last executing test programs: 8.102815323s ago: executing program 1 (id=1836): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a", 0x25, 0x8084, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000046365608b40413868f95010201010902120001000000000904"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7b}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff7e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x37, 0x37, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa}, {}]}, @datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x0, 0x2}], "a77818"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000000c0)=""/181, 0x54, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 7.96187021s ago: executing program 4 (id=1838): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x10000, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 7.87624849s ago: executing program 4 (id=1839): socket$kcm(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x803, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) userfaultfd(0x801) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x1588, &(0x7f0000000200)={0x0, 0x9ea4, 0x800}) r2 = dup3(r0, r1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000080)=r2, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 7.577269712s ago: executing program 4 (id=1843): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.711246212s ago: executing program 0 (id=1848): setreuid(0xffffffffffffffff, 0x0) 6.553111022s ago: executing program 0 (id=1849): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) 6.423911525s ago: executing program 3 (id=1850): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 6.095566574s ago: executing program 3 (id=1853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_newroute={0xa0, 0x18, 0x300, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x14, 0x20, 0x6, 0xfe, 0x3, 0xfe, 0x1, 0x1000}, [@RTA_NEWDST={0x84, 0x13, [{0x9}, {0x7ff}, {0x9}, {0x9}, {0x2, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xffffc}, {0x800, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4}, {0x1ff, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0x8}, {0x6}, {0x4}, {0x800}, {0xffffd, 0x0, 0x1}, {0x4}, {0x6}, {0xc0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0xda91, 0x0, 0x1}, {0x7}, {0xfff}, {0x3d1a7, 0x0, 0x1}, {0x80, 0x0, 0x1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x10000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0xf6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 5.95589146s ago: executing program 0 (id=1854): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000cc0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier_val}, {@nodelalloc}, {@acl}, {@errors_remount}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x2, 0x300) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x3a) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x6}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f00000006c0)={[{@file_umask={'file_umask', 0x3d, 0x200}}, {@uid={'uid', 0x3d, 0xee00}}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@dir_umask={'dir_umask', 0x3d, 0x401}}, {@creator={'creator', 0x3d, "ecf3ae12"}}]}, 0x1, 0x304, &(0x7f0000000780)="$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") openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) 5.780941458s ago: executing program 3 (id=1856): socketpair(0x11, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x3}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 5.524402909s ago: executing program 1 (id=1857): syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) syz_io_uring_setup(0x68e9, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, 0x295}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$netlink(0x10, 0x3, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 5.418075564s ago: executing program 3 (id=1859): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000300)={0x20, 0xa, 0xd, "095e8dfd0fcf00000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.612713948s ago: executing program 4 (id=1860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0xfb0c, 0x4}, 0x8) 4.573896788s ago: executing program 5 (id=1862): setreuid(0xffffffffffffffff, 0x0) 4.423056685s ago: executing program 2 (id=1863): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0xfffffffc, 0x2}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 4.307449418s ago: executing program 0 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) r4 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0x4020940d, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x2}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000005ec0)=0x10) recvmmsg(r4, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x33440000}, {{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/115, 0x73}], 0x3, &(0x7f00000031c0)=""/4088, 0xff8}, 0x800}], 0x3, 0x41, &(0x7f00000042c0)) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x1a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4.306695159s ago: executing program 5 (id=1865): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 4.084162455s ago: executing program 2 (id=1866): sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x302, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r1, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.053670788s ago: executing program 5 (id=1867): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x10000, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.867339723s ago: executing program 5 (id=1868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_setup(0x206, &(0x7f0000000200)=0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) io_submit(r4, 0x0, &(0x7f0000000240)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/56, @ANYRES8=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/78], 0xb8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, &(0x7f00000001c0)=0xa) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x0, "69c0161723fc3c13ca662342702d1a459380d13257a4bb97ce001c869ee8c942"}) socketpair(0x11, 0x4, 0x976c, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r7, &(0x7f0000000080)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @result={0x0, 0xbf}}], 0x1c) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x7bc, &(0x7f0000000a80)="$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") 2.977908744s ago: executing program 2 (id=1869): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x18090, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES16=0x0, @ANYRES64], 0x8, 0x2ee, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$dri(0x0, 0x0, 0x432100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x5, 0x0, {0x0, @raw_data="6d14610dfd30a74fe3b78e024184e4445939547ded0fdd1cd48ea83e06b3f9f9ca2ed9714abbeda901e196ac9163388168d67da8c2b20765e9332541ea5125e7f65b4ebdb2ea015b3499f8275f875e4ff4c6aa5d6548240de4b0312e0a41220762b49254c5a49ac78bc50ff43adfe77c4f629cf7e3b3203dd6c5dc0bb3816190c14ec0ae695502a6f3ba41fa55120f9bf94ab597f3a9c9af0c4b473fa3122a90650d581ed4563f3760d8df6907d47c3c6e8747fc280733f97e4432318b096699480ab4fda870ff47"}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) truncate(&(0x7f00000001c0)='./file0\x00', 0xfffffffffffffc01) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x9}, 0x50) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[0x0], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r4], &(0x7f0000000040)}) rename(&(0x7f0000001640)='./file1\x00', 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x40) 2.855229371s ago: executing program 0 (id=1870): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0xfffffffffffffedf) 2.854180248s ago: executing program 4 (id=1871): socketpair(0x11, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x1, 0x3}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 2.715113964s ago: executing program 1 (id=1872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x123, 0x0) 1.872007018s ago: executing program 0 (id=1873): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.871741058s ago: executing program 1 (id=1874): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.871044075s ago: executing program 5 (id=1875): ioperm(0x0, 0x4, 0x2) memfd_secret(0x3b3a1469cfc72ce9) 1.536546757s ago: executing program 4 (id=1876): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000cc0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier_val}, {@nodelalloc}, {@acl}, {@errors_remount}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x2, 0x300) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x3a) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x6}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f00000006c0)={[{@file_umask={'file_umask', 0x3d, 0x200}}, {@uid={'uid', 0x3d, 0xee00}}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@dir_umask={'dir_umask', 0x3d, 0x401}}, {@creator={'creator', 0x3d, "ecf3ae12"}}]}, 0x1, 0x304, &(0x7f0000000780)="$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") openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) 1.53598194s ago: executing program 5 (id=1877): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf1c, &(0x7f0000001e80)="$eJzs3U9sHNX9APA3613biU28hvyCgR9JCq0SKNj5JzW9BRH1iLj0HhQSGsWkUUMPRIE4PSAqIYoUcao4UHGhVEqRigSqVEU9tT216q0n1AuVqlQK6qGNFLuK/Wa9O97Jrsf27Hr385G+fvvmzc73O2tnMzO7+zYAQ6uy/PPYsZkkhPe/uH7yjZeTz+4t29dYY//yzyT26iGEWlM/yWzvy7jg7u0rp9u1STiy/DPthxduNe47EUJYCPvDzVAPn8zNf/3xB88f/PSt8T3vXj7/5hbtfkN2PwAAYBDd+NP83576xx+fmb5zY++JMNZYnh6f12N/Ih73H4oHyunxciW09pOmaDaaWW8kRiWz3khmvWomTzUnXy2znVrOeqMd8o00LWu3nwAAALAdpee19ZBUZlv6lcrs7Mp5/z1fTo0msxfOzZ+91KNCAQAAgML+fXX5TbdCCCFEgaj2QQ1CCCGEEKKbWJrq9RUIAAAAYNhk5wtbY2FzZ+pqbK3eXf5bz1Xa3x82Qdl///fPP97j/G0Mef6PrnnGAQCguEE9mkz3Kz2OTucxyM4jOJK533qP/yuZ7VTXWWfevILbZb7BvDqzj2u/yqt/vb/HXsmrPzsfZr/Kqz87T2e/yqt/rOQ6isqrv82Vn76UV/+OkusoKq/+nSXXUVRe/RMl11FUXv2TJddR1Jr6qyvPnA/0opgC8h7/XSXXUVRe/dvlbbV59ddLrqOovPqnt8kRRF79D5ZcR1F59T9Uch1F5dW/u+Q6euXx2KaPw96c9SbanNNtl3M8AAAAGHb/HYj5/5qu9fW8lvvHtT6oQQghxH1jfDv8fyKEEEIIsd642rtLDwAAAECfSD8XkH7qfSlKx0c6jFebx8dXV0jHax3uP9phfKzDOAAAABDCb98++8h7yep8dxudDy+dN2pH+GwxFJjHKDsf4Xrzb3Tes43m3x6zjgAAADBsku/dXHz65IevTd+5sfdE09nvYjzfTecBrcZrA5/Hfvq+gMlMP0nPoU+05qnkrJe9PvBA3vZe3OCOAgAAwBBLz9/rIanMNp1310OlMju7ej4+E2rJ2XPzZw7Ffvr9LH+Yqo3dW3645LoBAACA7q2e77c//0+/x3cmjCazF87Nn7200p9sLK9Vmq8LTK0uT5qvC9Qzy4/kLD8a+9Ox/cHUjuXls6d/OP/yZu88AAAADIlLr18+/9L8/JkfueGGG240bvT6mQkAANhsX311vfbjo5O/W/n8/+r8d4vxxv7Yr8e5/f4cl6fvE0g/B7Dm8/qnWvNM5a13sXW9ema9kRhjmbrHm7YTlucbbL3fdF6+eut2RnPyTWTyTWbyZecpqGbWT9rMJRjazE+YrjeVWZ6dh7GayZFk8j/RJhcAAACk5l579eLcpdcvP3vu1ZdeOfPKmQtHjxz/7vHjhw5/5/Dc8vv655rf3Q8AAABsR6tv+u11JQAAAAAAAAAAAAAAAAAAADC8yvg6sV7vIwAAAAy7f10NISwIkRPpFwz2ug7Rz7E01vsaBjuCf4dCCCGE2GA47xMLISwtZb9pHgAAAGBr3b195XRzu8ZCsqn5GlurrzSLMW/aTj771+l7ka5267nW6yU7N7Uahl3Zf//y92v+sbbjH13b3PzjYfW5L3T1/Fdp3cCJlt6ObvMemPvlTCN/COHRapf5s/v/YrcZWx3M5D8Qusu/9GEm/6mWXqXb/E9l8u/sMv+a/b/YbcZWT8f8M7F/8Mlu87fuYvpXmu5Ht38A327e//HV5eve/3qXCTOeifkBYBg1/jdfutrbQjZZepSQHk9PxH66v/FwM2Tf/bDe4/9KZjvVDVfeut30OOjh2G8cKi205k2tt/70cZmM7QMF68zaLu8qyat/s36PWy2v/lrJdRSVV/9oyXUUlVd/+7P3/pNX/3jJdRSVV3/XFyJ6LK/+7XJdOa/+iZLrKCqv/smS6ygqr/71/j/eK3n17yq5jqLy6p8quY6i8uoveFmtdHn1T5dcR1F59T9Ych1F5dX/UMl1FJVX/+6S6+iVx2Kbdz6cnn9OxbG0X8/0x9o8ll2/GAIAAABsqX/25TwQTVcOel6LEEIIIYQQgx//WVrR6zqEEFsXS0u9vPpAr23tp5kB6Fee/4eb3/9w8/sfbn7/3E/6SnyS6adGOoxXO4zXOoyPZsazf69jHcYfymx3Kb2uGe3uMP5/cQ/yxnd1uP/DHcZnOow/0mH80Q7jj3UYBwAAYDjsia3zQwAAABhcb/zq83d+c+DU7ek7N/aeCKNr5p0/FPtj8bX1t2M/O+99qhZf8/9J7P8itr+P7d8z63v/CQAAAGy99HtivP4PAAAAgyv9nlLn/wAAADC4pmPr/B8AAAAG14Oxdf4PAAAAAywZb784tul1gSdi2+28fgBA//v/2D4e272x3Rfbb8Q2PQ54MrbfLKk+AGDz/Pz7Pz3+XrI63//RzPjduDxt11hYuVKQVFpn8t8R252x/VaX9WS/D6Db/KldXebZqvxTG8wPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyOyvLPY8dmkhDe/+L6yZ+NvvOXe8v2NdbYv/wzib16CKHWuF86utr/dVzx7u0rp5vbxdgm4UhIQtJYHl641cg0EUJYCPvDzVAPn8zNf/3xB88f/PSt8T3vXj7/5hY+BC37BwAAAIPofwEAAP//9QEgLQ==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$eJzs3Am4pnMBuP/3DGOXMVRSaiqiRdYsUWYGMxSSJdqRJWUpqdCmRUoqItqzb9nKEsrWSrK3UEKoZIm02Ib5X2fmDGPcpF+//+VX931f1znv+z7v8zzn+34/z3KO5mrzSRtPHAzmGkxv3GDWzr1m8pQxV21w+5FbLXjMcqfcvf8jV1x8/MjjhJHHiYPBYNTI20PTl40dnHraqMHs05Y/3LxzzzM0/2Cw/MjLkf0MVp7+MP/lM9abOkuzDnTo4W/7TP+a1gLDP2L4yWH773X4YDAYM9P2Q4PB0J6P+qDSNp8wedLDVg+5DVuNHnk+89cc07/mv2gwmP+MAR8fM6879CR8pOGfueeLzhm9wZPws//r2nzC5HVn8R8+F2cbWbby8Dk+6zlobNbj/NYltlh1ZAqnHW+DwfAl7hHnyn9Fm0+YtN7gsa/zgyNXu2CfqdOvm3MOpt8o5h4MBvOMXF/ne7Jd6j9rwsQVpt2zZ7weYZ9xLO9Jx8XxbznpweGb9GAwWGgwGLvOjHtBVVVV/Xc0YeIKa8L9f67Hu/+ffPKiZ3T/r6qq+u9t3QkTVxi+189y/5/v8e7/uyx64cem/7f/8StP3+rBJ/dDVFVV1b/VpHXx/j/m8e7/K6956Xrd/6uqqv5722j9aff/+Wa5/y/8ePf/N5602mIj6834veGBmXY5NNP/nnD/TMtnm2n5fTMtHz3TfmZef46Zlt8z0/I5h9+D9ccNBmNn/HvBKQ8vHjtu+L2R5ffOtHz8w/9OZ/G1Zlo+Yablk2ZaPnFkrMPLJ8+0fPJM66/zOFNdVVX1/0wbrTBpzcFM/85+ZPEiM96n+//5Z1679JM13qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqvrv7MHbzzpnMBgMDQaDUYPBlMHI85kfB1OnTp06/Prk8y677Ekb6P8bDZ17zeQpY67a4PYjt1rwmOVOuXv/h2fpv7b//k9Q/0nD/nMdN24w2GnTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGjoFRg8GUwcjzPWc8nrnfG940suqqm51y50EPb7n4+O1Hnp17zeQp2z8JY38SGhr+rGOu2uD2I7da8JjlTrl7//+Bs+e//xPUf9I0/+2HBoOR83vM8Lm8wYSNNllqMBgcdOcpm600eOi9VYbfW23sbIPZpm261LTvay/OO95znemP44e/LfzQPk6etv91px4629Asg5ipV5x7w5Fv3/zuFWd9XPKxP8eoGU8Ov+70u6ZOnTr1EQtHmusxNp6x/xmfZdbzfGTsSw2PfZldd3zXMu/ZfY+lt99xy+222W6bnZZbYZUVV1p+uZVWfdky226/wzbLTv/+GHM2btr3NZ/InM0365zdPmHmOZv1sz3WnI17/DmbtscpewxtMmPOZv8352zNx5+zcduP/KDFx48ebDFtaoYGg8XXGj3YbfjFcnMOBouvPbLuIsPrrj521GCw38MfdPjZnA8dg0N7Dq+z+aSNJz48skd/wkddpx+x4uLjRx4njDxOnD7EcYOHD8Wxg1NPGzU8F4+Y5nnnnmdo/sFg+ZGXI/sZrDry7iEz1ps6S7MOdOjhb/tM/5rWAsM7GX7yjmXPunr4XJxl+/8/+j+6/j/Ka5WhhyZqaORrZJ3pXhMmr/vwz5o2DcNzN9vIspWHTWads/+bPWq842YfjHmc8U5ad+IKw4tnmf8Zm+DxdccSF3xg+rE1fuXpWz34f4xC453vcca77gQc73yPN97jPnjJadN39X9tvLNc69ab9n38E7nWDR7/Wjcb7WCbixeb9Vr36sce4iPO4xlzNOcsKz3WtW63g5ffc3j/4x//Wrfe8NhHP+JaN2owWHzNGde64QvfpNGD/YZfLD/8YvLowTHDL1aY9mLuwXnDL176tp132Hp4wToz5mTZ4f2OHzs0zf2ClW9ZcuoBU6euNTKW8WMfOdaR42PczPfzCWOnT+aMbWfsd3jVGfu9+enT35s0st8J/8Z+Z2xL471zgenvTR7Z78RZ9jv6cfY7Y9tHnQ9LDT104XqM682kWa43I3/jzPhxj/iaY/rX/BcNBvOfQb6zrPsvr5l0/s71OOOdMHGFNYfHN8v5+9DhSOfvJZOvGr5XzD8YDBYaDMauM2Ps/2ZDjzXe2R9/vBNhvLM/3nivOHbH9f8vjHcw03gfcZxtvtH0Y2WdkeNs8r9x/M7Ydtbr2Ohp706/7K/zRK5j4x51HfvobKNmmeyZeqzf2baG9ac/X+Th33OvOfHoGXM/epb9/qvf2Wb6LENwHRszy9/zo9a5fjBEc77ncatfOnTg48/56MEj/7aYMecztn28OZ/8ROb8WY8/50/09+Slnj/9/dGzjH/mOd9w32d+ZsaczzHLfv/VnE9+/HvHo+d8/GA0zfmy902ft8e7nj7WnM/YdsacD3/E1cbOPlh7+J41MueTnsicL/J/5zifB9af/nybhxadfeQpr5sx57PO8b+a80n/7pyPe+g4X3zae88bNZhjjsFuW+666y7LTf8+4+Xy07/zteiea6bP8+PdSx/LaMa2j3derPVEjMY8IaOhf2W06OyPZfTwqXXEzrs87f/0WrTWv2s04GvRVUdPn7fH+73oseZ8xrZ0H1x4pu1n/Tt0o/Wn/d493yz3wRmb4H3w7DPX23vGLkc2e2CWYc64r94/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHz4I8wx0/ozWMcN/807snzKw6uPHf7ladzI8ntnWj7+4W0XX2um5RNmWj5ppuUTHz40Fp880/LJM62/zuDfbMZ/k95+1ot8PdH677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXj7WeeMHAOjBoMpg+nPh0YeB3sObXjbGsOPg8Fg9MonTN3wyR7vk9zQuddMnjLmqg1uP3KrBY9Z7pS79/8fOHv++z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw0Ggw2nnrDyqMFD7y0y/N7qY0cNBvsNPWIHcz60ztCew+tsPmnjiYPBXCNrjHvUD33UefSIFRcfP/I4YeRx4vTr07jBw8fr2MGpp40azD5t+cPNO/c8Q/MPBsuPvBzZz2Dl6Q/zXz5jvamzNOtAhx7+ts/0r2ktMPwjhp/stt3kZw/P1Szb/z/TjGv19qP+5aqd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/55/R8v/Wom6y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u3/ff+7/X8ZRT06d/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3IO3n3XOyDEwajCYMpj+fGjPkcfB0EmnvnDkEBm9+5VHHfpkj/dJbujcayZPGXPVBrcfudWCxyx3yt37/w+cPf/9n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlBoPBoUddufuowUPvLTL83upjRw0G+w09YgdzPrTO0J7D62w+aeOJg8FcI2uMe9QPfdR59IgVFx8/8jhh5HHi9OvTuMHDx+vYwamnjRrMPm35w8079zxD8w8Gy4+8HNnPYOXpD/NfPmO9qbM060CHHv62z/SvaS0w/COGn+w13zUnDc/VLNv/P9OMa/X2o/7lqp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMfz5q5HFoz5tu/PAmw4/DrxdcZ+9rnuzxPskNnXvN5Cljrtrg9iO3WvCY5U65e///gbPnv/8T1H/SsP9cx40bDHba9MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckaejHl46as+OC2zo3GsmTxlz1Qa3H7nVgscsd8rd+z/ZA/pPewz/j+aPWfw/lj9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/p/JH7P475s/ZvH/bP6Yxf9z+WMW/8/nj1n898sfs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/A/KH7P4H5w/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi/+38scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/2/ljFv/v5I9Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/7v5Yxb/M/LHLP5n5o9Z/M/KH7P4fy9/zOL//fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv8L8scs/hfmj1n8f5Y/ZvG/KH/M4v/z/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjF/6r8MYv/1fljFv/f5I9Z/H+bP2bxvyZ/zOL/u/wxi/+1+WMW/+vyxyz+1+ePWfx/nz9m8b8hf8zif2P+mMX/pvwxi/8f8scs/n/MH7P4/yl/zOJ/c/6Yxf/P+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/0v+mMX/jvwxi/+d+WMW/7/mj1n878ofs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Zxvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+T+q2UceDf7Pzx+znP+L549Z/JfIH7P4vyB/zOK/ZP6YxX+p/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/9L5Yxb/l+aPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+WPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/l+WMW/9Xyxyz+q+ePWfxfkT9m8X9l/pjFf438MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+18scs/mvnj1n8J+WPWfwnq/xne8JrWvzXUfk/8Sz+6+aPWfxflT9m8X91/pjFf738MYv/+vljFv8N8scs/q/JH7P4b5g/ZvF/bf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+XP2bx3yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyf/aR042yNfW/zPzR+z+J+XP2bxPz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