last executing test programs: 8.513673606s ago: executing program 3 (id=1405): sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="e8", 0x1, 0x40008c4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000600)={0x0, 0x6a4}, &(0x7f0000000640)=0x8) 8.296032023s ago: executing program 3 (id=1406): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 8.012751522s ago: executing program 3 (id=1411): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000500)=0x8, 0x4) 7.315961884s ago: executing program 4 (id=1418): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 7.004553915s ago: executing program 3 (id=1421): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x800, &(0x7f0000001dc0)={0x3, 0x72, 0x20000}, 0x20) 6.747364883s ago: executing program 3 (id=1425): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1000, 0x800000000000000) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)='a', 0x1}, {&(0x7f0000000240)="118ea7bbaf5c5e831767a7261105f063c52d21de050dc52f91f303a885f0c27eb747f417c34c0f1db9ef493236236645210f2fd2d359e24fd9c1e069a4199884a9797ae8d5dadf10ddfadcb325a370acdb0ffabbb23b440cc0f6aa7241c89a5ac84118816ec9629380158ac02a6bde812124962edd893e7ec4f35831b8d38f46c40f9224e4d747f6e1e5d0fa83641d732ffc207b0bedfb92fa544635ac892fe5c08f6f5cc4a97219f937e935ab247e3db08838529831ece3ed0b035c18750b6ed05187e9994aa7cfcd5446586d72cc05e4c41280742fdbc19c172e7d1ec7ade98643cdc3d2a89d4b8b", 0xe9}, {&(0x7f00000000c0)="bddf726271d603d9105e937ea50360727d5ebd977746e718a5ed721d5ec892db736d393d2c54c7c050b7f5c9cf72cb85716613871a75880ff80372e180494d4a061874d0f4e160", 0x47}, {&(0x7f0000000640)="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", 0xed0}], 0x4, 0x1) 6.391728714s ago: executing program 4 (id=1429): r0 = msgget$private(0x0, 0x9a) msgrcv(r0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100"], 0xd1, 0x800) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x80}, 0x0, 0x0, 0x7ff, 0xe, 0x7fffffffffffffff, 0x8, 0x7, 0x400, 0x7, 0x9}) 6.167955802s ago: executing program 3 (id=1432): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.681545477s ago: executing program 1 (id=1435): sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0a733709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf49ab7edb835efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c576830c49b18ece887b47c37affa1c3f24fdb0e14151550796aaa09b4669e71d9f4255f63905467b709f7a7185347a078538e4443f0dad324393274e857979db0a9e3894857aacabc2f2ccd9457fda98a520e2b8c83085a206c8aea9dd18a0b66c87b3b61f95fafed84303436c7ae3782f714dc364c10102788b02d3aed05cb29fe974b75e7bf53dfd2554d7b700dcbf24a6fa021732b747a2c7d6d2a649e1ca523f91ba57da29e6e5050da7ec9466884aea64349e0c65b40bd78fe25622a5f854d351fd3282e85e37989b73e1a3b9fe874ad7131850117f285afe15040fd20cd9c861c95b2c1f9844ac1f8b3cd0a7f22269e235866434acb5f4d9d0b64301cd5b4e8c2da68caacd3f7dda0f325120ad99c05a55736067c87cceda7b850758e60ab8829b0dbfdc1ca8322e6716e643e00c2f665781461f08282a0aa366d9927036d685c3a721530dafe21e62906c5710c3214621d6374d9f5eef47eca1e5080e21832e6d639822a3bf99784f7b19e2dfaa7b8ba39dc5212c94585af38e7a50cbf6d619e3f1b8e4c17351203fa037ca4ce7ef32fd8b4387b8583ebd32a0c5aeb05fced1e492670cabc370aba18abe561e2bfcfa6d92c0c3d0419f5f4936772b6a0026a623914f09b04cf5d7c2b3ab010c676e9932f5807240a765b3d92d2bcdd63a91bd0f1c795fe0ecdda5e50ec8fd0a68115986168fb8bb67fa020ed3c416a716fb12d5d918b8522931dcf2bfd0c7bf7d9c56c490c9880309240d0c2cf1a3cafb647e1a9e1fde434cdbcae9eeac3f8c652a85d6aea69b3e9a922cb2727ed8f50e6babd152b96ca623be94c4aedf7e6848650026a7e1df48e00f45714233d9ae79f4e5e13ac220d553da26f7e7bd242d0cd26470bfb99fb84e6035bfb962368222ff72c5a8e340", 0x350, 0x40000001, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 5.513340402s ago: executing program 1 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x148, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x5, 0x0, 0x3}}]}}]}, 0x148}}, 0x24008004) 5.407071606s ago: executing program 4 (id=1438): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x987f, &(0x7f00000133c0)="$eJzs3Qm8rWPBuP91BhzzUKIJmdJozJCSeSgpM5kzZwwJZR7KUFFCRaFISiFURCoJZZZ5nud5Hv+f4xzidJH393/fV++5ruvjnDXute99f5/7sdd+9llrlcWXX3gwmGwwqpdO/9lZB9245goTL73VyQcMv+KwfZe5Z/TV4446mXzB0acLjT5deDAYDBn9OENGXTd8gZNOHjoYPhj53z+baPwJhk40GEww+uLoxxnMM+pkwqNfut8LY8QDnW7kp9tn1J8Xm3jkg4w8s/raz20+GAxGvOLjR45rtn/5QqUtvtTCK/zT6mW3oaNvHvLP2148HT7qz4RHDgYTHj547e1j5H3HecXH/m828nNONsNgxRvfhM/9f65VFlpiqTH8R67FYaOvm2fkGh9zDRobczvfd/lN7ho9hUNGT9zwV6yXN2O7/39qlYUWX3rw2ut4sMxiO975wov7zeGLDgbDFxsMhi8+GAxf4s32qP+e3tSNr6qqqt6UFlp4zpHP2YeO8f3AiJe+r6XvC895dvZbB4Phy4x6njh87ZeeC1ZVVVVVVVXVf2YLLTznIvD8f7LXe/4/3Wl7TN7z/6qqqqqqqqr/Oy210MJzjnyuP8bz/6lf7/n/g3cfd9So3/1fcJ5RH/X8m/tFVFVVVVVVVdXrtvhS+Px/utd7/n/eSdNd0PP/qqqqqqqqqv87LTfn4osMXvE6e6OvnuWl2+n5/+l3XL/GmzXeqqqqqqqqqvqv9/x9p57xz9d8n2Ywxuu9v9jonwsMOf7Miy560wb6n9GQf/15yC5v9pj+/zbSecSx0w0Gm6/4Zg+l3oT+z7xWff2PlL+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3uN4/8vv/7/6Seu+9J7wb93pjmvPPWfH/nie/8PX2ap+3Z9k4b+ZjS2Hv8fbDxkMBjtO9nGg8FgmYWWW2GWwWBw6pVzzjTj4OXb5h152/xTDHvxDeJf+mcii03OD7zL9KNOR24og7e+/BjHv/j4S71wxLAhYwziFU1+ylFHbbTKE3ONeTrza38dQ18+N/HJd7/0b1mGjnGnEa/xwS89/ktfy5jOo8c+y8ixz7rNZlvOuvX2O3xo483W2XD9DdfffL455p59rvnmm3vuWTfYeNP1Zxv192vN2XQv/r3IG5mzicacs/sWeuWcjfm1vdacTff6c/biIx547ohPvDRnw/+Lc7bI68/ZdBuP/kSTLzjOYO0X52bIYDD5ouMMtht5YfbxBoPJFxt936lH3vdjUwwdDPb/5xc68tx4L2+DQ3YZeZ9VFl9+4VG7qcHgn6f/7DXez37c0SNfcPTpQqNPFx71aSYb/HNTHL7ASScPHTkXr5qOicafYOhEg8EEoy+OfpzBfKNOJjjtpfu9xvusjzHQF19mZZ9Rf15s4sFgMOHIM9Osc/qeI6f+f+F92v+f/v//L17zDnl5exwy+s/o+4zyWmiJpf75uV6chpFzN2z0dfOMNPlvfmv7V/Uv451uxGC61xnv67wuzovR9rXpqVPu9t/1ujg03qlfZ7yv8zq+rznelW495K5RD/XfNt4x9nVLv/j3gm9kXzd4/X3dMHqA9c9/95j7uk+99hBftbt8aY7GG+NOr7Wvm/rQaXcZ+fgLvv6+bumRYx/nVfu6oYPB5Iu8tK8bueNbfJzB/iMvzDHywhLjDI4ZeWHOFy+MPzhz5IUPr7vFpuuNvGLJf90OZhnyql/QhHW2+BjrbMgrvvYhY/x+5/BRpxMe+dJ7OL3GfnPI6C/r3+4raLud7HXG+zrvP4XzPPK69U4YMeV/1/tP0XhHvP54X+v9sl9zvPs9fvqN/83jfXmdjfOK6Vryjayz6V69zkZ+icNesTLe6Pdh68H9R52f+uVH23anu1/+nmKcMR73331PseTrr7PJNh7j4/Y+fDDk9eZmiTcyN+/6l33Qrq+cmzf6/dYsM4y6fdjrzM14860580tzM+5/cW6W+K/OzYKDYa+em+GDxQaDwYyj9w+Lv5G5mfr15+aNbjcTwP1HnV//5asW3ffYs1+amzHn4t/NzeL/1bmZ7uXtZsYXb5t+6GDccQfbrbPNNlvNPurvly7OMerv11+Di76RuZzsv2cu3zH8tebyn5vqRLdecOS/WYP/sk9/6fEX/a/O5eDluRxsPOZiqf/U+vmfu/zd5e8uf3f5u8vfXf7iXuP4/8uv/3/wZPMfMPqHG+NcMO1Ue73Z432TG6uP/4/2fdXx/72mmvaCoYOXb3vd47Oj7vMfeXx2nlEnEx790v3GPD7IA33t47OHzzfPHv9Lx2f/n3pprb6Bn8O1/3eXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe43j/7O99HsAd8y+7MOjD4SOc8/uqy37Zo/3TW6sPv4/2vdVx/+XXW33e4YOXr7tdY//j7qP4/j/zc8svt9/8vH/l9Zqx//r35S/O/Qf8zVAaqyt9e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7jeP/C770ewDHHXfIDi/9PsBlk+9z6ps93je5sfX4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/ci8f/R/0b4Vf+S+HPvrhdtGWMGRz//7/d6N//GIzhv2z7Bcziv1z+1NDBwOG/fP6YZf2vkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+n8sfs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfw/nz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8hf8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+H8xf8ziv1X+mMV/6/wxi/82+WMW/y/lj1n8t80fs/h/OX/M4r9d/pjFf/v8MYv/DvljFv+v5I9Z/L+aP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjF/2v5Yxb/r+ePWfz3zh+z+O+TP2bx3zd/zOK/X/6Yxf8b+WMW/2/mj1n8v5U/ZvHfP3/M4n9A/pjF/9v5Yxb/7+SPWfwPzB+z+H83f8zif1D+mMX/4Pwxi/8h+WMW/+/lj1n8v58/ZvH/Qf6Yxf/Q/DGL/2H5Yxb/H+aPWfx/lD9m8T88f8zif0T+mMX/yPwxi/+P88cs/j/JH7P4H5U/ZvE/On/M4v/T/DGL/zH5Yxb/n+WPWfyPzR+z+P88f8zi/4v8MYv/cfljFv9f5o9Z/H+VP2bxPz5/zOJ/Qv6Yxf/E/DGL/6/zxyz+J+WPWfxPzh+z+J+SP2bx/03+mMX/t/ljFv/f5Y9Z/E/NH7P4n5Y/ZvH/ff6Yxf/0/DGL/xn5Yxb/P+SPWfzPzB+z+P8xf8zi/6f8MYv/n/PHLP5n5Y9Z/P+SP2bxPzt/zOL/1/wxi/85+WMW/3Pzxyz+5+WPWfz/lj9m8f97/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/H/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9J/IcM8scs/kPyxyz+Q/PHLP7D8scs/sPzxyz+4+SPWfzHzR+z+I+XP2bxH5E/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMX/LfljFv+35o9Z/KfMH7P4vy1/zOI/Vf6YxX/q/DGL/9vzxyz+78gfs/i/M3/M4v+u/DGL/7vzxyz+0+SPWfynzR+z+E+XP2bxf0/+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+L83f8ziP0v+mMX/ffljFv/3549Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+P5I9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjF/6P5Yxb/+fPHLP4fyx+z+H88f8ziv0D+mMX/E/ljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfw/mT9m8f9U/pjFf+n8MYv/p/PHLP7L5I9Z/D+TP2bx/2z+mMV/2fwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/+fyxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/z+ePWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP5fyB+z+G+SP2bx3zR/zOK/mc5//Dd0L4v/5jr/N5bFf4v8MYv/lvljFv8v5o9Z/LfKH7P4b50/ZvHfJn/M4v+l/DGL/7b5Yxb/L+ePWfy3yx+z+G+fP2bx3yF/zOL/lfwxi/9X88cs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+H8tf8zi//X8MYv/3vljFv998scs/vvmj1n898sfs/h/I3/M4v/N/DGL/7fyxyz+++ePWfwPyB+z+H87f8zi/538MYv/gfljFv/v5o9Z/A/KH7P4H5w/ZvE/JH/M4v+9/DGL//fzxyz+P8gfs/gfmj9m8T8sf8zi/8P8MYv/j/LHLP6H549Z/I/IH7P4H5k/ZvH/cf6Yxf8n+WMW/6Pyxyz+R+ePWfx/+mr/2//Xx/UfmsX/mNY/ZvH/Wf6Yxf/Y/DGL/8/zxyz+v8gfs/gflz9m8f9l/pjF/1f5Yxb/4/PHLP4n5I9Z/E/MH7P4/zp/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+SPWfx/mz9m8f9d/pjF/9T8MYv/afljFv/f549Z/E/PH7P4n5E/ZvH/Q/6Yxf/M/DGL/x/zxyz+f8ofs/j/OX/M4n9W/pjF/y/5Yxb/s/PHLP5/zR+z+J+TP2bxPzd/zOJ/Xv6YxP/F8v/XJP5D/p4/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8f9H/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfk/8YDR996vC/Nn/Msv6vyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX9M4v/i2fz/NYv/kPwxi//Q/DGL/7D8MYv/8Pwxi/84+WMW/3Hzxyz+4+WPWfxH5I9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8X9L/pjF/635Yxb/KfPHLP5vyx+z+E+VP2bxnzp/zOL/9vwxi/878scs/u/MH7P4vyt/zOL/7vwxi/80+WMW/2nzxyz+0+WPWfzfkz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+780fs/jPkj9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/WfPHLP6z5Y8NOeugcQaDwVjvP3v+mGX9z5E/ZvGfM3/M4j9X/pjF/yP5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvH/aP6YxX/+/DGL/8fyxyz+H88fs/gvkD9m8f9E/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/0/mj1n8P5U/ZvFfOn/M4v/p/DGL/zL5Yxb/z+SPWfw/mz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/ufwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf/z+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/xfyxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/xfzxyz+W+WPWfy3zh+z+G+TP2bx/1L+mMV/2/wxi/+X88cs/tvlj1n8t88fs/jvkD9m8f9K/pjF/6v5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8v5Y/ZvH/ev6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/L+RP2bx/2b+mMX/W/ljFv/988cs/gfkj1n8v50/ZvH/Tv6Yxf/A/DGL/3fzxyz+B+WPWfwPzh+z+B+SP2bx/17+mMX/+/ljFv8f5I9Z/A/NH7P4H5Y/ZvH/Yf6Yxf9H+WMW/8Pzxyz+R+SPWfyPzB+z+P84f8zi/5P8MYv/UfljFv+j88cs/j/NH7P4H5M/ZvH/Wf6Yxf/Y/DGL/8/zxyz+v8gfs/gflz9m8f9l/pjF/1f5Yxb/4/PHLP4n5I9Z/E/MH7P4/zp/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+SPWfx/mz9m8f9d/pjF/9T8MYv/afljFv/f549Z/E/PH7P4n5E/ZvH/Q/6Yxf/M/DGL/x/zxyz+f8ofs/j/OX/M4n9W/pjF/y/5Yxb/s/PHLP5/zR+z+J+TP2bxPzd/zOJ/Xv6Yxf9v+WMW/7/nj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfz/kT9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjEf9ggf8ziPyR/zOI/NH/M4j8sf8ziPzx/zOI/Tv6YxX/c/DGL/3j5Yxb/EfljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfzfkj9m8X9r/pjFf8r8MYv/2/LHLP5T5Y9Z/KfOH7P4vz1/zOL/jvwxi/8788cs/u/KH7P4vzt/zOI/Tf6YxX/a/DGL/3T5Yxb/9+SPWfynzx+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/3vzxyz+s+SPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8f9w/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8f/I6/uP9z8+rv/QLP5zt/4xi/88+WMW/3nzxyz+8+WPWfw/mj9m8Z8/f8zi/7H8MYv/x/PHLP4L5I9Z/D+RP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjF/5P5Yxb/T+WPWfyXzh+z+H86f8ziv0z+mMX/M/ljFv/P5o9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/h/Ln/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8f98/pjFf938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/4X8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8zi/8X8MYv/VvljFv+t88cs/tvkj1n8v5Q/ZvHfNn/M4v/l/DGL/3b5Yxb/7fPHLP475I9Z/L+SP2bx/2r+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/r+WPWfy/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW/2/kj1n8v5k/ZvH/Vv6YxX///DGL/wH5Yxb/b+ePWfy/kz9m8T8wf8zi/938MYv/QfljFv+D88cs/ofkj1n8v5c/ZvH/fv6Yxf8H+WMW/0Pzxyz+h+WPWfx/mD9m8f9R/pjF//D8MYv/EfljFv8j88cs/j/OH7P4/yR/zOJ/VP6Yxf/o/DGL/0/zxyz+x+SPWfx/lj9m8T82f8zi//P8MYv/L/LHLP7H5Y9Z/H+ZPzbW+4948eywX+WPjfX+oxp2fP6Ywf+5wWDYCfljBv+R6//E/DGL/6/zxyz+J+WPWfxPzh+z+J+SP2bx/03+mMX/t/ljFv/f5Y9Z/E/NH7P4n5Y/ZvH/ff6Yxf/0/DGL/xn5Yxb/P+SPWfzPzB+z+P8xf8zi/6f8MYv/n/PHLP5n5Y9Z/P+SP2bxPzt/zOL/1/wxi/85+WMW/3Pzxyz+5+WPWfz/lj9m8f97/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/H/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9J/IcP8scs/kPyxyz+Q/PHLP7D8scs/sPzxyz+4+SPWfzHzR+z+I+XP2bxH5E/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMX/LfljFv+35o9Z/KfMH7P4vy1/zOI/Vf6YxX/q/DGL/9vzxyz+78gfs/i/M3/M4v+u/DGL/7vzxyz+0+SPWfynzR+z+E+XP2bxf0/+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+L83f8ziP0v+mMX/ffljFv/3549Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+P5I9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjF/6P5Yxb/+fPHLP4fyx+z+H88f8ziv0D+mMX/E/ljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfw/mT9m8f/U6/ibtwuL/9Jy59fK4v/p/DGL/zL5Yxb/z+SPWfw/mz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/ufwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf/z+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/xfyxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/xfzxyz+W+WPWfy3zh+z+G+TP2bx/1L+mMV/2/wxi/+X88cs/tvlj1n8t88fs/jvkD9m8f9K/pjF/6v5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8v5Y/ZvH/ev6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/L+RP2bx/2b+mMX/W/ljFv/988cs/gfkj1n8v50/ZvH/Tv6Yxf/A/DGL/3fzxyz+B+WPWfwPzh+z+B+SP2bx/17+mMX/+/ljFv8f5I9Z/A/NH7P4H5Y/ZvH/Yf6Yxf9H+WMW/8Pzxyz+R+SPWfyPzB+z+P84f8zi/5P8MYv/UfljFv+j88cs/j/NH7P4H5M/ZvH/Wf6Yxf/Y/DGL/8/zxyz+v8gfs/gflz9m8f9l/pjF/1f5Yxb/4/PHLP4n5I9Z/E/MH7P4/zp/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+SPWfx/mz9m8f9d/pjF/9T8MYv/afljFv/f549Z/E/PH7P4n5E/ZvH/Q/6Yxf/M/DGL/x/zxyz+f8ofs/j/OX/M4n9W/pjF/y/5Yxb/s/PHLP5/zR+z+J+TP2bxPzd/zOJ/Xv6Yxf9v+WMW/7/nj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfz/kT9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjEf5xB/pjFf0j+mMV/aP6YxX9Y/pjFf3j+mMV/nPwxi/+4+WMW//Hyxyz+I/LHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/pPnj1n8p8gfs/i/JX/M4v/W/DGL/5T5Yxb/t+WPWfynyh+z+E+dP2bxf3v+mMX/HfljFv935o9Z/N+VP2bxf3f+mMV/mvwxi/+0+WMW/+nyxyz+78kfs/hPnz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW//fmj1n8Z8kfs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4v/h/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+R/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4fzR/zOI/f/6Yxf9j+WMW/4/nj1n8F8gfs/h/In/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi/8n88cs/p/KH7P4L50/ZvH/dP6YxX+Z/DGL/2fyxyz+n80fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/1z+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOL/+fwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6Yxf8L+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf+L+WMW/63yxyz+W+ePWfy3yR+z+H8pf8ziv23+mMX/y/ljFv/t8scs/tvnj1n8d8gfs/h/JX/M4v/V/DGL/475Yxb/nfLHLP47549Z/HfJH7P475o/ZvHfLX/M4r97/pjFf4/8MYv/nvljFv+98scs/l/LH7P4fz1/zOK/d/6YxX+f/DGL/775Yxb//fLHLP7fyB+z+H8zf8zi/638MYv//vljFv8D8scs/t/OH7P4fyd/zOJ/YP6Yxf+7+WMW/4Pyxyz+B+ePWfwPyR+z+H8vf8zi//38MYv/D/LHLP6H5o9Z/A/LH7P4/zB/zOL/o/wxi//h+WMW/yPyxyz+R+aPWfx/nD9m8f9J/pjF/6j8MYv/0fljFv+f5o9Z/I/JH7P4/yx/zOJ/bP6Yxf/n+WMW/1/kj1n8j8sfs/j/Mn/M4v+r/DGL//H5Yxb/E/LHLP4n5o9Z/H+dP2bxPyl/zOJ/cv6Yxf+U/DGL/2/yxyz+v80fs/j/Ln/M4n9q/pjF/7T8MYv/7/PHLP6n549Z/M/IH7P4/yF/zOJ/Zv6Yxf+P+WMW/z/lj1n8/5w/ZvE/K3/M4v+X/DGL/9n5Yxb/v+aPWfzPyR+z+J+bP2bxPy9/zOL/t/wxi//f88cs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+/8gfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX9M4j/uIH/M4j8kf8ziPzR/bJT//aMvjb3+w/LHLOt/eP6YxX+c/DGL/7j5Yxb/8fLHLP4j8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+k+ePWfynyB+z+L8lf8zi/9b8MYv/lPljFv+35Y9Z/KfKH7P4T50/ZvF/+xvwH/4/Oa7/0Cz+72j9Yxb/d+aPWfzflT9m8X93/pjFf5r8MYv/tPljFv/p8scs/u/JH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv/35o9Z/GfJH7P4vy9/zOL//vwxi/8H8scs/h/MH7P4fyh/zOL/4fwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/kfwxi//c+WMW/3nyxyz+8+aPWfznyx+z+H80f8ziP3/+mMX/Y/ljFv+P549Z/BfIH7P4fyJ/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/J/PHLP6fyh+z+C+dP2bx/3T+mMV/mfwxi/9n8scs/p/NH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8f9c/pjFf7X8sbHUf8gY1uOunj82lvq/2CvX/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/fP6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v+F/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/F/DGL/1b5Yxb/rfPHLP7b5I9Z/L+UP2bx3zZ/zOL/5fwxi/92+WMW/+3zxyz+O+SPWfy/kj9m8f9q/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/6/lj1n8v54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv9v5I9Z/L+ZP2bx/1b+mMV///wxi/8B+WMW/2/nj1n8v5M/ZvE/MH/M4v/d/DGL/0H5Yxb/g/PHLP6H5I9Z/L+XP2bx/37+mMX/B/ljFv9D88cs/oflj1n8f5g/ZvH/Uf6Yxf/w/DGL/xH5Yxb/I/PHLP4/zh+z+P8kf8zif1T+mMX/6Pwxi/9P88cs/sfkj1n8f5Y/ZvE/Nn/M4v/z/DGL/y/yxyz+x+WPWfx/mT9m8f9V/pjF//j8MYv/CfljFv8T88cs/r/OH7P4n5Q/ZvE/OX/M4n9K/pjF/zf5Yxb/3/r8d34jd7L4/87n/4ay+J+aP2bxPy1/zOL/e6f/A//uDhb/053+/zaL/xn5Yxb/P+SPWfzPzB+z+P8xf8zi/6f8MYv/n/PHLP5n5Y9Z/P+SP2bxPzt/zOL/1/wxi/85+WMW/3Pzxyz+5+WPWfz/lj9m8f97/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/H/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+2Iv+g8FY7/9o/oPx4TrL+n8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGJ/3iD/DGL/5D8MYv/0Pwxi/+w/DGL//D8MYv/OPljFv9x88cs/uPlj1n8R+SPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/CfPf3QjXnXJ4j9F/pjF/y35Yxb/t+aPWfynzB+z+L8tf8ziP1X+mMV/6vwxi//b88cs/u/IH7P4vzN/zOL/rvwxi/+788cs/tPkj1n8p80fs/hPlz9m8X9P/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/i/N3/M4j9L/pjF/335Yxb/9+ePWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/j+SPWfznzh+z+M+TP2bxnzd/zOI/X/6Yxf+j+WMW//nzxyz+H8sfs/h/PH/M4r9A/pjF/xP5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8P5k/ZvH/VP6YxX/p/DGL/6fzxyz+y+SPWfw/kz9m8f9s/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi//n8scs/qu9Qf/nX3jhhf+pof0nZvFfvfWPWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/+fzxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/L+SPWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/L+aPWfy3yh+z+G+dP2bx3yZ/zOL/pfwxi/+2+WMW/y/nj1n8t8sfs/hvnz9m8d8hf8zi/5X8MYv/V/PHLP475o9Z/HfKH7P475w/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv898scs/nuif1uExX+vtDGL/9fyxyz+X88fs/jvnT9m8d8nf8ziv2/+mMV/v/wxi/838scs/t/MH7P4fyt/zOK/v9F/vH9/F4v/AUb/N5DF/9v5Yxb/7+SPWfwPzB+z+H83f8zif1D+mMX/4Pwxi/8h+WMW/+/lj1n8v58/ZvH/Qf6Yxf/Q/DGL/2H5Yxb/H+aPWfx/lD9m8T88f8zif0T+mMX/yPwxi/+P88cs/j/JH7P4H5U/ZvE/On/M4v/T/DGL/zH5Yxb/n+WPWfyPzR+z+P88f8zi/4v8MYv/cfljFv9f5o9Z/H+VP2bxPz5/zOJ/Qv6Yxf/E/DGL/6/zxyz+J+WPWfxPzh+z+J+SP2bx/03+mMX/t/ljFv/f5Y9Z/E/NH7P4n5Y/ZvH/ff6Yxf/0/DGL/xn5Yxb/P+SPWfzPzB+z+P8xf8zi/6f8MYv/n/PHLP5n5Y9Z/P+SP2bxPzt/zOL/1/wxi/85+WMW/3Pzxyz+5+WPWfz/lj9m8f97/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/H/ljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9J/EcM8scs/kPyxyz+Q/PHLP7D8scs/sPzxyz+4+SPWfzHzR+z+I+XP2bxH5E/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8Z88f8ziP0X+mMX/LfljFv+35o9Z/KfMH7P4vy1/zOI/Vf6YxX/q/DGL/9vzxyz+78gfs/i/M3/M4v+u/DGL/7vzxyz+0+SPWfynzR+z+E+XP2bxf0/+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+L83f8ziP0v+mMX/ffljFv/3549Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+P5I9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjF/6P5Yxb/+fPHLP4fyx+z+H88f8ziv0D+mMX/E/ljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfw/+Xr+Uz7/wgv/C0P7T8zi/6nWP2bxXzp/zOL/6fwxi/8y+WMW/8/kj1n8P5s/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8zi/7n8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/8/ljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/8X8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/8X88cs/lvlj1n8t84fs/hvkz9m8f9S/pjFf9v8MYv/l/PHLP7b5Y9Z/LfPH7P475A/ZvH/Sv6Yxf+r+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx3zV/zOK/W/6YxX/3/DGL/x75Yxb/PfPHLP575Y9Z/L+WP2bx/3r+mMV/7/wxi/8++WMW/33zxyz+++WPWfy/kT9m8f9m/pjF/1v5Yxb//fPHLP4H5I9Z/L+dP