163.723000][ T29] audit: type=1326 audit(1724332891.560:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fc342379e79 code=0x7ffc0000 [ 163.745681][ T29] audit: type=1326 audit(1724332891.560:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc342379e79 code=0x7ffc0000 [ 163.768212][ T29] audit: type=1326 audit(1724332891.560:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.3.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc342379e79 code=0x7ffc0000 [ 164.081900][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1315'. [ 164.146245][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1315'. [ 164.456342][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.576295][ T8533] netlink: 'syz.2.1326': attribute type 7 has an invalid length. [ 164.584103][ T8533] netlink: 'syz.2.1326': attribute type 8 has an invalid length. [ 164.584247][ T8534] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 164.623595][ T8534] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1327'. [ 164.637047][ T8534] nbd: couldn't find device at index 131082 [ 164.647465][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 164.656893][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 164.666513][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.674642][ T9] usb 4-1: Product: syz [ 164.688880][ T8538] netlink: 'syz.1.1329': attribute type 30 has an invalid length. [ 164.706638][ T9] usb 4-1: Manufacturer: syz [ 164.716400][ T9] usb 4-1: SerialNumber: syz [ 164.743607][ T9] usb 4-1: config 0 descriptor?? [ 164.779247][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 164.999028][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 165.046238][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 165.213917][ T9] gspca_sn9c20x: Write register 1001 failed -71 [ 165.242827][ T9] gspca_sn9c20x: Device initialization failed [ 165.256479][ T9] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 165.308690][ T9] usb 4-1: USB disconnect, device number 11 [ 165.325762][ T8562] loop2: detected capacity change from 0 to 256 [ 165.397697][ T8562] FAT-fs (loop2): Directory bread(block 64) failed [ 165.415279][ T8562] FAT-fs (loop2): Directory bread(block 65) failed [ 165.432407][ T8562] FAT-fs (loop2): Directory bread(block 66) failed [ 165.457910][ T8562] FAT-fs (loop2): Directory bread(block 67) failed [ 165.493168][ T8562] FAT-fs (loop2): Directory bread(block 68) failed [ 165.513346][ T8562] FAT-fs (loop2): Directory bread(block 69) failed [ 165.550893][ T8562] FAT-fs (loop2): Directory bread(block 70) failed [ 165.569864][ T8562] FAT-fs (loop2): Directory bread(block 71) failed [ 165.590646][ T8562] FAT-fs (loop2): Directory bread(block 72) failed [ 165.603162][ T8562] FAT-fs (loop2): Directory bread(block 73) failed [ 165.837236][ T8583] xt_TCPMSS: Only works on TCP SYN packets [ 166.586840][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 166.797941][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 166.818362][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 166.846029][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.854095][ T25] usb 3-1: Product: syz [ 166.876141][ T25] usb 3-1: Manufacturer: syz [ 166.881411][ T25] usb 3-1: SerialNumber: syz [ 166.895145][ T8635] netlink: 'syz.3.1375': attribute type 21 has an invalid length. [ 166.914151][ T25] usb 3-1: config 0 descriptor?? [ 166.936392][ T8635] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 166.943344][ T25] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 166.971717][ T8635] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1375'. [ 167.353708][ T25] gspca_sn9c20x: Write register 1001 failed -71 [ 167.389995][ T25] gspca_sn9c20x: Device initialization failed [ 167.409017][ T25] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 