/hfkj1n8L8wfs/j/LH/M4n9R/pjF/+f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/VfljFv9X549Z/NcT+q/xBNax+K8v9H8iWfw3yB+z+L8mf8ziv2H+mMX/tYPL8ocs/ht1/mMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/6EH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+K+RP2bxH58/ZvGfkD9m8Z+YP2bxXzN/zOK/Vv6YxX/t/DGL/6T8MYv/5Pwxi/86+WMW/3Xzxyz+r8ofs/i/On/M4r9e/pjFf/38MYv/BvljFv/X5I9Z/DfMH7P4vzZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vyx+z+G+WP2bx3zx/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4b5E/ZvHfMn/M4r9V/pjF/235Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P4fzR/zOL/sfwxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8f9M/pjFf9/8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP8cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1flj1n8X50/ZvFfL3/M4r9+/pjFf4P8MYv/a/LHLP4b5o9Z/F+bP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+WPWfw3yx+z+G+eP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/LfIH7P4b5k/ZvHfKn/M4v+2/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/h/Jn/M4r9v/pjF/7P5Yxb/z+WPWfw/nz9m8d8vf8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvE/KH/M4n9w/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8f9m/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+38ofs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/2/nj1n8v5M/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv/v5o9Z/M/IH7P4n5k/ZvE/K3/M4v+9/DGL//fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8L8gfs/hfmD9m8f9Z/pjF/6L8MYv/z/PHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv+r8scs/lfnj1n8f5M/ZvH/bf6Yxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d1r95378ty3+f7X6/4ss/nflj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9V/pjF/9X5Yxb/9fLHLP7r549Z/DfIH7P4vyZ/zOK/Yf6Yxf+1+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf13+mMV/s/wxi//m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6YxX+L/DGL/5b5Yxb/rfLHLP5vyx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/9vzxyz+2+ePWfzfkT9m8X9n/pjFf4f8MYv/jvljFv+d8scs/jvnj1n835U/ZvF/d/6YxX+X/DGL/3vyxyz+u+aPWfzfmz9m8X9f/pjF//35Yxb/3fLHLP67549Z/PfIH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/Z/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/Z/LHLP775o9Z/D+bP2bx/1z+mMX/8/ljFv/98scs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/g/LHLP4H549Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f92/pjF/zv5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyx+z+H8/f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/4L8MYv/hfljFv+f5Y9Z/C/KH7P4/zx/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/Kn/M4n91/pjF/zf5Yxb/3+aPWfyvyR+z+P8uf8zif23+mMX/uvwxi//1+WMW/9/nj1n8b8gfs/jfmD9m8b8pf8zi/4f8MYv/H/PHLP5/yh+z+N+cP2bx/3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zif2f+mMX/r/ljFv+78scs/n/LH7P4/z1/zOL/j/wxi/8/88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/3IP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/yfljFv918scs/uvmj1n8X5U/ZvF/df6YxX+9/DGL//r5Yxb/DfLHLP6vyR+z+G+YP2bxf23+mMV/o/wxi//G+WMW/03yxyz+m+aPWfxflz9m8d8sf8ziv3n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bx3yJ/zOK/Zf6YxX+r/DGL/9vyxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ3/M4v+Z/DGL/775Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/i/LHLP4/zx+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/K/KH7P4X50/ZvH/Tf6Yxf+3+WMW/2vyxyz+v8sfe6T/6Cd7OP95j+F/bf6Y5fy/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/2v+8/10Nv5f/o/vf9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/isp/ad+5F+tYfFfWen/r7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+bmf2HOhhmZPH/beSYxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z93kD9m8e//8o2z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/yx/2X/qR95aOm8r8sf+1/2n/n83yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/zKf/9xPZCWL/+U+/yeUxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfb5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//r8scs/pvlj1n8N88fs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+W+SPWfy3zB+z+G+VP2bxf1v+mMV/6/wxi/82+WMW/23zxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/sIf9tT/qf9n9X/pjl/H93/pjFf5f8MYv/e/LHLP675o9Z/N+bP2bxf1/+mMX//fljFv/d8scs/rvnj1n898gfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/9n8scs/vvmj1n8P5s/ZvH/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS//kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4v/R/DGL/8fyxyz+H88fs/h/In/M4r9X/pjF/5P5Yxb/vfPHLP6fyh+z+H86f8ziv0/+mMX/M/ljFv9988cs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif9TBvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9aIv+5/o11Lf5ri/z/nSz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/AoP8MYv/UP6YxX9U/pjFf7b8MYv/7Pk/otlGHi3+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj/1/7NGzFiCGAkXRZ79kYtu2bdu2bWdi27Zt27Zt254UqbLW/YLcvbtTn5b/A/2PWv7v5n/U8n93/6OW/3v4H7X839P/qOX/Xv5HLf/39j9q+b+P/1HL/339j1r+7+d/1PJ/f/+jlv8H+B+1/D/Q/6jl/0H+Ry3/D/Y/avl/iP9Ry/9D/Y9a/h/mf9Ty/3D/o5b/R/gftfw/0v+o5f9R/kct/4/2P2r5f4z/Ucv/Y/2PWv4f53/U8v94/6OW/yf4H7X8P9H/qOX/Sf5HLf9P9j9q+X+K/1HL/1P9j1r+n+Z/1PL/dP+jlv9n+B+1/D/T/6jl/1n+Ry3/z/Y/avl/jv9Ry/9z/Y9a/p/nf9Ty/3z/o5b/F/gftfy/0P+o5f9F/kct/y/2P2r5f4n/Ucv/S/2PWv5f5n/U8v9y/6OW/1f4H7X8v9L/qOX/Vf5HLf+v9j9q+X+N/1HL/2v9j1r+X+d/1PL/ev+jlv83+B+1/L/R/6jl/03+Ry3/b/Y/avl/i/9Ry/9b/Y9a/t/mf9Ty/3b/o5b/d/gftfy/0/+o5f9d/kct/+/2P2r5f4//Ucv/e/2PWv7f53/U8v9+/6OW/w/4H7X8f9D/qOX/Q/5HLf8f9j9q+f+I/1HL/0f9j1r+P+Z/1PL/cf+jlv9P+B+1/H/S/6jl/1P+Ry3/n/Y/avn/jP9Ry/9n/Y9a/j/nf9Ty/3n/o5b/L/gftfx/0f+o5f9L/kct/1/2P2r5/4r/Ucv/V/2PWv6/5n/U8v91/6OW/2/4H7X8f9P/qOX/W/5HLf/f9j9q+f+O/1HL/3f9j1r+v+d/1PL/ff+jlv8f+B+1/P/Q/6jl/0f+Ry3/P/Y/avn/if9Ry/9P/Y9a/n/mf9Ty/3P/o5b/X/gftfz/0v+o5f9X/kct/7/2P2r5/43/Ucv/b/2PWv5/53/U8v97/6OW/z/4H7X8/9H/qOX/T/5HLf9/9j9q+f+L/1HL/0H+RyX/B/zJ/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/v/2PWv7/x/+o5f9//Y9a/v/P/6jl///9j1r+D+Z/1PJ/cP+jlv8D/I9a/g/hf9Tyf0j/o5b/Q/kftfwf2v+o5f8w/kct/4f1P2r5P5z/Ucv/4f2PWv6P4H/U8n9E/6OW/yP5H7X8H9n/qOX/KP5HLf9H9T9q+T+a/1HL/9H9j1r+j+F/1PJ/TP+jlv9j+R+1/B/b/6jl/zj+Ry3/x/U/avk/nv9Ry//x/Y9a/k/gf9Tyf0L/o5b/E/kftfyf2P+o5f8k/kct/yf1P2r5P5n/Ucv/yf2PWv5P4X/U8n9K/6OW/1P5H7X8n9r/qOX/NP5HLf+n9T9q+T+d/1HL/+n9j1r+z+B/1PJ/Rv+jlv8z+R+1/J/Z/6jl/yz+Ry3/Z/U/avk/m/9Ry//Z/Y9a/s/hf9Tyf07/o5b/c/kftfyf2/+o5f88/kct/+f1P2r5P5//Ucv/+f2PWv4v4H/U8n9B/6OW/wv5H7X8X9j/qOX/Iv5HLf8X9T9q+b+Y/1HL/8X9j1r+L+F/1PJ/Sf+jlv9L+R+1/F/a/6jl/zL+Ry3/l/U/avm/nP9Ry//l/Y9a/q/gf9Tyf0X/o5b/K/kftfxf2f+o5f8q/kct/1f1P2r5v5r/Ucv/1f2PWv6v4X/U8n9N/6OW/2v5H7X8X9v/qOX/Ov5HLf/X9T9q+b+e/1HL//X9j1r+b+B/1PJ/Q/+jlv8b+R+1/N/Y/6jl/yb+/2bQ77Pl/6b+Ry3/N/M/avm/uf9Ry/8t/I9a/m/pf9Tyfyv/o5b/W/sftfzfxv+o5f+2/kct/7fzP2r5v73/Ucv/HfyPWv7v6H/U8n8n/6OW/zv7H7X838X/qOX/rv5HLf8H+h/94f4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mq+/cd4XRdwHP8ccIBkGy5mDGuDfFu6pXTHj+EfTkgELvTA34gaAncgeAd0HHacGj/+IJfOH7mRYytXwrCctHnLNZ1dmlmzWLXV7IeapStrkeks2GJd+95977z7dtz6vs/3m5WPxx/3/X4+X14f4LYnnw9TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9dDY0LjoytGXJq7OCDDx9u7n2dfXTFTQd+331B/2v546XDXHLM4IOenp6e2c/O2lE+nFAUReln21k+nlg5Ll1/Z/2XOvqOwvzuFxcfn/zLxiMH1pz2cF3X0ftqe8/WFjeu29DS/IkxRREuqi06Sgd1NUURFtUW95YO6ksHi2uLh0sHs3oPTim+Wzo4b+3mlqbSiSXR3zP4f9HQuLMYO6TYYsifBoP731n/nTv6X0e4ZP/VxhXl/i/v/OGbFZ/1O0H//dcPCyr7r/o3CJxQdf0/P7//dYRL/sf9f9KTK18e7rMT999//fBJ/UM6wzz/D2m08rm/4vl/+jCXHNhfWdN5vNT/Jbc+M6N8atx/8/z/zvXDRZX9jxny/F96jl/Y//w/oSjCxaP8dsB7SkPjriMj3f9H7n/ctIpNzeD+T2/bvL/U/2OLf/B4+VRtlf0vHOH+P2ZJxa8VqE5D41d7Ku7/VfRffGyYSw70/9bjv32o1P+jf7z/jEGfVdP/xZX9z2xv3TJz6/bOcze0rl7fvL55U92sebPn1tfNPX/OzN5Hgr6vo/yuwHvD6O7/xaSKTU1RNA/sr+468FSp/zkPPDC7fGpilf0vGvH+P939H4b1kTHF+PFFx+r29ra6vq/9h/V9X/t+2DD9V/H3/zPPLv+w2vJrTVFMHdjfecZdy0v9v33omd3lU+Or7H/xiP3PH/h5gQijvP83VWyG9H/w0Iu9z/9L7zl4evlUtX//XzJi/6+4/8NoNDRW/A8/77JS/7uKSyM7DQ3++x+kk6P/R9++vjtuHT6lf0gnR/9/+MLRc+LWYan+IZ0c/Y/beP9zcetwif4hnRz9L5syb3ncOlyqf0gnR/9rXznnr3Hr0Kh/SCdH/2d/ZXdH3Dos0z+kk6P/B9tmb4tbh+X6h3Ry9P/zUx98NW4dLtM/pJOj/2PH7r4hbh0u1z+kk6P/rj1n/ShuHa7QP6STo//L1i0Icetwpf4hnRz9T5v658fi1uEq/UM6Ofqf+5d/nhq3DlfrH9LJ0f/tX1y+L24drtE/pJOj/7HXvfxC3Dqs0D+kk6P/JWdtWxC3DtfqH9LJ0X/Tz5p64tZhZbn/CYX+4V2Xo/+Z3/zJhrh1uM79H9LJ0f/hZY/siVuH6/UP6eTof09dMTluHW7QP6STo/9vfP+0Q3Hr8Gn9Qzo5+v/dk0/Mi1uHVfqHdHL0/+yHbvtW3DrcqH9IJ0f/96x54cy4dVitf0gnR/8P7X3uy3HrsEb/kE6O/l9/vfV9ceuwVv+QTo7+J0085bW4dWjSP6STo/8Ft3ytLW4dmvUP6eTov3V314/j1mGd/iGdHP1/9PjUlXHrsF7/kE6O/lfM2fvBuHW4Sf+QTo7+P7D0gl1x67BB/5BOjv4v7P74hXHrsFH/kE6O/tuf/vzX49bhZv1DOjn63zvj1UVx69Cif0gnR/8vrVry07h1aNU/pJOj/zcfuXZT3Dps0j+kk6P/J37x1rG4ddisf0gnR//vP3/h3+PWYYv+IZ0c/S9a/MbauHX4jP4hnRz9b+z610tx69Cmf0gnR/8zDl+1NG4dtuof0snR//fOrdsftw7t+od0cvR/xxX76uPWYZv+IZ0c/e8/eOddcetwi/4hnRz9v/Gr6dPi1uGz+od0cvR/3+RD18StQ4f+IZ0c/f96U+3TceuwXf+QTo7+/7Fvyo64dejUP6STo/+nXuv+U9w63Kp/SCdH/6vG/WZ83Drcpn9IJ0f/Uzq33Bu3DrfrH9LJ0f+8u1efF7cOn9M/pJOj/61/e/7bceuwQ/+QztbtnTevbmlpbvPGG2+8GXhzsv9kAlJ7J/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//9O+OOp") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='pids.current\x00', 0x275a, 0x0) 1.484371556s ago: executing program 2 (id=1878): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0xfffffffc, 0x2}}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.454526145s ago: executing program 1 (id=1879): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00000, &(0x7f0000000300)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',nobarrier,umask=00000000000000000006747,nls=cp1250,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723dbd3c66f52c00026bb2ad7764ce6cba212e14c53d15a8ba573e0c1461130f1bf6ac8277e3a71724dae60c4c9ca6ce140fcafe7570c3fea3196b318a4550859f416761b51b5a4ce43813d64cbfe556ce28bc717f0d05235f79d9cd84ff85f20c27dc714f4b0a10c7047f7703b065b118bd317933faed73b2d78f6d6d4b3c32f2c8cf78b633fab70800000000000000c7bde6bc11cc1d457c"], 0x3, 0x6a4, &(0x7f0000003fc0)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") syz_mount_image$fuse(0x0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40010, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.224696411s ago: executing program 2 (id=1880): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x3b, 0x1000, 0x27}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.182679877s ago: executing program 3 (id=1881): sched_getaffinity(0x0, 0x8, &(0x7f0000000280)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x302, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000500)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r1, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 146.789945ms ago: executing program 1 (id=1882): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x8000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10, @ANYBLOB="01"], 0x20}}, 0x0) 145.840448ms ago: executing program 2 (id=1883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) r4 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0x4020940d, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x2}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000005ec0)=0x10) recvmmsg(r4, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x33440000}, {{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/115, 0x73}], 0x3, &(0x7f00000031c0)=""/4088, 0xff8}, 0x800}], 0x3, 0x41, &(0x7f00000042c0)) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r8, &(0x7f0000000140)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x1a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 0s ago: executing program 3 (id=1884): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x8000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): hange from 0 to 128 [ 335.736419][ T8651] loop5: detected capacity change from 0 to 512 [ 335.750106][ T8651] ext4: Unknown parameter 'obj_user' [ 336.256724][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.858720][ T8667] netlink: 80 bytes leftover after parsing attributes in process `syz.5.843'. [ 338.110420][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 338.299325][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 338.326872][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.345209][ T9] usb 4-1: config 0 has no interface number 0 [ 338.520162][ T8684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.841'. [ 338.549974][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 64 [ 338.802689][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.902230][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.238087][ T8686] loop0: detected capacity change from 0 to 32768 [ 339.923335][ T9] usb 4-1: config 0 descriptor?? [ 339.938146][ T9] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 340.213898][ T8686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.849 (8686) [ 340.782548][ T8686] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 340.793106][ T8686] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 340.802591][ T8686] BTRFS error (device loop0): superblock checksum mismatch [ 340.935541][ T9] usb 4-1: USB disconnect, device number 4 [ 341.113275][ T8686] BTRFS error (device loop0): open_ctree failed [ 341.122494][ T5994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by udevd (5994) [ 341.180110][ T8698] siw: device registration error -23 [ 341.311006][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.521951][ T8700] loop5: detected capacity change from 0 to 512 [ 341.573187][ T8700] ext4: Unknown parameter 'obj_user' [ 342.181949][ T8708] loop1: detected capacity change from 0 to 128 [ 343.485249][ T8722] netlink: 80 bytes leftover after parsing attributes in process `syz.5.859'. [ 347.102777][ T8749] loop2: detected capacity change from 0 to 1024 [ 347.360758][ T8749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.405287][ T8752] loop3: detected capacity change from 0 to 32768 [ 347.425648][ T8752] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 347.436949][ T8752] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 347.446565][ T8752] BTRFS error (device loop3): superblock checksum mismatch [ 347.458738][ T8752] BTRFS error (device loop3): open_ctree failed [ 347.819845][ T8748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.845435][ T8761] overlayfs: missing 'lowerdir' [ 348.477944][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.692614][ T8771] loop5: detected capacity change from 0 to 512 [ 348.713547][ T8771] ext4: Unknown parameter 'obj_user' [ 350.976204][ T8793] netlink: 80 bytes leftover after parsing attributes in process `syz.5.877'. [ 352.255118][ T8807] loop5: detected capacity change from 0 to 764 [ 352.969665][ T8807] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 354.038291][ T8815] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 354.294694][ T8819] loop5: detected capacity change from 0 to 1024 [ 354.576022][ T8824] loop2: detected capacity change from 0 to 512 [ 354.640091][ T8819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.696582][ T8823] loop3: detected capacity change from 0 to 32768 [ 354.700474][ T8824] ext4: Unknown parameter 'obj_user' [ 354.709931][ T8823] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.888 (8823) [ 354.985473][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.019573][ T8823] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 355.030123][ T8823] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 355.039550][ T8823] BTRFS error (device loop3): superblock checksum mismatch [ 355.047976][ T8823] BTRFS error (device loop3): open_ctree failed [ 356.591260][ T8843] netlink: 68 bytes leftover after parsing attributes in process `syz.1.892'. [ 356.866588][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.502202][ T8869] loop1: detected capacity change from 0 to 2048 [ 359.524845][ T8869] EXT4-fs: Ignoring removed mblk_io_submit option [ 359.580898][ T8874] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 359.598433][ T8876] netlink: 'syz.5.904': attribute type 1 has an invalid length. [ 359.631253][ T8869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.653281][ T8877] netlink: 80 bytes leftover after parsing attributes in process `syz.4.900'. [ 359.718100][ T8876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 359.727055][ T8869] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 359.736275][ T8869] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 360.560886][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.582824][ T8892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.908'. [ 360.833808][ T8897] loop1: detected capacity change from 0 to 1024 [ 360.836397][ T8900] loop3: detected capacity change from 0 to 512 [ 360.869907][ T8900] ext4: Unknown parameter 'obj_user' [ 360.945598][ T8900] overlayfs: missing 'lowerdir' [ 361.108419][ T8897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.583603][ T8896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.011322][ T8911] loop3: detected capacity change from 0 to 764 [ 363.122205][ T8911] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 364.504217][ T8925] overlayfs: failed to resolve './file0/../file0': -2 [ 364.530426][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.266927][ T8939] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 365.353450][ T8942] netlink: 68 bytes leftover after parsing attributes in process `syz.5.924'. [ 365.365798][ T8939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.594968][ T8948] loop5: detected capacity change from 0 to 512 [ 365.621194][ T8948] ext4: Unknown parameter 'obj_user' [ 365.733616][ T8948] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 365.770255][ T8948] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 365.924829][ T8955] netlink: 80 bytes leftover after parsing attributes in process `syz.0.921'. [ 367.103665][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.635084][ T8973] loop1: detected capacity change from 0 to 2048 [ 368.684690][ T8973] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.983502][ T8984] loop5: detected capacity change from 0 to 764 [ 369.063544][ T8984] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 369.132529][ T8973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.310363][ T8973] overlayfs: missing 'workdir' [ 369.445160][ T8988] netlink: 68 bytes leftover after parsing attributes in process `syz.3.938'. [ 369.606132][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.742969][ T8995] loop2: detected capacity change from 0 to 512 [ 369.750773][ T8995] ext4: Unknown parameter 'obj_user' [ 369.763815][ T8995] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 369.773272][ T8995] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 370.305375][ T9009] loop2: detected capacity change from 0 to 1024 [ 370.484429][ T9009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.019251][ T9008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.395826][ T9029] loop0: detected capacity change from 0 to 2048 [ 372.403764][ T9029] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.466653][ T9029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.514963][ T9029] overlayfs: missing 'workdir' [ 372.543447][ T9034] netlink: 68 bytes leftover after parsing attributes in process `syz.3.954'. [ 372.810277][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.030810][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.077549][ T9040] loop3: detected capacity change from 0 to 1024 [ 373.152476][ T9040] EXT4-fs: Ignoring removed nobh option [ 373.158465][ T9040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.285008][ T9040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.513158][ T9051] loop1: detected capacity change from 0 to 764 [ 373.771058][ T9053] EXT4-fs error (device loop3): __ext4_new_inode:1071: comm syz.3.956: reserved inode found cleared - inode=18 [ 373.784824][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 373.826476][ T9051] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 374.102412][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 374.123751][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.148050][ T9] usb 3-1: config 0 has no interface number 0 [ 374.177092][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59093, setting to 64 [ 374.269062][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 374.309157][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.364570][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.380426][ T9] usb 3-1: config 0 descriptor?? [ 374.605237][ T9055] overlayfs: failed to resolve './file0': -2 [ 374.872312][ T9] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 374.882583][ T9] usb 3-1: USB disconnect, device number 3 [ 375.116538][ T9067] loop5: detected capacity change from 0 to 512 [ 376.298027][ T9067] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 376.307926][ T9067] System zones: 0-2, 18-18, 34-35 [ 376.427153][ T9067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.509486][ T9067] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.634945][ T9086] loop3: detected capacity change from 0 to 2048 [ 376.642710][ T9086] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.970262][ T9088] loop2: detected capacity change from 0 to 764 [ 376.991885][ T9088] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 377.037377][ T9086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.094565][ T9095] netlink: 68 bytes leftover after parsing attributes in process `syz.4.968'. [ 377.122389][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.299739][ T9098] loop2: detected capacity change from 0 to 512 [ 377.306985][ T9098] ext4: Unknown parameter 'obj_user' [ 377.321221][ T9098] overlayfs: missing 'lowerdir' [ 377.351449][ T9086] overlayfs: missing 'workdir' [ 377.386717][ T9102] netlink: 92 bytes leftover after parsing attributes in process `syz.4.973'. [ 378.131253][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.410524][ T9121] netlink: 80 bytes leftover after parsing attributes in process `syz.1.976'. [ 378.442915][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.455659][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.568269][ T9148] loop5: detected capacity change from 0 to 764 [ 382.671045][ T9145] loop1: detected capacity change from 0 to 512 [ 382.706819][ T9148] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 382.768256][ T9150] tmpfs: Bad value for 'mpol' [ 382.775261][ T9150] siw: device registration error -23 [ 382.926576][ T9145] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 382.966071][ T9145] System zones: 0-2, 18-18, 34-35 [ 383.034538][ T9145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.057926][ T9155] netlink: 92 bytes leftover after parsing attributes in process `syz.3.986'. [ 383.088336][ T9145] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.158835][ T9159] netlink: 68 bytes leftover after parsing attributes in process `syz.0.985'. [ 383.665111][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.927311][ T9166] loop0: detected capacity change from 0 to 512 [ 383.964691][ T9166] ext4: Unknown parameter 'obj_user' [ 384.067179][ T9166] overlayfs: missing 'lowerdir' [ 384.706189][ T9182] loop0: detected capacity change from 0 to 32768 [ 384.722102][ T9180] netlink: 80 bytes leftover after parsing attributes in process `syz.3.993'. [ 384.851168][ T9170] loop1: detected capacity change from 0 to 8192 [ 384.941981][ T9170] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.135169][ T9182] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 385.536713][ T9170] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 385.581703][ T9170] FAT-fs (loop1): Filesystem has been set read-only [ 385.599877][ T9194] loop3: detected capacity change from 0 to 764 [ 385.638803][ T5842] ocfs2: Unmounting device (7,0) on (node local) [ 385.707944][ T9170] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 385.943720][ T9194] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 386.154967][ T9170] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 386.502881][ T9198] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 386.847383][ T9201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.314795][ T9207] loop5: detected capacity change from 0 to 764 [ 387.403427][ T9207] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 387.564973][ T5846] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 388.013185][ T9216] loop1: detected capacity change from 0 to 512 [ 388.043610][ T9218] loop2: detected capacity change from 0 to 1024 [ 388.044396][ T9218] EXT4-fs: Ignoring removed nobh option [ 388.044470][ T9218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.776963][ T9218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.797325][ T9216] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 388.816918][ T9219] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1002'. [ 388.836197][ T9227] loop0: detected capacity change from 0 to 128 [ 388.844342][ T9216] System zones: 0-2, 18-18, 34-35 [ 389.075313][ T9227] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 389.145032][ T9216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.165334][ T9216] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.246615][ T9232] EXT4-fs error (device loop2): __ext4_new_inode:1071: comm syz.2.1005: reserved inode found cleared - inode=18 [ 389.936152][ T9237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1008'. [ 389.998247][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.021587][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.290851][ T9245] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 390.316760][ T5842] sysv_free_block: flc_count > flc_size [ 390.326035][ T5842] sysv_free_block: flc_count > flc_size [ 390.358759][ T5842] sysv_free_block: flc_count > flc_size [ 390.404360][ T5842] sysv_free_block: flc_count > flc_size [ 390.414729][ T5842] sysv_free_block: flc_count > flc_size [ 390.425631][ T5842] sysv_free_block: flc_count > flc_size [ 390.431287][ T5842] sysv_free_block: flc_count > flc_size [ 390.436947][ T5842] sysv_free_block: flc_count > flc_size [ 390.442761][ T5842] sysv_free_block: flc_count > flc_size [ 390.448498][ T5842] sysv_free_block: flc_count > flc_size [ 390.454698][ T5842] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 392.328981][ T9265] loop0: detected capacity change from 0 to 764 [ 392.430885][ T9265] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 393.077309][ T9255] loop3: detected capacity change from 0 to 8192 [ 393.133862][ T9255] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.251805][ T9267] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 393.293239][ T9271] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1020'. [ 393.355656][ T9272] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.477204][ T9278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1024'. [ 395.225172][ T9298] netlink: 'syz.5.1029': attribute type 1 has an invalid length. [ 395.834469][ T9309] loop0: detected capacity change from 0 to 128 [ 395.866909][ T9309] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 396.251241][ T9316] loop5: detected capacity change from 0 to 32768 [ 396.685152][ T9327] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1035'. [ 397.475597][ T9332] loop1: detected capacity change from 0 to 512 [ 397.505018][ T5842] sysv_free_block: flc_count > flc_size [ 397.534309][ T5842] sysv_free_block: flc_count > flc_size [ 397.543940][ T5842] sysv_free_block: flc_count > flc_size [ 397.563478][ T5842] sysv_free_block: flc_count > flc_size [ 397.575363][ T5842] sysv_free_block: flc_count > flc_size [ 397.581442][ T5842] sysv_free_block: flc_count > flc_size [ 397.587203][ T5842] sysv_free_block: flc_count > flc_size [ 397.592933][ T5842] sysv_free_block: flc_count > flc_size [ 397.598499][ T5842] sysv_free_block: flc_count > flc_size [ 397.624681][ T5842] sysv_free_block: flc_count > flc_size [ 397.644190][ T5842] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 397.673243][ T9330] loop2: detected capacity change from 0 to 8192 [ 397.755755][ T9330] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.118690][ T9332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.520437][ T9340] loop0: detected capacity change from 0 to 1024 [ 398.529985][ T9332] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.591636][ T9340] EXT4-fs: Ignoring removed nobh option [ 398.597383][ T9340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.003288][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 399.068040][ T9340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.171439][ T5913] usb 6-1: device descriptor read/64, error -71 [ 399.439582][ T5913] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 399.949003][ T5913] usb 6-1: device descriptor read/64, error -71 [ 400.078327][ T5913] usb usb6-port1: attempt power cycle [ 400.582435][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.602316][ T5913] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 400.613412][ T9355] EXT4-fs error (device loop0): __ext4_new_inode:1071: comm syz.0.1042: reserved inode found cleared - inode=18 [ 400.681097][ T5913] usb 6-1: device descriptor read/8, error -71 [ 400.943049][ T9330] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 400.953179][ T9330] FAT-fs (loop2): Filesystem has been set read-only [ 400.985341][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.996684][ T9330] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 401.276610][ T9330] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 401.782534][ T9366] delete_channel: no stack [ 402.263211][ T9376] overlayfs: failed to resolve './file0': -2 [ 402.328328][ T9383] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1051'. [ 402.606828][ T9386] loop5: detected capacity change from 0 to 764 [ 403.045636][ T9386] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 403.096432][ T9392] ebtables: ebtables: counters copy to user failed while replacing table [ 405.044697][ T9406] loop1: detected capacity change from 0 to 1024 [ 405.058036][ T9406] EXT4-fs: Ignoring removed nobh option [ 405.064163][ T9406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.313898][ T9414] loop2: detected capacity change from 0 to 8192 [ 405.326777][ T9414] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.358529][ T9406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.396956][ T9418] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 405.676505][ T9422] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz.1.1063: reserved inode found cleared - inode=18 [ 405.794408][ T9426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.153089][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.379029][ T9420] delete_channel: no stack [ 406.529385][ T5976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 406.689022][ T5976] usb 5-1: device descriptor read/64, error -71 [ 406.709394][ T9414] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 406.733771][ T9431] loop3: detected capacity change from 0 to 1024 [ 406.779147][ T9414] FAT-fs (loop2): Filesystem has been set read-only [ 406.946772][ T9414] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 407.128450][ T9431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.244202][ T9414] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 407.897173][ T9445] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1074'. [ 407.977393][ T9447] loop5: detected capacity change from 0 to 512 [ 408.024115][ T5976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 408.033943][ T9447] ext4: Unknown parameter 'obj_user' [ 408.087732][ T9447] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 408.113110][ T9447] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 408.925192][ T9430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.699716][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.981730][ T9469] loop0: detected capacity change from 0 to 128 [ 410.169090][ T9458] loop2: detected capacity change from 0 to 4096 [ 411.180259][ T9476] loop3: detected capacity change from 0 to 1024 [ 411.187616][ T9476] EXT4-fs: Ignoring removed nobh option [ 411.198969][ T9476] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.445899][ T9476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.566376][ T9491] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1089'. [ 411.719190][ T9487] overlayfs: failed to resolve './file0/../file0': -2 [ 411.809355][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 411.847029][ T9495] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 411.887021][ T9493] EXT4-fs error (device loop3): __ext4_new_inode:1071: comm syz.3.1082: reserved inode found cleared - inode=18 [ 411.969037][ T25] usb 6-1: device descriptor read/64, error -71 [ 412.167633][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.286682][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.300518][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 412.469149][ T25] usb 6-1: device descriptor read/64, error -71 [ 412.497361][ T9510] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1099'. [ 412.512764][ T9516] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 412.619378][ T25] usb usb6-port1: attempt power cycle [ 412.705117][ T9515] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.773116][ T5152] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 412.871121][ T9524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1103'. [ 412.937708][ T9527] loop3: detected capacity change from 0 to 2048 [ 412.953307][ T9527] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.999121][ T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 413.044653][ T25] usb 6-1: device descriptor read/8, error -71 [ 413.065643][ T9527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.375523][ T9536] loop1: detected capacity change from 0 to 512 [ 414.191119][ T9536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.219148][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 414.307068][ T9536] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.449772][ T25] usb 6-1: device descriptor read/8, error -71 [ 414.559263][ T25] usb usb6-port1: unable to enumerate USB device [ 414.567131][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.830669][ T9551] netlink: 'syz.4.1113': attribute type 10 has an invalid length. [ 414.955213][ T9554] netlink: 'syz.4.1113': attribute type 10 has an invalid length. [ 415.064064][ T9551] team0: Failed to send options change via netlink (err -105) [ 415.072943][ T9551] team0: Port device netdevsim0 added [ 415.110375][ T9554] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 415.250494][ T9556] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1110'. [ 415.805099][ T9554] team0: Port device netdevsim0 removed [ 415.843581][ T9554] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 415.950467][ T9561] loop3: detected capacity change from 0 to 1024 [ 416.039514][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1116'. [ 416.137411][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.177196][ T9561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.588690][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.818007][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.834479][ T5152] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 416.845517][ T5152] Bluetooth: hci4: Injecting HCI hardware error event [ 416.857082][ T5152] Bluetooth: hci4: hardware error 0x00 [ 416.867435][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 417.093457][ T9589] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1119'. [ 417.923420][ T9594] input: syz1 as /devices/virtual/input/input6 [ 417.989060][ T9] usb 6-1: device descriptor read/64, error -71 [ 418.233559][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 418.506366][ T9606] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1128'. [ 419.058474][ T5152] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 419.233217][ T9] usb 6-1: device descriptor read/64, error -71 [ 419.349325][ T9] usb usb6-port1: attempt power cycle [ 419.371740][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 419.705103][ T9621] loop5: detected capacity change from 0 to 1024 [ 419.712166][ T9623] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1137'. [ 419.868783][ T9621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.000633][ T9622] loop1: detected capacity change from 0 to 4096 [ 420.170254][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.775598][ T9638] loop5: detected capacity change from 0 to 32768 [ 420.784069][ T9638] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1140 (9638) [ 420.849193][ T9638] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 420.859751][ T9638] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 420.869254][ T9638] BTRFS error (device loop5): superblock checksum mismatch [ 420.876991][ T9638] BTRFS error (device loop5): open_ctree failed [ 420.927706][ T5994] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by udevd (5994) [ 421.748583][ T9651] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1146'. [ 421.931131][ T9656] pimreg: entered allmulticast mode [ 422.059338][ T5908] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 422.106517][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 422.191663][ T9661] loop1: detected capacity change from 0 to 1024 [ 422.242485][ T9661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.269135][ T5908] usb 1-1: device descriptor read/64, error -71 [ 422.342517][ T9665] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1151'. [ 422.359001][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 422.375084][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.394049][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.466171][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 422.479196][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.500912][ T9] usb 5-1: config 0 descriptor?? [ 422.509014][ T5908] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 422.528967][ T9] hub 5-1:0.0: USB hub found [ 422.555418][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.727274][ T9669] loop3: detected capacity change from 0 to 512 [ 423.054857][ T9669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.056729][ T5908] usb 1-1: device descriptor read/64, error -71 [ 423.068145][ T9669] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.074334][ T9] hub 5-1:0.0: 1 port detected [ 423.269300][ T5908] usb usb1-port1: attempt power cycle [ 423.553613][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 423.562602][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 423.572664][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 423.584092][ T46] usb 5-1: USB disconnect, device number 6 [ 423.791810][ T5152] Bluetooth: hci1: unexpected event 0x09 length: 5 > 3 [ 424.579695][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.732383][ T5908] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 424.787882][ T9694] loop1: detected capacity change from 0 to 4096 [ 424.811988][ T9694] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 424.906832][ T9699] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1165'. [ 424.960301][ T9701] tmpfs: Bad value for 'mpol' [ 424.999057][ T5908] usb 1-1: device not accepting address 8, error -71 [ 425.003978][ T9701] siw: device registration error -23 [ 425.638237][ T9711] loop0: detected capacity change from 0 to 32768 [ 425.663320][ T9711] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 425.674070][ T9711] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 425.683895][ T9711] BTRFS error (device loop0): superblock checksum mismatch [ 425.691729][ T9711] BTRFS error (device loop0): open_ctree failed [ 427.092847][ T9724] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1172'. [ 428.276479][ T9732] loop3: detected capacity change from 0 to 32768 [ 428.464290][ T9732] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 429.159101][ T967] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 429.300225][ T9732] syz.3.1177 (9732) used greatest stack depth: 16984 bytes left [ 429.334838][ T967] usb 6-1: device descriptor read/64, error -71 [ 429.589066][ T967] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 429.971575][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(212365534210326) <= P.seqno(212365534210325) <= S.SWH(212365534210400)) and (P.ackno exists or LAWL(118875567943272) <= P.ackno(118875567943272) <= S.AWH(118875567943272), sending SYNC... [ 429.995987][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.006173][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 430.446199][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 430.495107][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.519276][ T967] usb 6-1: device descriptor read/64, error -71 [ 430.533666][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.564089][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 430.581259][ T46] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 430.595551][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.609644][ T5843] ocfs2: Unmounting device (7,3) on (node local) [ 430.629370][ T967] usb usb6-port1: attempt power cycle [ 430.662159][ T46] usb 5-1: config 0 descriptor?? [ 431.175507][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 431.440892][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 431.892833][ T46] usb 5-1: USB disconnect, device number 7 [ 431.911887][ T967] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 432.002753][ T967] usb 6-1: device descriptor read/8, error -71 [ 432.628214][ T9783] loop3: detected capacity change from 0 to 32768 [ 432.654221][ T9783] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1192 (9783) [ 432.754132][ T9791] loop1: detected capacity change from 0 to 1024 [ 432.761892][ T9791] EXT4-fs: Ignoring removed nobh option [ 432.769181][ T9791] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.826141][ T9783] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 432.837479][ T9783] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 432.847005][ T9783] BTRFS error (device loop3): superblock checksum mismatch [ 432.854922][ T9783] BTRFS error (device loop3): open_ctree failed [ 433.430417][ T9791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.509023][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 433.894640][ T9811] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz.1.1195: reserved inode found cleared - inode=18 [ 434.079039][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 434.086388][ T5913] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 434.094959][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.127919][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.212418][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.275909][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.359420][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 434.433641][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.449071][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.769507][ T9822] loop0: detected capacity change from 0 to 64 [ 435.916374][ T5913] usb 3-1: usb_control_msg returned -32 [ 435.922322][ T5913] usbtmc 3-1:16.0: can't read capabilities [ 435.959875][ T5976] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 436.123449][ T5976] usb 4-1: Using ep0 maxpacket: 8 [ 436.160890][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 436.171932][ T5976] usb 4-1: config index 0 descriptor too short (expected 9093, got 27) [ 436.181068][ T5976] usb 4-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 436.190344][ T5976] usb 4-1: config 24 has an invalid descriptor of length 47, skipping remainder of the config [ 436.201122][ T5976] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 158 [ 436.211058][ T5976] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 436.220781][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.354459][ T9840] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1212'. [ 436.389387][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 436.410240][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.428246][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.454133][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 436.486675][ T46] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 436.500319][ T5976] usb 4-1: string descriptor 0 read error: -71 [ 436.515441][ T5976] usb 4-1: USB disconnect, device number 5 [ 436.530747][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.565441][ T46] usb 2-1: config 0 descriptor?? [ 436.576194][ T9844] loop5: detected capacity change from 0 to 512 [ 436.628436][ T9844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.641843][ T9844] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.691060][ T9850] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 436.842404][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.970327][ T9857] loop5: detected capacity change from 0 to 512 [ 437.000563][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 437.009724][ T9857] EXT4-fs (loop5): blocks per group (95) and clusters per group (32768) inconsistent [ 437.034424][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 437.069763][ T46] usb 2-1: USB disconnect, device number 4 [ 437.199756][ T9857] syzkaller0: entered promiscuous mode [ 437.205692][ T9857] syzkaller0: entered allmulticast mode [ 437.988237][ T967] usb 3-1: USB disconnect, device number 4 [ 438.050747][ T9865] loop1: detected capacity change from 0 to 16 [ 438.173769][ T9865] erofs (device loop1): mounted with root inode @ nid 36. [ 438.184710][ T9865] erofs (device loop1): bogus i_mode (0) @ nid 15 [ 438.366826][ T9870] loop1: detected capacity change from 0 to 2048 [ 438.409272][ T9870] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.474352][ T9870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.518728][ T9873] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 438.920180][ T9878] loop0: detected capacity change from 0 to 32768 [ 439.091776][ T9881] trusted_key: syz.3.1226 sent an empty control message without MSG_MORE. [ 439.116401][ T9881] loop3: detected capacity change from 0 to 256 [ 439.120294][ T29] audit: type=1804 audit(1732307045.970:34): pid=9878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1225" name="/newroot/213/file0/file1" dev="loop0" ino=4 res=1 errno=0 [ 439.129750][ T9881] exfat: Unknown parameter '€' [ 439.144586][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.233356][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.724365][ T9889] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1230'. [ 439.875731][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.882315][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.967326][ T9891] loop1: detected capacity change from 0 to 764 [ 440.775929][ T9891] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 441.304675][ T5976] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 441.489547][ T5976] usb 5-1: Using ep0 maxpacket: 16 [ 441.505472][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.527011][ T5976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.567963][ T5976] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 441.592819][ T5976] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 441.619384][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.675362][ T5976] usb 5-1: config 0 descriptor?? [ 442.224431][ T5976] usbhid 5-1:0.0: can't add hid device: -71 [ 442.230643][ T5976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 442.269391][ T5976] usb 5-1: USB disconnect, device number 8 [ 443.401524][ T9928] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 443.459202][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 443.629402][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 443.655042][ T46] usb 2-1: config index 0 descriptor too short (expected 9093, got 27) [ 443.666054][ T46] usb 2-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 443.675450][ T46] usb 2-1: config 24 has an invalid descriptor of length 47, skipping remainder of the config [ 443.686698][ T46] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 158 [ 443.702857][ T46] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 443.712535][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.940788][ T46] usb 2-1: string descriptor 0 read error: -71 [ 443.952707][ T46] usb 2-1: USB disconnect, device number 5 [ 445.218831][ T9936] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1243'. [ 445.397921][ T9938] loop1: detected capacity change from 0 to 1024 [ 445.446928][ T9938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.385828][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.062475][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.289709][ T9945] loop1: detected capacity change from 0 to 4096 [ 449.250464][ T9873] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 449.260368][ T9917] netlink: 'syz.4.1236': attribute type 21 has an invalid length. [ 449.306568][ T9928] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 449.414992][ T9953] netlink: 'syz.0.1249': attribute type 11 has an invalid length. [ 449.431544][ T9953] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1249'. [ 449.754312][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'. [ 452.014270][ T9981] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1256'. [ 452.089113][ T5976] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 452.509191][ T5976] usb 4-1: Using ep0 maxpacket: 8 [ 452.516728][ T5976] usb 4-1: config index 0 descriptor too short (expected 9093, got 27) [ 452.758571][ T5976] usb 4-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 452.917926][ T5976] usb 4-1: config 24 has an invalid descriptor of length 47, skipping remainder of the config [ 453.198663][ T9984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.324093][ T5976] usb 4-1: config 24 has 0 interfaces, different from the descriptor's value: 158 [ 453.379286][ T5976] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 453.409121][ T5976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.775648][ T9982] loop1: detected capacity change from 0 to 32768 [ 454.303053][ T5976] usb 4-1: string descriptor 0 read error: -71 [ 454.319276][ T5976] usb 4-1: USB disconnect, device number 6 [ 454.381541][ T9956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.477961][ T9997] loop0: detected capacity change from 0 to 256 [ 454.496453][ T9998] loop1: detected capacity change from 0 to 1024 [ 454.545414][ T9997] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.561406][ T9956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.575833][ T9956] bond0 (unregistering): Released all slaves [ 454.576977][ T9998] EXT4-fs: Ignoring removed nobh option [ 454.597602][ T9997] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 454.606502][ T9998] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.654706][ T9997] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 454.671226][ T11] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 454.696352][ T29] audit: type=1800 audit(1732307061.550:35): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1260" name="file1" dev="loop0" ino=1048636 res=0 errno=0 [ 454.730221][ T9998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.767917][ T9998] EXT4-fs error (device loop1): __ext4_new_inode:1071: comm syz.1.1261: reserved inode found cleared - inode=18 [ 454.874737][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.199009][ T5976] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 456.225464][T10030] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1269'. [ 456.236704][T10022] loop0: detected capacity change from 0 to 4096 [ 456.364478][ T5976] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 456.392471][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.433462][ T5976] usb 2-1: Product: syz [ 456.437768][ T5976] usb 2-1: Manufacturer: syz [ 456.468952][ T5976] usb 2-1: SerialNumber: syz [ 456.500006][ T5976] usb 2-1: config 0 descriptor?? [ 456.603252][T10041] loop2: detected capacity change from 0 to 1024 [ 456.765035][ T5976] hso 2-1:0.0: Failed to find BULK IN ep [ 456.788265][T10041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.910458][ T5976] usb-storage 2-1:0.0: USB Mass Storage device detected [ 457.952268][ T5976] usb 2-1: USB disconnect, device number 6 [ 457.987263][T10040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.380572][T10061] omfs: Invalid superblock (0) [ 458.402445][T10059] loop3: detected capacity change from 0 to 1024 [ 458.457671][T10059] EXT4-fs: Ignoring removed nobh option [ 458.507173][T10059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.531001][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.981860][T10059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.018142][T10050] loop0: detected capacity change from 0 to 32768 [ 460.032130][ T5976] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 460.071439][T10059] EXT4-fs error (device loop3): __ext4_new_inode:1071: comm syz.3.1276: reserved inode found cleared - inode=18 [ 460.096223][T10050] read_mapping_page failed! [ 460.101782][T10050] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 460.108642][T10050] Mount JFS Failure: -5 [ 460.113051][T10050] jfs_mount failed w/return code = -5 [ 460.220659][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 460.232210][ T5976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 460.258698][ T5976] usb 5-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 460.295935][T10086] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1283'. [ 460.306327][ T5976] usb 5-1: config 0 has no interface number 0 [ 460.322783][ T5976] usb 5-1: too many endpoints for config 0 interface 1 altsetting 29: 116, using maximum allowed: 30 [ 460.543301][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.140016][T10090] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 461.178940][ T5976] usb 5-1: config 0 interface 1 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 461.208934][ T5976] usb 5-1: config 0 interface 1 has no altsetting 0 [ 461.215640][ T5976] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.238645][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.679872][T10097] loop0: detected capacity change from 0 to 32768 [ 461.711109][T10097] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1285 (10097) [ 461.740908][T10097] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 461.751468][T10097] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 461.761693][T10097] BTRFS error (device loop0): superblock checksum mismatch [ 461.777548][T10097] BTRFS error (device loop0): open_ctree failed [ 461.881258][ T5976] usb 5-1: config 0 descriptor?? [ 461.938187][ T7722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by udevd (7722) [ 462.107232][ T5976] usb 5-1: string descriptor 0 read error: -71 [ 462.116432][ T5976] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 462.238622][ T5976] usb 5-1: USB disconnect, device number 9 [ 462.655043][T10114] loop2: detected capacity change from 0 to 512 [ 462.761404][T10114] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 462.827019][T10114] System zones: 0-2, 18-18, 34-35 [ 462.881582][T10114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.929772][T10114] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.964662][ T967] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 463.178722][ T967] usb 6-1: Using ep0 maxpacket: 8 [ 463.234873][ T967] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 463.253618][ T5976] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 463.279021][ T967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.316967][ T967] usb 6-1: Product: syz [ 463.579953][ T5976] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 463.609418][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.679794][ T5976] usb 4-1: Product: syz [ 463.701636][ T5976] usb 4-1: Manufacturer: syz [ 463.719072][ T5976] usb 4-1: SerialNumber: syz [ 463.756880][ T5976] usb 4-1: config 0 descriptor?? [ 463.964233][ T967] usb 6-1: Manufacturer: syz [ 463.969048][ T967] usb 6-1: SerialNumber: syz [ 464.003677][ T967] usb 6-1: config 0 descriptor?? [ 464.044533][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.574912][ T5976] hso 4-1:0.0: Failed to find BULK IN ep [ 464.787386][ T5976] usb-storage 4-1:0.0: USB Mass Storage device detected [ 464.989275][ T967] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 465.194117][T10150] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1296'. [ 465.280937][ T5976] usb 4-1: USB disconnect, device number 7 [ 466.101930][ T967] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 466.341447][ T967] usb 6-1: USB disconnect, device number 21 [ 467.323502][T10148] loop2: detected capacity change from 0 to 32768 [ 467.411098][T10182] loop5: detected capacity change from 0 to 32768 [ 467.458503][T10182] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 467.469122][T10182] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 467.478381][T10182] BTRFS error (device loop5): superblock checksum mismatch [ 467.486348][T10182] BTRFS error (device loop5): open_ctree failed [ 468.043466][T10189] loop1: detected capacity change from 0 to 32768 [ 468.169366][T10189] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 468.169366][T10189] [ 468.200720][T10189] ERROR: (device loop1): remounting filesystem as read-only [ 468.210460][T10189] syz.1.1303: attempt to access beyond end of device [ 468.210460][T10189] loop1: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 468.243205][ T7722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by udevd (7722) [ 468.572655][ T111] blkno = 5002c, nblocks = 1 [ 468.577336][ T111] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 468.577336][ T111] [ 470.301915][T10207] loop1: detected capacity change from 0 to 4096 [ 470.309395][T10207] nilfs2: Unknown parameter '0xffffffffffffffffÿÿÿÿ0xffffffffffffffffÿ' [ 471.848346][T10226] loop2: detected capacity change from 0 to 128 [ 472.503067][T10226] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 473.089537][ T5844] sysv_free_block: flc_count > flc_size [ 473.095194][ T5844] sysv_free_block: flc_count > flc_size [ 473.107495][ T5844] sysv_free_block: flc_count > flc_size [ 473.158814][ T5844] sysv_free_block: flc_count > flc_size [ 473.172628][ T5844] sysv_free_block: flc_count > flc_size [ 473.217755][ T5844] sysv_free_block: flc_count > flc_size [ 473.268275][ T5844] sysv_free_block: flc_count > flc_size [ 473.309027][ T5844] sysv_free_block: flc_count > flc_size [ 473.314615][ T5844] sysv_free_block: flc_count > flc_size [ 473.352167][T10246] loop0: detected capacity change from 0 to 1024 [ 473.632869][T10247] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1317'. [ 473.926819][ T5844] sysv_free_block: flc_count > flc_size [ 474.284206][ T5844] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 474.882913][T10246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.090822][T10252] loop1: detected capacity change from 0 to 4096 [ 475.101214][T10252] nilfs2: Unknown parameter '0xffffffffffffffffÿÿÿÿ0xffffffffffffffffÿ' [ 475.636993][T10267] loop3: detected capacity change from 0 to 1024 [ 475.659475][T10243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.835884][T10267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.559171][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.280368][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.769490][T10292] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1335'. [ 478.359016][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 478.879454][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 478.888661][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.907751][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.928215][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.975865][ T25] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 478.995396][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.026087][T10315] loop3: detected capacity change from 0 to 128 [ 479.804725][ T25] usb 2-1: config 0 descriptor?? [ 479.830303][T10317] loop5: detected capacity change from 0 to 2048 [ 479.837766][T10317] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.040006][T10327] loop2: detected capacity change from 0 to 1024 [ 480.048421][T10327] EXT4-fs: Ignoring removed nobh option [ 480.054458][T10327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 480.085673][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 480.101731][T10317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.149795][T10327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.348696][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 480.651873][T10334] loop3: detected capacity change from 0 to 4096 [ 480.676731][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.704754][ T25] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 480.713610][ T25] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 480.754527][T10334] nilfs2: Unknown parameter '0xffffffffffffffffÿÿÿÿ0xffffffffffffffffÿ' [ 480.791165][ T5938] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 480.868484][T10339] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1353'. [ 481.379214][ T25] usb 2-1: USB disconnect, device number 7 [ 481.412751][ T5938] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 481.455805][T10341] EXT4-fs error (device loop2): __ext4_new_inode:1071: comm syz.2.1351: reserved inode found cleared - inode=18 [ 481.541174][ T5938] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 481.574314][ T5938] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 482.140602][T10352] loop5: detected capacity change from 0 to 32768 [ 482.283059][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 482.316141][T10352] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 482.389177][ T5847] ocfs2: Unmounting device (7,5) on (node local) [ 482.568191][T10369] netlink: 'syz.5.1362': attribute type 1 has an invalid length. [ 482.625545][T10369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.962160][T10382] loop5: detected capacity change from 0 to 512 [ 483.996340][T10382] ext4: Unknown parameter 'obj_user' [ 484.242437][T10387] loop3: detected capacity change from 0 to 32768 [ 485.054944][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.230851][T10399] tipc: Enabling of bearer rejected, failed to enable media [ 485.292807][T10387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 487.716523][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 487.813472][T10436] loop0: detected capacity change from 0 to 1024 [ 487.909799][T10436] EXT4-fs: Ignoring removed nobh option [ 487.915884][T10436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 487.990279][T10431] loop5: detected capacity change from 0 to 4096 [ 488.042252][T10436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.118816][T10444] loop2: detected capacity change from 0 to 1024 [ 488.462114][ T5843] ocfs2: Unmounting device (7,3) on (node local) [ 488.530339][T10444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.309112][T10459] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1387'. [ 491.168684][T10463] loop1: detected capacity change from 0 to 32768 [ 491.434883][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.117219][T10463] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 492.228355][T10470] loop5: detected capacity change from 0 to 4096 [ 492.245741][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.365511][T10470] nilfs2: Unknown parameter '0xffffffffffffffffÿÿÿÿ0xffffffffffffffffÿ' [ 492.441203][T10478] overlayfs: failed to resolve './file1': -2 [ 492.545230][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 492.719437][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 492.897185][ T25] usb 4-1: config 0 has no interfaces? [ 493.192844][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 493.334368][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.342604][ T25] usb 4-1: Product: syz [ 493.346824][ T25] usb 4-1: Manufacturer: syz [ 493.351617][ T25] usb 4-1: SerialNumber: syz [ 493.360353][ T25] usb 4-1: config 0 descriptor?? [ 493.673237][T10485] loop5: detected capacity change from 0 to 256 [ 494.387430][T10485] FAT-fs (loop5): Directory bread(block 64) failed [ 494.397363][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 494.439232][T10485] FAT-fs (loop5): Directory bread(block 65) failed [ 494.488562][T10485] FAT-fs (loop5): Directory bread(block 66) failed [ 494.526696][T10485] FAT-fs (loop5): Directory bread(block 67) failed [ 494.568774][T10485] FAT-fs (loop5): Directory bread(block 68) failed [ 494.596169][ T25] usb 4-1: USB disconnect, device number 8 [ 494.624700][T10485] FAT-fs (loop5): Directory bread(block 69) failed [ 494.674025][T10485] FAT-fs (loop5): Directory bread(block 70) failed [ 494.728552][T10491] pimreg: entered allmulticast mode [ 494.746130][ T5846] ocfs2: Unmounting device (7,1) on (node local) [ 494.750984][T10485] FAT-fs (loop5): Directory bread(block 71) failed [ 494.806488][T10485] FAT-fs (loop5): Directory bread(block 72) failed [ 494.834342][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 494.848159][T10485] FAT-fs (loop5): Directory bread(block 73) failed [ 494.885741][T10495] loop2: detected capacity change from 0 to 512 [ 495.183490][T10495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.220175][T10495] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.734997][T10509] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1401'. [ 496.257744][ T6871] kworker/u8:12: attempt to access beyond end of device [ 496.257744][ T6871] loop5: rw=1048577, sector=1160, nr_sectors = 4 limit=256 [ 496.286140][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.437173][T10512] loop1: detected capacity change from 0 to 1024 [ 496.731003][T10512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.835430][T10523] overlayfs: failed to resolve './file1': -2 [ 497.897591][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.403288][T10511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.304479][T10539] loop3: detected capacity change from 0 to 128 [ 499.362427][T10539] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 499.588995][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.617044][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1411'. [ 499.654828][T10543] loop0: detected capacity change from 0 to 128 [ 499.949307][ T5843] sysv_free_block: flc_count > flc_size [ 499.954972][ T5843] sysv_free_block: flc_count > flc_size [ 500.033743][ T5908] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 500.035441][ T5843] sysv_free_block: flc_count > flc_size [ 500.099460][ T5843] sysv_free_block: flc_count > flc_size [ 500.105144][ T5843] sysv_free_block: flc_count > flc_size [ 500.117660][ T5843] sysv_free_block: flc_count > flc_size [ 500.128572][ T5843] sysv_free_block: flc_count > flc_size [ 500.149062][ T5843] sysv_free_block: flc_count > flc_size [ 500.189253][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 500.213576][ T5908] usb 5-1: config 0 has no interfaces? [ 500.253016][ T5908] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 500.268941][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.289219][ T5843] sysv_free_block: flc_count > flc_size [ 500.294903][ T5843] sysv_free_block: flc_count > flc_size [ 500.295614][ T5908] usb 5-1: Product: syz [ 500.301650][ T5843] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 500.309140][ T5908] usb 5-1: Manufacturer: syz [ 500.316558][ T5908] usb 5-1: SerialNumber: syz [ 500.370244][ T5908] usb 5-1: config 0 descriptor?? [ 500.634112][T10553] loop0: detected capacity change from 0 to 32768 [ 500.658575][T10553] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 500.671297][T10553] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 500.678737][ T5152] Bluetooth: hci3: adv larger than maximum supported [ 500.680622][T10553] BTRFS error (device loop0): superblock checksum mismatch [ 500.698409][T10553] BTRFS error (device loop0): open_ctree failed [ 500.699140][ T5152] Bluetooth: hci3: Malformed LE Event: 0x0d [ 500.704938][T10340] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 500.718709][ T5908] usb 5-1: USB disconnect, device number 10 [ 501.382218][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.388915][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.748260][T10564] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1419'. [ 502.429060][T10340] usb 6-1: Using ep0 maxpacket: 16 [ 502.436156][T10340] usb 6-1: config 0 has no interfaces? [ 502.444527][T10340] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 502.454263][T10340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.462917][T10340] usb 6-1: Product: syz [ 502.467236][T10340] usb 6-1: Manufacturer: syz [ 502.472568][T10340] usb 6-1: SerialNumber: syz [ 502.570862][T10340] usb 6-1: config 0 descriptor?? [ 502.765689][T10568] loop3: detected capacity change from 0 to 512 [ 502.825936][T10548] loop2: detected capacity change from 0 to 32768 [ 502.906496][T10573] pimreg: entered allmulticast mode [ 503.090687][T10548] read_mapping_page failed! [ 503.104655][T10548] jfs_mount: diMount(ipaimap2) failed, rc = -5 [ 503.106409][T10568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.127909][T10568] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 503.624401][T10340] usb 6-1: USB disconnect, device number 22 [ 503.644157][ T5152] Bluetooth: hci5: Unknown advertising packet type: 0x19 [ 503.644232][ T5152] Bluetooth: hci5: Unknown advertising packet type: 0x1f [ 503.659766][T10548] Mount JFS Failure: -5 [ 503.711610][T10548] jfs_mount failed w/return code = -5 [ 504.931337][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 506.929988][T10617] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1433'. [ 507.286687][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.949077][ T967] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 509.119200][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 509.149350][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 509.435734][ T967] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 509.444884][ T967] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.488474][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.498469][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.509024][ T967] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.522539][ T967] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 509.532187][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.543107][T10665] loop2: detected capacity change from 0 to 512 [ 509.590405][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 509.602683][T10665] EXT4-fs (loop2): filesystem is read-only [ 509.631337][T10665] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 509.705776][T10665] EXT4-fs (loop2): filesystem is read-only [ 509.712226][T10665] EXT4-fs (loop2): orphan cleanup on readonly fs [ 509.728306][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 509.742357][ T9] usb 4-1: config 0 has no interface number 0 [ 509.748750][ T9] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.758951][T10665] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1453: bg 0: block 64: padding at end of block bitmap is not set [ 509.761917][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 509.785778][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.795512][ T967] usb 2-1: usb_control_msg returned -32 [ 509.801462][ T967] usbtmc 2-1:16.0: can't read capabilities [ 509.811308][ T9] usb 4-1: config 0 descriptor?? [ 509.824663][ T9] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 509.883745][T10665] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 509.903206][T10665] EXT4-fs (loop2): 1 orphan inode deleted [ 509.914748][T10665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 510.078347][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.119866][ T5976] usb 4-1: USB disconnect, device number 9 [ 510.510650][T10679] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 511.868468][ T967] usb 2-1: USB disconnect, device number 8 [ 512.065457][T10694] loop1: detected capacity change from 0 to 1024 [ 513.362964][T10708] loop0: detected capacity change from 0 to 512 [ 513.420730][T10340] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 513.443555][T10708] EXT4-fs (loop0): filesystem is read-only [ 513.459253][T10708] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 513.485176][T10694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.578259][T10708] EXT4-fs (loop0): filesystem is read-only [ 513.587922][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.597373][T10708] EXT4-fs (loop0): orphan cleanup on readonly fs [ 513.609378][T10340] usb 6-1: Using ep0 maxpacket: 16 [ 513.616422][T10340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.639284][T10340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.649216][T10340] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 513.660091][T10708] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1468: bg 0: block 64: padding at end of block bitmap is not set [ 513.662227][T10340] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 513.687615][T10340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.706527][T10340] usb 6-1: config 0 descriptor?? [ 513.711759][T10708] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 513.755152][T10708] EXT4-fs (loop0): 1 orphan inode deleted [ 513.762772][T10708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 513.821492][T10720] loop1: detected capacity change from 0 to 256 [ 513.938652][T10697] loop3: detected capacity change from 0 to 32768 [ 514.070415][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.145701][T10720] FAT-fs (loop1): Directory bread(block 64) failed [ 514.153105][T10720] FAT-fs (loop1): Directory bread(block 65) failed [ 514.160619][T10720] FAT-fs (loop1): Directory bread(block 66) failed [ 514.166770][T10340] usbhid 6-1:0.0: can't add hid device: -71 [ 514.167265][T10720] FAT-fs (loop1): Directory bread(block 67) failed [ 514.173690][T10340] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 514.176454][T10340] usb 6-1: USB disconnect, device number 23 [ 514.181189][T10720] FAT-fs (loop1): Directory bread(block 68) failed [ 514.201704][T10720] FAT-fs (loop1): Directory bread(block 69) failed [ 514.208778][T10720] FAT-fs (loop1): Directory bread(block 70) failed [ 514.215691][T10720] FAT-fs (loop1): Directory bread(block 71) failed [ 514.222598][T10720] FAT-fs (loop1): Directory bread(block 72) failed [ 514.229300][T10720] FAT-fs (loop1): Directory bread(block 73) failed [ 514.398488][T10731] lo speed is unknown, defaulting to 1000 [ 514.599352][ T5976] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 514.949965][ T52] kworker/u8:3: attempt to access beyond end of device [ 514.949965][ T52] loop1: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 515.030655][ T5976] usb 5-1: Using ep0 maxpacket: 8 [ 515.245583][T10742] loop5: detected capacity change from 0 to 764 [ 515.375151][T10742] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 515.452713][ T5976] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 515.473194][ T5976] usb 5-1: config 0 has no interface number 0 [ 515.701462][ T5976] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 515.790404][ T5976] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x2 has an invalid bInterval 101, changing to 10 [ 515.880826][ T5976] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 59093, setting to 1024 [ 515.991081][ T5976] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 516.032990][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.294353][ T5976] usb 5-1: config 0 descriptor?? [ 516.301785][T10729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 516.311708][ T5976] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 516.942754][ T5976] usb 5-1: USB disconnect, device number 11 [ 517.352526][T10752] loop5: detected capacity change from 0 to 32768 [ 517.365278][T10752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1482 (10752) [ 517.387560][T10752] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 517.398014][T10752] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 517.407498][T10752] BTRFS error (device loop5): superblock checksum mismatch [ 517.428320][T10752] BTRFS error (device loop5): open_ctree failed [ 517.548286][ T7722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by udevd (7722) [ 517.577214][T10758] loop1: detected capacity change from 0 to 1024 [ 517.730191][T10758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.488090][T10770] loop0: detected capacity change from 0 to 512 [ 519.649542][T10757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.760235][T10770] EXT4-fs (loop0): filesystem is read-only [ 519.806311][T10770] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 519.885357][T10770] EXT4-fs (loop0): filesystem is read-only [ 519.926524][T10770] EXT4-fs (loop0): orphan cleanup on readonly fs [ 519.936514][T10770] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1486: bg 0: block 64: padding at end of block bitmap is not set [ 519.963141][T10770] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 519.976399][T10770] EXT4-fs (loop0): 1 orphan inode deleted [ 519.987909][T10770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 520.013224][T10780] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 520.094725][T10754] loop3: detected capacity change from 0 to 32768 [ 520.168642][T10784] 8021q: adding VLAN 0 to HW filter on device bond6 [ 520.177467][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.522116][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.539252][T10754] JBD2: journal reset failed [ 520.545263][T10754] (syz.3.1483,10754,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 520.554476][T10754] (syz.3.1483,10754,1):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 520.982286][T10791] loop5: detected capacity change from 0 to 764 [ 521.245800][T10791] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 521.759257][ T967] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 521.943541][ T967] usb 2-1: Using ep0 maxpacket: 16 [ 521.968135][ T967] usb 2-1: config 0 has no interfaces? [ 521.978376][ T967] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 522.026343][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.059299][ T967] usb 2-1: Product: syz [ 522.063545][ T967] usb 2-1: Manufacturer: syz [ 522.099019][ T967] usb 2-1: SerialNumber: syz [ 522.141131][ T967] usb 2-1: config 0 descriptor?? [ 522.517683][T10804] loop2: detected capacity change from 0 to 32768 [ 522.568394][T10804] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 522.579109][T10804] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 522.588415][T10804] BTRFS error (device loop2): superblock checksum mismatch [ 522.597107][T10804] BTRFS error (device loop2): open_ctree failed [ 522.956124][ T5907] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by udevd (5907) [ 523.991837][T10819] loop3: detected capacity change from 0 to 512 [ 524.148409][T10819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.197282][T10831] loop5: detected capacity change from 0 to 512 [ 524.207766][T10831] EXT4-fs (loop5): filesystem is read-only [ 524.224297][T10831] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 524.269185][T10819] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.295554][T10831] EXT4-fs (loop5): filesystem is read-only [ 524.321333][T10831] EXT4-fs (loop5): orphan cleanup on readonly fs [ 524.349841][T10831] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1505: bg 0: block 64: padding at end of block bitmap is not set [ 524.437839][T10831] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 524.460829][T10831] EXT4-fs (loop5): 1 orphan inode deleted [ 524.467748][T10831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 524.539624][ T9] usb 2-1: USB disconnect, device number 9 [ 524.644109][T10836] loop2: detected capacity change from 0 to 1024 [ 524.678287][T10836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.715323][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.043631][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.103927][T10834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.151988][T10823] loop0: detected capacity change from 0 to 32768 [ 526.811724][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.281835][T10867] loop1: detected capacity change from 0 to 764 [ 529.344321][T10867] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 529.827431][T10882] loop0: detected capacity change from 0 to 512 [ 529.862547][T10882] EXT4-fs (loop0): filesystem is read-only [ 529.868945][T10882] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 529.899346][T10882] EXT4-fs (loop0): filesystem is read-only [ 529.905262][T10882] EXT4-fs (loop0): orphan cleanup on readonly fs [ 529.923542][T10882] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1522: bg 0: block 64: padding at end of block bitmap is not set [ 529.964033][T10882] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 530.126407][T10882] EXT4-fs (loop0): 1 orphan inode deleted [ 530.190082][T10882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 531.291507][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.582764][T10885] loop5: detected capacity change from 0 to 32768 [ 531.821191][T10908] loop0: detected capacity change from 0 to 128 [ 532.031874][T10888] loop1: detected capacity change from 0 to 32768 [ 532.607250][T10904] loop2: detected capacity change from 0 to 32768 [ 533.730601][T10904] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 533.971330][ T5152] Bluetooth: hci5: unexpected event for opcode 0x0c5b [ 534.217691][ T5844] ocfs2: Unmounting device (7,2) on (node local) [ 534.299152][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 535.348189][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.365962][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.398589][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 535.435419][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.469928][ T5913] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.528966][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.592592][ T5913] usb 1-1: config 0 descriptor?? [ 536.021922][ T5913] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 536.099383][ T5913] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 536.336263][T10957] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 536.352899][T10955] loop3: detected capacity change from 0 to 4096 [ 536.407546][ T5913] usb 1-1: USB disconnect, device number 10 [ 536.499117][T10960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.546824][T10961] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.587237][T10950] loop5: detected capacity change from 0 to 32768 [ 537.801735][T10973] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 538.540785][T10984] loop0: detected capacity change from 0 to 764 [ 538.735713][T10984] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 540.423470][T11006] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 540.621181][T11006] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.723920][T11013] pimreg: entered allmulticast mode [ 541.019775][T11021] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 541.511233][T11029] loop5: detected capacity change from 0 to 764 [ 541.551170][T11029] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 542.295102][ T29] audit: type=1326 audit(1732307149.140:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.405596][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1577'. [ 542.420551][T11038] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 542.438991][ T29] audit: type=1326 audit(1732307149.140:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.541144][ T29] audit: type=1326 audit(1732307149.180:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.636530][ T29] audit: type=1326 audit(1732307149.180:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.659919][ T29] audit: type=1326 audit(1732307149.180:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.683236][ T29] audit: type=1326 audit(1732307149.180:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.705745][ T29] audit: type=1326 audit(1732307149.180:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.728202][ T29] audit: type=1326 audit(1732307149.180:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.751557][ T29] audit: type=1326 audit(1732307149.180:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 542.776618][ T29] audit: type=1326 audit(1732307149.180:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b297e819 code=0x7ffc0000 [ 544.957923][T11061] loop3: detected capacity change from 0 to 256 [ 546.103457][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1591'. [ 546.234128][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 546.270589][T11075] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 546.302048][T11082] netlink: 'syz.3.1593': attribute type 1 has an invalid length. [ 546.409068][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 546.417477][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.489040][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.760951][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 546.774559][ T5913] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 546.783844][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.795117][ T5913] usb 1-1: config 0 descriptor?? [ 546.832065][T11097] loop5: detected capacity change from 0 to 1024 [ 547.002613][T11099] loop2: detected capacity change from 0 to 764 [ 547.561947][T11099] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 547.583083][T11097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.664421][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 547.672100][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 547.838007][ T5913] usb 1-1: USB disconnect, device number 11 [ 550.031949][T11096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.530452][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.799663][T11136] netlink: 'syz.5.1609': attribute type 1 has an invalid length. [ 552.133955][T11144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1602'. [ 553.906798][T11158] loop5: detected capacity change from 0 to 764 [ 554.472822][T11158] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 554.518497][T11162] loop3: detected capacity change from 0 to 1024 [ 554.577063][T11162] EXT4-fs: Ignoring removed nobh option [ 554.721816][T11162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.958665][T11162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.985467][T11169] netlink: 'syz.5.1618': attribute type 1 has an invalid length. [ 555.075375][T11169] 8021q: adding VLAN 0 to HW filter on device bond8 [ 555.219191][ T5908] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 555.361507][T11175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1621'. [ 555.432331][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 555.476835][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.538697][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.603368][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 556.447869][ T5908] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 556.457164][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.467708][ T5908] usb 2-1: config 0 descriptor?? [ 556.519882][T11184] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 557.456716][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 557.479014][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 557.507989][ T5908] usb 2-1: USB disconnect, device number 10 [ 557.606006][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.012486][T11209] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 559.764002][T11217] netlink: 'syz.1.1634': attribute type 1 has an invalid length. [ 559.822258][T11217] 8021q: adding VLAN 0 to HW filter on device bond8 [ 560.039674][ T5938] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 560.118723][T11230] loop3: detected capacity change from 0 to 1024 [ 560.138439][T11230] EXT4-fs: Ignoring removed nobh option [ 560.163093][T11230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 560.219311][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 560.227875][T11230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.855118][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.878931][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.899573][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 561.419508][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.530994][ T5938] usb 1-1: config 0 descriptor?? [ 561.563149][T11241] loop5: detected capacity change from 0 to 64 [ 561.573991][ T5938] hub 1-1:0.0: USB hub found [ 561.743046][ T5938] hub 1-1:0.0: 1 port detected [ 562.094468][T11248] loop5: detected capacity change from 0 to 512 [ 562.132268][T11248] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 562.448030][T11255] EXT4-fs error (device loop3): __ext4_new_inode:1071: comm syz.3.1640: reserved inode found cleared - inode=18 [ 562.458733][T11248] EXT4-fs (loop5): 1 truncate cleaned up [ 562.470219][T11248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.632332][T11259] loop2: detected capacity change from 0 to 764 [ 562.672696][T11259] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 562.699187][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 562.745448][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.833679][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.989934][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 563.124091][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 563.220252][T11248] Process accounting resumed [ 563.227350][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 563.292771][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 563.342287][T11248] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1646: corrupted in-inode xattr: overlapping e_value [ 563.430859][ T5938] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 563.439218][ T5938] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 563.441185][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 563.453041][ T5938] usbhid 1-1:0.0: can't add hid device: -71 [ 563.461957][ T5938] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 563.506346][T11248] EXT4-fs warning (device loop5): ext4_xattr_set_entry:1772: inode #15: comm syz.5.1646: unable to update i_inline_off [ 563.531646][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.547147][ T5938] usb 1-1: USB disconnect, device number 12 [ 563.776533][T11263] loop2: detected capacity change from 0 to 512 [ 563.793132][ T9] usb 5-1: config 0 descriptor?? [ 563.818161][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.305255][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 564.490251][T11263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.604309][T11263] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 564.616999][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 564.699348][ T9] usb 5-1: USB disconnect, device number 12 [ 564.994539][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.320861][T11286] Bluetooth: MGMT ver 1.23 [ 565.431264][T11288] loop0: detected capacity change from 0 to 64 [ 566.814315][T11300] loop5: detected capacity change from 0 to 764 [ 567.338135][T11300] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 567.612374][T11302] input: syz0 as /devices/virtual/input/input8 [ 567.702801][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.795234][ T5938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 570.461985][T11319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.525104][T11334] loop0: detected capacity change from 0 to 64 [ 570.761206][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.793643][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 570.896523][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 570.925322][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 570.949136][ T5938] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.958292][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.093094][ T5938] usb 4-1: config 0 descriptor?? [ 571.312970][ T5938] usbhid 4-1:0.0: can't add hid device: -71 [ 571.345484][ T5938] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 571.433739][ T5938] usb 4-1: USB disconnect, device number 10 [ 571.717791][T11354] overlayfs: missing 'lowerdir' [ 571.729025][T10340] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 572.157825][T10340] usb 6-1: Using ep0 maxpacket: 16 [ 572.371965][T10340] usb 6-1: config 0 has no interfaces? [ 572.536616][T10340] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 572.568120][T11356] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 572.611395][T10340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.639675][T10340] usb 6-1: Product: syz [ 572.649764][T10340] usb 6-1: Manufacturer: syz [ 572.695593][T10340] usb 6-1: SerialNumber: syz [ 572.744114][T10340] usb 6-1: config 0 descriptor?? [ 572.779532][T11364] tipc: Enabling of bearer rejected, failed to enable media [ 573.022450][T10340] usb 6-1: USB disconnect, device number 24 [ 573.028463][T11370] loop2: detected capacity change from 0 to 64 [ 573.379188][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 573.539068][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 573.550661][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.568233][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.582585][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 573.604174][ T25] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 573.649144][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.659491][ T25] usb 4-1: config 0 descriptor?? [ 573.941963][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1697'. [ 574.468478][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 574.487682][ T25] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 574.499994][ T25] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 574.571617][ T25] usb 4-1: USB disconnect, device number 11 [ 574.591915][ T5938] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 574.598662][T11401] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 574.630148][T11400] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1701'. [ 574.634596][ T5938] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 574.695252][ T5938] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 574.776931][ T5938] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 574.946508][ T6010] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 574.965861][T11415] netlink: 'syz.5.1711': attribute type 1 has an invalid length. [ 575.190619][T11420] 8021q: adding VLAN 0 to HW filter on device bond9 [ 576.102809][T11424] loop3: detected capacity change from 0 to 128 [ 576.297286][T11430] loop5: detected capacity change from 0 to 64 [ 576.690492][T11437] loop0: detected capacity change from 0 to 1024 [ 576.980071][T11450] loop3: detected capacity change from 0 to 64 [ 577.003631][T11437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.214998][T11437] __quota_error: 72 callbacks suppressed [ 577.215027][T11437] Quota error (device loop0): do_check_range: Getting block 2309 out of range 1-5 [ 577.277657][T11437] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 577.309185][T11437] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1716: Failed to acquire dquot type 0 [ 578.161430][T11429] loop2: detected capacity change from 0 to 764 [ 578.338632][T11462] loop1: detected capacity change from 0 to 47 [ 578.373529][T11429] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 578.540837][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.122328][ T5938] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 579.147633][T11479] netlink: 134712 bytes leftover after parsing attributes in process `syz.3.1731'. [ 579.157219][T11479] openvswitch: netlink: Message has 76 unknown bytes. [ 579.916372][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.010998][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.086381][ T5938] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 580.097425][T11485] netlink: 'syz.3.1733': attribute type 1 has an invalid length. [ 580.130718][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.493383][ T5938] usb 6-1: config 0 descriptor?? [ 581.120051][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 581.142507][T11500] loop1: detected capacity change from 0 to 32768 [ 581.333285][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 581.342129][ T25] usb 3-1: config 0 has no interfaces? [ 581.362606][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 581.408915][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.439288][ T25] usb 3-1: Product: syz [ 581.443700][ T25] usb 3-1: Manufacturer: syz [ 581.476715][ T25] usb 3-1: SerialNumber: syz [ 581.500688][ T25] usb 3-1: config 0 descriptor?? [ 581.575330][ T5938] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 581.609653][ T5938] usb 6-1: USB disconnect, device number 25 [ 581.859410][ T5152] Bluetooth: hci1: adv larger than maximum supported [ 581.860522][ T5152] Bluetooth: hci1: Malformed LE Event: 0x0d [ 582.216988][T11512] loop1: detected capacity change from 0 to 32768 [ 582.307749][T11512] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 582.320163][T11512] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 582.329790][T11512] BTRFS error (device loop1): superblock checksum mismatch [ 582.338426][T11512] BTRFS error (device loop1): open_ctree failed [ 582.367406][ T7722] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by udevd (7722) [ 583.356309][ T6777] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 584.035663][ T5938] usb 3-1: USB disconnect, device number 5 [ 586.094193][T11548] random: crng reseeded on system resumption [ 586.176664][ T6010] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 586.209517][ T5908] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 586.665981][T11559] loop1: detected capacity change from 0 to 32768 [ 586.674145][T11561] loop2: detected capacity change from 0 to 128 [ 586.727069][ T5908] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 586.736597][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.751913][ T5908] usb 1-1: Product: syz [ 586.756320][ T5908] usb 1-1: Manufacturer: syz [ 586.761373][ T5908] usb 1-1: SerialNumber: syz [ 586.785979][T11561] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 586.817208][ T5908] usb 1-1: config 0 descriptor?? [ 586.883433][T11559] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 587.146958][ T5846] ocfs2: Unmounting device (7,1) on (node local) [ 587.229233][ T5844] sysv_free_block: trying to free block not in datazone [ 587.236533][ T5844] sysv_free_block: trying to free block not in datazone [ 587.257063][ T5844] sysv_free_block: trying to free block not in datazone [ 587.279471][ T5908] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 587.287414][ T5908] usb 1-1: Firmware version (0.0) predates our first public release. [ 587.299120][ T5844] sysv_free_block: trying to free block not in datazone [ 587.306329][ T5844] sysv_free_block: trying to free block not in datazone [ 587.309474][ T5908] usb 1-1: Please update to version 0.2 or newer [ 587.318854][ T5844] sysv_free_block: trying to free block not in datazone [ 587.357620][ T5844] sysv_free_block: trying to free block not in datazone [ 587.379704][ T5913] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 587.398699][ T5844] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 587.583872][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 587.615271][ T5913] usb 4-1: config 0 has no interfaces? [ 587.648124][ T5908] usb 1-1: USB disconnect, device number 13 [ 587.656181][ T5152] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 587.690421][ T5913] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.700705][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.711588][ T5913] usb 4-1: Product: syz [ 587.715875][ T5913] usb 4-1: Manufacturer: syz [ 587.727736][ T5913] usb 4-1: SerialNumber: syz [ 587.737725][ T5913] usb 4-1: config 0 descriptor?? [ 588.149242][ T25] usb 4-1: USB disconnect, device number 12 [ 588.442808][T11590] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1769'. [ 589.941179][ T29] audit: type=1326 audit(1732307196.800:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddb57e819 code=0x7ffc0000 [ 590.029073][ T29] audit: type=1326 audit(1732307196.800:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ddb57e819 code=0x7ffc0000 [ 590.103443][ T29] audit: type=1326 audit(1732307196.800:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddb57e819 code=0x7ffc0000 [ 590.229032][ T29] audit: type=1326 audit(1732307196.800:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ddb57e819 code=0x7ffc0000 [ 590.326709][ T29] audit: type=1326 audit(1732307196.800:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddb57e819 code=0x7ffc0000 [ 590.449158][ T29] audit: type=1326 audit(1732307196.800:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11602 comm="syz.4.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddb57e819 code=0x7ffc0000 [ 590.548963][ T29] audit: type=1326 audit(1732307196.890:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716357e819 code=0x7ffc0000 [ 590.669010][ T29] audit: type=1326 audit(1732307196.920:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716357e819 code=0x7ffc0000 [ 590.918260][T11622] loop3: detected capacity change from 0 to 32768 [ 590.984588][T11622] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1784 (11622) [ 590.998973][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 591.023990][ T29] audit: type=1326 audit(1732307196.920:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f716357e819 code=0x7ffc0000 [ 591.055271][T11622] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 591.065534][T11622] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 591.075049][T11622] BTRFS info (device loop3): using free-space-tree [ 591.245293][ T29] audit: type=1326 audit(1732307196.920:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11608 comm="syz.3.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716357e819 code=0x7ffc0000 [ 591.720755][ T5152] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 591.740933][ T5152] Bluetooth: hci1: Injecting HCI hardware error event [ 591.755617][ T5152] Bluetooth: hci1: hardware error 0x00 [ 591.908957][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 592.009772][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 592.024465][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.034965][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.045054][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 592.055254][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.068413][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 592.077561][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.531894][ T25] usb 5-1: usb_control_msg returned -32 [ 592.537593][ T25] usbtmc 5-1:16.0: can't read capabilities [ 592.626066][ T5843] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 592.888013][T11653] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 592.930990][T10340] usb 5-1: USB disconnect, device number 13 [ 593.352888][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1791'. [ 593.554442][T10340] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 593.733017][T11673] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 593.747418][T10340] usb 1-1: Using ep0 maxpacket: 16 [ 593.776305][T10340] usb 1-1: config 0 has no interfaces? [ 593.783723][T10340] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 593.807255][T11673] batman_adv: batadv0: Adding interface: ip6gretap2 [ 593.813990][T10340] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 593.824855][T11673] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.853008][T11673] batman_adv: batadv0: Interface activated: ip6gretap2 [ 593.888884][T10340] usb 1-1: Product: syz [ 593.901592][T10340] usb 1-1: Manufacturer: syz [ 593.907507][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 593.916512][T11673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.966659][T10340] r8152-cfgselector 1-1: Unknown version 0x0000 [ 593.981904][T10340] r8152-cfgselector 1-1: config 0 descriptor?? [ 593.991519][T11673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.026679][T11673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.035007][T11673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.064615][T11673] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 594.076037][T11673] batman_adv: batadv0: Removing interface: ip6gretap2 [ 594.103458][ T5152] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 594.169426][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 594.320431][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.331690][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.369220][ T5938] r8152-cfgselector 1-1: USB disconnect, device number 14 [ 594.378944][ T5908] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 594.408675][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.446897][ T5908] usb 3-1: config 0 descriptor?? [ 594.538941][ T5913] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 594.812202][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 594.834458][T11714] loop3: detected capacity change from 0 to 512 [ 594.835945][ T5913] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 594.851172][T11714] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 594.855642][ T5913] usb 2-1: can't read configurations, error -71 [ 594.874358][ T5908] hid (null): bogus close delimiter [ 594.893705][T11714] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 594.905306][T11714] EXT4-fs error (device loop3): ext4_orphan_get:1389: comm syz.3.1810: inode #15: comm syz.3.1810: iget: illegal inode # [ 594.920360][T11714] EXT4-fs (loop3): Remounting filesystem read-only [ 594.927900][T11714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.055482][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.076774][ T5908] usb 3-1: language id specifier not provided by device, defaulting to English [ 595.454262][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 595.608929][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 595.616153][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 595.627892][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.638264][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 595.681328][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.703550][ T5908] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #100: -71 [ 595.721859][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.739223][ T5908] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 595.757671][ T5908] uclogic 0003:256C:006D.0008: failed probing pen v1 parameters: -71 [ 595.767859][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 595.789600][ T5908] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 595.797985][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.814185][ T5908] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 595.868468][ T5908] usb 3-1: USB disconnect, device number 6 [ 595.888934][T10340] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 595.908687][ T7722] udevd[7722]: setting mode of /dev/bus/usb/003/006 to 020664 failed: No such file or directory [ 595.942367][ T7722] udevd[7722]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 595.945781][T11739] random: crng reseeded on system resumption [ 596.032182][ T9] usb 1-1: usb_control_msg returned -32 [ 596.059545][T10340] usb 6-1: Using ep0 maxpacket: 8 [ 596.066942][ T9] usbtmc 1-1:16.0: can't read capabilities [ 596.076580][T10340] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 596.116289][T10340] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.149185][T10340] usb 6-1: Product: syz [ 596.164631][T10340] usb 6-1: Manufacturer: syz [ 596.174945][T10340] usb 6-1: SerialNumber: syz [ 596.210357][T10340] usb 6-1: config 0 descriptor?? [ 596.396123][T11748] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 596.404503][ T5908] usb 1-1: USB disconnect, device number 15 [ 596.782673][T11749] loop3: detected capacity change from 0 to 764 [ 596.965035][T11749] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 597.242156][T10340] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 597.537628][T11755] loop2: detected capacity change from 0 to 1024 [ 597.785677][T11765] loop3: detected capacity change from 0 to 128 [ 597.804607][T11755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.825990][T11765] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 598.000967][T11765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 599.142009][T11754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.237495][T10340] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 599.256166][T10340] usb 6-1: USB disconnect, device number 26 [ 599.384794][ T52] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 599.639132][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 599.798922][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 599.805596][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.841614][T10340] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 599.848943][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.884267][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.888155][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 599.952623][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.004153][ T9] usb 1-1: config 0 descriptor?? [ 600.024789][ T9] hub 1-1:0.0: USB hub found [ 600.139134][ T5908] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 600.230857][ T9] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 600.275547][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 600.298225][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 600.307150][T11719] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 600.315066][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 600.330518][ T5908] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 600.355795][ T5908] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.409869][ T9] usb 1-1: USB disconnect, device number 16 [ 600.439877][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.480921][T11719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.517322][ T5908] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.529006][T10340] usb 2-1: Using ep0 maxpacket: 8 [ 600.537495][T10340] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 600.546653][T10340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 600.546896][T11719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.562558][T10340] usb 2-1: Product: syz [ 600.574313][T10340] usb 2-1: Manufacturer: syz [ 600.574463][ T5908] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.580450][T10340] usb 2-1: SerialNumber: syz [ 600.599111][T11719] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 600.603506][T10340] usb 2-1: config 0 descriptor?? [ 600.609484][ T5908] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.624489][T11719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.647281][T10340] usbtest 2-1:0.0: FX2 device [ 600.663510][T10340] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 600.669579][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.689693][T11719] usb 5-1: config 0 descriptor?? [ 601.085189][ T5908] usb 6-1: usb_control_msg returned -32 [ 601.128553][ T5908] usbtmc 6-1:16.0: can't read capabilities [ 601.161567][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.246311][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.385873][ T737] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 601.474870][T11817] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 601.526743][T10340] usb 6-1: USB disconnect, device number 27 [ 601.623247][T11821] bridge0: port 3(syz_tun) entered blocking state [ 601.630018][T11821] bridge0: port 3(syz_tun) entered disabled state [ 601.637385][T11821] syz_tun: entered allmulticast mode [ 601.644550][T11821] syz_tun: entered promiscuous mode [ 601.660942][T11821] bridge0: port 3(syz_tun) entered blocking state [ 601.662304][T11823] loop0: detected capacity change from 0 to 1024 [ 601.667471][T11821] bridge0: port 3(syz_tun) entered forwarding state [ 601.760957][T11719] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 601.770065][T11719] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 601.778179][T11719] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 601.786608][T11719] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 601.794695][T11719] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 601.818160][T11823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.834769][T11719] usb 5-1: USB disconnect, device number 14 [ 601.922237][ T967] usb 2-1: USB disconnect, device number 13 [ 602.597019][T11822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.616433][T10340] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 602.997529][T10340] usb 2-1: Using ep0 maxpacket: 16 [ 603.010518][T10340] usb 2-1: config 0 has no interfaces? [ 603.020828][T10340] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 603.034404][T10340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.048159][T10340] usb 2-1: Product: syz [ 603.060292][T10340] usb 2-1: Manufacturer: syz [ 603.068310][T10340] usb 2-1: SerialNumber: syz [ 603.081263][T10340] usb 2-1: config 0 descriptor?? [ 603.256524][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.335308][ T737] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 603.358088][ T967] usb 2-1: USB disconnect, device number 14 [ 603.380648][T10340] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 603.583717][T10340] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 603.596334][T10340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.627299][T10340] usb 4-1: Product: syz [ 603.647873][T10340] usb 4-1: Manufacturer: syz [ 603.668440][T10340] usb 4-1: SerialNumber: syz [ 603.714478][T10340] usb 4-1: config 0 descriptor?? [ 604.777590][T11865] loop2: detected capacity change from 0 to 128 [ 604.817457][T10340] usb-storage 4-1:0.0: USB Mass Storage device detected [ 604.982958][T11870] loop5: detected capacity change from 0 to 764 [ 605.195695][T11870] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 605.799343][T10340] usb 4-1: USB disconnect, device number 13 [ 606.266287][T11887] loop1: detected capacity change from 0 to 1024 [ 606.278954][ T967] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 606.422794][T11891] loop5: detected capacity change from 0 to 4096 [ 607.069477][T11884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.193658][T11894] tipc: Enabled bearer , priority 10 [ 607.205975][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.219175][ T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.229028][ T967] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 607.238076][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.251592][ T967] usb 1-1: config 0 descriptor?? [ 607.272109][ T12] hfsplus: b-tree write err: -5, ino 4 [ 607.294689][T11899] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 607.450121][T11902] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 607.630738][T11884] BUG: unable to handle page fault for address: fffffbfff46e6b93 [ 607.638473][T11884] #PF: supervisor read access in kernel mode [ 607.644430][T11884] #PF: error_code(0x0000) - not-present page [ 607.650393][T11884] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 607.656939][T11884] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 607.663160][T11884] CPU: 0 UID: 0 PID: 11884 Comm: syz.4.1876 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 607.673550][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 607.683590][T11884] RIP: 0010:kasan_check_range+0x82/0x290 [ 607.689216][T11884] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 607.711820][T11884] RSP: 0018:ffffc90004297800 EFLAGS: 00010086 [ 607.717882][T11884] RAX: 0000000001e89001 RBX: 1ffffffff46e6b93 RCX: ffffffff81709eb4 [ 607.726048][T11884] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffa3735c98 [ 607.734791][T11884] RBP: ffffffffffffffff R08: ffffffffa3735c9f R09: 1ffffffff46e6b93 [ 607.743107][T11884] R10: dffffc0000000000 R11: fffffbfff46e6b93 R12: ffff88802859e4c4 [ 607.751511][T11884] R13: ffff88802859da00 R14: dffffc0000000001 R15: fffffbfff46e6b94 [ 607.759474][T11884] FS: 00005555952cb500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 607.768391][T11884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.774970][T11884] CR2: fffffbfff46e6b93 CR3: 000000007dca8000 CR4: 0000000000350ef0 [ 607.782932][T11884] Call Trace: [ 607.786199][T11884] [ 607.789114][T11884] ? __die_body+0x5f/0xb0 [ 607.793442][T11884] ? page_fault_oops+0x8e4/0xcc0 [ 607.798380][T11884] ? __pfx_page_fault_oops+0x10/0x10 [ 607.803745][T11884] ? validate_chain+0x11e/0x5920 [ 607.808674][T11884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.814301][T11884] ? is_prefetch+0x4f6/0x780 [ 607.818883][T11884] ? __pfx_validate_chain+0x10/0x10 [ 607.824071][T11884] ? __pfx_is_prefetch+0x10/0x10 [ 607.828999][T11884] ? validate_chain+0x11e/0x5920 [ 607.833936][T11884] ? __bad_area_nosemaphore+0x118/0x770 [ 607.839490][T11884] ? __pfx_validate_chain+0x10/0x10 [ 607.844680][T11884] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 607.850565][T11884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.856190][T11884] ? spurious_kernel_fault+0x119/0x5a0 [ 607.861640][T11884] ? do_kern_addr_fault+0x30/0x80 [ 607.866662][T11884] ? exc_page_fault+0x5c8/0x8c0 [ 607.871502][T11884] ? asm_exc_page_fault+0x26/0x30 [ 607.876518][T11884] ? __lock_acquire+0xc94/0x2100 [ 607.881441][T11884] ? kasan_check_range+0x82/0x290 [ 607.886461][T11884] __lock_acquire+0xc94/0x2100 [ 607.891218][T11884] lock_acquire+0x1ed/0x550 [ 607.896244][T11884] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 607.903111][T11884] ? __pfx_lock_acquire+0x10/0x10 [ 607.908136][T11884] ? do_raw_spin_lock+0x272/0x370 [ 607.913156][T11884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.918786][T11884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 607.924152][T11884] ? find_lock_lowest_rq+0x1d6/0x670 [ 607.929432][T11884] ? plist_check_list+0x470/0x4d0 [ 607.934455][T11884] ? __pfx_lock_release+0x10/0x10 [ 607.939489][T11884] _raw_spin_lock_nested+0x31/0x40 [ 607.944592][T11884] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 607.950133][T11884] raw_spin_rq_lock_nested+0x2a/0x140 [ 607.955501][T11884] find_lock_lowest_rq+0x1e1/0x670 [ 607.960603][T11884] push_rt_task+0x144/0x790 [ 607.965101][T11884] task_woken_rt+0x14c/0x220 [ 607.969694][T11884] ttwu_do_activate+0x30c/0x760 [ 607.974538][T11884] try_to_wake_up+0x89b/0x1470 [ 607.979469][T11884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.985105][T11884] ? __pfx_try_to_wake_up+0x10/0x10 [ 607.990294][T11884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 607.995923][T11884] ? do_raw_spin_lock+0x14f/0x370 [ 608.000947][T11884] signal_wake_up_state+0xb4/0x120 [ 608.006753][T11884] zap_other_threads+0x2fd/0x3e0 [ 608.012232][T11884] ? __pfx_zap_other_threads+0x10/0x10 [ 608.017684][T11884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.023333][T11884] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 608.030187][T11884] do_group_exit+0x18a/0x2c0 [ 608.036087][T11884] __x64_sys_exit_group+0x3f/0x40 [ 608.041106][T11884] x64_sys_call+0x26a8/0x26b0 [ 608.045783][T11884] do_syscall_64+0xf3/0x230 [ 608.050282][T11884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 608.055913][T11884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.061823][T11884] RIP: 0033:0x7f2ddb57e819 [ 608.066230][T11884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.086368][T11884] RSP: 002b:00007ffd43758048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 608.096955][T11884] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ddb57e819 [ 608.104918][T11884] RDX: 00007f2dda3f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.112879][T11884] RBP: 00007ffd4375809c R08: 00007ffd4375812f R09: 0000000000093e6d [ 608.120852][T11884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 608.128811][T11884] R13: 0000000000093e6d R14: 0000000000093de7 R15: 00007ffd437580f0 [ 608.136774][T11884] [ 608.139776][T11884] Modules linked in: [ 608.143672][T11884] CR2: fffffbfff46e6b93 [ 608.147808][T11884] ---[ end trace 0000000000000000 ]--- [ 608.155762][T11884] RIP: 0010:kasan_check_range+0x82/0x290 [ 608.161399][T11884] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 608.181485][T11884] RSP: 0018:ffffc90004297800 EFLAGS: 00010086 [ 608.187549][T11884] RAX: 0000000001e89001 RBX: 1ffffffff46e6b93 RCX: ffffffff81709eb4 [ 608.195508][T11884] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffa3735c98 [ 608.203466][T11884] RBP: ffffffffffffffff R08: ffffffffa3735c9f R09: 1ffffffff46e6b93 [ 608.211431][T11884] R10: dffffc0000000000 R11: fffffbfff46e6b93 R12: ffff88802859e4c4 [ 608.219395][T11884] R13: ffff88802859da00 R14: dffffc0000000001 R15: fffffbfff46e6b94 [ 608.227365][T11884] FS: 00005555952cb500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 608.236284][T11884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.242964][T11884] CR2: fffffbfff46e6b93 CR3: 000000007dca8000 CR4: 0000000000350ef0 [ 608.250952][T11884] Kernel panic - not syncing: Fatal exception [ 609.379281][T11884] Shutting down cpus with NMI [ 609.384225][T11884] Kernel Offset: disabled [ 609.388550][T11884] Rebooting in 86400 seconds..