2bx/07+mMX/wPwxi/9388cs/gflj1n8D84fs/gfkj9m8f9e/pjF//v5Yxb/H+SPWfwPzR+z+B+WP2bx/2H+mMX/R/ljFv/D88cs/kfkj1n8j8wfs/j/OH/M4v+T/DGL/1H5Yxb/o/PHLP4/zR+z+B+TP2bx/1n+mMX/2Pwxi//P88cs/r/IH7P4H5c/ZvH/Zf6Yxf9X+WMW/+Pzxyz+J+SPWfxPzB+z+P86f8zif1L+mMX/5Pwxi/8p+WMW/9/kj1n8f5s/ZvH/Xf6Yxf/U/DGL/2n5Yxb/3+ePWfxPzx+z+J+RP2bx/0P+mMX/zPwxi/8f88cs/n/KH7P4/zl/zOJ/Vv6Yxf8v+WMW/7Pzxyz+f80fs/ifkz9m8T83f8zif17+mMX/b/ljFv+/549Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8/5E/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135j2rEqy9a/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5YxL/8Qf5Yxb/IfljFv+h+WMW/2H5Yxb/4fljFv9x8scs/uPmj1n8x8sfs/iPyB+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4v+W/DGL/1vzxyz+U+aPWfzflj9m8Z8qf8ziP3X+mMX/7fljFv935I9Z/N+ZP2bxf1f+mMX/3fljFv9p8scs/tPmj1n8p8sfs/i/J3/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n835s/ZvGfJX/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/4fzxyz+s+aPWfxnyx+z+M+eP2bxnyN/bGz1H/bqa8efM3/sRf9pB4PBWOY/GGP9z5U/Nrau/8EY/h/JH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv/R/PHLP7z549Z/D+WP2bx/3j+mMV/gfwxi/8n8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+H8yf8zi/6n8MYv/0vljFv9P549Z/JfJH7P4fyZ/zOL/2fwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/z+WPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP6fzx+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/L+QP2bx3yR/zOK/af6YxX+z/DGL/7j5Yxb/LfLHLP5b5o9Z/L+YP2bx3yp/zOK/df6YxX+b/DGL/5fyxyz+2+aPWfy/nD9m8d8uf8ziv33+mMV/h/wxi/9X8scs/l/NH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8zi/7X8MYv/1/PHLP57548NOeugx0efHav998kfs6z/ffPHLP775Y9Z/L+RP2bx/2b+mMX/W/ljFv/988cs/gfkj1n8v50/ZvH/Tv6Yxf/A/DGL/3fzxyz+B+WPWfwPzh+z+B+SP2bx/17+mMX/+/ljFv8f5I9Z/A/NH7P4H5Y/ZvH/Yf6Yxf9H+WMW/8Pzxyz+R+SPWfyPzB+z+P84f8zi/5P8MYv/UfljFv+j88cs/j/NH7P4H5M/ZvH/Wf6Yxf/Y/DGL/8/zxyz+v8gfs/gflz9m8f9l/pjF/1f5Yxb/4/PHLP4n5I9Z/E/MH7P4/zp/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+SPWfx/mz9m8f9d/pjF/9T8MYv/afljFv/f549Z/E/PH7P4n5E/ZvH/Q/6Yxf/M/DGL/x/zxyz+f8ofs/j/OX/M4n9W/pjF/y/5Yxb/s/PHLP5/zR+z+J+TP2bxPzd/zOJ/Xv6Yxf9v+WMW/7/nj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfz/kT9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vd/oe91g0W/2vc/q+Zxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj0n8Jxjkj1n8h+SPWfyH5o9Z/Iflj1n8h+ePWfzHyR+z+I+bP2bxHy9/zOI/In/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/9b8scs/m/NH7P4T5k/ZvF/W/6YxX+q/DGL/9T5Yxb/t+ePWfzfkT9m8X9n/pjF/135Yxb/d+ePWfynyR+z+E+bP2bxny5/zOL/nvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxf2/+mMV/lvwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/h/JH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv/R/PHLP7z549Z/D+WP2bx/3j+mMV/gfwxi/8n8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+H8yf8zi/6n8MYv/0vljFv9P549Z/JfJH7P4fyZ/zOL/2fwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/z+WPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP6fzx+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/L+QP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/L+YP2bx3yp/zOK/df6YxX+b/DGL/5fyxyz+2+aPWfy/nD9m8d8uf8ziv33+mMV/h/wxi/9X8scs/l/NH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8zi/7X8MYv/1/PHLP57549Z/PfJH7P475s/ZvHfL3/M4v+N/DGL/zfzxyz+38ofs/jvnz9m8T8gf8zi/+38MYv/d/LHLP4H5o9Z/L+bP2bxPyh/zOJ/cP6Yxf+Q/DGL//fyxyz+388fs/j/IH/M4n9o/pjF/7D8MYv/D/PHLP4/yh+z+B+eP2bxPyJ/zOJ/ZP6Yxf/H+WMW/5/kj1n8j8ofs/gfnT9m8f9p/pjF/5j8MYv/z/LHLP7H5v+vPTb6VOD/8/wxy/r/Rf6Yxf+4/DGL/y/zxyz+v8ofs/gfnz9m8T8hf8zif2L+mMX/1/ljFv+T8scs/ifnj1n8T8kfs/j/Jn/M4v/b/DGL/+/yxyz+p+aPWfxPyx+z+P8+f8zif3r+mMX/jPwxi/8f8scs/mfmj1n8/5g/ZvH/U/6Yxf/P+WMW/7Pyxyz+f8kfs/ifnT9m8f9r/pjF/5z8MYv/ufljFv/z8scs/n/LH7P4/z1/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4v+P/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+g8Gwf73K4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+2Njuv9aosxPcnz82tvuPboIH8scs/g/mj1n8H8ofG5v9x/vntRM8nD82Nvu/cv0/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5YxL/CQf5Yxb/IfljFv+h+WMW/2H5Yxb/4fljFv9x8scs/uPmj1n8x8sfs/iPyB+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4v+W/DGL/1vzxyz+U+aPWfzflj9m8Z8qf8ziP3X+mMX/7fljFv935I9Z/N+ZP2bxf1f+mMX/3fljFv9p8scs/tPmj1n8p8sfs/i/J3/M4j99/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n835s/ZvGfJX/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/4fzxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/0fyxyz+c+ePWfznyR+z+M+bP2bxny9/zOL/0fwxi//8+WMW/4/lj1n8P54/ZvFfIH/M4v+J/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/p/MH7P4fyp/zOK/dP6Yxf/T+WMW/2Xyxyz+n8kfs/h/Nn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/c/ljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi//n88cs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/y/kj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/y/mj1n8t8ofs/hvnT9m8d8mf8zi/6X8MYv/tvljFv8v549Z/LfLH7P4b58/Nvb6X/rCK/13yB8be/1fvf6/kj9m8f9q/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/6/lj1n8v54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv9v5I9Z/L+ZP2bx/1b+mMV///wxi/8B+WMW/2/nj1n8v5M/ZvE/MH/M4v/d/DGL/0H5Yxb/g/PHLP6H5I9Z/L+XP2bx/37+mMX/B/ljFv9D88cs/oflj1n8f5g/ZvH/Uf6Yxf/w/DGL/xH5Yxb/I/PHLP4/zh+z+P8kf8zif1T+mMX/6Pwxi/9P88cs/sfkj1n8f5Y/ZvE/Nn/M4v/z/DGL/y/yxyz+x+WPWfx/mT9m8f9V/pjF//j8MYv/CfljFv8T88cs/r/OH7P4n5Q/ZvE/OX/M4n9K/pjF/zf5Yxb/3+aPWfx/lz9m8T81f8zif1r+2Ev+gxGDwdjs//v8Mcv6Pz1/zOJ/Rv6Yxf8P+WMW/zPzxyz+f8wfs/j/KX/M4v/n/DGL/1n5Yxb/v+SPWfzPzh+z+P81f8zif07+mMX/3Pwxi/95+WMW/7/lj1n8/54/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8f/Hv/q3OYj8Lw8cs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Y6P8B4PBLmO3/635Y5b1f1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMS/4kG+WMW/yH5Yxb/ofljFv9h+WMW/+H5Yxb/cV7D/4orh631vzW0/8Qs/uO2/jGL/3j5Yxb/EfljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84/39pF5H/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8X9L/pjF/635Yxb/KfPHLP5vyx+z+E+VP2bxnzp/zOL/9vwxi/878scs/u/MH7P4vyt/zOL/7vwxi/80+WMW/2nzxyz+0+WPWfzfkz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+780fs/jPkj9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/yP5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvH/aP6YxX/+/DGL/8fyxyz+H88fs/gvkD82dvqPkn6l/yfyx8ZO/1G90n/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv9P5o9Z/D+VP2bxXzp/zOL/6fwxi/8y+WMW/8/kj1n8P5s/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8zi/7n8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/8/ljFv9188cs/usZ/d/AF2zxX9/o/way+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/xfyxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/xfzxyz+W+WPWfy3zh+z+G+TP2bx/1L+mMV/2/wxi/+X88cs/tvlj1n8t88fs/jvkD9m8f9K/pjF/6v5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8v5Y/ZvH/ev6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/L+RP2bx/2b+mMX/W/ljFv/988cs/gfkj1n8v50/ZvH/Tv6Yxf/A/DGL/3fzxyz+B+WPWfwPzh+z+B+SP2bx/17+mMX/+/ljFv8f5I9Z/A/NH7P4H5Y/ZvH/Yf6Yxf9H+WMW/8Pzxyz+R+SPWfyPzB+z+P84f8zi/5P8MYv/UfljFv+j88cs/j/NH7P4H5M/ZvH/Wf6Yxf/Y/DGL/8/zxyz+v8gfs/gflz9m8f9l/pjF/1f5Yxb/4/PHLP4n5I9Z/E/MH7P4/zp/zOJ/Uv6Yxf/k/DGL/yn5Yxb/3+SPWfx/mz9m8f9d/pjF/9T8MYv/afljFv/f549Z/E/PH7P4n5E/ZvH/Q/6Yxf/M/DGL/x/zxyz+f8ofG8N//Dd7PP+/ew3/P+ePWdb/WfljFv+/5I9Z/M/OH7P4/zV/zOJ/Tv6Yxf/c/DGL/3n5Yxb/v+WPWfz/nj9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bx/0f+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljEv+JB/ljFv8h+WMW/6H5Yxb/YfljFv/h+WMW/3Hyxyz+4+aPWfzHyx+z+I/IH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/hPnj9m8Z8if8zi/5b8MYv/W/PHLP5T5o9Z/N+WP2bxnyp/zOI/df6Yxf/t+WMW/3fkj1n835k/ZvF/V/6Yxf/d+WMW/2nyxyz+0+aPWfynyx+z+L8nf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfzfmz9m8Z8lf8zi/778MYv/+/PHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP6z5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/R/LHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4v/R/DGL//z5Yxb/j+WPWfw/nj9m8V8gf8zi/4n8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/6Xyxyz+n8wfs/h/Kn/M4r90/pjF/9P5Yxb/ZfLHLP6fyR+z+H82f8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf9z+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/+fzxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/L+SPWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/L+aPWfy3yh+z+G+dP2bx3yZ/zOL/pfwxi/+2Xv+VT3qdGy3+X/b6v24W/+3yxyz+2+ePWfx3sPqPeP2bLf5fsfr/myz+X80fs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOL/tfwxi//X88cs/nvnj1n898kfs/jvmz9m8d8vf8zi/438MYv/N/PHLP7fyh+z+O+fP2bxPyB/bGz1HzGG/7fzx8ZW/8EY/t/JH7P4H5g/ZvH/bv6Yxf+g/DGL/8H5Yxb/Q/LHLP7fyx+z+H8/f8zi/4P8MYv/ofljFv/D8scs/j/MH7P4/yh/zOJ/eP6Yxf+I/DGL/5H5Yxb/H+ePWfx/kj9m8T8qf8zif3T+mMX/p/ljFv9j8scs/j/LH7P4H5s/ZvH/ef6Yxf8X+WMW/+Pyxyz+v8wfs/j/Kn/M4n98/pjF/4T8MYv/ifljFv9f549Z/E/KH7P4n5w/ZvE/JX/M4v+b/DGL/2/zxyz+v8sfs/ifmj9m8T8tf8zi/3ul/4h/ew+L/+lK/3+fxf+M/DGL/x/yxyz+Z+aPWfz/mD9m8f9T/pjF/8/5Yxb/s/LHLP5/yR+z+J+dP2bx/2v+mMX/nPwxi/+5+WMW//Pyxyz+f8sfs/j/PX/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zi/4/8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4353/i003xmWL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QPybxn2TwSv+h//vD+k/N4j+k9Y9Z/Ifmj1n8h+WPWfyH549Z/MfJH7P4j5s/ZvEfL3/M4j8if8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/1vyxyz+b80fs/hPmT9m8X9b/pjFf6r8MYv/1PljFv+3549Z/N+RP2bxf2f+mMX/XfljFv93549Z/KfJH7P4T5s/ZvGfLn/M4v+e/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvF/b/6YxX+WV/u/MOx/fWD/mVn839f6xyz+788fs/h/IH/M4v/B/DGL/4fyxyz+H84fs/jPmj9m8Z8tf2yk/0cGg8HY7j97/phl/c+RP2bxnzN/zOI/V/6Yxf8j+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bx/2j+mMV//vwxi//HXvJvI3hVFv+PR49Z/BfIH7P4fyJ/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/J/PHLP6fyh+z+C+dP2bx/3T+mMV/mfwxi/9n8scs/p/NH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8f9c/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi//n8MYv/uvljFv/18scs/uvnj1n8N8gfG3LWQatOOursWO2/Yf6YZf1vlD9m8d84f8zi/4X8MYv/JvljFv9N88cs/pvlj1n8N9f774zXWvy30PtzFv8t88cs/l/MH7P4b5U/ZvHfOn/M4r9N/pjF/0v5Yxb/bfPHLP5fzh+z+G+XP2bx3z5/zOK/Q/6Yxf8r+WMW/6/mj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx/1r+mMX/6/ljFv+988cs/vvkj1n8980fs/jvlz9m8f9G/pjF/5v5Yxb/b+WPWfz3zx+z+B+QP2bx/3b+mMX/O/ljFv8D88cs/t/NH7P4H5Q/ZvE/OH/M4n9I/pjF/3v5Yxb/7+ePWfx/kD9m8T80f8zif1j+mMX/h/ljFv8f5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v/j/DGL/0/yxyz+R+WPWfyPzh+z+P80f8zif0z+mMX/Z/ljFv9j88cs/j/PH7P4/yJ/zOJ/XP6Yxf+X+WMW/1/lj1n8j88fs/ifkD9m8T8xf8zi/+v8MYv/SfljFv+T88cs/qfkj1n8f5M/ZvH/bf6Yxf93+WMW/1Pzxyz+p+WPWfx/r/Yf7zVvsfifrvZ/7Sz+Z+SPWfz/kD9m8T8zf8zi/8f8MYv/n/LHLP5/zh+z+J+VP2bx/0v+mMX/7Pwxi/9f88cs/ufkj1n8z80fs/iflz9m8f9b/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljEv8hg8Eu+UMS/0kub/1jFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHJP6TDvLHLP5D8scs/kPzxyz+w/LHLP7D88cs/uPkj1n8x80fs/iPl///x879h2td13ccv/mNKOnHNnVpw6Ex12YkMhq1EBXF449TJpr5G/UIJIj8kARTcaOVOjZd6mbJppaOOVu11OHm+rWiYVmzNWJrlVNcC2PMwUJzxq4D5xDn7O25Ol/2/dp6Px5/wLnv4/sOeV4v75uL6yqUpf9w/UNZ+u+hfyhL/xH6h7L031P/UJb+e+kfytJ/pP6hLP1foX8oS/+99Q9l6b+P/qEs/Yv+oSz999U/lKX/K/UPZen/M/qHsvT/Wf1DWfrvp38oS//99Q9l6X+A/qEs/X9O/1CW/q/SP5Sl/4H6h7L0P0j/UJb+r9Y/lKX/z+sfytJ/lP6hLP0P1j+Upf8v6B/K0n+0/qEs/Q/RP5Sl/6H6h7L0f43+oSz9x+gfytL/F/UPZel/mP6hLP1/Sf9Qlv6v1T+Upf8v6x/K0v9X9A9l6X+4/qEs/V+nfyhL/7H6h7L0f73+oSz9j9A/lKX/OP1DWfofqX8oS//x+oey9P9V/UNZ+k/QP5Sl/xv0D2Xp/2v6h7L0n6h/KEv/N+ofytL/TfqHsvT/df1DWfq/Wf9Qlv6T9A9l6X+U/qEs/SfrH8rS/2j9Q1n6H6N/KEv/Y/UPZek/Rf9Qlv7H6R/K0v94/UNZ+k/VP5Sl/wn6h7L0b9M/lKX/ifqHsvQ/Sf9Qlv4n6x/K0v8U/UNZ+rfrH8rS/y36h7L0f6v+oSz9T9U/lKX/2/QPZel/mv6hLP2n6R/K0v90/UNZ+p+hfyhL/7frH8rS/0z9Q1n6v0P/UJb+Z+kfytL/bP1DWfqfo38oS/9z9Q9l6X+e/qEs/c/XP5Sl/wX6h7L0n65/KEv/C/UPZel/kf6hLP0v1j+UpX+H/qEs/S/RP5Sl/wz9Q1n6z9Q/lKX/LP1DWfq/U/9Qlv6X6h/K0n+2/qEs/efoH8rS/zL9Q1n6z9U/lKX/5fqHsvSfp38oS//5+oey9F+gfyhL/4X6h7L0v0L/UJb+i/QPZen/Lv1DWfpfqX8oS//F+oey9F+ifyhL/6v0D2Xp/279Q1n6X61/KEv/a/QPZel/rf6hLP2X6h/K0v86/UNZ+v+G/qEs/X9T/1CW/sv0D2Xp/x79Q1n6/5b+oSz936t/KEv/9+kfytL/ev1DWfrfoH8oS/8b9Q9l6f/b+oey9F+ufyhL/9/RP5Sl/+/qH8rS/yb9Q1n636x/KEv/39M/lKX/+/UPZel/i/6hLP1v1T+Upf9t+oey9P99/UNZ+v+B/qEs/W/XP5Sl/wf0D2Xp/0H9Q1n636F/KEv/FfqHsvT/Q/1DWfr/kf6hLP3v1D+Upf9d+oey9L9b/1CW/h/SP5Sl/4f1D2Xpf0/v/qMa/nX9hMrS/177D2Xp/8f6h7L0X6l/KEv/P9E/lKX/ffqHsvT/U/1DWfrfr38oS/+P6B/K0v/P9A9l6f9R/UNZ+n9M/1CW/h/XP5Sl/5/rH8rS/xP6h7L0f0D/UJb+D+ofytL/If1DWfr/hf6hLP1X6R/K0v9h/UNZ+v+l/qEs/f9K/1CW/o/oH8rS/6/1D2Xp/0n9Q1n6f0r/UJb+n9Y/lKX/Z/QPZen/Wf1DWfr/jf6hLP0/p38oS//P6x/K0n+1/qEs/b+gfyhL/7/VP5Sl/xr9Q1n6P6p/KEv/L+ofytL/S/qHsvR/TP9Qlv5f1j+Upf9X9A9l6f93+oey9H9c/1CW/l/VP5Sl/9/rH8rS/2v6h7L0/wf9Q1n6r9U/lKX/1/UPZem/Tv9Qlv7/qH8oS/9/0j+Upf839A9l6f/P+oey9P+m/qEs/b+lfyhL/2/rH8rS/wn9Q1n6/4v+oSz9n9Q/lKX/U/qHsvRfr38oS/+n9Q9l6f+v+oey9P+O/qEs/f9N/1CW/t/VP5Sl/wb9Q1n6P6N/KEv/7+kfytJ/o/6hLP3/Xf9Qlv6b9A9l6f8f+oey9H9W/1CW/v+pfyhL/836h7L036J/KEv//9I/lKX/9/UPZem/Vf9Qlv7P6R/K0v95/UNZ+v9A/1CW/i/oH8rS/7/1D2Xp/6L+oSz9f6h/KEv/bfqHkvTfp6V/KEv/AfqHsvQfqH8oS/9B+oey9B+sfyhL/yH6h7L0H6p/KEv/YfqHsvQfrn8oS/899A9l6T9C/1CW/nvqH8rSfy/9Q1n6j9Q/lKX/K/QPZem/t/6hn7r+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2kWLF5y6fTZszvm+8IXvvDFzi9e7v8yAQAA/9d+9KH/5f6VAAAAAAAAAAAAAAAAAAAAQF5N/N+Jvdz/jgAAAAAAAAAAAAAA8P9dW/vRGwcN6PHUoF0fvPqxju0/j9965sx77nmodP/c9e2TgpccuOuDbdu2bVvx7KQpXQ+HtVqtzv+1fboeD+993Pn6S0fdccCOR2Xy52574rxpI0+e/+DNg7++4sb2Z4Zsf3ZI64JLZs3ueP3AVqscO6R1ZeeDIwa0WuX4Ia2bOh+M63wwdUhrZeeDI7c/2KP16c4Hr7to7uyLO584ofLvGfy0aGtf2hrUY7GtHv812HX/S0c9ObP75z5esvvVBre69j/6wS/u3+t73V5i/92vX47uvf9+/wsCL6l/+39+XffPfbzk/3r//9CarUui7730/rtfvxxj/1Cf4PN/j432/tzf6/P/wcFL7rw/aviaWzr333b6fQd1PTX4x/n8/6PXL8f23v/AHp//Oz/HT+n+/D+s1SrH7eZvB6TS1n7dxr7e//ve/+BX9boZsOv+7/7y+r0693/vC61lXU8N6ef+p/T1/n99r18r0D9t7Xdt6/X+34/9t8YEL7lz/xseHLn98//6+y/ab5fv9Wf/x/Xe/9iFcy4fu2DxksNnzZk+o2NGx2UTx004YvzEiRMmjN3+iWDHj7v5mwJJ7N77f2tEr5sBrVbHzvvV9904pXP/mx5e9uGup4b3c//H9/n+f7D3fwiNHtgaOrR15fSFC+cfsePH7ofjdvy44x8L9t+PP/8fcljXP9b9d4YDWq0Ddt6POW/isM79XzWvrOp6amg/9z+1z/1P7vl3lUD/7Ob7/8W9bnrs/6gN1yzq3P+h3993fddT/f3z/wl97v9O7/+wO9raW7W+iXbu/8hh151Y7bq0+fs/qE8T+x+1+aYt1a7LifYP9Wli/9OWv+nCatflJPuH+jSx/4fmnL+82nU52f6hPk3s/8VXbjmw2nU5xf6hPk3s//HvPH1PtevSbv9Qnyb2/4Hb24+sdl3eYv9Qnyb2f/gVz02qdl3eav9Qnyb2f8mep62sdl1OtX+oTxP7P3HbMftVuy5vs3+oTxP7H3Ddd5dWuy6n2T/Up4n9PzV9+dxq12Wa/UN9mtj/ylFjnq92XU63f6hPE/tf9swbpla7LmfYP9Snif1/5dY7Hq92Xd5u/1CfJvb/8XP2vaPadTnT/qE+Tez/B6MfHlHturzD/qE+Tex/7dqVD1S7LmfZP9Snif2vWDlodLXrcrb9Q32a2P+1J8x4rNp1Ocf+oT5N7H/8hC+dXe26nGv/UJ8m9n/AZ7/5dLXrcp79Q32a2P9pjyxaUO26nG//UJ8m9r/owI/9sNp1ucD+oT5N7P/NHQfOrHZdpts/1KeJ/ZebR6ytdl0utH+oTxP7P2vTXZOrXZeL7B/q08T+V+39+Y9Wuy4X2z/Up4n9b5532cRq16XD/qE+Tez/2++59r3Vrssl9g/1aWL/t7zwtVLtusywf6hPE/vfMO6sc6pdl5n2D/VpYv93nfzso9Wuyyz7h/o0sf/lq55YWO26vNP+oT5N7H/16pOerHZdLrV/qE8T+z90zNiRPZ997se8LrPtH+rTxP7nnrnsg9Wuyxz7h/o0sf9j77/1NdWuy2X2D/VpYv/DvzrpE9Wuy1z7h/o0sf9PTXrfJ6tdl8vtH+rTxP63TD7ksGrXZZ79Q32a2P+6B8bdVu26zLd/qE8T+3//o7dXvC4L7B/q08T+5732xU3VrstC+4f6NLH/N047Y3G163KF/UN9mtj/fndO/UK167LI/qE+Tez/3G9979Rq1+Vd9g/1aWL/h+x/4UHVrsuV9g/1aWL/M2etuaHadVls/1CfJvY/ZcW68dWuyxL7h/o0sf+9n1pwd7XrcpX9Q32a2P/GQfufUu26vNv+oT5N7P/eqx/5RrXrcrX9Q32a2P8N13+ko9p1ucb+oT5N7P8zW4durnZdrrV/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRO8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBQAA//9V6Ov+") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x83, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 5.242186031s ago: executing program 1 (id=1439): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) 4.861731414s ago: executing program 1 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x8, 0x5, 0x3, 0x6, 0x2, 0x8a2]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.861342374s ago: executing program 0 (id=1442): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) 4.528008304s ago: executing program 0 (id=1443): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) 4.527720174s ago: executing program 1 (id=1444): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000140), 0x5, 0x97a1, &(0x7f0000009780)="$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") mknod(0x0, 0x100, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f0000005b80)={0x2440, 0x300000000000000}) 4.188464005s ago: executing program 0 (id=1445): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x7) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x1, r1}]) 3.743890849s ago: executing program 0 (id=1447): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0xfffffffffffffd1d, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x2c, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "8c8d230e200cc6e014538f05c5f12a4ddaf5197e0ae2cfd1b0f19713b9d571ec90338eba587469df"}}, 0x0, 0x0, 0x0}, &(0x7f0000001280)={0x84, &(0x7f0000000d00)={0x20, 0xa}, 0x0, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x120, 0x40}}, &(0x7f0000000f80)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000fc0)={0x40, 0x9, 0x1, 0x59}, &(0x7f0000001000)={0x40, 0xb, 0x2, "b21b"}, &(0x7f0000001040)={0x40, 0xf, 0x2}, 0x0, &(0x7f0000001100)={0x40, 0x17, 0x6, @local}, &(0x7f0000001140)={0x40, 0x19, 0x2, "ab2b"}, 0x0, 0x0, 0x0, 0x0}) 3.491884178s ago: executing program 4 (id=1449): r0 = socket(0x2, 0x80805, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, 0x0, &(0x7f0000000040)) 3.458574699s ago: executing program 2 (id=1450): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0566788000000500000000160b008247d1a6e8bd70322de7b3c1bc4d4d67684f36efdc776be33efe25dac7a0cc1020fc1fa9e22ffa4df03881c178137d223c49301db96eb41e49b1f5ba020f76a6d393cb3bf07bbdaf1fab11fefd3c080c73f3b69b93487233043d976ad628e935360fb3761a67a8ea7a95c2e92d6ccb95188f11485026efc2ce12380175c0f15c7ebc8f78c34f1c"], 0x3c}}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.172936458s ago: executing program 2 (id=1451): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdc01, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8044) 2.78801656s ago: executing program 2 (id=1452): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x9) 2.646606815s ago: executing program 1 (id=1453): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000808, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.353680974s ago: executing program 4 (id=1454): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000680)={0x31, 0x8, 0x5, 0xffffffffffffffff, 0x403, 0x5}) 1.903935459s ago: executing program 4 (id=1455): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x24, {[@local=@item_4={0x3, 0x2, 0x1, "f0e25d9a"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x2, "6ed30800"}, @local=@item_4={0x3, 0x2, 0xa, "0da83a81"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0xb, "f6f1f4d0"}, @main=@item_4={0x3, 0x0, 0xc, "31dd5041"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) 1.518369221s ago: executing program 0 (id=1456): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_secret(0x0) 1.209649061s ago: executing program 2 (id=1457): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) 784.971085ms ago: executing program 2 (id=1458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmr'], 0xa) 490.256274ms ago: executing program 2 (id=1459): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001100)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x80, 0xff}}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}]}}]}, 0x14c}}, 0x0) 0s ago: executing program 0 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c001780040001000400030004000200040002"], 0x138}}, 0x0) kernel console output (not intermixed with test programs): vice found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.288676][ T4540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.324242][ T4540] usb 1-1: Product: syz [ 152.328489][ T4540] usb 1-1: Manufacturer: syz [ 152.362862][ T4540] usb 1-1: SerialNumber: syz [ 152.371094][ T4540] usb 1-1: config 0 descriptor?? [ 152.851891][ T32] usb 1-1: USB disconnect, device number 4 [ 152.999238][ T6070] loop4: detected capacity change from 0 to 4096 [ 153.125532][ T6074] loop1: detected capacity change from 0 to 8192 [ 153.189246][ T6074] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.261369][ T6081] loop3: detected capacity change from 0 to 512 [ 153.303464][ T6085] vivid-004: disconnect [ 153.312451][ T6084] vivid-004: reconnect [ 153.322608][ T6074] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 