167.436384][ T25] usb 3-1: USB disconnect, device number 9 [ 167.512343][ T8657] netlink: 'syz.0.1385': attribute type 4 has an invalid length. [ 167.591540][ T8661] xt_TCPMSS: Only works on TCP SYN packets [ 168.111638][ T8683] i2c i2c-0: Invalid block write size 34 [ 168.165097][ T8690] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1403'. [ 168.431428][ T8704] Option 'TXƮ' to dns_resolver key: bad/missing value [ 168.596775][ T8712] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1413'. [ 168.827336][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1417'. [ 168.856095][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'. [ 168.996224][ T8727] loop2: detected capacity change from 0 to 256 [ 169.099583][ T8727] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 169.159661][ T8727] exFAT-fs (loop2): error, in sector 160, dentry 12 should be unused, but 0x85 [ 169.549679][ T8733] loop1: detected capacity change from 0 to 32768 [ 169.850732][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 169.955498][ T8733] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 169.982512][ T8701] loop4: detected capacity change from 0 to 32768 [ 170.014035][ T8701] XFS: ikeep mount option is deprecated. [ 170.197831][ T8780] loop3: detected capacity change from 0 to 128 [ 170.332334][ T8780] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 170.379141][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.379141][ T8780] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 170.439556][ T8780] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 170.460587][ T8778] loop2: detected capacity change from 0 to 32768 [ 170.477837][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.477837][ T8780] loop3: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 170.486111][ T8778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1439 (8778) [ 170.502495][ T8701] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.513780][ T8733] XFS (loop1): Ending clean mount [ 170.549040][ T8780] Buffer I/O error on dev loop3, logical block 8833403, async page read [ 170.558033][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.558033][ T8780] loop3: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 170.596683][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1443'. [ 170.623480][ T5227] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 170.630569][ T8780] Buffer I/O error on dev loop3, logical block 13269809, async page read [ 170.668311][ T8790] loop0: detected capacity change from 0 to 64 [ 170.690100][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.690100][ T8780] loop3: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 170.716040][ T8778] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.726665][ T8778] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 170.735407][ T8778] BTRFS info (device loop2): using free-space-tree [ 170.743629][ T8780] Buffer I/O error on dev loop3, logical block 8073606, async page read [ 170.753131][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.753131][ T8780] loop3: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 170.767339][ T8780] Buffer I/O error on dev loop3, logical block 3245771, async page read [ 170.779982][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.779982][ T8780] loop3: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 170.794233][ T8780] Buffer I/O error on dev loop3, logical block 8834171, async page read [ 170.803064][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.803064][ T8780] loop3: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 170.827860][ T8780] Buffer I/O error on dev loop3, logical block 13466417, async page read [ 170.890726][ T8701] XFS (loop4): Ending clean mount [ 170.909583][ T8701] XFS (loop4): Quotacheck needed: Please wait. [ 170.917309][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.917309][ T8780] loop3: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 170.937256][ T8780] Buffer I/O error on dev loop3, logical block 8073606, async page read [ 170.961004][ T8780] syz.3.1440: attempt to access beyond end of device [ 170.961004][ T8780] loop3: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 171.034453][ T8780] Buffer I/O error on dev loop3, logical block 3245774, async page read [ 171.043077][ T8701] XFS (loop4): Quotacheck: Done. [ 171.120827][ T8780] syz.3.1440: attempt to access beyond end of device [ 171.120827][ T8780] loop3: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 171.141011][ T5242] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.197206][ T8780] Buffer I/O error on dev loop3, logical block 8834939, async page read [ 171.278882][ T5228] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.576379][ T8817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1451'. [ 171.607146][ T8819] loop2: detected capacity change from 0 to 512 [ 171.669611][ T8819] EXT4-fs: Ignoring removed orlov option [ 171.719500][ T8820] netlink: 'syz.0.1449': attribute type 21 has an invalid length. [ 171.765972][ T8820] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1449'. [ 171.797338][ T8819] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1450: Attempting to read directory block (0) that is past i_size (256) [ 171.834953][ T8819] EXT4-fs (loop2): Remounting filesystem read-only [ 171.843781][ T8820] netlink: 'syz.0.1449': attribute type 5 has an invalid length. [ 171.866031][ T8820] netlink: 'syz.0.1449': attribute type 6 has an invalid length. [ 171.873943][ T8820] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1449'. [ 171.879197][ T8819] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 171.899265][ T8823] loop1: detected capacity change from 0 to 2048 [ 171.929994][ T8819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.995140][ T8823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.174231][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.312650][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 172.360583][ T5227] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.419660][ T8834] loop0: detected capacity change from 0 to 256 [ 172.543419][ T8834] FAT-fs (loop0): Directory bread(block 64) failed [ 172.566608][ T8834] FAT-fs (loop0): Directory bread(block 65) failed [ 172.593251][ T8834] FAT-fs (loop0): Directory bread(block 66) failed [ 172.616276][ T8834] FAT-fs (loop0): Directory bread(block 67) failed [ 172.645241][ T8834] FAT-fs (loop0): Directory bread(block 68) failed [ 172.664246][ T8834] FAT-fs (loop0): Directory bread(block 69) failed [ 172.685763][ T8834] FAT-fs (loop0): Directory bread(block 70) failed [ 172.704287][ T8834] FAT-fs (loop0): Directory bread(block 71) failed [ 172.731597][ T8834] FAT-fs (loop0): Directory bread(block 72) failed [ 172.751795][ T8834] FAT-fs (loop0): Directory bread(block 73) failed [ 172.834704][ T8834] FAT-fs (loop0): Filesystem has been set read-only [ 172.859711][ T29] audit: type=1800 audit(1724332901.000:24): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1456" name="pids.current" dev="loop0" ino=1048615 res=0 errno=0 [ 172.861182][ T8834] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 173.235292][ T8846] loop1: detected capacity change from 0 to 256 [ 173.386359][ T8846] FAT-fs (loop1): Directory bread(block 64) failed [ 173.408970][ T8846] FAT-fs (loop1): Directory bread(block 65) failed [ 173.466164][ T8846] FAT-fs (loop1): Directory bread(block 66) failed [ 173.472843][ T8846] FAT-fs (loop1): Directory bread(block 67) failed [ 173.565676][ T8846] FAT-fs (loop1): Directory bread(block 68) failed [ 173.615176][ T8846] FAT-fs (loop1): Directory bread(block 69) failed [ 173.684439][ T8826] loop4: detected capacity change from 0 to 40427 [ 173.740341][ T8826] F2FS-fs (loop4): invalid crc value [ 173.757987][ T8857] loop2: detected capacity change from 0 to 8192 [ 173.765455][ T8846] FAT-fs (loop1): Directory bread(block 70) failed [ 173.797754][ T8846] FAT-fs (loop1): Directory bread(block 71) failed [ 173.804467][ T8846] FAT-fs (loop1): Directory bread(block 72) failed [ 173.809041][ T8826] F2FS-fs (loop4): Found nat_bits in checkpoint [ 173.811129][ T8846] FAT-fs (loop1): Directory bread(block 73) failed [ 173.896220][ T8857] REISERFS warning (device loop2): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 174.076469][ T8826] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.385114][ T8868] loop0: detected capacity change from 0 to 1024 [ 174.475396][ T8868] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.513147][ T8868] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 174.533174][ T8868] EXT4-fs (loop0): orphan cleanup on readonly fs [ 174.567268][ T8868] EXT4-fs error (device loop0): __ext4_get_inode_loc:4433: comm syz.0.1470: Invalid inode table block 0 in block_group 0 [ 174.644390][ T8868] EXT4-fs (loop0): Remounting filesystem read-only [ 174.658306][ T5228] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 174.676688][ T8868] Quota error (device loop0): write_blk: dquota write failed [ 174.708709][ T8868] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 174.827327][ T8868] EXT4-fs (loop0): 1 truncate cleaned up [ 174.875258][ T8868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.056079][ T8875] tmpfs: Bad value for 'mpol' [ 175.138636][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.777810][ T8886] loop2: detected capacity change from 0 to 8 [ 175.849949][ T8886] ================================================================== [ 175.858092][ T8886] BUG: KASAN: slab-use-after-free in squashfs_readahead+0x210c/0x2680 [ 175.866299][ T8886] Read of size 4 at addr ffff88802e89de40 by task syz.2.1480/8886 [ 175.874130][ T8886] [ 175.876486][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.2.1480 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 175.886665][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 175.897011][ T8886] Call Trace: [ 175.900313][ T8886] [ 175.903267][ T8886] dump_stack_lvl+0x241/0x360 [ 175.907981][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.913221][ T8886] ? __pfx__printk+0x10/0x10 [ 175.917847][ T8886] ? _printk+0xd5/0x120 [ 175.922142][ T8886] ? __virt_addr_valid+0x183/0x530 [ 175.927300][ T8886] ? __virt_addr_valid+0x183/0x530 [ 175.932442][ T8886] print_report+0x169/0x550 [ 175.936987][ T8886] ? __virt_addr_valid+0x183/0x530 [ 175.942140][ T8886] ? __virt_addr_valid+0x183/0x530 [ 175.947286][ T8886] ? __virt_addr_valid+0x45f/0x530 [ 175.952428][ T8886] ? __phys_addr+0xba/0x170 [ 175.956962][ T8886] ? squashfs_readahead+0x210c/0x2680 [ 175.962369][ T8886] kasan_report+0x143/0x180 [ 175.966908][ T8886] ? squashfs_readahead+0x210c/0x2680 [ 175.972324][ T8886] squashfs_readahead+0x210c/0x2680 [ 175.977571][ T8886] ? squashfs_readahead+0x6f0/0x2680 [ 175.982891][ T8886] ? __pfx_squashfs_readahead+0x10/0x10 [ 175.988483][ T8886] ? blk_start_plug+0x70/0x1b0 [ 175.993283][ T8886] read_pages+0x17e/0x840 [ 175.997642][ T8886] ? percpu_ref_put+0x19/0x180 [ 176.002445][ T8886] ? __pfx_read_pages+0x10/0x10 [ 176.007321][ T8886] ? filemap_add_folio+0x26d/0x650 [ 176.012462][ T8886] ? __pfx_filemap_add_folio+0x10/0x10 [ 176.017955][ T8886] page_cache_ra_unbounded+0x6ce/0x7f0 [ 176.023450][ T8886] filemap_get_pages+0x543/0x2330 [ 176.028525][ T8886] ? __pfx_filemap_get_pages+0x10/0x10 [ 176.034016][ T8886] ? __pfx___might_resched+0x10/0x10 [ 176.039340][ T8886] ? unwind_next_frame+0x18e6/0x22d0 [ 176.044674][ T8886] filemap_read+0x457/0xfa0 [ 176.049219][ T8886] ? 0xffffffffa0003b40 [ 176.053405][ T8886] ? __pfx_filemap_read+0x10/0x10 [ 176.058479][ T8886] ? iov_iter_kvec+0x4e/0x180 [ 176.063195][ T8886] __kernel_read+0x532/0x9f0 [ 176.067814][ T8886] ? do_sys_openat2+0x13e/0x1d0 [ 176.072701][ T8886] ? __x64_sys_openat+0x247/0x2a0 [ 176.077768][ T8886] ? __pfx___kernel_read+0x10/0x10 [ 176.082921][ T8886] integrity_kernel_read+0xb0/0x100 [ 176.088195][ T8886] ? __pfx_integrity_kernel_read+0x10/0x10 [ 176.094039][ T8886] ? ima_calc_file_hash+0xab7/0x1b30 [ 176.099365][ T8886] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 176.104956][ T8886] ima_calc_file_hash+0xaef/0x1b30 [ 176.110196][ T8886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.116654][ T8886] ? lockdep_hardirqs_on+0x99/0x150 [ 176.121890][ T8886] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 176.127472][ T8886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 176.133412][ T8886] ? __x64_sys_openat+0x247/0x2a0 [ 176.138480][ T8886] ? do_syscall_64+0xf3/0x230 [ 176.143191][ T8886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.149293][ T8886] ? mark_lock+0x9a/0x360 [ 176.153659][ T8886] ? make_vfsgid+0x46/0x90 [ 176.158132][ T8886] ? generic_fillattr+0x59c/0x840 [ 176.163201][ T8886] ima_collect_measurement+0x526/0xb20 [ 176.168706][ T8886] ? __pfx_ima_collect_measurement+0x10/0x10 [ 176.174737][ T8886] ? squashfs_xattr_handler_get+0x585/0x900 [ 176.180679][ T8886] ? trace_contention_end+0x3c/0x120 [ 176.185999][ T8886] ? __mutex_lock+0x2ef/0xd70 [ 176.190715][ T8886] ? ima_get_hash_algo+0x156/0x4d0 [ 176.195858][ T8886] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 176.201353][ T8886] process_measurement+0x1357/0x1fb0 [ 176.206698][ T8886] ? __pfx_process_measurement+0x10/0x10 [ 176.212540][ T8886] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 176.219010][ T8886] ? __pfx_apparmor_file_open+0x10/0x10 [ 176.224584][ T8886] ? tomoyo_file_open+0x168/0x220 [ 176.229635][ T8886] ? inode_to_bdi+0x69/0xf0 [ 176.234170][ T8886] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 176.240360][ T8886] ima_file_check+0xf2/0x170 [ 176.244985][ T8886] ? __pfx_ima_file_check+0x10/0x10 [ 176.250222][ T8886] security_file_post_open+0xb9/0x280 [ 176.255632][ T8886] path_openat+0x2cd0/0x3590 [ 176.260268][ T8886] ? __pfx_path_openat+0x10/0x10 [ 176.265245][ T8886] do_filp_open+0x235/0x490 [ 176.269782][ T8886] ? __pfx_do_filp_open+0x10/0x10 [ 176.274852][ T8886] ? _raw_spin_unlock+0x28/0x50 [ 176.279732][ T8886] ? alloc_fd+0x5a1/0x640 [ 176.284108][ T8886] do_sys_openat2+0x13e/0x1d0 [ 176.288911][ T8886] ? __pfx_do_sys_openat2+0x10/0x10 [ 176.294155][ T8886] __x64_sys_openat+0x247/0x2a0 [ 176.299048][ T8886] ? __pfx___x64_sys_openat+0x10/0x10 [ 176.304473][ T8886] ? do_syscall_64+0x100/0x230 [ 176.309269][ T8886] ? do_syscall_64+0xb6/0x230 [ 176.314078][ T8886] do_syscall_64+0xf3/0x230 [ 176.318620][ T8886] ? clear_bhb_loop+0x35/0x90 [ 176.323416][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.329342][ T8886] RIP: 0033:0x7fd942d79e79 [ 176.333795][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.353616][ T8886] RSP: 002b:00007fd943bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 176.362077][ T8886] RAX: ffffffffffffffda RBX: 00007fd942f15f80 RCX: 00007fd942d79e79 [ 176.370603][ T8886] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 176.378616][ T8886] RBP: 00007fd942de7916 R08: 0000000000000000 R09: 0000000000000000 [ 176.386630][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.394634][ T8886] R13: 0000000000000000 R14: 00007fd942f15f80 R15: 00007ffe6810b128 [ 176.402658][ T8886] [ 176.405700][ T8886] [ 176.408045][ T8886] Allocated by task 8886: [ 176.412390][ T8886] kasan_save_track+0x3f/0x80 [ 176.417186][ T8886] __kasan_kmalloc+0x98/0xb0 [ 176.421810][ T8886] __kmalloc_cache_noprof+0x19c/0x2c0 [ 176.427218][ T8886] squashfs_page_actor_init_special+0x64/0x440 [ 176.433410][ T8886] squashfs_readahead+0x188f/0x2680 [ 176.438638][ T8886] read_pages+0x17e/0x840 [ 176.442992][ T8886] page_cache_ra_unbounded+0x6ce/0x7f0 [ 176.448483][ T8886] filemap_get_pages+0x543/0x2330 [ 176.453534][ T8886] filemap_read+0x457/0xfa0 [ 176.458066][ T8886] __kernel_read+0x532/0x9f0 [ 176.462681][ T8886] integrity_kernel_read+0xb0/0x100 [ 176.467910][ T8886] ima_calc_file_hash+0xaef/0x1b30 [ 176.473055][ T8886] ima_collect_measurement+0x526/0xb20 [ 176.478553][ T8886] process_measurement+0x1357/0x1fb0 [ 176.483900][ T8886] ima_file_check+0xf2/0x170 [ 176.488525][ T8886] security_file_post_open+0xb9/0x280 [ 176.493926][ T8886] path_openat+0x2cd0/0x3590 [ 176.498553][ T8886] do_filp_open+0x235/0x490 [ 176.503178][ T8886] do_sys_openat2+0x13e/0x1d0 [ 176.507895][ T8886] __x64_sys_openat+0x247/0x2a0 [ 176.512880][ T8886] do_syscall_64+0xf3/0x230 [ 176.517415][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.523344][ T8886] [ 176.525738][ T8886] Freed by task 8886: [ 176.529741][ T8886] kasan_save_track+0x3f/0x80 [ 176.534453][ T8886] kasan_save_free_info+0x40/0x50 [ 176.539521][ T8886] __kasan_slab_free+0x59/0x70 [ 176.544312][ T8886] kfree+0x196/0x3e0 [ 176.548250][ T8886] squashfs_readahead+0x195b/0x2680 [ 176.553481][ T8886] read_pages+0x17e/0x840 [ 176.557849][ T8886] page_cache_ra_unbounded+0x6ce/0x7f0 [ 176.563344][ T8886] filemap_get_pages+0x543/0x2330 [ 176.568402][ T8886] filemap_read+0x457/0xfa0 [ 176.572937][ T8886] __kernel_read+0x532/0x9f0 [ 176.577561][ T8886] integrity_kernel_read+0xb0/0x100 [ 176.582793][ T8886] ima_calc_file_hash+0xaef/0x1b30 [ 176.587942][ T8886] ima_collect_measurement+0x526/0xb20 [ 176.593437][ T8886] process_measurement+0x1357/0x1fb0 [ 176.598768][ T8886] ima_file_check+0xf2/0x170 [ 176.603404][ T8886] security_file_post_open+0xb9/0x280 [ 176.608906][ T8886] path_openat+0x2cd0/0x3590 [ 176.613526][ T8886] do_filp_open+0x235/0x490 [ 176.618237][ T8886] do_sys_openat2+0x13e/0x1d0 [ 176.622972][ T8886] __x64_sys_openat+0x247/0x2a0 [ 176.627893][ T8886] do_syscall_64+0xf3/0x230 [ 176.632438][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.638368][ T8886] [ 176.640710][ T8886] The buggy address belongs to the object at ffff88802e89de00 [ 176.640710][ T8886] which belongs to the cache kmalloc-96 of size 96 [ 176.654633][ T8886] The buggy address is located 64 bytes inside of [ 176.654633][ T8886] freed 96-byte region [ffff88802e89de00, ffff88802e89de60) [ 176.668403][ T8886] [ 176.670743][ T8886] The buggy address belongs to the physical page: [ 176.677186][ T8886] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e89d [ 176.685982][ T8886] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 176.693165][ T8886] page_type: 0xfdffffff(slab) [ 176.697867][ T8886] raw: 00fff00000000000 ffff888015841280 ffffea0001ed5180 dead000000000002 [ 176.706563][ T8886] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 176.715165][ T8886] page dumped because: kasan: bad access detected [ 176.721607][ T8886] page_owner tracks the page as allocated [ 176.727335][ T8886] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3038, tgid 3038 (kworker/u8:11), ts 73521992166, free_ts 73507064860 [ 176.748141][ T8886] post_alloc_hook+0x1f3/0x230 [ 176.752943][ T8886] get_page_from_freelist+0x3131/0x3280 [ 176.758533][ T8886] __alloc_pages_noprof+0x29e/0x780 [ 176.763766][ T8886] alloc_slab_page+0x5f/0x120 [ 176.768474][ T8886] allocate_slab+0x5a/0x2f0 [ 176.773013][ T8886] ___slab_alloc+0xcd1/0x14b0 [ 176.777713][ T8886] __slab_alloc+0x58/0xa0 [ 176.782065][ T8886] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 176.787607][ T8886] dst_cow_metrics_generic+0x56/0x1c0 [ 176.793016][ T8886] icmp6_dst_alloc+0x270/0x420 [ 176.797807][ T8886] mld_sendpack+0x6a3/0xdb0 [ 176.802341][ T8886] ipv6_mc_dad_complete+0x88/0x490 [ 176.807565][ T8886] addrconf_dad_completed+0x712/0xcd0 [ 176.812993][ T8886] addrconf_dad_work+0xdc2/0x16f0 [ 176.818050][ T8886] process_scheduled_works+0xa63/0x1850 [ 176.823630][ T8886] worker_thread+0x86d/0xd10 [ 176.828252][ T8886] page last free pid 5325 tgid 5325 stack trace: [ 176.834593][ T8886] free_unref_page+0xc07/0xd90 [ 176.839384][ T8886] tlb_finish_mmu+0x11f/0x200 [ 176.844101][ T8886] exit_mmap+0x496/0xc40 [ 176.848373][ T8886] __mmput+0x115/0x390 [ 176.852481][ T8886] exit_mm+0x220/0x310 [ 176.856570][ T8886] do_exit+0x9b2/0x28e0 [ 176.861525][ T8886] do_group_exit+0x207/0x2c0 [ 176.866139][ T8886] __x64_sys_exit_group+0x3f/0x40 [ 176.871186][ T8886] x64_sys_call+0x26a8/0x26b0 [ 176.875894][ T8886] do_syscall_64+0xf3/0x230 [ 176.880428][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.886348][ T8886] [ 176.888688][ T8886] Memory state around the buggy address: [ 176.894332][ T8886] ffff88802e89dd00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 176.902414][ T8886] ffff88802e89dd80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 176.910501][ T8886] >ffff88802e89de00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 176.918589][ T8886] ^ [ 176.924859][ T8886] ffff88802e89de80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 176.932951][ T8886] ffff88802e89df00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 176.941158][ T8886] ================================================================== [ 177.182986][ T8886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 177.190256][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.2.1480 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 177.200525][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.210608][ T8886] Call Trace: [ 177.213907][ T8886] [ 177.216900][ T8886] dump_stack_lvl+0x241/0x360 [ 177.221626][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.226861][ T8886] ? __pfx__printk+0x10/0x10 [ 177.231569][ T8886] ? preempt_schedule+0xe1/0xf0 [ 177.236538][ T8886] ? vscnprintf+0x5d/0x90 [ 177.240916][ T8886] panic+0x349/0x880 [ 177.244852][ T8886] ? check_panic_on_warn+0x21/0xb0 [ 177.250089][ T8886] ? __pfx_panic+0x10/0x10 [ 177.254544][ T8886] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 177.260559][ T8886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 177.266922][ T8886] ? print_report+0x502/0x550 [ 177.271644][ T8886] check_panic_on_warn+0x86/0xb0 [ 177.276613][ T8886] ? squashfs_readahead+0x210c/0x2680 [ 177.282023][ T8886] end_report+0x77/0x160 [ 177.286303][ T8886] kasan_report+0x154/0x180 [ 177.290844][ T8886] ? squashfs_readahead+0x210c/0x2680 [ 177.296270][ T8886] squashfs_readahead+0x210c/0x2680 [ 177.301517][ T8886] ? squashfs_readahead+0x6f0/0x2680 [ 177.306997][ T8886] ? __pfx_squashfs_readahead+0x10/0x10 [ 177.312586][ T8886] ? blk_start_plug+0x70/0x1b0 [ 177.317384][ T8886] read_pages+0x17e/0x840 [ 177.321740][ T8886] ? percpu_ref_put+0x19/0x180 [ 177.326550][ T8886] ? __pfx_read_pages+0x10/0x10 [ 177.331429][ T8886] ? filemap_add_folio+0x26d/0x650 [ 177.336570][ T8886] ? __pfx_filemap_add_folio+0x10/0x10 [ 177.342058][ T8886] page_cache_ra_unbounded+0x6ce/0x7f0 [ 177.347552][ T8886] filemap_get_pages+0x543/0x2330 [ 177.352625][ T8886] ? __pfx_filemap_get_pages+0x10/0x10 [ 177.358118][ T8886] ? __pfx___might_resched+0x10/0x10 [ 177.363445][ T8886] ? unwind_next_frame+0x18e6/0x22d0 [ 177.368775][ T8886] filemap_read+0x457/0xfa0 [ 177.373395][ T8886] ? 0xffffffffa0003b40 [ 177.377593][ T8886] ? __pfx_filemap_read+0x10/0x10 [ 177.382672][ T8886] ? iov_iter_kvec+0x4e/0x180 [ 177.387393][ T8886] __kernel_read+0x532/0x9f0 [ 177.392019][ T8886] ? do_sys_openat2+0x13e/0x1d0 [ 177.396934][ T8886] ? __x64_sys_openat+0x247/0x2a0 [ 177.402010][ T8886] ? __pfx___kernel_read+0x10/0x10 [ 177.407165][ T8886] integrity_kernel_read+0xb0/0x100 [ 177.412402][ T8886] ? __pfx_integrity_kernel_read+0x10/0x10 [ 177.418244][ T8886] ? ima_calc_file_hash+0xab7/0x1b30 [ 177.423572][ T8886] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 177.429168][ T8886] ima_calc_file_hash+0xaef/0x1b30 [ 177.434329][ T8886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.440698][ T8886] ? lockdep_hardirqs_on+0x99/0x150 [ 177.445931][ T8886] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 177.451518][ T8886] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 177.457634][ T8886] ? __x64_sys_openat+0x247/0x2a0 [ 177.462716][ T8886] ? do_syscall_64+0xf3/0x230 [ 177.467432][ T8886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.473537][ T8886] ? mark_lock+0x9a/0x360 [ 177.477901][ T8886] ? make_vfsgid+0x46/0x90 [ 177.482348][ T8886] ? generic_fillattr+0x59c/0x840 [ 177.487432][ T8886] ima_collect_measurement+0x526/0xb20 [ 177.492963][ T8886] ? __pfx_ima_collect_measurement+0x10/0x10 [ 177.499069][ T8886] ? squashfs_xattr_handler_get+0x585/0x900 [ 177.505016][ T8886] ? trace_contention_end+0x3c/0x120 [ 177.510334][ T8886] ? __mutex_lock+0x2ef/0xd70 [ 177.515083][ T8886] ? ima_get_hash_algo+0x156/0x4d0 [ 177.520271][ T8886] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 177.525948][ T8886] process_measurement+0x1357/0x1fb0 [ 177.531313][ T8886] ? __pfx_process_measurement+0x10/0x10 [ 177.537099][ T8886] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 177.543586][ T8886] ? __pfx_apparmor_file_open+0x10/0x10 [ 177.549180][ T8886] ? tomoyo_file_open+0x168/0x220 [ 177.554245][ T8886] ? inode_to_bdi+0x69/0xf0 [ 177.558900][ T8886] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 177.565204][ T8886] ima_file_check+0xf2/0x170 [ 177.569870][ T8886] ? __pfx_ima_file_check+0x10/0x10 [ 177.575132][ T8886] security_file_post_open+0xb9/0x280 [ 177.580550][ T8886] path_openat+0x2cd0/0x3590 [ 177.585194][ T8886] ? __pfx_path_openat+0x10/0x10 [ 177.590189][ T8886] do_filp_open+0x235/0x490 [ 177.594733][ T8886] ? __pfx_do_filp_open+0x10/0x10 [ 177.599803][ T8886] ? _raw_spin_unlock+0x28/0x50 [ 177.604700][ T8886] ? alloc_fd+0x5a1/0x640 [ 177.609074][ T8886] do_sys_openat2+0x13e/0x1d0 [ 177.613793][ T8886] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.619047][ T8886] __x64_sys_openat+0x247/0x2a0 [ 177.623944][ T8886] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.629363][ T8886] ? do_syscall_64+0x100/0x230 [ 177.634164][ T8886] ? do_syscall_64+0xb6/0x230 [ 177.638883][ T8886] do_syscall_64+0xf3/0x230 [ 177.643420][ T8886] ? clear_bhb_loop+0x35/0x90 [ 177.648138][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.654072][ T8886] RIP: 0033:0x7fd942d79e79 [ 177.658513][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.678167][ T8886] RSP: 002b:00007fd943bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.686648][ T8886] RAX: ffffffffffffffda RBX: 00007fd942f15f80 RCX: 00007fd942d79e79 [ 177.694656][ T8886] RDX: 0000000000000000 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 177.702654][ T8886] RBP: 00007fd942de7916 R08: 0000000000000000 R09: 0000000000000000 [ 177.710652][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.718651][ T8886] R13: 0000000000000000 R14: 00007fd942f15f80 R15: 00007ffe6810b128 [ 177.726918][ T8886] [ 177.730209][ T8886] Kernel Offset: disabled [ 177.734541][ T8886] Rebooting in 86400 seconds..