153.354422][ T6074] REISERFS (device loop1): using ordered data mode [ 153.363775][ T6074] reiserfs: using flush barriers [ 153.371586][ T6081] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 153.411119][ T6081] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 153.419814][ T6081] System zones: 0-1, 15-15, 18-18, 34-34 [ 153.427091][ T6081] EXT4-fs (loop3): orphan cleanup on readonly fs [ 153.433921][ T6081] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 153.444232][ T6081] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 153.459538][ T6081] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 153.467632][ T6081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.571: bg 0: block 40: padding at end of block bitmap is not set [ 153.468657][ T6074] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.503102][ T6081] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 153.567803][ T6081] EXT4-fs (loop3): 1 truncate cleaned up [ 153.592838][ T6081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 153.641535][ T6074] REISERFS (device loop1): checking transaction log (loop1) [ 153.706014][ T6081] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.571: bad symlink. [ 153.750738][ T6090] loop5: detected capacity change from 0 to 7 [ 153.775158][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.784732][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.823015][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.832279][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.841975][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.851391][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.864524][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.874071][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.910017][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 153.940248][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.949508][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.964533][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.974038][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 153.989327][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 153.998611][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.006714][ T6090] ldm_validate_partition_table(): Disk read failed. [ 154.050067][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.059716][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.068974][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.078308][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.092698][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.102002][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 154.127070][ T6090] Dev loop5: unable to read RDB block 0 [ 154.205932][ T6074] REISERFS (device loop1): Using tea hash to sort names [ 154.225036][ T6090] loop5: unable to read partition table [ 154.247899][ T6090] loop5: partition table beyond EOD, truncated [ 154.253757][ T6074] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 154.306862][ T6090] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 154.706142][ T6109] loop4: detected capacity change from 0 to 128 [ 154.980802][ T26] audit: type=1326 audit(1774953834.773:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4519c819 code=0x7ffc0000 [ 155.013902][ T26] audit: type=1326 audit(1774953834.803:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4519c819 code=0x7ffc0000 [ 155.064863][ T26] audit: type=1326 audit(1774953834.803:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fbc4519c819 code=0x7ffc0000 [ 155.088287][ T26] audit: type=1326 audit(1774953834.803:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4519c819 code=0x7ffc0000 [ 155.111567][ T26] audit: type=1326 audit(1774953834.813:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4519c819 code=0x7ffc0000 [ 155.216400][ T32] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 155.264272][ T6097] loop3: detected capacity change from 0 to 32768 [ 155.293774][ T6097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.577 (6097) [ 155.340649][ T6097] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.381601][ T6097] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 155.424551][ T32] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 155.432669][ T6097] BTRFS info (device loop3): turning on sync discard [ 155.440007][ T6097] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.445196][ T32] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 155.491110][ T6097] BTRFS info (device loop3): use zstd compression, level 3 [ 155.499652][ T32] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 155.532164][ T6097] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.547095][ T32] usb 3-1: config 220 has no interface number 2 [ 155.585082][ T32] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.592906][ T6097] BTRFS info (device loop3): trying to use backup root at mount time [ 155.663118][ T6097] BTRFS info (device loop3): enabling auto defrag [ 155.678881][ T32] usb 3-1: config 220 interface 0 has no altsetting 0 [ 155.697875][ T6097] BTRFS info (device loop3): using free space tree [ 155.715098][ T32] usb 3-1: config 220 interface 76 has no altsetting 0 [ 155.766495][ T32] usb 3-1: config 220 interface 1 has no altsetting 0 [ 155.815178][ T32] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.875114][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.942870][ T32] usb 3-1: Product: syz [ 155.947279][ T32] usb 3-1: Manufacturer: syz [ 155.951914][ T32] usb 3-1: SerialNumber: syz [ 156.097529][ T46] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 156.172989][ T6097] BTRFS error (device loop3): failed to load root extent [ 156.193064][ T6097] BTRFS warning (device loop3): try to load backup roots slot 1 [ 156.216400][ T32] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 156.234515][ T32] usb 3-1: No valid video chain found. [ 156.240111][ T32] usb 3-1: selecting invalid altsetting 0 [ 156.252575][ T46] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 156.305750][ T6097] BTRFS warning (device loop3): couldn't read tree root [ 156.316257][ T32] usb 3-1: selecting invalid altsetting 0 [ 156.322058][ T32] usbtest: probe of 3-1:220.1 failed with error -22 [ 156.330771][ T6097] BTRFS warning (device loop3): try to load backup roots slot 2 [ 156.337692][ T32] usb 3-1: USB disconnect, device number 4 [ 156.383740][ T6097] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 156.417553][ T6097] BTRFS warning (device loop3): couldn't read tree root [ 156.436766][ T6097] BTRFS warning (device loop3): try to load backup roots slot 3 [ 156.512240][ T6097] BTRFS info (device loop3): enabling ssd optimizations [ 156.530186][ T6097] BTRFS info (device loop3): rebuilding free space tree [ 156.675961][ T6097] BTRFS info (device loop3): checking UUID tree [ 157.044950][ T4274] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.348176][ T6192] netlink: 36 bytes leftover after parsing attributes in process `syz.3.612'. [ 158.348557][ T6188] loop4: detected capacity change from 0 to 2048 [ 158.403071][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 158.450696][ T6194] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.624815][ T32] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.640295][ T32] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 158.688879][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.709139][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 158.740986][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 158.785214][ T32] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.806186][ T32] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.829183][ T32] usb 1-1: Product: syz [ 158.836082][ T32] usb 1-1: Manufacturer: syz [ 158.848980][ T4538] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.874698][ T32] cdc_wdm 1-1:1.0: skipping garbage [ 158.879992][ T32] cdc_wdm 1-1:1.0: skipping garbage [ 158.917504][ T32] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 158.936327][ T32] cdc_wdm 1-1:1.0: Unknown control protocol [ 159.053066][ T4538] usb 3-1: Using ep0 maxpacket: 16 [ 159.072763][ T4538] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 159.092016][ T4538] usb 3-1: config 0 has no interface number 0 [ 159.109152][ T4538] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.144466][ T4538] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.157987][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 159.164941][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 159.199012][ T4538] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 159.209112][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 159.215860][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 159.241796][ T4538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.253366][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 159.260023][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 159.269413][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 159.276086][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 159.284499][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 159.291261][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 159.314269][ T4319] usb 1-1: USB disconnect, device number 5 [ 159.322389][ T4538] usb 3-1: config 0 descriptor?? [ 159.499132][ T6218] siw: device registration error -23 [ 159.524061][ T6200] loop3: detected capacity change from 0 to 32768 [ 159.638954][ T6200] XFS (loop3): Mounting V5 Filesystem [ 159.653305][ T6227] loop1: detected capacity change from 0 to 256 [ 159.756228][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.786708][ T6200] XFS (loop3): Ending clean mount [ 159.801022][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.848344][ T6200] XFS (loop3): Quotacheck needed: Please wait. [ 159.904837][ T4538] hid (null): unknown global tag 0xc [ 159.910329][ T4538] hid (null): unknown global tag 0xc [ 159.932935][ T4538] hid (null): unknown global tag 0xd [ 159.978906][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 160.035550][ T6200] XFS (loop3): Quotacheck: Done. [ 160.146397][ T4538] usb 3-1: USB disconnect, device number 5 [ 160.316436][ T4274] XFS (loop3): Unmounting Filesystem [ 160.369450][ T6240] process 'syz.1.629' launched './file1' with NULL argv: empty string added [ 160.837756][ T6248] loop4: detected capacity change from 0 to 256 [ 160.913931][ T6248] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 161.282626][ T6259] lo speed is unknown, defaulting to 1000 [ 161.318477][ T6259] lo speed is unknown, defaulting to 1000 [ 161.346591][ T6259] lo speed is unknown, defaulting to 1000 [ 161.378374][ T6259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 161.464167][ T6259] lo speed is unknown, defaulting to 1000 [ 161.491633][ T6259] lo speed is unknown, defaulting to 1000 [ 161.511947][ T6259] lo speed is unknown, defaulting to 1000 [ 161.542910][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 161.550757][ T6259] lo speed is unknown, defaulting to 1000 [ 161.574210][ T6259] lo speed is unknown, defaulting to 1000 [ 161.744601][ T32] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.772796][ T32] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.801746][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.824800][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 161.845715][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 161.859349][ T32] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.870168][ T32] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.878732][ T32] usb 5-1: Product: syz [ 161.883461][ T32] usb 5-1: Manufacturer: syz [ 161.908091][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 161.910509][ T6275] loop3: detected capacity change from 0 to 128 [ 161.914066][ T32] cdc_wdm 5-1:1.0: skipping garbage [ 161.943503][ T32] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 161.976036][ T32] cdc_wdm 5-1:1.0: Unknown control protocol [ 162.125527][ T32] usb 5-1: USB disconnect, device number 6 [ 162.392707][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 162.545607][ T6290] loop2: detected capacity change from 0 to 256 [ 162.570975][ T6290] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.618580][ T6290] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.763030][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.957981][ T6299] loop3: detected capacity change from 0 to 2048 [ 163.016530][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 163.026740][ T6299] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 163.037080][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.071742][ T32] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.094530][ T6300] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.115593][ T32] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 163.127255][ T6302] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 163.152901][ T4319] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 163.153297][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.160660][ T6302] syzkaller0: linktype set to 825 [ 163.209807][ T32] usb 1-1: config 0 descriptor?? [ 163.357354][ T4319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.382907][ T4319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.410653][ T4319] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.440455][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.452615][ T6288] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 163.472828][ T4319] usb 3-1: Product: syz [ 163.488650][ T4319] usb 3-1: Manufacturer: syz [ 163.493436][ T4319] usb 3-1: SerialNumber: syz [ 163.515607][ T4828] usb 1-1: USB disconnect, device number 6 [ 163.937714][ T4319] usb 3-1: 0:2 : does not exist [ 163.976847][ T6319] input: syz1 as /devices/virtual/input/input6 [ 164.368264][ T4828] usb 3-1: USB disconnect, device number 6 [ 164.555595][ T6325] mmap: syz.0.668 (6325) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 165.417792][ T6338] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 166.049283][ T6350] loop4: detected capacity change from 0 to 128 [ 166.085851][ T6350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.097790][ T6350] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.206049][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 166.370260][ T6356] loop4: detected capacity change from 0 to 256 [ 166.704133][ T26] audit: type=1326 audit(1774953846.493:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.2.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fb1f9c819 code=0x0 [ 167.038578][ T6366] loop3: detected capacity change from 0 to 4096 [ 167.051473][ T6368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 167.119126][ T6366] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 167.148669][ T6366] ntfs3: loop3: Failed to load $Extend. [ 167.887669][ T6377] input: syz0 as /devices/virtual/input/input8 [ 168.249514][ T6387] netlink: 'syz.4.695': attribute type 12 has an invalid length. [ 168.267885][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 168.279996][ T6389] loop3: detected capacity change from 0 to 1024 [ 168.485849][ T6392] syz.2.697 uses obsolete (PF_INET,SOCK_PACKET) [ 168.506353][ T6389] hfsplus: bad catalog file entry [ 168.692459][ T4326] hfsplus: b-tree write err: -5, ino 3 [ 168.711108][ T4326] hfsplus: bad catalog file entry [ 169.419087][ T6419] vivid-003: ================= START STATUS ================= [ 169.449028][ T6419] vivid-003: Radio HW Seek Mode: Bounded [ 169.494816][ T6419] vivid-003: Radio Programmable HW Seek: false [ 169.501096][ T6419] vivid-003: RDS Rx I/O Mode: Block I/O [ 169.562809][ T6419] vivid-003: Generate RBDS Instead of RDS: false [ 169.591685][ T6419] vivid-003: RDS Reception: true [ 169.601804][ T6419] vivid-003: RDS Program Type: 0 inactive [ 169.619526][ T6419] vivid-003: RDS PS Name: [ 169.619551][ T4828] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.619562][ T6419] inactive [ 169.636559][ T6419] vivid-003: RDS Radio Text: inactive [ 169.652869][ T6419] vivid-003: RDS Traffic Announcement: false inactive [ 169.670221][ T6419] vivid-003: RDS Traffic Program: false inactive [ 169.685339][ T6419] vivid-003: RDS Music: false inactive [ 169.698086][ T6419] vivid-003: ================== END STATUS ================== [ 169.702135][ T6399] loop2: detected capacity change from 0 to 32768 [ 169.725539][ T6399] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.700 (6399) [ 169.742445][ T6399] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 169.793205][ T6399] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 169.804228][ T6399] BTRFS info (device loop2): using free space tree [ 169.835192][ T4828] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.853618][ T4828] usb 4-1: config 0 has no interface number 0 [ 169.911903][ T4828] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.991763][ T4828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.003451][ T4828] usb 4-1: Product: syz [ 170.007681][ T4828] usb 4-1: Manufacturer: syz [ 170.012309][ T4828] usb 4-1: SerialNumber: syz [ 170.019877][ T4828] usb 4-1: config 0 descriptor?? [ 170.040555][ T6399] BTRFS info (device loop2): enabling ssd optimizations [ 170.230671][ T6448] program syz.0.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.240851][ T4828] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 170.250003][ T4272] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 170.268666][ T4828] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.299032][ T4828] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 170.328101][ T4828] usb 4-1: media controller created [ 170.369394][ T4828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.402928][ T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.592976][ T32] usb 5-1: Using ep0 maxpacket: 16 [ 171.602537][ T32] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.638184][ T32] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.671818][ T32] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 171.715586][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.737121][ T32] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 171.772198][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.832246][ T32] usb 5-1: config 0 descriptor?? [ 171.852742][ C0] sched: RT throttling activated [ 171.856344][ T4828] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 171.968138][ T6459] loop2: detected capacity change from 0 to 131072 [ 171.989163][ T6459] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 171.997369][ T6459] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 172.010026][ T6459] F2FS-fs (loop2): invalid crc value [ 172.028649][ T4828] usb 4-1: USB disconnect, device number 3 [ 172.039660][ T6459] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.094507][ T6459] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 172.101631][ T6459] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 172.273191][ T32] hid (null): report_id 0 is invalid [ 172.278586][ T32] hid (null): bogus close delimiter [ 172.311156][ T32] hid (null): unknown global tag 0xe [ 172.340449][ T32] hid (null): global environment stack underflow [ 172.360698][ T32] hid (null): global environment stack underflow [ 172.379168][ T32] hid (null): global environment stack underflow [ 172.408917][ T32] hid (null): unknown global tag 0xd [ 172.477126][ T32] usb 5-1: USB disconnect, device number 7 [ 173.236395][ T6488] program syz.0.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.829565][ T6504] device wlan0 entered promiscuous mode [ 173.893386][ T6504] device wlan0 left promiscuous mode [ 174.592885][ T4496] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 174.794876][ T4496] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.814088][ T4496] usb 2-1: config 0 has no interface number 0 [ 174.849162][ T4496] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 174.878965][ T4496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.902985][ T6500] loop3: detected capacity change from 0 to 32768 [ 174.910028][ T4496] usb 2-1: Product: syz [ 174.920219][ T4496] usb 2-1: Manufacturer: syz [ 174.931791][ T4496] usb 2-1: SerialNumber: syz [ 174.946458][ T4496] usb 2-1: config 0 descriptor?? [ 175.007943][ T6500] XFS (loop3): Mounting V5 Filesystem [ 175.169992][ T4496] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 175.189677][ T4496] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.231090][ T4496] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 175.261322][ T4496] usb 2-1: media controller created [ 175.322979][ T4496] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.402379][ T6500] XFS (loop3): Ending clean mount [ 175.428125][ T4496] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 175.566292][ T4496] usb 2-1: USB disconnect, device number 5 [ 175.785691][ T4274] XFS (loop3): Unmounting Filesystem [ 175.978315][ T6523] loop2: detected capacity change from 0 to 32768 [ 175.990149][ T6523] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.745 (6523) [ 176.016401][ T6523] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 176.071216][ T6523] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 176.101087][ T6523] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 176.121641][ T6523] BTRFS info (device loop2): use zstd compression, level 3 [ 176.144512][ T6523] BTRFS info (device loop2): using free space tree [ 176.275582][ T6523] BTRFS info (device loop2): enabling ssd optimizations [ 176.491763][ T4272] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 176.940479][ T6582] loop4: detected capacity change from 0 to 512 [ 176.993513][ T6582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.090868][ T6582] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.129682][ T6582] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.408983][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 177.857839][ T5795] kernel read not supported for file /dsp1 (pid: 5795 comm: kworker/0:19) [ 178.240950][ T6619] loop3: detected capacity change from 0 to 256 [ 178.302136][ T6619] FAT-fs (loop3): Directory bread(block 64) failed [ 178.309871][ T6619] FAT-fs (loop3): Directory bread(block 65) failed [ 178.331454][ T6619] FAT-fs (loop3): Directory bread(block 66) failed [ 178.379497][ T6619] FAT-fs (loop3): Directory bread(block 67) failed [ 178.413000][ T6619] FAT-fs (loop3): Directory bread(block 68) failed [ 178.430046][ T6619] FAT-fs (loop3): Directory bread(block 69) failed [ 178.458393][ T6624] blk_print_req_error: 10 callbacks suppressed [ 178.458415][ T6624] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 178.470595][ T6619] FAT-fs (loop3): Directory bread(block 70) failed [ 178.500004][ T6619] FAT-fs (loop3): Directory bread(block 71) failed [ 178.534825][ T6619] FAT-fs (loop3): Directory bread(block 72) failed [ 178.536061][ T6624] EXT4-fs (loop9): unable to read superblock [ 178.558498][ T6619] FAT-fs (loop3): Directory bread(block 73) failed [ 179.004264][ T6632] loop4: detected capacity change from 0 to 4096 [ 179.089604][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 179.123290][ T6639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.390214][ T6617] loop1: detected capacity change from 0 to 32768 [ 179.422176][ T6646] netlink: 68 bytes leftover after parsing attributes in process `syz.3.784'. [ 179.460454][ T6617] (syz.1.772,6617,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.492705][ T6617] (syz.1.772,6617,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 179.640484][ T6617] JBD2: Ignoring recovery information on journal [ 179.872603][ T6656] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.909316][ T6617] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 180.006802][ T6653] Invalid ELF header magic: != ELF [ 180.324240][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 180.467023][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.794'. [ 180.686487][ T4489] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 180.875878][ T6673] loop2: detected capacity change from 0 to 8192 [ 180.884777][ T4489] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.914120][ T4489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.932835][ T4775] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.942077][ T6673] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.945144][ T4489] usb 4-1: config 0 descriptor?? [ 181.003385][ T4489] cp210x 4-1:0.0: cp210x converter detected [ 181.133750][ T4775] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 181.155845][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.160433][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 181.190112][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.237053][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.270974][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.293981][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.370999][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.405677][ T4489] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 181.408942][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.452684][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.488791][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.501588][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.551998][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.596278][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.616783][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.622843][ T4489] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 181.637215][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.650012][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.663344][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.672435][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.674738][ T4489] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 181.684093][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.708507][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.739269][ T4489] usb 4-1: cp210x converter now attached to ttyUSB0 [ 181.742186][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.778379][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.799277][ T4489] usb 4-1: USB disconnect, device number 4 [ 181.811959][ T4775] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 181.817497][ T4489] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.849815][ T4775] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 181.884695][ T4489] cp210x 4-1:0.0: device disconnected [ 181.888179][ T4775] usb 2-1: config 64 interface 0 has no altsetting 0 [ 181.936112][ T4775] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 181.961293][ T4775] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 181.981279][ T4775] usb 2-1: Product: syz [ 181.985928][ T4775] usb 2-1: Manufacturer: syz [ 181.990704][ T4775] usb 2-1: SerialNumber: syz [ 182.009075][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 182.023236][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 182.042006][ T4775] yurex 2-1:64.0: USB YUREX device now attached to Yurex #0 [ 183.683051][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 183.780328][ T32] usb 2-1: USB disconnect, device number 6 [ 183.794727][ T32] yurex 2-1:64.0: USB YUREX #0 now disconnected [ 184.030342][ T6731] hugetlbfs: syz.4.822 (6731): Using mlock ulimits for SHM_HUGETLB is obsolete [ 184.312153][ T6740] loop3: detected capacity change from 0 to 8 [ 184.412921][ T6740] syz.3.826: attempt to access beyond end of device [ 184.412921][ T6740] loop3: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 184.502497][ T6740] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 184.591127][ T6740] unable to read xattr id index table [ 184.652558][ T6747] loop1: detected capacity change from 0 to 1024 [ 184.814223][ T6747] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.853538][ T6747] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.043822][ T6747] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.828: lblock 0 mapped to illegal pblock 0 (length 6) [ 185.269479][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 185.303020][ T6756] sit0: Master is either lo or non-ether device [ 185.319868][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 185.353741][ T6756] sit0: Master is either lo or non-ether device [ 185.400009][ T6741] loop4: detected capacity change from 0 to 131072 [ 185.416162][ T6741] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 185.424521][ T6741] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 185.432284][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 185.433901][ T6741] F2FS-fs (loop4): invalid crc value [ 185.458717][ T6741] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.562631][ T6741] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 185.570169][ T6741] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 186.038459][ T6775] loop2: detected capacity change from 0 to 256 [ 186.080758][ T6775] exfat: Deprecated parameter 'namecase' [ 186.122249][ T6775] exfat: Deprecated parameter 'namecase' [ 186.198008][ T6775] exFAT-fs (loop2): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 186.880116][ T6796] loop1: detected capacity change from 0 to 64 [ 188.232148][ T6803] loop3: detected capacity change from 0 to 131072 [ 188.243648][ T6803] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 188.251799][ T6803] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 188.266015][ T6803] F2FS-fs (loop3): invalid crc value [ 188.303832][ T6803] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.367099][ T6817] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.417266][ T6803] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 188.424507][ T6803] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 188.484311][ T6827] Bluetooth: MGMT ver 1.22 [ 189.112599][ T6840] program syz.1.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.137375][ T6842] netlink: 212 bytes leftover after parsing attributes in process `syz.4.865'. [ 189.666345][ T6852] ALSA: mixer_oss: invalid OSS volume 'ÝÝ' [ 189.778970][ T6854] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.788018][ T6854] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.796915][ T6854] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.806060][ T6854] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.636908][ T6870] loop1: detected capacity change from 0 to 4096 [ 190.719880][ T6873] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.866634][ T6876] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 190.947892][ T6876] Remounting filesystem read-only [ 191.362961][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 191.363377][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 191.369035][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 191.375550][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 191.576233][ T6889] loop1: detected capacity change from 0 to 256 [ 191.594828][ T6889] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.006346][ T6880] loop2: detected capacity change from 0 to 32768 [ 192.033373][ T6880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.881 (6880) [ 192.085368][ T6880] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.107369][ T6858] loop4: detected capacity change from 0 to 32768 [ 192.121339][ T6880] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 192.150993][ T6880] BTRFS info (device loop2): turning on sync discard [ 192.168067][ T6880] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.185632][ T26] audit: type=1326 audit(1774953871.983:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.232796][ T6880] BTRFS info (device loop2): use zstd compression, level 3 [ 192.263119][ T6880] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 192.281044][ T26] audit: type=1326 audit(1774953871.983:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.323739][ T6880] BTRFS info (device loop2): trying to use backup root at mount time [ 192.361913][ T6880] BTRFS info (device loop2): enabling auto defrag [ 192.379085][ T26] audit: type=1326 audit(1774953871.983:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.406893][ T6880] BTRFS info (device loop2): using free space tree [ 192.446246][ T26] audit: type=1326 audit(1774953871.983:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.487946][ T26] audit: type=1326 audit(1774953872.003:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.510532][ T26] audit: type=1326 audit(1774953872.003:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.580131][ T26] audit: type=1326 audit(1774953872.003:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.668153][ T41] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 192.681713][ T6921] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 192.731297][ T6880] BTRFS error (device loop2): failed to load root extent [ 192.738669][ T6880] BTRFS warning (device loop2): try to load backup roots slot 1 [ 192.747020][ T26] audit: type=1326 audit(1774953872.003:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.747085][ T2941] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 192.769534][ T26] audit: type=1326 audit(1774953872.003:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.871702][ T26] audit: type=1326 audit(1774953872.003:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f671cb9c819 code=0x7ffc0000 [ 192.962493][ T6880] BTRFS warning (device loop2): couldn't read tree root [ 192.982892][ T6880] BTRFS warning (device loop2): try to load backup roots slot 2 [ 193.022961][ T6880] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 193.108415][ T6880] BTRFS warning (device loop2): couldn't read tree root [ 193.132933][ T6880] BTRFS warning (device loop2): try to load backup roots slot 3 [ 193.182081][ T6930] loop5: detected capacity change from 0 to 7 [ 193.202989][ T6880] BTRFS info (device loop2): enabling ssd optimizations [ 193.211954][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.213986][ T6880] BTRFS info (device loop2): rebuilding free space tree [ 193.221381][ C0] buffer_io_error: 10 callbacks suppressed [ 193.221396][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.299721][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.309152][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.352410][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.361717][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.395423][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.404745][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.419517][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.428839][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.450801][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.460120][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.475337][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.484651][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.493450][ T4349] ldm_validate_partition_table(): Disk read failed. [ 193.547962][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.557268][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.636257][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.645573][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.653222][ T6880] BTRFS info (device loop2): checking UUID tree [ 193.662755][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.672126][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 193.692605][ T4349] Dev loop5: unable to read RDB block 0 [ 193.741602][ T4349] loop5: unable to read partition table [ 193.748039][ T4349] loop5: partition table beyond EOD, truncated [ 193.764736][ T6930] ldm_validate_partition_table(): Disk read failed. [ 193.794064][ T6930] Dev loop5: unable to read RDB block 0 [ 193.823239][ T6930] loop5: unable to read partition table [ 193.829123][ T6930] loop5: partition table beyond EOD, truncated [ 193.895269][ T6930] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 194.026014][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.370418][ T6958] loop3: detected capacity change from 0 to 512 [ 194.410252][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416676][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.529868][ T4489] hid-generic 0005:0004:A9D3.0004: unknown main item tag 0x0 [ 194.545344][ T4489] hid-generic 0005:0004:A9D3.0004: unknown main item tag 0x0 [ 194.556401][ T4489] hid-generic 0005:0004:A9D3.0004: unknown main item tag 0x0 [ 194.601855][ T6958] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.643487][ T4489] hid-generic 0005:0004:A9D3.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 194.666752][ T6958] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 194.746825][ T6958] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 194.772933][ T6958] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 194.781212][ T6958] System zones: 0-2, 18-18, 34-34 [ 194.835337][ T6958] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.908: iget: bad i_size value: 360287970189639680 [ 194.856131][ T6958] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.908: couldn't read orphan inode 15 (err -117) [ 194.901706][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 194.913412][ T6958] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.052353][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 195.085855][ T6968] fido_id[6968]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.632970][ T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 195.832928][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 195.840764][ T32] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.889933][ T32] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.918090][ T32] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 195.962056][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.969222][ T32] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 195.988675][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.043744][ T32] usb 1-1: config 0 descriptor?? [ 196.274841][ T7003] program syz.3.928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.713903][ T5795] usb 1-1: USB disconnect, device number 7 [ 196.972310][ T7017] loop2: detected capacity change from 0 to 8192 [ 197.020722][ T7017] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 197.043504][ T7017] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 197.089349][ T7017] REISERFS (device loop2): using ordered data mode [ 197.116784][ T7017] reiserfs: using flush barriers [ 197.196029][ T7017] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 197.253281][ T7017] REISERFS (device loop2): checking transaction log (loop2) [ 197.411889][ T7023] loop1: detected capacity change from 0 to 512 [ 197.509004][ T7023] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.935: iget: bad i_size value: -3674898675588399094 [ 197.523701][ T7017] REISERFS (device loop2): Using r5 hash to sort names [ 197.531121][ T7017] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 197.572381][ T7023] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.935: couldn't read orphan inode 15 (err -117) [ 197.622535][ T7023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.677420][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 197.677440][ T26] audit: type=1804 audit(1774953877.473:42): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.935" name="/newroot/187/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 197.875189][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 198.455163][ T5795] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.675005][ T5795] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 198.692611][ T5795] usb 2-1: config 0 has no interface number 0 [ 198.699447][ T5795] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 198.715559][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.729601][ T5795] usb 2-1: config 0 descriptor?? [ 198.732887][ T4713] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 198.742658][ T5795] usb 2-1: bad CDC descriptors [ 198.759121][ T5795] usb 2-1: bad CDC descriptors [ 198.934633][ T4713] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.955456][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.985583][ T4713] usb 4-1: config 0 descriptor?? [ 198.999723][ T4826] usb 2-1: USB disconnect, device number 7 [ 199.011116][ T4713] cp210x 4-1:0.0: cp210x converter detected [ 199.033908][ T7059] tipc: Started in network mode [ 199.050604][ T7059] tipc: Node identity ac14140f, cluster identity 4711 [ 199.069071][ T7059] tipc: New replicast peer: 255.255.255.255 [ 199.087018][ T7059] tipc: Enabled bearer , priority 10 [ 199.097084][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 199.164228][ T7062] program syz.2.950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.412055][ T4713] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 199.450411][ T4713] usb 4-1: cp210x converter now attached to ttyUSB0 [ 199.641483][ T4489] usb 4-1: USB disconnect, device number 5 [ 199.663520][ T4489] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.698505][ T4489] cp210x 4-1:0.0: device disconnected [ 199.763028][ T4713] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 199.954782][ T4713] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.009176][ T4713] usb 3-1: config 0 has no interface number 0 [ 200.048710][ T4713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.074951][ T4713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.114340][ T4713] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.136736][ T4713] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 200.197189][ T4713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.205879][ T5795] tipc: Node number set to 2886997007 [ 200.237070][ T4713] usb 3-1: config 0 descriptor?? [ 200.858806][ T4713] uclogic 0003:28BD:0042.0006: failed retrieving string descriptor #100: -71 [ 200.883366][ T4713] uclogic 0003:28BD:0042.0006: failed retrieving pen parameters: -71 [ 200.935396][ T4713] uclogic 0003:28BD:0042.0006: pen probing failed: -71 [ 200.942354][ T4713] uclogic 0003:28BD:0042.0006: failed probing parameters: -71 [ 200.980974][ T4713] uclogic: probe of 0003:28BD:0042.0006 failed with error -71 [ 201.040956][ T4713] usb 3-1: USB disconnect, device number 7 [ 201.446197][ T7110] loop4: detected capacity change from 0 to 4096 [ 201.532865][ T5795] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.722875][ T5795] usb 4-1: Using ep0 maxpacket: 32 [ 201.734829][ T5795] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 201.762795][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.790713][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.809606][ T4281] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 201.811777][ T5795] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 201.837401][ T4281] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 201.842942][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.890410][ T5795] usb 4-1: config 0 descriptor?? [ 201.953202][ T4496] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.152946][ T4496] usb 2-1: Using ep0 maxpacket: 32 [ 202.163187][ T4496] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.182862][ T4713] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.202857][ T4496] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.218841][ T4496] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.242603][ T4496] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 202.279642][ T4496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.288081][ T4496] usb 2-1: Product: syz [ 202.292301][ T4496] usb 2-1: Manufacturer: syz [ 202.317899][ T4496] usb 2-1: SerialNumber: syz [ 202.350067][ T4496] usb 2-1: config 0 descriptor?? [ 202.354051][ T5795] logitech 0003:046D:C29C.0007: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 202.377016][ T4713] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.386312][ T4713] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.405419][ T4713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.419728][ T4713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.433055][ T4713] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.473920][ T4713] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.511116][ T4713] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.520831][ T4713] usb 3-1: Product: syz [ 202.533423][ T4713] usb 3-1: Manufacturer: syz [ 202.560502][ T4713] cdc_wdm 3-1:1.0: skipping garbage [ 202.622863][ T4713] cdc_wdm 3-1:1.0: skipping garbage [ 202.631222][ T4713] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 202.643088][ T4713] cdc_wdm 3-1:1.0: Unknown control protocol [ 202.743728][ T5795] logitech 0003:046D:C29C.0007: no inputs found [ 202.792264][ T5795] usb 4-1: USB disconnect, device number 6 [ 202.799347][ T4496] gs_usb 2-1:0.0: Configuring for 25 interfaces [ 202.801522][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 202.812372][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 202.829281][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 202.835957][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 202.846657][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 202.853322][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 202.864446][ T4826] usb 3-1: USB disconnect, device number 8 [ 202.872479][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 202.879156][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 202.885284][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 203.097643][ T7134] fido_id[7134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 203.100027][ T7130] loop4: detected capacity change from 0 to 32768 [ 203.185056][ T7130] XFS (loop4): Mounting V5 Filesystem [ 203.192158][ T7144] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 203.192158][ T7144] The task syz.0.982 (7144) triggered the difference, watch for misbehavior. [ 203.201664][ T4496] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 203.227552][ T4496] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 203.238544][ T4496] gs_usb: probe of 2-1:0.0 failed with error -71 [ 203.260028][ T4496] usb 2-1: USB disconnect, device number 8 [ 203.283079][ T7130] XFS (loop4): Ending clean mount [ 203.306864][ T7130] XFS (loop4): Quotacheck needed: Please wait. [ 203.357204][ T7130] XFS (loop4): Quotacheck: Done. [ 203.540808][ T4281] XFS (loop4): Unmounting Filesystem [ 203.569017][ T7149] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 203.777915][ T7155] program syz.2.986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.959499][ T7187] program syz.3.1001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.327417][ T7194] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 205.353094][ T4826] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 205.476449][ T4275] Bluetooth: hci4: link tx timeout [ 205.483798][ T4275] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.544590][ T4826] usb 2-1: Using ep0 maxpacket: 8 [ 205.561766][ T4826] usb 2-1: config 0 has no interfaces? [ 205.571514][ T4826] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.587006][ T4826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.614330][ T4826] usb 2-1: config 0 descriptor?? [ 205.665892][ T7203] kernel read not supported for file /file1 (pid: 7203 comm: syz.2.1007) [ 205.675386][ T26] audit: type=1800 audit(1774953885.473:43): pid=7203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1007" name="file1" dev="mqueue" ino=42270 res=0 errno=0 [ 205.695902][ T4496] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 205.838602][ T4826] usb 2-1: USB disconnect, device number 9 [ 205.920777][ T4496] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.931931][ T4496] usb 1-1: config 0 has no interface number 0 [ 205.944195][ T4496] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 205.958898][ T4496] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 205.991958][ T4496] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.036252][ T4496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.100586][ T4496] usb 1-1: config 0 descriptor?? [ 206.119806][ T7196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.124592][ T26] audit: type=1326 audit(1774953885.923:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7214 comm="syz.2.1013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fb1f9c819 code=0x0 [ 206.150037][ T4496] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 206.283468][ T4496] kernel write not supported for file /420/attr/fscreate (pid: 4496 comm: kworker/1:15) [ 206.354800][ T951] usb 1-1: USB disconnect, device number 8 [ 206.360722][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 206.370826][ T4826] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 206.430677][ T7223] loop4: detected capacity change from 0 to 1024 [ 206.483705][ T7223] hfsplus: xattr exists yet [ 206.536299][ T9] hfsplus: b-tree write err: -5, ino 8 [ 206.554678][ T4826] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.602874][ T4826] usb 4-1: config 0 has no interfaces? [ 206.608574][ T4826] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 206.626216][ T4826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.646060][ T4826] usb 4-1: config 0 descriptor?? [ 207.054583][ T7239] loop4: detected capacity change from 0 to 4096 [ 207.161017][ T32] usb 4-1: USB disconnect, device number 7 [ 207.165482][ T7239] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 207.261543][ T7239] ntfs3: loop4: Failed to load $Extend. [ 207.375080][ T7246] device dummy0 entered promiscuous mode [ 207.402109][ T7246] device macvlan2 entered promiscuous mode [ 207.523058][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 207.765673][ T7258] loop1: detected capacity change from 0 to 64 [ 208.167694][ T7263] loop2: detected capacity change from 0 to 4096 [ 208.426620][ T7277] loop4: detected capacity change from 0 to 2048 [ 208.490030][ T7277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.546454][ T4272] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 208.592517][ T4272] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 208.613364][ T7279] netlink: 'syz.3.1039': attribute type 1 has an invalid length. [ 209.271504][ T7302] program syz.4.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.330167][ T7304] loop2: detected capacity change from 0 to 128 [ 209.367578][ T7304] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.490501][ T26] audit: type=1800 audit(1774953889.283:45): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1049" name="bus" dev="loop2" ino=1048630 res=0 errno=0 [ 209.717875][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.930672][ T7319] loop3: detected capacity change from 0 to 256 [ 209.974577][ T7319] exfat: Deprecated parameter 'utf8' [ 210.035694][ T7319] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 210.780095][ T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 210.995590][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.027241][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.057996][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.091583][ T32] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.109355][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.131143][ T32] usb 4-1: config 0 descriptor?? [ 211.568198][ T32] plantronics 0003:047F:FFFF.0008: unbalanced delimiter at end of report description [ 211.578434][ T7356] loop1: detected capacity change from 0 to 1024 [ 211.581401][ T32] plantronics 0003:047F:FFFF.0008: parse failed [ 211.595768][ T32] plantronics: probe of 0003:047F:FFFF.0008 failed with error -22 [ 211.695964][ T7356] syz.1.1072: attempt to access beyond end of device [ 211.695964][ T7356] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 211.748303][ T7361] loop2: detected capacity change from 0 to 512 [ 211.772913][ T7356] buffer_io_error: 25 callbacks suppressed [ 211.772935][ T7356] Buffer I/O error on dev loop1, logical block 2889, async page read [ 211.810081][ T7361] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1073: inode has both inline data and extents flags [ 211.838016][ T4713] usb 4-1: USB disconnect, device number 8 [ 211.872998][ T7356] syz.1.1072: attempt to access beyond end of device [ 211.872998][ T7356] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 211.887038][ T7361] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1073: couldn't read orphan inode 15 (err -117) [ 211.932952][ T7356] Buffer I/O error on dev loop1, logical block 2889, async page read [ 211.942293][ T7361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 211.956723][ T26] audit: type=1800 audit(1774953891.743:46): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1072" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 211.988210][ T7360] syz.1.1072: attempt to access beyond end of device [ 211.988210][ T7360] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 212.044356][ T7360] Buffer I/O error on dev loop1, logical block 2889, async page read [ 212.072138][ T7356] hfsplus: can't free extent [ 212.132180][ T26] audit: type=1800 audit(1774953891.923:47): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1072" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 212.133433][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 212.831794][ T7384] ipt_CLUSTERIP: Please specify destination IP [ 213.365374][ T7409] loop4: detected capacity change from 0 to 256 [ 213.399643][ T7409] exfat: Deprecated parameter 'utf8' [ 213.451309][ T7409] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 213.562349][ T7413] loop1: detected capacity change from 0 to 1024 [ 213.588659][ T7413] EXT4-fs: Ignoring removed orlov option [ 213.680308][ T7413] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 213.873168][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 214.122562][ T7425] loop1: detected capacity change from 0 to 1764 [ 214.244093][ T7429] loop4: detected capacity change from 0 to 64 [ 214.302862][ T7431] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1101'. [ 215.446501][ T7452] mmap: syz.1.1110 (7452): VmData 37593088 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 215.505072][ T7457] device ip6gre1 entered promiscuous mode [ 215.938992][ T7463] lo speed is unknown, defaulting to 1000 [ 216.023568][ T4713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.031873][ T4713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.097594][ T32] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.162081][ T7469] binder: 7467:7469 ioctl c0306201 2000000001c0 returned -14 [ 216.252836][ T4713] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 216.287507][ T7466] IPVS: persistence engine module ip_vs_pe_ not found [ 216.458083][ T4713] usb 4-1: Using ep0 maxpacket: 32 [ 216.469221][ T4713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.496914][ T4713] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.513090][ T4496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.524796][ T4713] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 216.544424][ T4713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.564612][ T4713] usb 4-1: Product: syz [ 216.568935][ T4713] usb 4-1: Manufacturer: syz [ 216.582784][ T4713] usb 4-1: SerialNumber: syz [ 216.596214][ T4713] usb 4-1: config 0 descriptor?? [ 216.635260][ T4826] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 216.673942][ T4496] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.839062][ T4826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.864692][ T4826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.867187][ T4713] usb 4-1: USB disconnect, device number 9 [ 216.894231][ T4826] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 216.925813][ T41] kworker/u4:2: attempt to access beyond end of device [ 216.925813][ T41] loop4: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 216.932870][ T4826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.961731][ T41] Buffer I/O error on dev loop4, logical block 4172, lost async page write [ 216.971378][ T41] kworker/u4:2: attempt to access beyond end of device [ 216.971378][ T41] loop4: rw=1, sector=4173, nr_sectors = 16 limit=64 [ 216.987570][ T41] kworker/u4:2: attempt to access beyond end of device [ 216.987570][ T41] loop4: rw=1, sector=4189, nr_sectors = 1 limit=64 [ 216.988256][ T4826] usb 1-1: SerialNumber: syz [ 217.001873][ T41] Buffer I/O error on dev loop4, logical block 4189, lost async page write [ 217.032880][ T41] kworker/u4:2: attempt to access beyond end of device [ 217.032880][ T41] loop4: rw=1, sector=4190, nr_sectors = 1 limit=64 [ 217.052011][ T41] Buffer I/O error on dev loop4, logical block 4190, lost async page write [ 217.063846][ T41] kworker/u4:2: attempt to access beyond end of device [ 217.063846][ T41] loop4: rw=1, sector=4191, nr_sectors = 1 limit=64 [ 217.079091][ T41] Buffer I/O error on dev loop4, logical block 4191, lost async page write [ 217.088143][ T41] kworker/u4:2: attempt to access beyond end of device [ 217.088143][ T41] loop4: rw=1, sector=4192, nr_sectors = 1 limit=64 [ 217.118314][ T41] Buffer I/O error on dev loop4, logical block 4192, lost async page write [ 217.138597][ T41] kworker/u4:2: attempt to access beyond end of device [ 217.138597][ T41] loop4: rw=1, sector=4193, nr_sectors = 1 limit=64 [ 217.156430][ T41] Buffer I/O error on dev loop4, logical block 4193, lost async page write [ 217.171293][ T41] kworker/u4:2: attempt to access beyond end of device [ 217.171293][ T41] loop4: rw=1, sector=4196, nr_sectors = 1 limit=64 [ 217.185953][ T41] Buffer I/O error on dev loop4, logical block 4196, lost async page write [ 217.196180][ T41] kworker/u4:2: attempt to access beyond end of device [ 217.196180][ T41] loop4: rw=1, sector=4197, nr_sectors = 1 limit=64 [ 217.210280][ T41] Buffer I/O error on dev loop4, logical block 4197, lost async page write [ 217.219307][ T41] kworker/u4:2: attempt to access beyond end of device [ 217.219307][ T41] loop4: rw=1, sector=4198, nr_sectors = 1 limit=64 [ 217.234388][ T41] Buffer I/O error on dev loop4, logical block 4198, lost async page write [ 217.243939][ T41] Buffer I/O error on dev loop4, logical block 4359, lost async page write [ 217.259831][ T4826] usb 1-1: 0:2 : does not exist [ 217.309995][ T4826] usb 1-1: USB disconnect, device number 9 [ 217.423053][ T5795] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.438797][ T7479] input: syz0 as /devices/virtual/input/input11 [ 217.576518][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.612853][ T5795] usb 2-1: Using ep0 maxpacket: 8 [ 217.619830][ T5795] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 217.659184][ T5795] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.689547][ T5795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.710369][ T5795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.727929][ T5795] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.741481][ T5795] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 217.750702][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.980202][ T5795] usb 2-1: GET_CAPABILITIES returned 0 [ 217.992932][ T32] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.003054][ T5795] usbtmc 2-1:16.0: can't read capabilities [ 218.203376][ T5795] usb 2-1: USB disconnect, device number 10 [ 218.223093][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 218.230984][ T32] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.262459][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.283174][ T32] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.302820][ T32] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.321375][ T7495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1128'. [ 218.331342][ T32] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.351300][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.609741][ T32] usb 4-1: GET_CAPABILITIES returned 0 [ 218.615609][ T32] usbtmc 4-1:16.0: can't read capabilities [ 218.854051][ T4826] usb 4-1: USB disconnect, device number 10 [ 219.336884][ T7523] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 219.463189][ T7521] loop2: detected capacity change from 0 to 8192 [ 219.507838][ T7521] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 219.576072][ T7521] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 219.601353][ T7521] REISERFS (device loop2): using ordered data mode [ 219.632927][ T7521] reiserfs: using flush barriers [ 219.639527][ T7521] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.657768][ T7521] REISERFS (device loop2): checking transaction log (loop2) [ 219.688409][ T7521] REISERFS (device loop2): Using r5 hash to sort names [ 219.696301][ T7521] REISERFS (device loop2): using 3.5.x disk format [ 219.708315][ T7521] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 219.745343][ T7521] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 219.853283][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.196746][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1153'. [ 220.314835][ T7543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.502905][ T4713] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.722906][ T4713] usb 3-1: Using ep0 maxpacket: 8 [ 220.732083][ T4713] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.748513][ T7560] loop4: detected capacity change from 0 to 512 [ 220.750660][ T4713] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.777693][ T7560] FAT-fs (loop4): Unrecognized mount option "uäéšã»P2/cÝ" or missing value [ 220.785776][ T4713] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.802441][ T32] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.816199][ T4713] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.860714][ T4713] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.880907][ T4713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.992854][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 221.006700][ T32] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 221.053250][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.075281][ T32] usb 1-1: Product: syz [ 221.079602][ T32] usb 1-1: Manufacturer: syz [ 221.084615][ T32] usb 1-1: SerialNumber: syz [ 221.122454][ T4713] usb 3-1: GET_CAPABILITIES returned 0 [ 221.128579][ T4713] usbtmc 3-1:16.0: can't read capabilities [ 221.237733][ T4826] kernel write not supported for file /535/clear_refs (pid: 4826 comm: kworker/0:17) [ 221.354276][ T4826] usb 3-1: USB disconnect, device number 9 [ 221.427824][ T7578] loop1: detected capacity change from 0 to 64 [ 221.434576][ T7574] loop3: detected capacity change from 0 to 8192 [ 221.441221][ T7577] loop4: detected capacity change from 0 to 1024 [ 221.481185][ T7574] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 221.495419][ T7574] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 221.507417][ T7574] REISERFS (device loop3): using ordered data mode [ 221.514106][ T7574] reiserfs: using flush barriers [ 221.528640][ T7574] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 221.547091][ T7574] REISERFS (device loop3): checking transaction log (loop3) [ 221.556383][ T7574] REISERFS (device loop3): Using r5 hash to sort names [ 221.576229][ T7574] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 221.961290][ T32] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 221.993668][ T32] usb 1-1: USB disconnect, device number 10 [ 222.081546][ T7586] loop3: detected capacity change from 0 to 4096 [ 222.604092][ T7594] device macvtap0 entered promiscuous mode [ 222.624447][ T7594] device macvtap0 left promiscuous mode [ 222.750521][ T7590] loop4: detected capacity change from 0 to 40427 [ 222.797106][ T7590] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 222.851065][ T7590] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.896387][ T7590] F2FS-fs (loop4): invalid crc value [ 222.935967][ T7590] F2FS-fs (loop4): Found nat_bits in checkpoint [ 223.087938][ T7590] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 223.097807][ T7590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 223.192844][ T4826] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.383141][ T4826] usb 2-1: Using ep0 maxpacket: 16 [ 223.390764][ T4826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.420139][ T4826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.442185][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 223.451484][ T4826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.468495][ T7619] netlink: 'syz.0.1185': attribute type 2 has an invalid length. [ 223.476629][ T4826] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.496919][ T7619] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 223.505582][ T4826] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.519522][ T7619] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1185'. [ 223.530929][ T4826] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.541056][ T4826] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.549456][ T4826] usb 2-1: Manufacturer: syz [ 223.586195][ T4826] usb 2-1: config 0 descriptor?? [ 223.847740][ T7626] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1189'. [ 223.857471][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1189'. [ 224.003526][ T4826] rc_core: IR keymap rc-hauppauge not found [ 224.017165][ T4826] Registered IR keymap rc-empty [ 224.029172][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.095694][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.134198][ T4826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 224.175660][ T4826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 224.213402][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.252848][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.282940][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.309824][ T7635] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 224.317782][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.352972][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.408223][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.447838][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.486216][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.523111][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.562897][ T4826] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 224.613906][ T4826] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 224.643769][ T4826] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 224.693163][ T4826] usb 2-1: USB disconnect, device number 11 [ 224.907608][ T7630] loop3: detected capacity change from 0 to 32768 [ 225.060357][ T7630] XFS (loop3): Mounting V5 Filesystem [ 225.167728][ T7630] XFS (loop3): Ending clean mount [ 225.218121][ T7659] lo speed is unknown, defaulting to 1000 [ 225.427612][ T4274] XFS (loop3): Unmounting Filesystem [ 225.472907][ T4826] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.662819][ T4826] usb 3-1: Using ep0 maxpacket: 32 [ 225.692289][ T4826] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.723133][ T4826] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.747807][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1206'. [ 225.780271][ T4826] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 225.797399][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1207'. [ 225.806721][ T4826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.830404][ T4826] usb 3-1: Product: syz [ 225.841231][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1207'. [ 225.859583][ T4826] usb 3-1: Manufacturer: syz [ 225.875445][ T4826] usb 3-1: SerialNumber: syz [ 225.886530][ T4826] usb 3-1: config 0 descriptor?? [ 225.895875][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1207'. [ 225.943002][ T7675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1207'. [ 226.223521][ T4826] usb 3-1: USB disconnect, device number 10 [ 226.267498][ T7677] loop3: detected capacity change from 0 to 8192 [ 226.291891][ T7677] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.342265][ T7677] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 226.352454][ T7677] REISERFS (device loop3): using ordered data mode [ 226.360543][ T7677] reiserfs: using flush barriers [ 226.367438][ T7677] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.384726][ T7677] REISERFS (device loop3): checking transaction log (loop3) [ 226.396995][ T7677] REISERFS (device loop3): Using r5 hash to sort names [ 226.397873][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 226.404291][ T7677] REISERFS (device loop3): using 3.5.x disk format [ 226.404667][ T7677] REISERFS warning (device loop3): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 226.435441][ T7677] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 227.069104][ T7695] loop3: detected capacity change from 0 to 4096 [ 227.136817][ T7695] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 227.334947][ T26] audit: type=1326 audit(1774953907.133:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.0.1223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f671cb9c819 code=0x0 [ 227.599034][ T7716] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 227.682894][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.891414][ T7723] loop2: detected capacity change from 0 to 64 [ 227.984390][ T7721] loop4: detected capacity change from 0 to 8192 [ 228.022097][ T7721] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 228.053030][ T7721] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 228.081734][ T7721] REISERFS (device loop4): using ordered data mode [ 228.117027][ T7721] reiserfs: using flush barriers [ 228.150386][ T7721] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.168630][ T7721] REISERFS (device loop4): checking transaction log (loop4) [ 228.177272][ T7721] REISERFS (device loop4): Using r5 hash to sort names [ 228.184334][ T7721] REISERFS (device loop4): using 3.5.x disk format [ 228.191212][ T7721] REISERFS warning (device loop4): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 228.205904][ T7721] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 228.313022][ T4713] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 228.512968][ T4713] usb 4-1: Using ep0 maxpacket: 16 [ 228.520612][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.562317][ T4713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.592683][ T4713] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.617182][ T951] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 228.646631][ T4713] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.666856][ T4713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.698798][ T4713] usb 4-1: config 0 descriptor?? [ 228.822859][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 228.833999][ T951] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 228.863040][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.891670][ T951] usb 1-1: Product: syz [ 228.901818][ T951] usb 1-1: Manufacturer: syz [ 228.911944][ T951] usb 1-1: SerialNumber: syz [ 229.125854][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.150090][ T951] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 229.159321][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.163502][ T7728] loop1: detected capacity change from 0 to 32768 [ 229.173200][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.185638][ T951] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.196063][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.216301][ T951] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 229.230247][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.232907][ T951] usb 1-1: media controller created [ 229.243737][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.261296][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.281579][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.289382][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.302850][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.311789][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.333189][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.340681][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.368836][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.373586][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.389138][ T4713] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 229.419415][ T4713] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input13 [ 229.482020][ T4713] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 229.489104][ T951] zl10353_read_register: readreg error (reg=127, ret==-71) [ 229.533787][ T4713] usb 4-1: USB disconnect, device number 11 [ 229.603451][ T7728] XFS (loop1): Mounting V5 Filesystem [ 229.659122][ T951] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 229.679214][ T951] usb 1-1: USB disconnect, device number 11 [ 229.760938][ T7743] fido_id[7743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 229.910761][ T7728] XFS (loop1): Ending clean mount [ 230.147991][ T4271] XFS (loop1): Unmounting Filesystem [ 230.365908][ T7754] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 231.013422][ T2941] bio_check_eod: 219 callbacks suppressed [ 231.013440][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.013440][ T2941] loop2: rw=1, sector=4172, nr_sectors = 1 limit=64 [ 231.087350][ T2941] buffer_io_error: 191 callbacks suppressed [ 231.087367][ T2941] Buffer I/O error on dev loop2, logical block 4172, lost async page write [ 231.113827][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.113827][ T2941] loop2: rw=1, sector=4173, nr_sectors = 16 limit=64 [ 231.172160][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.172160][ T2941] loop2: rw=1, sector=4189, nr_sectors = 1 limit=64 [ 231.196488][ T2941] Buffer I/O error on dev loop2, logical block 4189, lost async page write [ 231.208827][ T7775] loop3: detected capacity change from 0 to 512 [ 231.215632][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.215632][ T2941] loop2: rw=1, sector=4190, nr_sectors = 1 limit=64 [ 231.245549][ T2941] Buffer I/O error on dev loop2, logical block 4190, lost async page write [ 231.264152][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.264152][ T2941] loop2: rw=1, sector=4191, nr_sectors = 1 limit=64 [ 231.277926][ T7775] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.308764][ T7775] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 231.342613][ T2941] Buffer I/O error on dev loop2, logical block 4191, lost async page write [ 231.352865][ T7775] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.366592][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.366592][ T2941] loop2: rw=1, sector=4192, nr_sectors = 1 limit=64 [ 231.398429][ T7775] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1249: Invalid block bitmap block 0 in block_group 0 [ 231.408868][ T2941] Buffer I/O error on dev loop2, logical block 4192, lost async page write [ 231.431750][ T4496] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 231.441448][ T7775] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 231.471440][ T7775] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1249: attempt to clear invalid blocks 983261 len 1 [ 231.492790][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.492790][ T2941] loop2: rw=1, sector=4193, nr_sectors = 1 limit=64 [ 231.529870][ T7775] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.1249: Invalid inode table block 0 in block_group 0 [ 231.551852][ T2941] Buffer I/O error on dev loop2, logical block 4193, lost async page write [ 231.572884][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.572884][ T2941] loop2: rw=1, sector=4196, nr_sectors = 1 limit=64 [ 231.612309][ T7775] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 231.623605][ T2941] Buffer I/O error on dev loop2, logical block 4196, lost async page write [ 231.632693][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.632693][ T2941] loop2: rw=1, sector=4197, nr_sectors = 1 limit=64 [ 231.633273][ T7775] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 231.655540][ T2941] Buffer I/O error on dev loop2, logical block 4197, lost async page write [ 231.665213][ T2941] kworker/u4:5: attempt to access beyond end of device [ 231.665213][ T2941] loop2: rw=1, sector=4198, nr_sectors = 1 limit=64 [ 231.683749][ T2941] Buffer I/O error on dev loop2, logical block 4198, lost async page write [ 231.694999][ T4496] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.716238][ T7775] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.1249: Invalid inode table block 0 in block_group 0 [ 231.729646][ T2941] Buffer I/O error on dev loop2, logical block 4359, lost async page write [ 231.738446][ T4496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.753004][ T7775] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 231.763223][ T4496] usb 5-1: Product: syz [ 231.767438][ T4496] usb 5-1: Manufacturer: syz [ 231.772067][ T4496] usb 5-1: SerialNumber: syz [ 231.792828][ T7775] EXT4-fs error (device loop3): ext4_truncate:4314: inode #11: comm syz.3.1249: mark_inode_dirty error [ 231.823525][ T7777] loop1: detected capacity change from 0 to 40427 [ 231.840726][ T7775] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 231.869274][ T7777] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 231.884477][ T7775] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz.3.1249: Invalid inode table block 0 in block_group 0 [ 231.905225][ T7777] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 231.937296][ T7777] F2FS-fs (loop1): invalid crc value [ 231.939703][ T7775] EXT4-fs (loop3): 1 truncate cleaned up [ 231.960619][ T7775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.978084][ T7777] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 232.040386][ T4496] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 232.079439][ T4496] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 232.253479][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 232.323216][ T7777] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 232.337054][ T4496] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 232.361257][ T7777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 232.389672][ T4496] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 232.413748][ T4496] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 232.454711][ T4496] lan78xx: probe of 5-1:1.0 failed with error -71 [ 232.532475][ T4496] usb 5-1: USB disconnect, device number 8 [ 232.672442][ T7794] tipc: Started in network mode [ 232.689526][ T7794] tipc: Node identity ac14140f, cluster identity 4711 [ 232.713045][ T7794] tipc: New replicast peer: 255.255.255.255 [ 232.731702][ T7794] tipc: Enabled bearer , priority 10 [ 233.597549][ T7792] loop3: detected capacity change from 0 to 32768 [ 233.816612][ T7792] XFS (loop3): Mounting V5 Filesystem [ 233.853053][ T4496] tipc: Node number set to 2886997007 [ 234.024148][ T7792] XFS (loop3): Ending clean mount [ 234.328511][ T4274] XFS (loop3): Unmounting Filesystem [ 234.955782][ T7854] netlink: 'syz.4.1278': attribute type 9 has an invalid length. [ 235.574067][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.633190][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.652320][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.676190][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.691977][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.709156][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.731760][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.744373][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.766701][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.775568][ T7879] kvm [7878]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x62b1775a [ 235.786698][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.796933][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.810724][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.820845][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.829128][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.837070][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.845683][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.856269][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.865296][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.873279][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.881051][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.889144][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.897079][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.905314][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.913320][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.921057][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.929233][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.937271][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.945798][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.953838][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.961412][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.970418][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.978248][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.986300][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 235.994401][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.002317][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.010421][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.011291][ T7867] loop1: detected capacity change from 0 to 32768 [ 236.018403][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.032535][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.040375][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.048454][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.056338][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.065375][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.073239][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.080911][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.088794][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.096727][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.104737][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.112456][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.120373][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.121967][ T7867] XFS (loop1): Mounting V5 Filesystem [ 236.128378][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.141222][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.148974][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.157534][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.165616][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.173796][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.181380][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.189732][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.197523][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.206447][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.214318][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.222223][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.230176][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.238159][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.247437][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.255476][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.263332][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.265937][ T7867] XFS (loop1): Ending clean mount [ 236.271012][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.283951][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.291376][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.299331][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.307058][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.315034][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.322589][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.330616][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.342602][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.351617][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.365438][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.375600][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.404970][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.417276][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.428242][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.435812][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.449186][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.456871][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.483153][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.493173][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.500708][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.538787][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.542537][ T7894] device erspan0 entered promiscuous mode [ 236.559098][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.579370][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.599644][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.607889][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.626276][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.643012][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.658114][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.672837][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.688182][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.696188][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.703781][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.711364][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.719533][ T4713] hid-generic 0000:0000:0004.000A: unknown main item tag 0x0 [ 236.748323][ T4713] hid-generic 0000:0000:0004.000A: hidraw0: HID v0.03 Device [syz0] on syz1 [ 236.785610][ T4271] XFS (loop1): Unmounting Filesystem [ 237.017285][ T7898] fido_id[7898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 237.111712][ T7906] loop3: detected capacity change from 0 to 1024 [ 237.342130][ T7912] loop4: detected capacity change from 0 to 256 [ 237.424471][ T9] hfsplus: b-tree write err: -5, ino 25 [ 237.430384][ T9] hfsplus: b-tree write err: -5, ino 4 [ 237.454760][ T9] hfsplus: b-tree write err: -5, ino 2 [ 237.474809][ T9] hfsplus: b-tree write err: -5, ino 26 [ 237.493592][ T7912] FAT-fs (loop4): Directory bread(block 64) failed [ 237.533077][ T7912] FAT-fs (loop4): Directory bread(block 65) failed [ 237.540041][ T7912] FAT-fs (loop4): Directory bread(block 66) failed [ 237.583040][ T7912] FAT-fs (loop4): Directory bread(block 67) failed [ 237.589757][ T7912] FAT-fs (loop4): Directory bread(block 68) failed [ 237.664101][ T7912] FAT-fs (loop4): Directory bread(block 69) failed [ 237.717508][ T7912] FAT-fs (loop4): Directory bread(block 70) failed [ 237.767412][ T7912] FAT-fs (loop4): Directory bread(block 71) failed [ 237.788740][ T7912] FAT-fs (loop4): Directory bread(block 72) failed [ 237.792413][ T7923] loop1: detected capacity change from 0 to 256 [ 237.799893][ T7912] FAT-fs (loop4): Directory bread(block 73) failed [ 237.943076][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.164413][ T32] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 238.197882][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.225797][ T32] usb 4-1: Product: syz [ 238.240365][ T32] usb 4-1: Manufacturer: syz [ 238.256173][ T32] usb 4-1: SerialNumber: syz [ 238.498918][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 238.530516][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 238.765305][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 238.801635][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 238.865652][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 238.934097][ T32] lan78xx: probe of 4-1:1.0 failed with error -71 [ 238.964534][ T32] usb 4-1: USB disconnect, device number 12 [ 239.050858][ T7953] loop1: detected capacity change from 0 to 512 [ 239.127018][ T7953] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1314: Directory hole found for htree index block 0 [ 239.153052][ T7953] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 239.161410][ T7953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 239.202623][ T7953] EXT4-fs (loop1): shut down requested (1) [ 239.274857][ T7961] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1314: Directory hole found for htree index block 0 [ 239.292579][ T7962] pim6reg0: tun_chr_ioctl cmd 35111 [ 239.391889][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 239.413219][ T951] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 239.655882][ T7973] program syz.2.1322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.662949][ T951] usb 5-1: Using ep0 maxpacket: 16 [ 239.683761][ T951] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 239.708704][ T951] usb 5-1: config 0 has no interface number 0 [ 239.728386][ T951] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.759945][ T951] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 239.812570][ T951] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 239.830429][ T951] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 239.838976][ T951] usb 5-1: Product: syz [ 239.851605][ T951] usb 5-1: SerialNumber: syz [ 239.861217][ T951] usb 5-1: config 0 descriptor?? [ 239.876732][ T951] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 239.892216][ T951] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input14 [ 239.961016][ T7978] loop2: detected capacity change from 0 to 4096 [ 239.987291][ T7978] EXT4-fs: inline encryption not supported [ 240.193634][ T7983] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1326'. [ 240.201713][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 240.212886][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 240.220607][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 240.228781][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 240.239838][ T951] usb 5-1: USB disconnect, device number 9 [ 240.250357][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 240.257376][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 240.328006][ T951] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 240.565473][ T7978] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.618773][ T7978] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c019, mo2=0003] [ 240.634829][ T7978] System zones: 0-5 [ 240.661312][ T7978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.763030][ T7978] EXT4-fs (loop2): shut down requested (2) [ 240.820466][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1328'. [ 240.909519][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 241.262118][ T7994] loop3: detected capacity change from 0 to 4096 [ 241.307247][ T7980] loop1: detected capacity change from 0 to 40427 [ 241.369391][ T7980] F2FS-fs (loop1): invalid crc value [ 241.395120][ T8005] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.426483][ T7980] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.584404][ T7980] F2FS-fs (loop1): Start checkpoint disabled! [ 241.630945][ T7980] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 241.652959][ T8010] netlink: 'syz.4.1335': attribute type 11 has an invalid length. [ 241.660864][ T8010] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1335'. [ 241.670559][ T32] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 241.728776][ T26] audit: type=1800 audit(1774953921.523:49): pid=7980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1325" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 241.939434][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 242.036385][ T32] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 242.044800][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 242.056082][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.081246][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.109301][ T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.122480][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.148082][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.386353][ T32] usb 3-1: GET_CAPABILITIES returned 0 [ 242.391924][ T32] usbtmc 3-1:16.0: can't read capabilities [ 242.430400][ T2941] bio_check_eod: 103 callbacks suppressed [ 242.430419][ T2941] kworker/u4:5: attempt to access beyond end of device [ 242.430419][ T2941] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 242.451092][ T8016] loop4: detected capacity change from 0 to 256 [ 242.647810][ T8004] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71 [ 242.694334][ T32] usb 3-1: USB disconnect, device number 11 [ 242.988456][ T8026] loop3: detected capacity change from 0 to 512 [ 243.090764][ T8026] EXT4-fs (loop3): 1 truncate cleaned up [ 243.149585][ T8026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 243.427432][ T4274] EXT4-fs (loop3): unmounting filesystem. [ 243.682913][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.051580][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'. [ 244.113755][ T8057] netlink: 'syz.0.1357': attribute type 6 has an invalid length. [ 244.145193][ T8057] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1357'. [ 244.319131][ T951] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 244.528242][ T951] usb 4-1: Using ep0 maxpacket: 16 [ 244.535661][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.582305][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.623082][ T951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.648418][ T951] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.669897][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.725228][ T951] usb 4-1: config 0 descriptor?? [ 245.151540][ T951] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 245.169748][ T951] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 245.181338][ T951] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 245.194521][ T951] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 245.205307][ T4539] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 245.214288][ T951] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 245.229191][ T951] microsoft 0003:045E:07DA.000B: no inputs found [ 245.236927][ T951] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 245.412795][ T4539] usb 1-1: Using ep0 maxpacket: 32 [ 245.422571][ T4539] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 245.461217][ T4539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.481230][ T4539] usb 1-1: Product: syz [ 245.490442][ T4539] usb 1-1: Manufacturer: syz [ 245.500568][ T4539] usb 1-1: SerialNumber: syz [ 245.512573][ T4539] usb 1-1: config 0 descriptor?? [ 245.526704][ T4826] usb 4-1: USB disconnect, device number 13 [ 245.738333][ T4539] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 246.432975][ T4539] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 246.625082][ T8104] loop2: detected capacity change from 0 to 40427 [ 246.659965][ T8104] F2FS-fs (loop2): invalid crc value [ 246.697865][ T8104] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.848471][ T8104] F2FS-fs (loop2): Start checkpoint disabled! [ 246.885911][ T8104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 246.886105][ T4539] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 246.905891][ T4539] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 246.958957][ T8104] syz.2.1377: attempt to access beyond end of device [ 246.958957][ T8104] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 247.154573][ T32] usb 1-1: USB disconnect, device number 12 [ 247.297728][ T46] kworker/u4:3: attempt to access beyond end of device [ 247.297728][ T46] loop2: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 247.368230][ T46] kworker/u4:3: attempt to access beyond end of device [ 247.368230][ T46] loop2: rw=1, sector=77880, nr_sectors = 8 limit=40427 [ 247.388765][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 247.419285][ T46] kworker/u4:3: attempt to access beyond end of device [ 247.419285][ T46] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 247.571032][ T8140] loop3: detected capacity change from 0 to 8192 [ 247.646963][ T8140] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 247.660009][ T8125] loop4: detected capacity change from 0 to 32768 [ 247.713137][ T8140] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 247.724143][ T8140] REISERFS (device loop3): using ordered data mode [ 247.730718][ T8140] reiserfs: using flush barriers [ 247.760867][ T8140] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.816928][ T8140] REISERFS (device loop3): checking transaction log (loop3) [ 247.851220][ T8140] REISERFS (device loop3): Using r5 hash to sort names [ 247.872013][ T8140] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 248.825125][ T32] kernel read not supported for file /dsp1 (pid: 32 comm: kworker/1:1) [ 249.539496][ T8188] loop1: detected capacity change from 0 to 512 [ 250.479747][ T8210] No such timeout policy "syz1" [ 250.668155][ T8214] tap0: tun_chr_ioctl cmd 2148553947 [ 251.276438][ T2941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.477190][ T4489] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 251.554781][ T2941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.668592][ T2941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.683297][ T4489] usb 3-1: Using ep0 maxpacket: 16 [ 251.691274][ T4489] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 251.711894][ T4489] usb 3-1: config 0 has no interface number 0 [ 251.741694][ T4489] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.772831][ T4489] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.784936][ T4489] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 251.812008][ T4489] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 251.842859][ T4489] usb 3-1: Product: syz [ 251.848293][ T4489] usb 3-1: SerialNumber: syz [ 251.896632][ T4489] usb 3-1: config 0 descriptor?? [ 251.944621][ T4489] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 251.978283][ T4489] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input15 [ 252.015272][ T2941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.203876][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 252.211329][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 252.218667][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 252.226363][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 252.241350][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 252.248670][ T4489] usb 3-1: USB disconnect, device number 12 [ 252.264008][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 252.271041][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 252.318833][ T4489] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 252.678279][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.703405][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.727753][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.739953][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.749347][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.758616][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.902457][ T8241] loop4: detected capacity change from 0 to 32768 [ 252.999387][ T8241] XFS (loop4): Mounting V5 Filesystem [ 253.178840][ T8241] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 253.261216][ T8241] XFS (loop4): Starting recovery (logdev: internal) [ 253.347503][ T8241] XFS (loop4): Ending recovery (logdev: internal) [ 253.585267][ T8251] lo speed is unknown, defaulting to 1000 [ 253.726400][ T4281] XFS (loop4): Unmounting Filesystem [ 253.853209][ T32] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 254.041276][ T8254] loop1: detected capacity change from 0 to 32768 [ 254.075484][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.109876][ T32] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 254.140029][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.151017][ T8254] XFS (loop1): Mounting V5 Filesystem [ 254.160566][ T32] usb 1-1: Product: syz [ 254.176293][ T32] usb 1-1: Manufacturer: syz [ 254.182338][ T32] usb 1-1: SerialNumber: syz [ 254.279265][ T8254] XFS (loop1): Ending clean mount [ 254.570795][ T4271] XFS (loop1): Unmounting Filesystem [ 254.651751][ T8251] chnl_net:caif_netlink_parms(): no params data found [ 254.802903][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 254.969440][ T8308] loop4: detected capacity change from 0 to 512 [ 255.019274][ T32] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 255.038146][ T8308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.062286][ T32] usb 1-1: USB disconnect, device number 13 [ 255.096600][ T8308] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 255.289517][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 255.424430][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.440639][ T2941] bond0: (slave wlan1): Releasing backup interface [ 255.567321][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.590958][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.612917][ T8251] device bridge_slave_0 entered promiscuous mode [ 255.644503][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.651962][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.674002][ T8251] device bridge_slave_1 entered promiscuous mode [ 255.702009][ T4496] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 255.805382][ T8251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.845856][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852413][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.902915][ T4496] usb 5-1: Using ep0 maxpacket: 16 [ 255.910310][ T4496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.942394][ T4496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.963198][ T4496] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.004847][ T4496] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 256.032463][ T4496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.092619][ T4496] usb 5-1: config 0 descriptor?? [ 256.260798][ T8251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.392442][ T8251] team0: Port device team_slave_0 added [ 256.425416][ T8251] team0: Port device team_slave_1 added [ 256.485774][ T2941] device hsr_slave_0 left promiscuous mode [ 256.500590][ T2941] device hsr_slave_1 left promiscuous mode [ 256.523963][ T2941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.552289][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.567966][ T4496] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 256.590259][ T4496] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 256.609618][ T4496] microsoft 0003:045E:07DA.000C: collection stack underflow [ 256.627575][ T4496] microsoft 0003:045E:07DA.000C: item 0 4 0 12 parsing failed [ 256.644105][ T4496] microsoft 0003:045E:07DA.000C: parse failed [ 256.661065][ T4496] microsoft: probe of 0003:045E:07DA.000C failed with error -22 [ 256.713568][ T8319] loop1: detected capacity change from 0 to 32768 [ 256.737403][ T2941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.749300][ T2941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.772855][ T8319] JBD2: Ignoring recovery information on journal [ 256.843858][ T2941] device bridge_slave_1 left promiscuous mode [ 256.853732][ T2941] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.864042][ T8316] futex_wake_op: syz.4.1455 tries to shift op by -1; fix this program [ 256.878435][ T2941] device bridge_slave_0 left promiscuous mode [ 256.885503][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 256.892010][ T2941] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.939013][ T2941] device veth1_macvtap left promiscuous mode [ 256.939227][ T4371] usb 5-1: USB disconnect, device number 10 [ 256.953321][ T2941] device veth0_macvtap left promiscuous mode [ 256.959506][ T2941] device veth1_vlan left promiscuous mode [ 256.992978][ T2941] device veth0_vlan left promiscuous mode [ 257.000002][ T8319] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 257.205231][ T8319] overlayfs: upper fs does not support tmpfile. [ 257.251417][ T8319] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 257.273386][ T8319] [ 257.275778][ T8319] ====================================================== [ 257.282900][ T8319] WARNING: possible circular locking dependency detected [ 257.289960][ T8319] syzkaller #0 Not tainted [ 257.294491][ T8319] ------------------------------------------------------ [ 257.301543][ T8319] syz.1.1453/8319 is trying to acquire lock: [ 257.307560][ T8319] ffff888073fcc2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba0/0x13e0 [ 257.319894][ T8319] [ 257.319894][ T8319] but task is already holding lock: [ 257.327281][ T8319] ffff88804f9a9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0 [ 257.336834][ T8319] [ 257.336834][ T8319] which lock already depends on the new lock. [ 257.336834][ T8319] [ 257.347276][ T8319] [ 257.347276][ T8319] the existing dependency chain (in reverse order) is: [ 257.356518][ T8319] [ 257.356518][ T8319] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 257.364353][ T8319] down_read+0x42/0x2d0 [ 257.369087][ T8319] ocfs2_init_acl+0x307/0x770 [ 257.374306][ T8319] ocfs2_mknod+0x15e8/0x25b0 [ 257.379552][ T8319] ocfs2_mkdir+0x1b6/0x4b0 [ 257.384557][ T8319] vfs_mkdir+0x387/0x570 [ 257.389230][ T8346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1460'. [ 257.389343][ T8319] do_mkdirat+0x1d8/0x440 [ 257.403258][ T8319] __x64_sys_mkdirat+0x85/0x90 [ 257.408593][ T8319] do_syscall_64+0x4c/0xa0 [ 257.413588][ T8319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.420056][ T8319] [ 257.420056][ T8319] -> #1 (jbd2_handle){++++}-{0:0}: [ 257.427405][ T8319] jbd2_journal_lock_updates+0xa8/0x390 [ 257.433513][ T8319] __ocfs2_flush_truncate_log+0x2cf/0x1220 [ 257.439889][ T8319] ocfs2_flush_truncate_log+0x4b/0x60 [ 257.445834][ T8319] ocfs2_sync_fs+0x119/0x330 [ 257.451001][ T8319] sync_filesystem+0x1be/0x220 [ 257.456435][ T8319] generic_shutdown_super+0x6b/0x340 [ 257.462556][ T8319] kill_block_super+0x7c/0xe0 [ 257.467803][ T8319] deactivate_locked_super+0x93/0xf0 [ 257.473736][ T8319] cleanup_mnt+0x42c/0x4b0 [ 257.478826][ T8319] task_work_run+0x1d0/0x260 [ 257.483983][ T8319] exit_to_user_mode_loop+0xe6/0x110 [ 257.489841][ T8319] exit_to_user_mode_prepare+0xee/0x180 [ 257.495959][ T8319] syscall_exit_to_user_mode+0x16/0x40 [ 257.501974][ T8319] do_syscall_64+0x58/0xa0 [ 257.506963][ T8319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.513486][ T8319] [ 257.513486][ T8319] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 257.524135][ T8319] __lock_acquire+0x2d07/0x7d10 [ 257.529558][ T8319] lock_acquire+0x1bb/0x4a0 [ 257.534598][ T8319] down_write+0x36/0x60 [ 257.539365][ T8319] ocfs2_xattr_set+0xba0/0x13e0 [ 257.544752][ T8319] __vfs_setxattr+0x3e0/0x420 [ 257.549956][ T8319] __vfs_setxattr_noperm+0x129/0x5e0 [ 257.555841][ T8319] vfs_setxattr+0x167/0x2e0 [ 257.560871][ T8319] ovl_get_workdir+0xce9/0x1610 [ 257.566239][ T8319] ovl_fill_super+0x1824/0x2a30 [ 257.571606][ T8319] mount_nodev+0x52/0xe0 [ 257.576466][ T8319] legacy_get_tree+0xe6/0x180 [ 257.581662][ T8319] vfs_get_tree+0x88/0x270 [ 257.586594][ T8319] do_new_mount+0x24a/0xa40 [ 257.591634][ T8319] __se_sys_mount+0x2e3/0x3d0 [ 257.596855][ T8319] do_syscall_64+0x4c/0xa0 [ 257.601811][ T8319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.608228][ T8319] [ 257.608228][ T8319] other info that might help us debug this: [ 257.608228][ T8319] [ 257.618483][ T8319] Chain exists of: [ 257.618483][ T8319] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 257.618483][ T8319] [ 257.634311][ T8319] Possible unsafe locking scenario: [ 257.634311][ T8319] [ 257.641768][ T8319] CPU0 CPU1 [ 257.647137][ T8319] ---- ---- [ 257.652494][ T8319] lock(&oi->ip_xattr_sem); [ 257.657433][ T8319] lock(jbd2_handle); [ 257.664021][ T8319] lock(&oi->ip_xattr_sem); [ 257.671138][ T8319] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 257.678444][ T8319] [ 257.678444][ T8319] *** DEADLOCK *** [ 257.678444][ T8319] [ 257.686614][ T8319] 4 locks held by syz.1.1453/8319: [ 257.691724][ T8319] #0: ffff888057ee00e0 (&type->s_umount_key#49/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 257.701854][ T8319] #1: ffff88805687c460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 257.711267][ T8319] #2: ffff88804f9a9808 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 257.721821][ T8319] #3: ffff88804f9a9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0 [ 257.731742][ T8319] [ 257.731742][ T8319] stack backtrace: [ 257.737743][ T8319] CPU: 1 PID: 8319 Comm: syz.1.1453 Not tainted syzkaller #0 [ 257.745112][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.755256][ T8319] Call Trace: [ 257.758629][ T8319] [ 257.761559][ T8319] dump_stack_lvl+0x188/0x24e [ 257.766351][ T8319] ? load_image+0x400/0x400 [ 257.770864][ T8319] ? show_regs_print_info+0x12/0x12 [ 257.776069][ T8319] ? print_circular_bug+0x12b/0x1a0 [ 257.781281][ T8319] check_noncircular+0x296/0x330 [ 257.786264][ T8319] ? look_up_lock_class+0x75/0x140 [ 257.791481][ T8319] ? add_chain_block+0x940/0x940 [ 257.796597][ T8319] ? lockdep_lock+0xf1/0x1f0 [ 257.801189][ T8319] ? lockdep_unlock+0x142/0x2e0 [ 257.806220][ T8319] ? _find_first_zero_bit+0xcf/0x100 [ 257.811508][ T8319] __lock_acquire+0x2d07/0x7d10 [ 257.816478][ T8319] ? verify_lock_unused+0x140/0x140 [ 257.821686][ T8319] ? ocfs2_downconvert_lock+0x530/0x530 [ 257.827238][ T8319] ? verify_lock_unused+0x140/0x140 [ 257.832455][ T8319] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 257.838317][ T8319] ? do_raw_spin_lock+0x128/0x2f0 [ 257.843351][ T8319] lock_acquire+0x1bb/0x4a0 [ 257.847862][ T8319] ? ocfs2_xattr_set+0xba0/0x13e0 [ 257.852897][ T8319] ? _raw_spin_unlock+0x24/0x40 [ 257.857789][ T8319] ? ocfs2_xattr_block_find+0x157/0x4d0 [ 257.863456][ T8319] ? __might_sleep+0xd0/0xd0 [ 257.868055][ T8319] ? read_lock_is_recursive+0x10/0x10 [ 257.873458][ T8319] ? rwsem_write_trylock+0x135/0x1c0 [ 257.878851][ T8319] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 257.884398][ T8319] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 257.889856][ T8319] down_write+0x36/0x60 [ 257.894037][ T8319] ? ocfs2_xattr_set+0xba0/0x13e0 [ 257.899080][ T8319] ocfs2_xattr_set+0xba0/0x13e0 [ 257.903932][ T8319] ? __schedule+0x119d/0x40e0 [ 257.908615][ T8319] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 257.914357][ T8319] ? __sched_text_start+0x8/0x8 [ 257.919232][ T8319] ? llist_add_batch+0x12b/0x180 [ 257.924174][ T8319] ? preempt_schedule+0xbc/0xd0 [ 257.929029][ T8319] ? aa_get_newest_label+0xf9/0x5b0 [ 257.934499][ T8319] ? posix_xattr_acl+0x8f/0xb0 [ 257.939266][ T8319] ? evm_protect_xattr+0x333/0x9d0 [ 257.944398][ T8319] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 257.949886][ T8319] __vfs_setxattr+0x3e0/0x420 [ 257.954571][ T8319] __vfs_setxattr_noperm+0x129/0x5e0 [ 257.959901][ T8319] vfs_setxattr+0x167/0x2e0 [ 257.964681][ T8319] ? xattr_permission+0x500/0x500 [ 257.969943][ T8319] ? up_write+0x1bb/0x420 [ 257.974288][ T8319] ? do_raw_spin_unlock+0x11d/0x230 [ 257.979526][ T8319] ovl_get_workdir+0xce9/0x1610 [ 257.984387][ T8319] ? do_raw_spin_unlock+0x11d/0x230 [ 257.989585][ T8319] ? ovl_get_upper+0x600/0x600 [ 257.994362][ T8319] ? ovl_get_upper+0x456/0x600 [ 257.999124][ T8319] ? ovl_fill_super+0x2a30/0x2a30 [ 258.004151][ T8319] ? ovl_fill_super+0x13c9/0x2a30 [ 258.009179][ T8319] ? rcu_is_watching+0x11/0xa0 [ 258.013953][ T8319] ? ovl_fill_super+0x13c9/0x2a30 [ 258.018996][ T8319] ? __kmalloc+0xe1/0x240 [ 258.023331][ T8319] ovl_fill_super+0x1824/0x2a30 [ 258.028184][ T8319] ? ovl_mount+0x30/0x30 [ 258.032425][ T8319] ? sget+0x461/0x490 [ 258.036405][ T8319] ? free_anon_bdev+0x20/0x20 [ 258.041095][ T8319] ? ovl_mount+0x30/0x30 [ 258.045332][ T8319] mount_nodev+0x52/0xe0 [ 258.049580][ T8319] legacy_get_tree+0xe6/0x180 [ 258.054350][ T8319] ? virtio_fs_zero_page_range+0x130/0x130 [ 258.060184][ T8319] vfs_get_tree+0x88/0x270 [ 258.064610][ T8319] do_new_mount+0x24a/0xa40 [ 258.069111][ T8319] __se_sys_mount+0x2e3/0x3d0 [ 258.073800][ T8319] ? __x64_sys_mount+0xc0/0xc0 [ 258.078604][ T8319] ? lockdep_hardirqs_on+0x94/0x140 [ 258.083864][ T8319] ? __x64_sys_mount+0x1c/0xc0 [ 258.088627][ T8319] do_syscall_64+0x4c/0xa0 [ 258.093056][ T8319] ? clear_bhb_loop+0x60/0xb0 [ 258.097752][ T8319] ? clear_bhb_loop+0x60/0xb0 [ 258.102436][ T8319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.108331][ T8319] RIP: 0033:0x7fbc4519c819 [ 258.112752][ T8319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.132458][ T8319] RSP: 002b:00007fbc4605e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.140905][ T8319] RAX: ffffffffffffffda RBX: 00007fbc45415fa0 RCX: 00007fbc4519c819 [ 258.148885][ T8319] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 258.156947][ T8319] RBP: 00007fbc45232c91 R08: 0000200000000300 R09: 0000000000000000 [ 258.164916][ T8319] R10: 0000000002000808 R11: 0000000000000246 R12: 0000000000000000 [ 258.172897][ T8319] R13: 00007fbc45416038 R14: 00007fbc45415fa0 R15: 00007fffeb360f18 [ 258.180887][ T8319] [ 258.206927][ T8319] overlayfs: upper fs missing required features. [ 258.246134][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 258.475309][ T2941] bond1 (unregistering): Released all slaves [ 258.962804][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 259.053007][ T2941] team0 (unregistering): Port device team_slave_1 removed [ 259.107568][ T2941] team0 (unregistering): Port device team_slave_0 removed [ 259.165388][ T2941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.223111][ T2941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.630200][ T2941] bond0 (unregistering): Released all slaves [ 259.750482][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1460'. [ 259.791275][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.800785][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.827406][ T8251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.840757][ T8251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.847901][ T8251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.874267][ T8251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.934929][ T8251] device hsr_slave_0 entered promiscuous mode [ 259.941524][ T8251] device hsr_slave_1 entered promiscuous mode [ 259.948354][ T8251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.955962][ T8251] Cannot create hsr debugfs directory [ 260.467545][ T8251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.478186][ T8251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.488144][ T8251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.497932][ T8251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.561553][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.578160][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.587034][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.597395][ T8251] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.607698][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.618495][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.627565][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.634817][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.663859][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.672343][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.681632][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.690379][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.697557][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.708290][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.717555][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.726666][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.736595][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.755679][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.764807][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.773823][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.782355][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.793573][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.804916][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.019513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.027493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.040248][ T8251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.043009][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 261.068976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.079446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.102581][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.111410][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.121520][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.129812][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.138177][ T8251] device veth0_vlan entered promiscuous mode [ 261.156556][ T8251] device veth1_vlan entered promiscuous mode [ 261.185014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.193517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.205298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.214512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.226668][ T8251] device veth0_macvtap entered promiscuous mode [ 261.236907][ T8251] device veth1_macvtap entered promiscuous mode [ 261.254047][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.266790][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.278868][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.295363][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.305267][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.317588][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.329204][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.341352][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.353413][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.361038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.369525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.380737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.390603][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.401014][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.411802][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.421933][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.432631][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.442516][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.454315][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.464228][ T8251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.474948][ T8251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.485699][ T8251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.496298][ T8251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.505219][ T8251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.514147][ T8251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.524453][ T8251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.534755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.543665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.578300][ T8251] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 261.601755][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.616810][ T8251] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 261.625891][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.639194][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.660414][ T8297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.670358][ T8297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.680391][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready