last executing test programs: 4.306734237s ago: executing program 0 (id=810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000340)={0xf9a, 0x1}) 4.13918322s ago: executing program 0 (id=814): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0xfffffffffffffffb, 0x0, 0xa, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e50008000001000000800000000004001dff00e8a9a4b60007ffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d7d3d458dd4992861ac00000080ffffffffffffff00", "90be8bf4bd00000000000000000000000000001000", [0x8000000000000000]}}) 4.038697401s ago: executing program 0 (id=815): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 3.722417135s ago: executing program 2 (id=817): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) 3.620818227s ago: executing program 2 (id=818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x8}}}}, 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904"], 0x0) 3.106308465s ago: executing program 3 (id=826): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004480)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0xd0, 0x1801, 0x0, 0x0}, {0x99, 0x0, 0x0, 0x0}, {0x6, 0x2000, 0x0, 0x0}], 0x3}) 2.418770675s ago: executing program 0 (id=827): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x401) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x31, 0x7, &(0x7f0000000040)={0x11, "652519cab69bf9c9c3ee7e172bfe2548bca2a1406d186ff7ef4dd45197f36d6972"}}) 2.196020838s ago: executing program 2 (id=828): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0xc000) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=""/4112, 0x1010}, 0x800026}], 0x1, 0x10121, 0x0) 2.113786439s ago: executing program 2 (id=829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4709, &(0x7f0000008f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1.471941359s ago: executing program 3 (id=830): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.271452441s ago: executing program 3 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.237922822s ago: executing program 3 (id=832): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800c00058008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f984967500002"], 0x270}}, 0x0) 1.140594263s ago: executing program 2 (id=833): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a, 0xfec, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getuid() 1.026501555s ago: executing program 3 (id=835): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x20}) 826.732828ms ago: executing program 0 (id=836): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xd9d76000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 793.742879ms ago: executing program 1 (id=837): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2a060400) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 529.197382ms ago: executing program 1 (id=838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x800, 0x10, 0xb82, 0xe12, 0x9f3}, 0x14) 354.697775ms ago: executing program 1 (id=839): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000005c0)={0x1d, r1}, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 226.815407ms ago: executing program 1 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x60}]}, 0x5c}}, 0x0) 159.265468ms ago: executing program 2 (id=841): creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @ioapic={0xd000, 0xfffffbff, 0x2, 0x9, 0x0, [{0x3, 0x6}, {0x6, 0xf8, 0xb, '\x00', 0xda}, {0xff, 0x9, 0x3, '\x00', 0xe2}, {0x5, 0xe, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4, '\x00', 0x40}, {0x9, 0x5, 0xd, '\x00', 0xea}, {0x9, 0x68, 0x4, '\x00', 0xe}, {0x26, 0x8, 0xa0, '\x00', 0x56}, {0x3, 0x7, 0x4, '\x00', 0x4}, {0x13, 0x10, 0x9d, '\x00', 0x1}, {0x0, 0xc2, 0x38, '\x00', 0x6}, {0x5, 0x1, 0x5, '\x00', 0x4}, {0x7, 0x2, 0x1}, {0xe, 0x0, 0x8, '\x00', 0x8}, {0xa, 0xb, 0x9, '\x00', 0x7}, {0x7f, 0x2, 0x80, '\x00', 0x65}, {0x9c, 0x3, 0x8, '\x00', 0xe}, {0x6, 0x1, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x1, '\x00', 0xb}, {0x4, 0x81, 0x9}, {0x2f, 0xf, 0x1c, '\x00', 0x2}, {0x6, 0x1, 0xf, '\x00', 0xfc}, {0xff, 0x1, 0x4, '\x00', 0x7}, {0x81, 0x3, 0x1, '\x00', 0x9}]}}) 58.478809ms ago: executing program 0 (id=842): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00)={[{@noikeep}, {@sysvgroups}]}, 0x4, 0x9864, &(0x7f0000000140)="$eJzs3Qm8rWPBuP91nINjHko0IVMajRlSMg8lmSNz5owhocxDGSpKqCgUSSmEikiZZSbzPM/zPP4/xznE6SLv7/++r17XdX2cs8a99r3v73M/9trPPmutuMiyCwwGEw9G9vLpPztj/5tWW26CJTY/Yd9hVx6815L3jrp6rJEnk8w36nT+UacLDAaDIaMeZ8jI64bNe/wJYwyGDUb898/GH2fcMcYfDMYddXHU4wzmHHky3hEv3+/F0eKBTj3i0+058s9LTTDiQUacWWWN5zcZDAbDX/XxI8Y18798odLmX2C5Bf5p9YrbGKNuHvLP2146HTbyz3iHDQbjHTJ4/e1jxH3HfNXH/m824nNOPO1g+Zvegs/9f67Pz7/UMqP5j1iLQ0ddN+eINT76GjQ2+na+17Ib3j1qCoeMmriX182Qt2i7/39qxfkXWWLw+ut4sOTC29314kv7zWELDQbDFh4Mhi0yGAxb9K32qP+e3tKNr6qqqt6S5l9gthHP/8YY7fuB4S9/X0vfF57z3Cy3DQbDlhz5/e6wNV5+LlhVVVVVVVVV/5nNv8BsC8Lz/4nf6Pn/1CfvOknP/6uqqqqqqqr+77T4/AvMNuK5/mjP/6d4o+f/D91z9OEjf/d/vjlHftQLb+0XUVVVVVVVVVVv2CKL4/P/qd/o+f95x099Yc//q6qqqqqqqv7vtMxsiyw4eNXr7I26esaXb6fn/6fcecOqb9V4q6qqqqqqquq/3gv3n3TqP1+7esrBaK/3/lKjfi4w5JjTLr74LRvof0ZD/vXnITu+1WP6/9sI5+FHTT0YbLL8Wz2Uegv6P/Na9fU/Uv7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+51jv+/8vr/pxy31svvBf/B6We76qR/fuRL7/0/bMnF79/pLRr6W9Hb9fj/YIMhg8Eo34k3GAwGS86/zHIzDgaDk66abfrpBq/cNteI2+aZdOhLbxD/8j8TWXgSfuAdpxl5OmJDGbzzlcc45qXHX/zFQ4cOGW0Qr2qSEw8/fP0Vn5x99NMZXv/rGOOVcxOccM/L/5ZljNHuNPx1Pvjlx3/5axndedTYZxwx9pm23HizmbbYZtuPbbDxmuuts946m8w96xyzzD733HPMMdO6G2y0zswj/369OZv6pb8XfDNzNv7oc3b//K+es9G/ttebs6nfeM5eesT9zh3+mZfnbNh/cc4WfOM5m3qDUZ9okvnGHKzx0twMGQwmWWjMwdYjLswy9mAwycKj7jvFiPt+atIxBoN9/vmFjjg39ivb4JAdR9xnxUWWXWDkbmow+OfpP3ud97Mfa9TI5xt1Ov+o0wVGfpqJB//cFIfNe/wJY4yYi9dMx/jjjDvG+IPBuKMujnqcwdwjT8Y9+eX7vc77rI820JdeZmXPkX9eaoLBYDDeiDNTrnnKbiOm/n/hfdr/n/7//y9ecw15ZXscMurPqPuM9Jp/0cX/+blemoYRczd01HVzjjD5b35r+9f0L+Odevhg6jcY7xu8Ls5L0fa10UmT7fzf9bo4NN4p3mC8b/A6vq873hVuO/DukQ/13zbe0fZ1S7z093xvZl83eON93VB6gHUueP/o+7rPvf4QX7O7fHmOxh7tTq+3r5vioKl2HPH4873xvm6JEWMf8zX7ujEGg0kWfHlfN2LHt8iYg31GXJh1xIVFxxwcOeLCbC9dGGdw2ogLH19r043WHnHFYv+6Hcw45DW/oAnrbJHR1tmQV33tQ0b7/c5hI0/HO+zl93B6nf3mkFFf1r/dV9B2O/EbjPcN3n8K53nEdWsfO3yy/673n6LxDn/j8b7e+2W/7nj3fuKUm/6bx/vKOhvzVdO12JtZZ1O/dp2N+BKHvmplvNnvw9aG+488P8Urj7bV9ve88j3FmKM97r/7nmKxN15nE28w2sftcchgyBvNzaJvZm7e9y/7oJ1ePTdv9vutGacdefvQN5ibsedebYaX52as/+LcLPpfnZv5BkNfOzfDBgsPBoPpRu0fFnkzczPFG8/Nm91uxoX7jzy/zitXLbTXUWe9PDejz8W/m5tF/qtzM/Ur2810L902zRiDscYabL3mlltuPsvIv1++OOvIv994DS70ZuZy4v+euXzPsNeby39uquPfduFh/2YN/ss+/eXHX+i/OpeDV+ZysMHoi6X+U+vnf+7yd5e/u/zd5e8uf3f5i3ud4/+vvP7/ARPPs++oH26MeeFUk+/+Vo/3Le5tffx/lO9rjv/vPvlUF44xeOW2Nzw+O/I+/5HHZ+cceTLeES/fb/TjgzzQ1z8+e8jcc+76v3R89v+pl9fqm/g5XPt/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jXOf4/88u/B3DnLEs/MupA6Jj37rLy0m/1eN/i3tbH/0f5vub4/9Ir73LvGINXbnvD4/8j7+M4/n/Ls4vs/Z98/P/ltdrx//o35e8O/Ud/DZB629b6d5e/uzfyH+d/cRz11tT6d5e/u/zd5e8uf3f5u8vfXf7iXuf4/3wv/x7A0UcfuO3Lvw9w+SR7nvRWj/ct7u16/L/3//fW/t9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7qXj/yP/jfCr/6XwUm0XGBz//7/dqN//GIzmv3T+mMV/mfypMQYDh/+y+WOW9b9c/pjFf/n8MYv/CvljFv8v5o9Z/FfMH7P4r5Q/ZvH/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/l/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/yv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/6v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy1/zOK/Vf6Yxf/r+WMW/63zxyz+2+SPWfy3zR+z+H8jf8zi/838MYv/dvljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+38ofs/h/O3/M4r9H/pjFf8/8MYv/XvljFv+988cs/t/JH7P4fzd/zOL/vfwxi/8++WMW/33zxyz+388fs/j/IH/M4r9f/pjF/4f5Yxb//fPHLP4H5I9Z/A/MH7P4/yh/zOL/4/wxi/9P8scs/gflj1n8D84fs/j/NH/M4v+z/DGL/yH5Yxb/Q/PHLP6H5Y9Z/H+eP2bx/0X+mMX/8Pwxi/8R+WMW/1/mj1n8j8wfs/j/Kn/M4n9U/pjF/9f5Yxb/3+SPWfyPzh+z+P82f8zi/7v8MYv/MfljFv9j88cs/sflj1n8f58/ZvE/Pn/M4n9C/pjF/8T8MYv/H/LHLP5/zB+z+P8pf8zif1L+mMX/5Pwxi/+f88cs/qfkj1n8T80fs/j/JX/M4n9a/pjF/6/5Yxb/v+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/P+eP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+P/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+Qwb5Yxb/IfljFv8x8scs/kPzxyz+w/LHLP5j5o9Z/MfKH7P4j50/ZvEfnj9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6Yxf8d+WMW/3fmj1n8J8sfs/i/K3/M4j95/pjFf4r8MYv/u/PHLP7vyR+z+L83f8zi/778MYv/+/PHLP5T5o9Z/KfKH7P4T50/ZvH/QP6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fzB/zOI/Y/6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/4/nj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/0/kj1n858gfs/jPmT9m8Z8rf8ziP3f+mMX/k/ljFv958scs/p/KH7P4fzp/zOI/b/6Yxf8z+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/D+bP2bx/1z+mMV/ifwxi//n88cs/kvmj1n8v5A/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/h/MX/M4r9i/pjFf6X8MYv/l/LHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv8v549Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/l/JH7P4b5g/ZvHfKH/M4r+xzn+cN3Uvi/8mOv83l8V/0/wxi/9m+WMW/6/mj1n8N88fs/hvkT9m8d8yf8zi/7X8MYv/VvljFv+v549Z/LfOH7P4b5M/ZvHfNn/M4v+N/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H/5Wv87/tfH9R+axf/I1j9m8f9V/pjF/6j8MYv/r/PHLP6/yR+z+B+dP2bx/23+mMX/d/ljFv9j8scs/sfmj1n8j8sfs/j/Pn/M4n98/pjF/4T8MYv/ifljFv8/5I9Z/P+YP2bx/1P+mMX/pPwxi//J+WMW/z/nj1n8T8kfs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH5P4v1T+/5rEf8j5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/f+SPWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5j9awUacO/+vyxyzr//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+L53N/1+z+A/JH7P4j5E/ZvEfmj9m8R+WP2bxHzN/zOI/Vv6YxX/s/DGL//D8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+78gfs/i/M3/M4j9Z/pjF/135Yxb/yfPHLP5T5I9Z/N+dP2bxf0/+mMX/vfljFv/35Y9Z/N+fP2bxnzJ/zOI/Vf6YxX/q/DGL/wfyxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+D+WMW/xnzxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/h/PH/M4j9T/pjFf+b8sSFn7D/mYDB42/vPkj9mWf+z5o9Z/GfLH7P4z54/ZvH/RP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/D+ZP2bxnyd/zOL/qfwxi/+n88cs/vPmj1n8P5M/ZvGfL3/M4j//YJy3akT/0Vn8F2j9Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+38kfs/h/N3/M4v+9/DGL/z75Yxb/ffPHLP7fzx+z+P8gf8ziv1/+mMX/h/ljFv/988cs/gfkj1n8D8wfs/j/KH/M4v/j/DGL/0/yxyz+B+WPWfwPzh+z+P80f8zi/7P8MYv/IfljFv9D88cs/oflj1n8f54/ZvH/Rf6Yxf/w/DGL/xH5Yxb/X+aPWfyPzB+z+P8qf8zif1T+mMX/1/ljFv/f5I9Z/I/OH7P4/zZ/zOL/u/wxi/8x+WMW/2Pzxyz+x+WPWfx/nz9m8T8+f8zif0L+mMX/xPwxi/8f8scs/n/MH7P4/yl/zOJ/Uv6Yxf/k/DGL/5/zxyz+p+SPWfxPzR+z+P8lf8zif1r+mMX/r/ljFv+/5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8/54/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi/4/8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+Y9s2GsvWvyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH5P4Dx3kj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv935I9Z/N+ZP2bxnyx/zOL/rvwxi//k+WMW/ynyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmT9m8Z8qf8ziP3X+mMX/A/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/jPljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/D+eP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/D/xxv5j/4+P6z80i/8crX/M4j9n/pjFf678MYv/3PljFv9P5o9Z/OfJH7P4fyp/zOL/6fwxi/+8+WMW/8/kj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/2z+mMX/c/ljFv8l8scs/p/PH7P4L5k/ZvH/Qv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v/F/DGL/4r5Yxb/lfLHLP5fyh+z+K+cP2bxXyV/zOK/qt6fX+LQ4r+a3p+z+K+eP2bxXyN/zOK/Zv6Yxf/L+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/1fyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/1fzxyz+m+ePWfy3yB+z+G+ZP2bx/1r+mMV/q/wxi//X88cs/lvnj1n8t8kfs/hvmz9m8f9G/pjF/5v5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv/d8scs/rvnj1n8v5U/ZvH/dv6YxX+P/DGL/575Yxb/vfLHLP57549Z/L+TP2bx/27+mMX/e/ljFv998scs/vvmj1n8v58/ZvH/Qf6YxX+//DGL/w/zxyz+++ePWfwPyB+z+B+YP2bx/1H+mMX/x/ljFv+f5I9Z/A/KH7P4H5w/ZvH/af6Yxf9n+WMW/0Pyxyz+h+aPWfwPyx+z+P88f8zi/4v8MYv/4fljFv8j8scs/r/MH7P4H5k/ZvH/Vf6Yxf+o/DGL/6/zxyz+v8kfs/gfnT9m8f9t/tjb3n/4S2eH/i5/7G3vP7Khx+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/MX/M4v+n/DGL/0n5Yxb/k/PHLP5/zh+z+J+SP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f97/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8/8scs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH5P4Dxvkj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv935I9Z/N+ZP2bxnyx/zOL/rvwxi//k+WMW/ynyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmT9m8Z8qf8ziP3X+mMX/A/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/8H8MYv/jPljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/D+eP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/D+RP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/T+aPWfznyR+z+H8qf8zi/+n8MYv/vPljFv/P5I9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8f9s/pjF/3Nv4G/eLiz+S8idXy+L/+fzxyz+S+aPWfy/kD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+H8xf8ziv2L+mMV/pfwxi/+X8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/y/nj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+X8kfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/83yxyz+X80fs/hvnj9m8d8if8ziv2X+mMX/a/ljFv+t8scs/l/PH7P4b50/ZvHfJn/M4r9t/pjF/xv5Yxb/b+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP675o9Z/HfLH7P4754/ZvH/Vv6Yxf/b+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx/07+mMX/u/ljFv/v5Y9Z/PfJH7P475s/ZvH/fv6Yxf8H+WMW//3yxyz+P8wfs/jvnz9m8T8gf8zif2D+mMX/R/ljFv8f549Z/H+SP2bxPyh/zOJ/cP6Yxf+n+WMW/5/lj1n8D8kfs/gfmj9m8T8sf8zi//P8MYv/L/LHLP6H549Z/I/IH7P4/zJ/zOJ/ZP6Yxf9X+WMW/6Pyxyz+v84fs/j/Jn/M4n90/pjF/7f5Yxb/3+WPWfyPyR+z+B+bP2bxPy5/zOL/+/wxi//x+WMW/xPyxyz+J+aPWfz/kD9m8f9j/pjF/0/5Yxb/k/LHLP4n549Z/P+cP2bxPyV/zOJ/av6Yxf8v+WMW/9Pyxyz+f80fs/j/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi//f8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/ssFg8OKLL+7wVg3rPzWL/+Wtf8zi/4/8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHJP5jDvLHLP5D8scs/mPkj1n8h+aPWfyH5Y9Z/MfMH7P4j5U/ZvEfO3/M4j88f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/zvyxyz+78wfs/hPlj9m8X9X/pjFf/L8MYv/FPljFv93549Z/N+TP2bxf2/+mMX/ffljFv/3549Z/KfMH7P4T5U/ZvGfOn/M4v+B/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/YP6YxX/G/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+H88fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+n8gfs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/8n88cs/vPkj1n8P5U/ZvH/dP6YxX/e/DGL/2fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fzZ/zOL/ufwxi/8S+WMW/8/nj1n8l8wfs/h/IX/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8f9i/pjFf8X8MYv/SvljFv8v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/l/OH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/hvkj1n8v5I/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8v5o/ZvHfPH/M4r9F/pjFf8v8MYv/1/LHLP5b5Y9Z/L+eP2bx3zp/zOK/Tf6YxX/b/DGL/zfyxyz+38wfs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOL/rfwxi/+388cs/nvkj1n898wfs/jvlT9m8d87f8zi/538MYv/d/PHLP7fyx+z+O+TP2bx3zd/zOL//fwxi/8P8scs/vvlj1n8f5g/ZvHfP3/M4n9A/pjF/8D8MYv/j/LHLP4/zh+z+P8kf8zif1D+mMX/4Pwxi/9P88cs/j/LH7P4H5I/ZvE/NH/M4n9Y/pjF/+f5Yxb/X+SPWfwPzx+z+B+RP2bx/2X+mMX/yPwxi/+v8scs/kflj1n8f50/ZvH/Tf6Yxf/o/DGL/2/zxyz+v8sfs/gfkz9m8T82f8zif1z+mMX/9/ljFv/j88cs/ifkj1n8T8wfs/j/IX/M4v/H/DGL/5/yxyz+J+WPWfxPzh+z+P85f8zif0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/IH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/1iB/zOI/JH/M4j9G/pjFf2j+mMV/WP6YxX/M/DGL/1j5Yxb/sfPHLP7D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/95vwH/Y/Oa7/0Cz+72n9Yxb/9+aPWfzflz9m8X9//pjFf8r8MYv/VPljFv+p88cs/h/IH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8P5o9Z/GfMH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8sbep/5DRrMdaJX/sber/Uq9e/6vmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/y/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/9X8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi/9X88cs/pvnj1n8t8gfs/hvmT9m8f9a/pjFf6v8MYv/1/PHLP5b549Z/LfJH7P4b5s/ZvH/Rv6Yxf+b+WMW/+3yxyz+2+ePWfx3+Df+O/1Pj+s/NIv/jq1/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H+ZP2bxPzJ/zOL/q/wxi/9R+WMW/1/nj1n8f5M/ZvE/On/M4v/b/DGL/+/yxyz+x+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/0ee/w5u5k8X/Tz7/N5XF/6T8MYv/yfljFv8/O/0f/Hd3sPif4vT/t1n8T80fs/j/JX/M4n9a/pjF/6/5Yxb/v+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/P+eP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v+P/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/sJf/B4G3v/1j+g3HgOsv6fzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I8NGWswGAj8n80fs6z/5/LHLP7P549Z/F/IH7P4v5g/JvEfe5A/ZvEfkj9m8R8jf8ziPzR/zOI/LH/M4j9m/pjFf6z8MYv/2PljFv/h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfIf1fDXXLL4T5o/ZvF/R/6Yxf+d+WMW/8nyxyz+78ofs/hPnj9m8Z8if8zi/+78MYv/e/LHLP7vzR+z+L8vf8zi//78MYv/lPljFv+p8scs/lPnj1n8P5A/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/h/MH7P4z5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvH/WP6Yxf/j+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6Yxf8T+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/2T+mMV/nvwxi/+n8scs/p/OH7P4z5s/ZvH/TP6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv/P5o9Z/D+XP2bxXyJ/zOL/+fwxi/+S+WMW/y/kj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+X8wfs/ivmD9m8V8pf8zi/6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMX/y/ljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/9X8scs/hvmj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMV/s/wxi/9X88cs/pvnj1n8t8gfs/hvmT9m8f9a/pjFf6v8MYv/1/PHLP5b549Z/LfJH7P4b5s/ZvH/Rv6Yxf+b+WMW/+3yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/3dC/LcLiv3vamMX/W/ljFv9v549Z/PfIH7P475k/ZvHfK3/M4r93/pjF/zv5Yxb/7+aPWfy/lz9m8d/H6D/2v7+LxX9fo/+byOL//fwxi/8P8scs/vvlj1n8f5g/ZvHfP3/M4n9A/pjF/8D8MYv/j/LHLP4/zh+z+P8kf8zif1D+mMX/4Pwxi/9P88cs/j/LH7P4H5I/ZvE/NH/M4n9Y/pjF/+f5Yxb/X+SPWfwPzx+z+B+RP2bx/2X+mMX/yPwxi/+v8scs/kflj1n8f50/ZvH/Tf6Yxf/o/DGL/2/zxyz+v8sfs/gfkz9m8T82f8zif1z+mMX/9/ljFv/j88cs/ifkj1n8T8wfs/j/IX/M4v/H/DGL/5/yxyz+J+WPWfxPzh+z+P85f8zif0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/IH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/fJA/ZvEfkj9m8R8jf8ziPzR/zOI/LH/M4j9m/pjFf6z8MYv/2PljFv/h+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/N+RP2bxf2f+mMV/svwxi/+78scs/pPnj1n8p8gfs/i/O3/M4v+e/DGL/3vzxyz+78sfs/i/P3/M4j9l/pjFf6r8MYv/1PljFv8P5I9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/B/PHLP4z5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bx/3j+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bx/0T+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfw/mT9m8Z8nf8zi/6n8MYv/p/PHLP7z5o9Z/D+TP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/7Nv5D/ZCy+++L8wtP/ELP6fa/1jFv8l8scs/p/PH7P4L5k/ZvH/Qv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLHxvlP/Tt7r98/phl/a+QP2bx/2L+mMV/xfwxi/9K+WMW/y/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+X84fs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfy/kj9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfy/mj9m8d88f8ziv0X+mMV/y/wxi//X8scs/lvlj1n8v54/ZvHfOn/M4r9N/pjFf9v8MYv/N/LHLP7fzB+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+t/DGL/7fzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/nfwxi/9388cs/t/LH7P475M/ZvHfN3/M4v/9/DGL/w/yxyz+++WPWfx/mD9m8d8/f8zif0D+mMX/wPwxi/+P8scs/j/OH7P4/yR/zOJ/UP6Yxf/g/DGL/0/zxyz+P8sfs/gfkj9m8T80f8zif1j+mMX/5/ljFv9f5I9Z/A/PH7P4H5E/ZvH/Zf6Yxf/I/DGL/6/yxyz+R+WPWfx/nT9m8f9N/pjF/+j8MYv/b/PHLP6/yx+z+B+TP2bxPzZ/zOJ/XP6Yxf/3+WMW/+Pzxyz+J+SPWfxPzB+z+P8hf8zi/8f8MYv/n/LHLP4n5Y9Z/E/OH7P4/zl/zOJ/Sv6Yxf/U/DGL/1/yxyz+p+WPWfz/mj9m8f9b/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+/8gfs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78Rzb8tRct/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYn/OIP8MYv/kPwxi/8Y+WMW/6H5Yxb/YfljFv8x88cs/mPlj1n8x84fs/gPzx+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v+O/DGL/zvzxyz+k+WPWfzflT9m8Z88f8ziP0X+mMX/3fljFv/35I9Z/N+bP2bxf1/+mMX//fljFv8p88cs/lPlj1n8p84fs/h/IH/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8P5g/ZvGfMX/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/8fzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/7YS/5TDQaDt7n/7PljlvX/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/iPlT9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+2JAz9n9i1Nm3tf+e+WOW9b9X/pjFf+/8MYv/d/LHLP7fzR+z+H8vf8ziv0/+mMV/3/wxi//388cs/j/IH7P475c/ZvH/Yf6YxX///DGL/wH5Yxb/A/PHLP4/yh+z+P84f8zi/5P8MYv/QfljFv+D88cs/j/NH7P4/yx/zOJ/SP6Yxf/Q/DGL/2H5Yxb/n+ePWfx/kT9m8T88f8zif0T+mMX/l/ljFv8j88cs/r/KH7P4H5U/ZvH/df6Yxf83+WMW/6Pzxyz+v80fs/j/Ln/M4n9M/pjF/9j8MYv/cfljFv/f549Z/I/PH7P4n5A/ZvE/MX/M4v+H/DGL/x/zxyz+f8ofs/iflD9m8T85f8zi/+f8MYv/KfljFv9T88cs/n/JH7P4n5Y/ZvH/a/6Yxf9v+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/v+ePWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/yN/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxif+4g/wxi/+Q/DGL/xj5Yxb/ofljFv9h+WMW/zHzxyz+Y+WPWfzHzh+z+A/PH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/478MYv/O/PHLP6T5Y9Z/N+VP2bxnzx/zOI/Rf6Yxf/d+WMW//fkj1n835s/ZvF/X/6Yxf/9+WMW/ynzxyz+U+WPWfynzh+z+H8gf8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfw/mD9m8Z8xf8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/x/PHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/J/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4v/J/DGL/zz5Yxb/T+WPWfw/nT9m8Z83f8zi/5n8MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+n80fs/h/Ln/M4r9E/pjF//P5Yxb/JfPHLP5fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/L+YP2bxXzF/zOK/Uv6Yxf9L+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/5fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/r+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/r+aPWfw3zx+z+G+RP2bx3zJ/zOL/tfwxi/9W+WMW/6/nj1n8t84fs/hvkz9m8d82f8zi/438MYv/N/PHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/LvljFv9d88cs/rvlj1n8d88fs/h/K3/M4v/t/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P4fyd/zOL/3fwxi//38scs/vvkj1n8980fs/h/P3/M4v+D/DGL/375Yxb/H+aPWfz3zx+z+B+QP2bxPzB/zOL/o/wxi/+P88cs/j/JH7P4H5Q/ZvE/OH/M4v/T/DGL/8/yxyz+h+SPWfwPzR+z+B+WP2bx/3n+mMX/F/ljFv/D88cs/kfkj1n8f5k/ZvE/Mn/M4v+r/DGL/1H5Yxb/X+ePWfx/kz9m8T86f8ziP2b+mMX/d/ljFv9j8scs/sfmj1n8j8sfs/j/Pn/M4n98/pjF/4T8MYv/ifljFv8/5I9Z/P+YP2bx/1P+mMX/pPwxi//J+WMW/z/nj1n8T8kfs/ifmj9m8f9L/pjF/7T8MYv/X/PHLP5/yx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4/z1/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/x/5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwHg6H/epXF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vyxt7v/6iPPjvtA/tjb3X9U4z6YP2bxfyh/zOL/cP7Y29l/7H9eO+4j+WNvZ/9Xr/9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/3iB/zOI/JH/M4j9G/pjFf2j+mMV/WP6YxX/M/DGL/1j5Yxb/sfPHLP7D88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/d/6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/K/DGL/1T5Yxb/qfPHLP4fyB+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/D+aPWfxnzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8zi/4n8MYv/HPljFv8588cs/nPlj1n8584fs/h/Mn/M4j9P/pjF/1P5Yxb/T+ePWfznzR+z+H8mf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/2fzxyz+n8sfs/gvkT9m8f98/pjFf8n8MYv/F/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8v5o9Z/FfMH7P4r5Q/ZvH/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/l/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/yv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/6v5Yxb/zfPHLP5b5I9Z/LfMH7P4fy1/zOK/Vf6Yxf/r+WMW/63zxyz+2+SPvX39L3vx1f7b5o+9ff1fu/6/kT9m8f9m/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/2/lj1n8v50/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv/v5I9Z/L+bP2bx/17+mMV/n/wxi/+++WMW/+/nj1n8f5A/ZvHfL3/M4v/D/DGL//75Yxb/A/LHLP4H5o9Z/H+UP2bx/3H+mMX/J/ljFv+D8scs/gfnj1n8f5o/ZvH/Wf6Yxf+Q/DGL/6H5Yxb/w/LHLP4/zx+z+P8if8zif3j+mMX/iPwxi/8v88cs/kfmj1n8f5U/ZvE/Kn/M4v/r/DGL/2/yxyz+R+ePWfx/mz9m8f9d/pjF/5j8MYv/sfljFv/j8scs/r/PH7P4H58/ZvE/IX/M4n9i/pjF/w/5Yxb/P+aPWfz/lD9m8T8pf8zif3L+2Mv+g+GDwdvZ/8/5Y5b1f0r+mMX/1Pwxi/9f8scs/qflj1n8/5o/ZvH/W/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF/+/5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/v/4V/82B5H/FYFjFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/bKT/YDDY8e3tf1v+mGX9354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjEf/xB/pjFf0j+mMV/jPwxi//Q/DGL/7D8MYv/mK/jf+VVQ1f/3xraf2IW/7Fa/5jFf+z8MYv/8Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+Q/7+0o8h/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+L8jf8zi/878MYv/ZPljFv935Y9Z/CfPH7P4T5E/ZvF/d/6Yxf89+WMW//fmj1n835c/ZvF/f/6YxX/K/DGL/1T5Yxb/qfPHLP4fyB+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/D+aPWfxnzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+H8sf8zi//H8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8zi/4n8MYv/HPljFv8588cs/nPlj1n8584fs/h/Mn/M4j9P/pjF/1P5Yxb/T+ePWfznzR97e/qPlH61/2fyx96e/iN7tf98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP6fzR+z+H8uf8ziv0T+mMX/8/ljFv8l88cs/l/IH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8v5g/ZvFfMX/M4r9S/pjF/0v5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/l/PHLP5r5Y9Z/Nc2+r+JL9jiv47R/01k8V83f8ziv17+mMV//fwxi/8G+WMW/6/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/6/mj1n8N88fs/hvkT9m8d8yf8zi/7X8MYv/VvljFv+v549Z/LfOH7P4b5M/ZvHfNn/M4v+N/DGL/zfzxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P4fyt/zOL/7fwxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+H8nf8zi/938MYv/9/LHLP775I9Z/PfNH7P4fz9/zOL/g/wxi/9++WMW/x/mj1n8988fs/gfkD9m8T8wf8zi/6P8MYv/j/PHLP4/yR+z+B+UP2bxPzh/zOL/0/wxi//P8scs/ofkj1n8D80fs/gflj9m8f95/pjF/xf5Yxb/w/PHLP5H5I9Z/H+ZP2bxPzJ/zOL/q/wxi/9R+WMW/1/nj1n8f5M/ZvE/On/M4v/b/DGL/+/yxyz+x+SPWfyPzR+z+B+XP2bx/33+mMX/+Pwxi/8J+WMW/xPzxyz+f8gfs/j/MX/M4v+n/DGL/0n5Yxb/k/PHLP5/zh+z+J+SP2bxPzV/zOL/l/wxi/9p+WMW/7/mj1n8/5Y/Npr/OG/1eP5/9zr+p+ePWdb/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+/8gfs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX9M4j/BIH/M4j8kf8ziP0b+mMV/aP6YxX9Y/pjFf8z8MYv/WPljFv+x88cs/sPzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4vyN/zOL/zvwxi/9k+WMW/3flj1n8J88fs/hPkT9m8X93/pjF/z35Yxb/9+aPWfzflz9m8X9//pjFf8r8MYv/VPljFv+p88cs/h/IH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8P5o9Z/GfMH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOL/ifwxi/8c+WMW/znzxyz+c+WPWfznzh+z+H8yf8ziP0/+mMX/U/ljFv9P549Z/OfNH7P4fyZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/Z/PHLP6fyx+z+C+RP2bx/3z+mMV/yfwxi/8X8scs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/y/mj1n8V8wfs/ivlD9m8f9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi/+X8MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/K/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/Le1+g9/45st/t+w+v+bLP7fzB+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/HfNH7P475Y/ZvHfPX/M4v+t/DGL/7fzxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOL/nfwxi/9388cs/t/LH7P475M/ZvHfN3/s7eo/fDT/7+ePvV39B6P5/yB/zOK/X/6Yxf+H+WMW//3zxyz+B+SPWfwPzB+z+P8of8zi/+P8MYv/T/LHLP4H5Y9Z/A/OH7P4/zR/zOL/s/wxi/8h+WMW/0Pzxyz+h+WPWfx/nj9m8f9F/pjF//D8MYv/EfljFv9f5o9Z/I/MH7P4/yp/zOJ/VP6Yxf/X+WMW/9/kj1n8j84fs/j/Nn/M4v+7/DGL/zH5Yxb/Y/PHLP7H5Y9Z/H+fP2bxPz5/zOJ/Qv6Yxf/E/DGL/x/yxyz+f8wfs/j/KX/M4n9S/pjF/+T8MYv/n5X+w//tPSz+pyj9/30W/1Pzxyz+f8kfs/iflj9m8f9r/pjF/2/5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv+/549Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/j/I3/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735P9SU4922eJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPSfwnHOSPWfyH5I9Z/MfIH7P4D80fs/gPyx+z+I+ZP2bxHyt/zOI/dv6YxX94/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/3fkj1n835k/ZvGfLH/M4v+u/DGL/+T5Yxb/KfLHLP7vzh+z+L8nf8zi/978MYv/+/LHLP7vzx+z+E+ZP2bxnyp/zOI/df6Yxf8D+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOL/wfwxi/+Mr/V/cej/+sD+M7P4f6j1j1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8P54/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n8P5E/ZvGfI3/M4j9n/pjFf678MYv/3PljFv9P5o9Z/OfJH7P4f+pl/zaC12Tx/3T0mMV/3vwxi/9n8scs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+H82f8zi/7n8MYv/EvljFv/P549Z/JfMH7P4fyF/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvH/Yv6YxX/F/DGL/0r5Yxb/L+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5fzh+z+K+VP2bxXzt/zOK/Tv6YxX/d/LEhZ+y/0kQjz76t/dfLH7Os//Xzxyz+G+SPWfy/kj9m8d8wf8ziv1H+mMV/4/wxi/8mev8d8FqL/6Z6f87iv1n+mMX/q/ljFv/N88cs/lvkj1n8t8wfs/h/LX/M4r9V/pjF/+v5Yxb/rfPHLP7b5I9Z/LfNH7P4fyN/zOL/zfwxi/92+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOK/S/6YxX/X/DGL/275Yxb/3fPHLP7fyh+z+H87f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+38kfs/h/N3/M4v+9/DGL/z75Yxb/ffPHLP7fzx+z+P8gf8ziv1/+mMX/h/ljFv/988cs/gfkj1n8D8wfs/j/KH/M4v/j/DGL/0/yxyz+B+WPWfwPzh+z+P80f8zi/7P8MYv/IfljFv9D88cs/oflj1n8f54/ZvH/Rf6Yxf/w/DGL/xH5Yxb/X+aPWfyPzB+z+P8qf8zif1T+mMX/1/ljFv/f5I9Z/I/OH7P4/zZ/zOL/u/wxi/8x+WMW/2Pzxyz+x+WPWfx/nz9m8T8+f8zif0L+mMX/xPwxi/8f8scs/n/MH7P4/yl/zOJ/Uv6Yxf/k/DGL/5/V/mO/7i0W/1PU/q+fxf/U/DGL/1/yxyz+p+WPWfz/mj9m8f9b/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/7/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyT+QwaDHfOHJP4TXtH6xyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj0n8Jxrkj1n8h+SPWfzHyB+z+A/NH7P4D8sfs/iPmT9m8R8rf8ziP3b+mMV/eP6YxX+c/DGL///Hzv2Ha13Xdxy/+U0o6cc2dWnDoTHXZiQyGrUQFcXjj1Mmmvkb9QgkiPyQBFNxo5U6Nl3qZsmmlo45W7XU4eb6taJhWbM1YmuVU1wLY8zBQnPGrgPnEOfs7bk6X/b92nw/Hn/Aue/j+w55Xi/vm4vraoT+oSz999A/lKX/nvqHsvQfqX8oS/9X6h/K0n8v/UNZ+u+tfyhL/6J/KEv/ffQPZen/Kv1DWfr/jP6hLP1/Vv9Qlv776h/K0n8//UNZ+u+vfyhL/5/TP5Sl/6v1D2Xpf4D+oSz9D9Q/lKX/a/QPZen/8/qHsvQfpX8oS/+D9A9l6f8L+oey9B+tfyhL/4P1D2Xpf4j+oSz9X6t/KEv/MfqHsvT/Rf1DWfofqn8oS/9f0j+Upf/r9A9l6f/L+oey9P8V/UNZ+h+mfyhL/9frH8rSf6z+oSz936B/KEv/w/UPZek/Tv9Qlv5H6B/K0n+8/qEs/X9V/1CW/hP0D2Xp/0b9Q1n6/5r+oSz9J+ofytL/TfqHsvR/s/6hLP1/Xf9Qlv5v0T+Upf8k/UNZ+h+pfyhL/8n6h7L0P0r/UJb+R+sfytL/GP1DWfpP0T+Upf+x+oey9D9O/1CW/lP1D2Xpf7z+oSz92/QPZel/gv6hLP1P1D+Upf9J+oey9D9Z/1CW/u36h7L0f6v+oSz936Z/KEv/U/QPZen/dv1DWfqfqn8oS/9p+oey9D9N/1CW/qfrH8rS/x36h7L0P0P/UJb+79Q/lKX/mfqHsvQ/S/9Qlv5n6x/K0v8c/UNZ+p+rfyhL//P0D2Xpf77+oSz9p+sfytL/Av1DWfpfqH8oS/+L9A9l6d+hfyhL/4v1D2XpP0P/UJb+M/UPZek/S/9Qlv7v0j+Upf8l+oey9J+tfyhL/zn6h7L0v1T/UJb+c/UPZel/mf6hLP3n6R/K0n++/qEs/RfoH8rSf6H+oSz9L9c/lKX/Iv1DWfq/W/9Qlv5X6B/K0n+x/qEs/ZfoH8rS/0r9Q1n6v0f/UJb+V+kfytL/av1DWfpfo38oS/+l+oey9L9W/1CW/r+hfyhL/9/UP5Sl/zL9Q1n6v1f/UJb+v6V/KEv/9+kfytL//fqHsvS/Tv9Qlv7X6x/K0v8G/UNZ+v+2/qEs/ZfrH8rS/3f0D2Xp/7v6h7L0v1H/UJb+N+kfytL/9/QPZen/Af1DWfrfrH8oS/9b9A9l6X+r/qEs/X9f/1CW/n+gfyhL/9v0D2Xp/0H9Q1n6f0j/UJb+t+sfytJ/hf6hLP3/UP9Qlv5/pH8oS/879A9l6X+n/qEs/e/SP5Sl/4f1D2Xp/xH9Q1n63927/6iGf10/pbL0v8f+Q1n6/7H+oSz9V+ofytL/T/QPZel/r/6hLP3/VP9Qlv736R/K0v+j+oey9P8z/UNZ+n9M/1CW/h/XP5Sl/yf0D2Xp/+f6h7L0/6T+oSz979c/lKX/A/qHsvR/UP9Qlv5/oX8oS/9V+oey9H9I/1CW/n+pfyhL/7/SP5Sl/8P6h7L0/2v9Q1n6f0r/UJb+n9Y/lKX/Z/QPZen/Wf1DWfp/Tv9Qlv5/o38oS//P6x/K0v8L+oey9F+tfyhL/y/qH8rS/2/1D2Xpv0b/UJb+j+gfytL/S/qHsvT/sv6hLP0f1T+Upf9X9A9l6f9V/UNZ+v+d/qEs/R/TP5Sl/9f0D2Xp//f6h7L0/7r+oSz9/0H/UJb+a/UPZen/Df1DWfqv0z+Upf8/6h/K0v+f9A9l6f9N/UNZ+v+z/qEs/b+lfyhL/2/rH8rS/zv6h7L0f1z/UJb+/6J/KEv/J/QPZen/pP6hLP3X6x/K0v8p/UNZ+v+r/qEs/b+rfyhL/3/TP5Sl//f0D2Xpv0H/UJb+T+sfytL/+/qHsvTfqH8oS/9/1z+Upf8m/UNZ+v+H/qEs/Z/RP5Sl/3/qH8rSf7P+oSz9t+gfytL/v/QPZen/A/1DWfpv1T+Upf+z+oey9H9O/1CW/j/UP5Sl//P6h7L0/2/9Q1n6v6B/KEv/H+kfytJ/m/6hJP33bukfytJ/gP6hLP0H6h/K0n+Q/qEs/QfrH8rSf4j+oSz9h+ofytJ/mP6hLP2H6x/K0v8V+oey9B+hfyhL/z30D2Xpv6f+oSz9R+ofytL/lfqHsvTfS//Qy64/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAT5sFi5dcMn327I75vvCFL3yx84uX+r9MAADA/7Uff+h/qX8lAAAAAAAAAAAAAAAAAAAAkFcT/3diL/W/IwAAAAAAAAAAAAAA/H/X1n7UxkEDejw1aNcHr3m0Y/vP47eeMfPuux8s3T93ffvE4CUH7vpg27Zt21Y8M2lK18NhrVar839t767Hw3sfd77+0lG377/jUZn8+VsfP3fayJPmP3DT4G+suKH96SHbnx3SOv/iWbM73jCw1SrHDGld0fng8AGtVjluSOvGzgfjOh9MHdJa2fngiO0PXtH6TOeD1184d/ZFnU8cX/n3DF4u2tqXtgb1WGyrx38Ndt3/0lFPzOz+uY+X7H61wa2u/Y9+4Ev79fpetxfZf/frl6N677/f/4LAi+rf/p9b1/1zHy/5v97/P7xm65Loey++/+7XL0fbP9Qn+PzfY6O9P/f3+vx/UPCSO++PHL7m5s79t51274FdTw3+ST7///j1yzG99z+wx+f/zs/xU7o//w9rtcqxu/nbAam0tV+7sa/3/773P/jVvW4G7Lr/u76yfs/O/d/zfGtZ11ND+rn/KX29/1/X69cK9E9b+53ber3/92P/rTHBS+7c/4YHRm7//L/+vgv33eV7/dn/sb33P3bhnMvGLli85LBZc6bP6JjRcenEcRMOHz9x4oQJY7d/Itjx427+pkASu/f+3xrR62ZAq9Wx8371vTdM6dz/poeWfaTrqeH93P9xfb7/H+T9H0KjB7aGDm1dMX3hwvmH7/ix++G4HT/u+MeC/ffjz/8HH9r1j3X/neGAVmv/nfdjzp04rHP/V84rq7qeGtrP/U/tc/+Te/5dJdA/u/n+f1Gvmx77P3LD1Ys693/ID/ZZ3/VUf//8f3yf+7/D+z/sjrb2Vq1vop37P2LYtSdUuy5t/v4P6tPE/kdtvnFLtetygv1DfZrY/7Tlb76g2nU50f6hPk3s/8E55y2vdl1Osn+oTxP7f+FVWw6odl1Otn+oTxP7f+y7T91d7bq02z/Up4n9f/C29iOqXZe32j/Up4n9H3b5s5OqXZe32T/Up4n9X7zHqSurXZdT7B/q08T+T9h29L7Vrsvb7R/q08T+B1z7vaXVrsup9g/1aWL/T05fPrfadZlm/1CfJva/ctSY56pdl9PsH+rTxP6XPf3GqdWuy+n2D/VpYv9fveX2x6pdl3fYP9Snif1/4ux9bq92Xc6wf6hPE/v/4eiHRlS7Lu+0f6hPE/tfu3bl/dWuy5n2D/VpYv8rVg4aXe26nGX/UJ8m9n/N8TMerXZdzrZ/qE8T+x8/4ctnVbsu59g/1KeJ/e//uW89Ve26nGv/UJ8m9n/qw4sWVLsu59k/1KeJ/S864OM/qnZdzrd/qE8T+39LxwEzq12X6fYP9Wli/+WmEWurXZcL7B/q08T+z9x05+Rq1+VC+4f6NLH/VXt94WPVrstF9g/1aWL/m+ddOrHademwf6hPE/v/znuveV+163Kx/UN9mtj/zc9/vVS7LjPsH+rTxP43jDvz7GrXZab9Q32a2P+dJz3zSLXrMsv+oT5N7H/5qscXVrsu77J/qE8T+1+9+sQnql2XS+wf6tPE/g8ZM3Zkz2ef/Qmvy2z7h/o0sf+5Zyz7ULXrMsf+oT5N7P+Y+255bbXrcqn9Q32a2P/wr036ZLXrMtf+oT5N7P/Tk97/qWrX5TL7h/o0sf8tkw8+tNp1mWf/UJ8m9r/u/nG3Vrsu8+0f6tPE/j/wyG0Vr8sC+4f6NLH/ea97YVO167LQ/qE+Tez/TdNOX1ztulxu/1CfJva/7x1Tv1jtuiyyf6hPE/s/59vfP6XadXm3/UN9mtj/wftdcGC163KF/UN9mtj/zFlrrq92XRbbP9Snif1PWbFufLXrssT+oT5N7H+vJxfcVe26XGn/UJ8m9r9x0H4nV7su77F/qE8T+7/nqoe/We26XGX/UJ8m9n/9dR/tqHZdrrZ/qE8T+//s1qGbq12Xa+wfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UQvRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHAQAA//96y+r8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 58.175139ms ago: executing program 1 (id=843): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x12142, 0x0) 47.2307ms ago: executing program 3 (id=844): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4a26, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 0s ago: executing program 1 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x1, 0xfb, 0xc, 0x3, 0x6, 0x3, 0x4, 0x6, 0xfd, 0x8, 0x4, 0xe4, 0x0, 0x3, 0x7f, 0x3}}) kernel console output (not intermixed with test programs): 96][ T7058] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.520906][ T7056] loop2: detected capacity change from 0 to 32768 [ 151.521666][ T28] rc_core: IR keymap rc-hauppauge not found [ 151.537921][ T28] Registered IR keymap rc-empty [ 151.545308][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.585097][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.596504][ T113] ERROR: (device loop2): diFree: numfree > numinos [ 151.596504][ T113] [ 151.622240][ T7058] XFS (loop1): Ending clean mount [ 151.635041][ T7058] XFS (loop1): Quotacheck needed: Please wait. [ 151.636450][ T28] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 151.659702][ T28] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 151.677914][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.681916][ T1126] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2443 dinode [ 151.704424][ T1126] XFS (loop1): Unmount and run xfs_repair [ 151.710679][ T1126] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 151.718409][ T1126] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 151.718492][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.728493][ T1126] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.743926][ T1126] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 151.752983][ T1126] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 151.762262][ T1126] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.771507][ T1126] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 151.771703][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.781309][ T1126] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 151.781342][ T1126] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 151.816534][ T7058] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 151.838297][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.868986][ T5790] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.889928][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.916887][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.978259][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 152.025053][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 152.065277][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 152.095067][ T28] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 152.128751][ T28] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 152.141305][ T28] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.157534][ T28] usb 1-1: USB disconnect, device number 10 [ 152.190793][ T7082] loop1: detected capacity change from 0 to 2048 [ 152.236234][ T7082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.256756][ T7082] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.291915][ T27] audit: type=1800 audit(2000000036.029:9): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.378" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 152.318366][ T7082] fs-verity: sha512 using implementation "sha512-avx2" [ 153.050095][ T7082] fs-verity (loop1, inode 13): Error -4 building Merkle tree [ 153.124646][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.198338][ T7107] loop3: detected capacity change from 0 to 32768 [ 154.210796][ T7107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.385 (7107) [ 154.243371][ T7111] loop0: detected capacity change from 0 to 512 [ 154.276515][ T7107] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.307748][ T7107] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 154.335008][ T7107] BTRFS info (device loop3): setting nodatacow, compression disabled [ 154.339367][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.354480][ T7107] BTRFS info (device loop3): max_inline at 0 [ 154.360824][ T7111] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.365096][ T7107] BTRFS info (device loop3): turning off barriers [ 154.403807][ T7111] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.386: bg 0: block 248: padding at end of block bitmap is not set [ 154.411907][ T7107] BTRFS info (device loop3): force zlib compression, level 3 [ 154.429912][ T7111] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 154.445099][ T7107] BTRFS info (device loop3): doing ref verification [ 154.454972][ T7107] BTRFS info (device loop3): force clearing of disk cache [ 154.472394][ T7107] BTRFS info (device loop3): enabling ssd optimizations [ 154.492689][ T7107] BTRFS info (device loop3): max_inline at 4096 [ 154.500753][ T7107] BTRFS info (device loop3): using free space tree [ 154.517146][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.593483][ T7099] loop2: detected capacity change from 0 to 40427 [ 154.623842][ T7099] F2FS-fs (loop2): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 154.632239][ T7099] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 154.641092][ T7107] BTRFS info (device loop3): auto enabling async discard [ 154.644569][ T7099] F2FS-fs (loop2): heap/no_heap options were deprecated [ 154.667896][ T7107] BTRFS info (device loop3): rebuilding free space tree [ 154.703152][ T7099] F2FS-fs (loop2): invalid crc value [ 154.711910][ T7099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.791641][ T7099] F2FS-fs (loop2): Start checkpoint disabled! [ 154.826721][ T7099] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 154.834076][ T7099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 154.922254][ T5787] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.511937][ T1136] kworker/u4:7: attempt to access beyond end of device [ 155.511937][ T1136] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 155.548786][ T1136] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 155.578454][ T1136] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 155.588812][ T1136] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 155.837038][ T7130] loop0: detected capacity change from 0 to 40427 [ 155.863978][ T7130] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 155.885737][ T7130] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.901061][ T7130] F2FS-fs (loop0): heap/no_heap options were deprecated [ 155.917152][ T7130] F2FS-fs (loop0): invalid crc value [ 155.925090][ T7146] loop3: detected capacity change from 0 to 512 [ 155.932211][ T7146] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.950475][ T7130] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.959565][ T7146] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.392: corrupted in-inode xattr: overlapping e_value [ 155.973839][ T7144] loop1: detected capacity change from 0 to 4096 [ 155.983018][ T7146] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.392: couldn't read orphan inode 15 (err -117) [ 156.017097][ T7146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.030327][ T7130] F2FS-fs (loop0): Start checkpoint disabled! [ 156.040786][ T7130] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.048102][ T7130] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 156.091796][ T7146] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.392: Directory hole found for htree leaf block 0 [ 156.183562][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.280051][ T42] kworker/u4:2: attempt to access beyond end of device [ 156.280051][ T42] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.296759][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 156.303958][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 156.315419][ T7153] loop2: detected capacity change from 0 to 256 [ 156.333255][ T7155] netlink: 'syz.3.396': attribute type 11 has an invalid length. [ 156.447612][ T7160] loop3: detected capacity change from 0 to 512 [ 156.462103][ T7160] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 156.523597][ T7160] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.398: iget: bad i_size value: -67835469387268086 [ 156.575531][ T7160] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.398: couldn't read orphan inode 15 (err -117) [ 156.707735][ T7160] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.804100][ T7160] ext2 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.023715][ T7160] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.398: Directory hole found for htree leaf block 0 [ 157.578389][ T5787] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 157.737041][ T7179] loop1: detected capacity change from 0 to 256 [ 157.752484][ T7179] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.780754][ T7179] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 157.797572][ T7179] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 158.352946][ T7174] loop2: detected capacity change from 0 to 32768 [ 158.388404][ T7174] (syz.2.402,7174,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.429601][ T7174] (syz.2.402,7174,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 158.481424][ T7174] JBD2: Ignoring recovery information on journal [ 158.668023][ T7174] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.492148][ T7186] loop0: detected capacity change from 0 to 32768 [ 159.512793][ T7186] [ 159.512793][ T7186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.512793][ T7186] [ 159.601456][ T7186] [ 159.601456][ T7186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.601456][ T7186] [ 159.635066][ T7186] [ 159.635066][ T7186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.635066][ T7186] [ 159.655391][ T7186] [ 159.655391][ T7186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.655391][ T7186] [ 159.682779][ T7186] [ 159.682779][ T7186] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.682779][ T7186] [ 159.697539][ T7199] loop3: detected capacity change from 0 to 256 [ 159.706660][ T7174] syz.2.402 (7174) used greatest stack depth: 18736 bytes left [ 159.720045][ T112] [ 159.720045][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.720045][ T112] [ 159.756256][ T7197] [ 159.756256][ T7197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.756256][ T7197] [ 159.781086][ T7191] loop1: detected capacity change from 0 to 32768 [ 159.794760][ T7191] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 159.805536][ T7197] [ 159.805536][ T7197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.805536][ T7197] [ 159.816312][ T7197] [ 159.816312][ T7197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.816312][ T7197] [ 159.852073][ T113] [ 159.852073][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.852073][ T113] [ 159.856332][ T7191] XFS (loop1): Ending clean mount [ 159.886530][ T5785] ocfs2: Unmounting device (7,2) on (node local) [ 159.890084][ T5795] [ 159.890084][ T5795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.890084][ T5795] [ 159.929604][ T5795] [ 159.929604][ T5795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 159.929604][ T5795] [ 159.941759][ T7191] XFS (loop1): Quotacheck needed: Please wait. [ 160.033529][ T7191] XFS (loop1): Quotacheck: Done. [ 160.386018][ T5790] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 161.044538][ T7219] loop2: detected capacity change from 0 to 2048 [ 161.106414][ T7219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.199602][ T7228] loop3: detected capacity change from 0 to 256 [ 161.222652][ T7228] FAT-fs (loop3): Directory bread(block 1285) failed [ 161.238742][ T7228] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 161.705894][ T7243] loop3: detected capacity change from 0 to 4096 [ 161.735100][ T7243] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 161.811492][ T7243] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 161.840399][ T7245] loop1: detected capacity change from 0 to 4096 [ 161.880248][ T27] audit: type=1800 audit(2000000045.619:10): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.424" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 161.911526][ T7245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.940798][ T7232] loop0: detected capacity change from 0 to 32768 [ 161.955455][ T7235] loop2: detected capacity change from 0 to 40427 [ 161.966171][ T7235] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 161.974920][ T7235] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.987392][ T7235] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 161.994565][ T7232] (syz.0.419,7232,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.013865][ T7245] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #15: comm syz.1.425: corrupted inode contents [ 162.029380][ T7232] (syz.0.419,7232,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.054390][ T7245] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #15: comm syz.1.425: mark_inode_dirty error [ 162.067188][ T7235] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.077942][ T7232] JBD2: Ignoring recovery information on journal [ 162.088555][ T7245] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #15: comm syz.1.425: corrupted inode contents [ 162.115276][ T7245] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.425: mark_inode_dirty error [ 162.140715][ T7245] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #15: comm syz.1.425: corrupted inode contents [ 162.155582][ T7232] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 162.169321][ T7235] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 162.175659][ T7245] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #15: comm syz.1.425: mark_inode_dirty error [ 162.183222][ T7235] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.199987][ T7245] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #15: comm syz.1.425: corrupted inode contents [ 162.230848][ T7245] EXT4-fs error (device loop1): ext4_truncate:4288: inode #15: comm syz.1.425: mark_inode_dirty error [ 162.439074][ T7245] EXT4-fs error (device loop1) in ext4_setattr:5645: Corrupt filesystem [ 162.457440][ T7235] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 162.614732][ T7262] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 163.087899][ T7245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.223737][ T5795] ocfs2: Unmounting device (7,0) on (node local) [ 164.281671][ T7274] loop3: detected capacity change from 0 to 40427 [ 164.305763][ T7274] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 164.323773][ T7274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 164.358525][ T7274] F2FS-fs (loop3): invalid crc value [ 164.395017][ T7274] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.447631][ T7277] loop0: detected capacity change from 0 to 40427 [ 164.456552][ T7281] loop1: detected capacity change from 0 to 32768 [ 164.477175][ T7277] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 164.495384][ T7277] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 164.501549][ T7281] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.508686][ T7277] F2FS-fs (loop0): invalid crc value [ 164.523540][ T7274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.532161][ T7274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.543098][ T7277] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.657073][ T7281] XFS (loop1): Ending clean mount [ 164.665263][ T7277] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 164.672573][ T7277] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.684206][ T7281] XFS (loop1): Quotacheck needed: Please wait. [ 164.758447][ T7281] XFS (loop1): Quotacheck: Done. [ 164.958322][ T5790] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.098639][ T7309] bond0: entered promiscuous mode [ 167.156602][ T7309] bond_slave_0: entered promiscuous mode [ 167.219740][ T7309] bond_slave_1: entered promiscuous mode [ 167.275553][ T7309] batadv_slave_0: entered promiscuous mode [ 167.344034][ T7309] hsr1: entered promiscuous mode [ 167.714909][ T28] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 167.966921][ T28] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.975155][ T28] usb 4-1: config 0 has no interface number 0 [ 167.988310][ T28] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 168.001170][ T28] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 168.012079][ T28] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.021465][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.031772][ T28] usb 4-1: config 0 descriptor?? [ 168.037653][ T7311] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.051827][ T28] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 168.170069][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 168.292293][ T7339] process 'syz.1.450' launched './file1' with NULL argv: empty string added [ 168.303494][ T28] usb 4-1: USB disconnect, device number 10 [ 168.340071][ T7341] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 168.457190][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 168.561888][ T7350] loop1: detected capacity change from 0 to 64 [ 168.591173][ T7350] hfs: unable to locate alternate MDB [ 168.602924][ T7350] hfs: continuing without an alternate MDB [ 168.615030][ T7354] loop0: detected capacity change from 0 to 8 [ 168.646519][ T7354] SQUASHFS error: xz decompression failed, data probably corrupt [ 168.663187][ T7354] SQUASHFS error: Failed to read block 0x108: -5 [ 168.669766][ T7354] SQUASHFS error: Unable to read metadata cache entry [106] [ 168.682780][ T7354] SQUASHFS error: Unable to read inode 0x0 [ 168.797462][ T7360] netlink: 44 bytes leftover after parsing attributes in process `syz.1.459'. [ 168.809372][ T7360] netlink: 59 bytes leftover after parsing attributes in process `syz.1.459'. [ 168.820657][ T7360] netlink: 59 bytes leftover after parsing attributes in process `syz.1.459'. [ 171.515360][ T23] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 171.734660][ T7408] vlan2: entered allmulticast mode [ 171.740941][ T7408] veth1: entered allmulticast mode [ 171.780346][ T23] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 171.801944][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 171.849518][ T23] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 171.891198][ T23] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 171.897721][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 171.921748][ T23] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 171.960623][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 172.002508][ T23] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.012878][ T23] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.028919][ T23] usb 4-1: Product: syz [ 172.033134][ T23] usb 4-1: Manufacturer: syz [ 172.047461][ T23] usb 4-1: SerialNumber: syz [ 172.055253][ T23] usb 4-1: config 0 descriptor?? [ 172.063910][ T7404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.078358][ T23] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 172.098835][ T23] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 173.175156][ T5825] usb 4-1: USB disconnect, device number 11 [ 173.194058][ T5825] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 173.269265][ T7437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.488'. [ 173.278712][ T7437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.488'. [ 173.294490][ T7437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.488'. [ 173.315676][ T7437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.488'. [ 173.632427][ T7447] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 173.641789][ T7447] macsec1: entered promiscuous mode [ 173.647325][ T7447] macsec1: entered allmulticast mode [ 173.652724][ T7447] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 173.664026][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.495'. [ 174.902132][ T7473] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 174.910291][ T7473] macsec1: entered promiscuous mode [ 174.916335][ T7473] macsec1: entered allmulticast mode [ 174.973163][ T7473] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 176.611990][ T7492] vlan2: entered allmulticast mode [ 176.620069][ T7492] veth1: entered allmulticast mode [ 177.136239][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 177.240820][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 177.266139][ T7504] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 177.417811][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 177.426512][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 177.441023][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 177.452712][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 177.464733][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 177.478112][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 177.487838][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 177.505729][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 177.514244][ T9] usb 1-1: Product: syz [ 177.518614][ T9] usb 1-1: Manufacturer: syz [ 177.523246][ T9] usb 1-1: SerialNumber: syz [ 177.538304][ T9] usb 1-1: config 0 descriptor?? [ 177.545694][ T7496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.560441][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 177.571383][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 177.599710][ T7514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.517'. [ 177.615191][ T5825] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.655265][ T7516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.709515][ T7518] vlan2: entered allmulticast mode [ 177.714698][ T7518] veth1: entered allmulticast mode [ 177.839496][ T5825] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 177.849050][ T5825] usb 4-1: config 0 has no interface number 0 [ 177.899303][ T5825] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 178.007743][ T5825] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 178.116723][ T5825] usb 4-1: config 0 interface 255 has no altsetting 0 [ 178.177144][ T5825] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 178.279025][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.445694][ T5825] usb 4-1: config 0 descriptor?? [ 178.551510][ T5825] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 178.684804][ T5842] usb 1-1: USB disconnect, device number 11 [ 178.693761][ T5842] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 178.740925][ T5825] usb 4-1: USB disconnect, device number 12 [ 179.858405][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 180.155052][ T5841] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 180.178343][ T7553] netlink: 'syz.3.532': attribute type 12 has an invalid length. [ 180.197960][ T7553] netlink: 112 bytes leftover after parsing attributes in process `syz.3.532'. [ 180.268622][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.536'. [ 180.287217][ T7563] netlink: 52 bytes leftover after parsing attributes in process `syz.3.537'. [ 180.317610][ T7560] nbd: socks must be embedded in a SOCK_ITEM attr [ 180.365532][ T5841] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 180.399899][ T5841] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 180.455569][ T5841] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 180.498831][ T5841] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 180.520962][ T5841] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 180.550283][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.565303][ T5841] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 180.574488][ T5841] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 180.587250][ T5841] usb 3-1: Product: syz [ 180.591449][ T5841] usb 3-1: Manufacturer: syz [ 180.597269][ T5841] usb 3-1: SerialNumber: syz [ 180.604339][ T5841] usb 3-1: config 0 descriptor?? [ 180.625757][ T7547] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.634755][ T5841] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 180.654789][ T5841] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 181.078867][ T5841] usb 3-1: USB disconnect, device number 13 [ 181.089837][ T5841] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 181.784031][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.1.548'. [ 182.024958][ T5841] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 182.235715][ T5841] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 182.259993][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.274913][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.309429][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.323067][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.343006][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.354251][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.362880][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.364939][ T23] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 182.372029][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.390512][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.400391][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.426741][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.441261][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.450673][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.463042][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.475385][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.483442][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.498751][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.512076][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.527012][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.540901][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.566189][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.584345][ T5841] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 182.596595][ T5841] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 182.611932][ T23] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 182.616428][ T5841] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.625032][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 182.636764][ T5841] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 182.652513][ T5841] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 182.657250][ T23] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 182.661598][ T5841] usb 3-1: Product: syz [ 182.681166][ T5841] usb 3-1: Manufacturer: syz [ 182.685875][ T5841] usb 3-1: SerialNumber: syz [ 182.690554][ T23] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 182.704080][ T5841] usb 3-1: config 0 descriptor?? [ 182.714942][ T23] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 182.714974][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.715178][ T5841] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 182.718844][ T23] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 182.718872][ T23] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 182.718890][ T23] usb 2-1: Product: syz [ 182.718903][ T23] usb 2-1: Manufacturer: syz [ 182.718914][ T23] usb 2-1: SerialNumber: syz [ 182.720847][ T23] usb 2-1: config 0 descriptor?? [ 182.721699][ T7602] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 182.723303][ T23] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 182.724357][ T23] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 182.849508][ T7605] loop0: detected capacity change from 0 to 40427 [ 182.872056][ T7605] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 182.872092][ T7605] F2FS-fs (loop0): Image doesn't support compression [ 182.872136][ T7605] F2FS-fs (loop0): Image doesn't support compression [ 182.874031][ T7605] F2FS-fs (loop0): invalid crc value [ 182.878133][ T7605] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.923491][ T7605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.986559][ T5825] usb 3-1: USB disconnect, device number 14 [ 182.989314][ T5825] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 183.084022][ T5795] syz-executor: attempt to access beyond end of device [ 183.084022][ T5795] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.089681][ T5795] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 183.223748][ T5825] usb 2-1: USB disconnect, device number 14 [ 183.226853][ T5825] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 185.289837][ T7615] loop0: detected capacity change from 0 to 32768 [ 185.395249][ T5825] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.584996][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 185.593825][ T5825] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 185.608201][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.619207][ T5825] usb 4-1: config 0 descriptor?? [ 185.667925][ T7641] loop2: detected capacity change from 0 to 4190 [ 185.686854][ T7641] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(2) [ 185.700002][ T7641] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 185.836245][ T5825] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 185.867303][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.883351][ T5825] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 185.893777][ T5825] usb 4-1: media controller created [ 185.931132][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.043444][ T5825] az6027: usb out operation failed. (-71) [ 186.297563][ T5825] az6027: usb out operation failed. (-71) [ 186.303442][ T5825] stb0899_attach: Driver disabled by Kconfig [ 186.311957][ T5825] az6027: no front-end attached [ 186.311957][ T5825] [ 186.321135][ T5825] az6027: usb out operation failed. (-71) [ 186.327158][ T5825] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 186.336167][ T5825] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 186.349443][ T5825] dvb-usb: schedule remote query interval to 400 msecs. [ 186.358309][ T5825] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 186.369681][ T5825] usb 4-1: USB disconnect, device number 13 [ 186.905907][ T5825] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 188.254963][ T5815] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 188.294944][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 188.315609][ T7683] loop1: detected capacity change from 0 to 4096 [ 188.451301][ T5815] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 188.460491][ T5815] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 188.469518][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 188.482965][ T5815] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 188.494127][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 188.499985][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 188.514611][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 188.539898][ T23] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 188.554797][ T23] usb 3-1: config 0 has no interface number 0 [ 188.561437][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.580189][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 188.592241][ T5815] usb 1-1: string descriptor 0 read error: -22 [ 188.598886][ T5815] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 188.613754][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.623328][ T23] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 188.634894][ T23] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 188.653007][ T23] usb 3-1: Product: syz [ 188.659567][ T5815] usb 1-1: config 0 descriptor?? [ 188.664778][ T23] usb 3-1: SerialNumber: syz [ 188.675555][ T7666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.686323][ T23] usb 3-1: config 0 descriptor?? [ 188.693582][ T5815] hub 1-1:0.0: bad descriptor, ignoring hub [ 188.706079][ T23] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 188.713062][ T5815] hub: probe of 1-1:0.0 failed with error -5 [ 188.726840][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input11 [ 188.738432][ T5815] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 188.899851][ T5815] usb 1-1: USB disconnect, device number 12 [ 188.971720][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.979197][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.986460][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 188.993700][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.000906][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.008119][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.015315][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.024153][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.031381][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.038617][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 189.048459][ T23] usb 3-1: USB disconnect, device number 15 [ 189.048548][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 189.089236][ T23] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 189.875761][ T7687] loop0: detected capacity change from 0 to 4096 [ 189.940389][ T7687] ntfs: volume version 3.1. [ 190.001792][ T7681] loop3: detected capacity change from 0 to 262144 [ 190.019666][ T7689] loop1: detected capacity change from 0 to 1764 [ 190.031270][ T7681] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.094959][ T7681] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.116844][ T7695] loop2: detected capacity change from 0 to 512 [ 190.151912][ T7695] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 190.215165][ T7695] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 190.262124][ T7700] loop1: detected capacity change from 0 to 512 [ 190.269571][ T7700] EXT4-fs: Ignoring removed orlov option [ 190.280802][ T7700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.351866][ T7700] EXT4-fs (loop1): 1 orphan inode deleted [ 190.388821][ T7700] EXT4-fs (loop1): 1 truncate cleaned up [ 190.409873][ T7700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.446069][ T7700] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.1.590: path /150/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 190.483049][ T7700] EXT4-fs (loop1): Remounting filesystem read-only [ 190.562524][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.654734][ T7708] loop0: detected capacity change from 0 to 128 [ 190.799228][ T7712] loop2: detected capacity change from 0 to 128 [ 190.832992][ T7712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 190.853255][ T7712] System zones: 1-3, 19-19, 35-36 [ 190.854684][ T7715] loop0: detected capacity change from 0 to 1024 [ 190.866341][ T7712] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 190.884718][ T7712] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.905881][ T7715] EXT4-fs: Ignoring removed nobh option [ 190.950015][ T7715] EXT4-fs: Ignoring removed bh option [ 190.958223][ T7715] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.958917][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.043170][ T7715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.198289][ T7715] EXT4-fs warning (device loop0): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 191.231262][ T7719] loop2: detected capacity change from 0 to 2048 [ 191.237375][ T7710] loop1: detected capacity change from 0 to 40427 [ 191.265539][ T7710] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 191.272334][ T7719] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 191.291302][ T7710] F2FS-fs (loop1): invalid crc value [ 191.292953][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.334890][ T7710] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.338969][ T7719] UDF-fs: unknown compression code (0) [ 191.432716][ T7710] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.494574][ T7724] loop0: detected capacity change from 0 to 256 [ 191.536943][ T7726] loop2: detected capacity change from 0 to 512 [ 191.542818][ T27] audit: type=1800 audit(2000000075.279:11): pid=7710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.593" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 191.564784][ T7726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 191.580330][ T7724] FAT-fs (loop0): Directory bread(block 64) failed [ 191.595493][ T7724] FAT-fs (loop0): Directory bread(block 65) failed [ 191.605201][ T7726] EXT4-fs (loop2): 1 truncate cleaned up [ 191.612762][ T7726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.629856][ T7724] FAT-fs (loop0): Directory bread(block 66) failed [ 191.630176][ T5790] syz-executor: attempt to access beyond end of device [ 191.630176][ T5790] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.651040][ T5790] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 191.655988][ T7724] FAT-fs (loop0): Directory bread(block 67) failed [ 191.683415][ T7724] FAT-fs (loop0): Directory bread(block 68) failed [ 191.725181][ T7724] FAT-fs (loop0): Directory bread(block 69) failed [ 191.725440][ T7724] FAT-fs (loop0): Directory bread(block 70) failed [ 191.725469][ T7724] FAT-fs (loop0): Directory bread(block 71) failed [ 191.725554][ T7724] FAT-fs (loop0): Directory bread(block 72) failed [ 191.725588][ T7724] FAT-fs (loop0): Directory bread(block 73) failed [ 191.806103][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.961659][ T7731] loop2: detected capacity change from 0 to 1024 [ 192.240433][ T7735] loop1: detected capacity change from 0 to 512 [ 192.243690][ T7735] EXT4-fs: Ignoring removed oldalloc option [ 192.301151][ T7737] loop2: detected capacity change from 0 to 1024 [ 192.305124][ T7735] EXT4-fs (loop1): 1 truncate cleaned up [ 192.342376][ T7735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.353279][ T7737] hfsplus: bad catalog entry type [ 192.381923][ T48] hfsplus: b-tree write err: -5, ino 4 [ 192.399882][ T7735] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.599: invalid indirect mapped block 234881024 (level 0) [ 192.401161][ T7735] EXT4-fs (loop1): Remounting filesystem read-only [ 192.442518][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.623743][ T7749] loop0: detected capacity change from 0 to 64 [ 192.665510][ T7749] Trying to free block not in datazone [ 192.682446][ T7749] Trying to free block not in datazone [ 192.697059][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 192.860994][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.609'. [ 192.861066][ T7756] netlink: 60 bytes leftover after parsing attributes in process `syz.0.609'. [ 192.861514][ T7755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.609'. [ 192.904973][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 192.906654][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.906690][ T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 192.906712][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.908967][ T9] usb 3-1: config 0 descriptor?? [ 192.968712][ T7760] loop0: detected capacity change from 0 to 512 [ 192.976376][ T7760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.003164][ T7760] EXT4-fs (loop0): 1 truncate cleaned up [ 193.004698][ T7760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.047091][ T7760] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.612: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 193.047605][ T7760] EXT4-fs (loop0): Remounting filesystem read-only [ 193.047623][ T7760] EXT4-fs warning (device loop0): ext4_rename_delete:3778: inode #2: comm syz.0.612: Deleting old file: nlink 4, error=-117 [ 193.110029][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.150021][ T7764] loop1: detected capacity change from 0 to 4096 [ 193.191448][ T7767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.255196][ T7766] loop0: detected capacity change from 0 to 4096 [ 193.281638][ T7768] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.316179][ T7766] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 193.337843][ T7766] Remounting filesystem read-only [ 193.343154][ T7766] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 193.369523][ T9] asus 0003:0B05:183D.000D: hidraw0: USB HID v0.01 Device [HID 0b05:183d] on usb-dummy_hcd.2-1/input0 [ 193.390896][ T9] asus 0003:0B05:183D.000D: Asus input not registered [ 193.406991][ T9] asus: probe of 0003:0B05:183D.000D failed with error -12 [ 193.474174][ T7774] loop0: detected capacity change from 0 to 256 [ 193.481539][ T7774] exfat: Deprecated parameter 'utf8' [ 193.509697][ T7774] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 193.618535][ T23] usb 3-1: USB disconnect, device number 16 [ 193.838576][ T7770] loop1: detected capacity change from 0 to 32768 [ 193.852968][ T7770] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 193.890643][ T7772] loop3: detected capacity change from 0 to 32768 [ 193.893855][ T7770] XFS (loop1): Ending clean mount [ 193.910993][ T7772] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 193.983848][ T5790] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 193.986084][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 194.021121][ T5815] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.235746][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 194.243122][ T5815] usb 1-1: unable to get BOS descriptor or descriptor too short [ 194.254547][ T7792] loop1: detected capacity change from 0 to 512 [ 194.261931][ T5815] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 194.263356][ T7792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.285127][ T7792] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.622: bad orphan inode 131083 [ 194.288383][ T5815] usb 1-1: config 13 has no interface number 0 [ 194.302235][ T5815] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 194.303282][ T7792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.316751][ T5815] usb 1-1: config 13 interface 50 has no altsetting 0 [ 194.354399][ T5815] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 194.374398][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.398237][ T5815] usb 1-1: Product: syz [ 194.412807][ T5815] usb 1-1: Manufacturer: syz [ 194.422955][ T5815] usb 1-1: SerialNumber: syz [ 194.443452][ T7778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.462734][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.503723][ T7795] loop2: detected capacity change from 0 to 128 [ 194.583808][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.593094][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652787][ T7799] loop2: detected capacity change from 0 to 65 [ 194.659113][ T7797] loop1: detected capacity change from 0 to 4096 [ 194.678908][ T7799] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 194.693628][ T5815] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 194.702505][ T5815] usb 1-1: MIDIStreaming interface descriptor not found [ 194.766400][ T7790] loop3: detected capacity change from 0 to 32768 [ 194.773461][ T5815] usb 1-1: USB disconnect, device number 13 [ 194.839511][ T7790] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 194.870947][ T7790] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 194.882374][ T7802] loop2: detected capacity change from 0 to 256 [ 194.894435][ T7802] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.919376][ T7802] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 194.943325][ T7802] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 194.951842][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 195.893605][ T7814] tipc: Enabling of bearer rejected, failed to enable media [ 195.987408][ T7818] loop0: detected capacity change from 0 to 1024 [ 196.019919][ T5825] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 196.045623][ T7818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.081873][ T7818] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 196.124584][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.242257][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 196.697174][ T5825] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.711525][ T5825] usb 4-1: config 0 has no interface number 0 [ 196.725310][ T5825] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 196.743878][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.752281][ T5825] usb 4-1: Product: syz [ 196.756804][ T5825] usb 4-1: Manufacturer: syz [ 196.764214][ T5825] usb 4-1: SerialNumber: syz [ 196.771604][ T5825] usb 4-1: config 0 descriptor?? [ 196.779952][ T5825] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 196.789029][ T5825] usb 4-1: selecting invalid altsetting 1 [ 196.794760][ T5825] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 196.805349][ T5825] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 196.815980][ T5825] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 196.824294][ T5825] usb 4-1: media controller created [ 196.848041][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.918497][ T7838] loop2: detected capacity change from 0 to 4096 [ 196.980160][ T7838] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 197.025095][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 197.071330][ T7840] loop1: detected capacity change from 0 to 256 [ 197.108391][ T7840] FAT-fs (loop1): Directory bread(block 64) failed [ 197.115380][ T7840] FAT-fs (loop1): Directory bread(block 65) failed [ 197.122271][ T7840] FAT-fs (loop1): Directory bread(block 66) failed [ 197.144022][ T7840] FAT-fs (loop1): Directory bread(block 67) failed [ 197.151083][ T7840] FAT-fs (loop1): Directory bread(block 68) failed [ 197.156025][ T5785] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 197.161714][ T7840] FAT-fs (loop1): Directory bread(block 69) failed [ 197.170881][ T7840] FAT-fs (loop1): Directory bread(block 70) failed [ 197.179630][ T7840] FAT-fs (loop1): Directory bread(block 71) failed [ 197.187066][ T7840] FAT-fs (loop1): Directory bread(block 72) failed [ 197.193636][ T7840] FAT-fs (loop1): Directory bread(block 73) failed [ 197.234949][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 197.250022][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.262907][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.274907][ T23] usb 1-1: Product: syz [ 197.279283][ T23] usb 1-1: Manufacturer: syz [ 197.283903][ T23] usb 1-1: SerialNumber: syz [ 197.316393][ T23] usb 1-1: config 0 descriptor?? [ 197.533954][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.605108][ T5815] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.671303][ T7844] loop1: detected capacity change from 0 to 32768 [ 197.701086][ T7844] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 197.764359][ T5790] ocfs2: Unmounting device (7,1) on (node local) [ 197.795446][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 197.816134][ T5815] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.833470][ T5815] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 197.844648][ T5815] usb 3-1: config 13 has no interface number 0 [ 197.859521][ T5815] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 197.870041][ T5815] usb 3-1: config 13 interface 50 has no altsetting 0 [ 197.880750][ T5815] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 197.890127][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.898396][ T5815] usb 3-1: Product: syz [ 197.902679][ T5815] usb 3-1: Manufacturer: syz [ 197.907481][ T5815] usb 3-1: SerialNumber: syz [ 197.923427][ T7842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 197.938483][ T23] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 197.939052][ T5825] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 197.954429][ T23] usb 1-1: USB disconnect, device number 14 [ 197.956910][ T5825] zl10353_read_register: readreg error (reg=127, ret==-110) [ 197.982774][ T5825] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 198.541511][ T5815] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 198.606292][ T5815] usb 3-1: MIDIStreaming interface descriptor not found [ 198.837255][ T5825] usb 4-1: USB disconnect, device number 14 [ 198.853372][ T5815] usb 3-1: USB disconnect, device number 17 [ 199.257082][ T7852] loop1: detected capacity change from 0 to 32768 [ 199.274939][ T7852] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 199.321998][ T7852] XFS (loop1): Ending clean mount [ 199.355957][ T7854] loop3: detected capacity change from 0 to 32768 [ 199.365392][ T7854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.643 (7854) [ 199.381597][ T7854] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.391875][ T7854] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 199.401394][ T7854] BTRFS info (device loop3): metadata ratio 2 [ 199.404938][ T28] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 199.407644][ T7854] BTRFS info (device loop3): allowing degraded mounts [ 199.421943][ T7854] BTRFS info (device loop3): force zlib compression, level 3 [ 199.429611][ T7854] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 199.439838][ T7854] BTRFS info (device loop3): use zstd compression, level 3 [ 199.443694][ T5790] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 199.447584][ T7854] BTRFS info (device loop3): force clearing of disk cache [ 199.467110][ T7854] BTRFS info (device loop3): max_inline at 0 [ 199.484873][ T7854] BTRFS info (device loop3): using free space tree [ 199.543369][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 199.617236][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.628732][ T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.645294][ T7854] BTRFS info (device loop3): enabling ssd optimizations [ 199.652560][ T28] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.663031][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.671591][ T28] usb 3-1: Product: syz [ 199.676321][ T7854] BTRFS info (device loop3): rebuilding free space tree [ 199.718224][ T28] usb 3-1: Manufacturer: syz [ 199.727449][ T28] usb 3-1: SerialNumber: syz [ 199.742204][ T7883] sp0: Synchronizing with TNC [ 199.935821][ T5787] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.978244][ T28] usb 3-1: 0:2 : does not exist [ 200.013749][ T28] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 200.059908][ T28] usb 3-1: USB disconnect, device number 18 [ 200.081081][ T7885] loop1: detected capacity change from 0 to 4096 [ 200.121999][ T7885] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 200.215248][ T7885] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 200.290715][ T50] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 200.533994][ T7894] loop1: detected capacity change from 0 to 1024 [ 200.567402][ T7894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.580287][ T7894] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.666108][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.715097][ T5842] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.974236][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 201.578142][ T5842] usb 4-1: config 5 has an invalid interface number: 72 but max is 0 [ 201.587385][ T5842] usb 4-1: config 5 has no interface number 0 [ 201.593514][ T5842] usb 4-1: config 5 interface 72 has no altsetting 0 [ 201.603601][ T7904] loop1: detected capacity change from 0 to 128 [ 201.613354][ T5842] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 201.623724][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.634464][ T7904] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.647133][ T5842] usb 4-1: Product: syz [ 201.651323][ T5842] usb 4-1: Manufacturer: syz [ 201.656166][ T5842] usb 4-1: SerialNumber: syz [ 201.671059][ T7904] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.878198][ T5842] ftdi_sio 4-1:5.72: FTDI USB Serial Device converter detected [ 201.886780][ T5842] usb 4-1: Detected FT4232H [ 201.891631][ T5842] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 201.898751][ T5842] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 201.907218][ T5842] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 201.917641][ T5842] usb 4-1: USB disconnect, device number 15 [ 201.927052][ T5842] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.941634][ T5842] ftdi_sio 4-1:5.72: device disconnected [ 202.795062][ T5815] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.829736][ T7912] loop2: detected capacity change from 0 to 32768 [ 202.830803][ T7911] loop0: detected capacity change from 0 to 32768 [ 202.844969][ T7911] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 202.861419][ T7912] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 202.920752][ T7912] XFS (loop2): Ending clean mount [ 202.985108][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 202.996773][ T5815] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.017787][ T5815] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 203.026943][ T5815] usb 4-1: config 13 has no interface number 0 [ 203.029168][ T5785] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 203.033143][ T5815] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 203.070657][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 203.083959][ T5815] usb 4-1: config 13 interface 50 has no altsetting 0 [ 203.094253][ T5815] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 203.103492][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.129980][ T5815] usb 4-1: Product: syz [ 203.134466][ T5815] usb 4-1: Manufacturer: syz [ 203.139704][ T5815] usb 4-1: SerialNumber: syz [ 203.178012][ T7908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.234262][ T7924] netlink: 84 bytes leftover after parsing attributes in process `syz.0.659'. [ 203.381594][ T7928] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 203.407795][ T7928] macvtap1: entered promiscuous mode [ 203.413387][ T7928] macvtap1: entered allmulticast mode [ 203.426306][ T7928] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 203.438815][ T5815] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 203.446272][ T5815] usb 4-1: MIDIStreaming interface descriptor not found [ 203.483231][ T5815] usb 4-1: USB disconnect, device number 16 [ 203.582363][ T7934] loop2: detected capacity change from 0 to 2048 [ 203.621388][ T7936] loop0: detected capacity change from 0 to 1024 [ 203.640926][ T7937] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.659725][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 203.661881][ T7936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.692589][ T7936] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.734889][ T7934] NILFS error (device loop2): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 203.761657][ T7934] Remounting filesystem read-only [ 203.770344][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.802151][ T5785] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 203.811551][ T5785] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 203.818591][ T5785] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 203.826548][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.836461][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.846452][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.855816][ T5785] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 203.862829][ T5785] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 203.870713][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.879721][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.889115][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 203.899134][ T5785] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 203.914301][ T5785] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 203.922638][ T5785] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 203.930183][ T5785] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 203.948319][ T5785] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 203.971390][ T5785] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 204.395052][ T5785] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 204.401214][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 204.402386][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.402406][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.402422][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.404119][ T5785] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 204.415099][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 204.456404][ T5785] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 204.462073][ T5792] Bluetooth: hci3: hardware error 0x00 [ 204.463713][ T5785] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 204.463733][ T5785] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 204.463747][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.463776][ T5785] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 204.521334][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.550252][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.562096][ T5785] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 204.570418][ T5785] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 204.838672][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 205.004779][ T27] audit: type=1326 audit(2000000001.409:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca11b8e929 code=0x7ffc0000 [ 205.054913][ T27] audit: type=1326 audit(2000000001.439:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca11b8e929 code=0x7ffc0000 [ 205.095049][ T27] audit: type=1326 audit(2000000001.449:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fca11b8e929 code=0x7ffc0000 [ 205.138308][ T7955] loop2: detected capacity change from 0 to 32768 [ 205.145109][ T27] audit: type=1326 audit(2000000001.449:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca11b8e929 code=0x7ffc0000 [ 205.153464][ T7955] [ 205.153464][ T7955] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.153464][ T7955] [ 205.178692][ T27] audit: type=1326 audit(2000000001.449:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.1.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca11b8e929 code=0x7ffc0000 [ 205.178966][ T28] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 205.222286][ T7953] loop3: detected capacity change from 0 to 32768 [ 205.244508][ T7955] ERROR: (device loop2): diWrite: ixpxd invalid [ 205.244508][ T7955] [ 205.246894][ T7953] JBD2: Ignoring recovery information on journal [ 205.253756][ T7955] ERROR: (device loop2): txCommit: [ 205.253756][ T7955] [ 205.291179][ T7953] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 205.320667][ T5785] [ 205.320667][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.320667][ T5785] [ 205.334998][ T5785] [ 205.334998][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 205.334998][ T5785] [ 205.354619][ T7953] (syz.3.671,7953,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 205.398935][ T28] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 205.408442][ T28] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 205.417531][ T28] usb 1-1: Product: syz [ 205.422836][ T28] usb 1-1: Manufacturer: syz [ 205.427682][ T28] usb 1-1: SerialNumber: syz [ 205.935618][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 205.952062][ T28] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 206.247861][ T7973] loop2: detected capacity change from 0 to 256 [ 206.279985][ T7973] FAT-fs (loop2): Directory bread(block 64) failed [ 206.290957][ T7973] FAT-fs (loop2): Directory bread(block 65) failed [ 206.291277][ T7975] loop1: detected capacity change from 0 to 4096 [ 206.298075][ T7973] FAT-fs (loop2): Directory bread(block 66) failed [ 206.310892][ T7973] FAT-fs (loop2): Directory bread(block 67) failed [ 206.317669][ T7973] FAT-fs (loop2): Directory bread(block 68) failed [ 206.320946][ T7975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.324184][ T7973] FAT-fs (loop2): Directory bread(block 69) failed [ 206.343273][ T7973] FAT-fs (loop2): Directory bread(block 70) failed [ 206.350118][ T7973] FAT-fs (loop2): Directory bread(block 71) failed [ 206.357871][ T7973] FAT-fs (loop2): Directory bread(block 72) failed [ 206.364560][ T7973] FAT-fs (loop2): Directory bread(block 73) failed [ 206.371365][ T28] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 206.374751][ T7975] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 206.391180][ T28] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 206.405163][ T5842] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 206.450214][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.519139][ T7978] vivid-000: ================= START STATUS ================= [ 206.528284][ T7978] vivid-000: Test Pattern: 75% Colorbar [ 206.533914][ T7978] vivid-000: Fill Percentage of Frame: 100 [ 206.539995][ T7978] vivid-000: Horizontal Movement: No Movement [ 206.546204][ T7978] vivid-000: Vertical Movement: No Movement [ 206.552099][ T7978] vivid-000: OSD Text Mode: All [ 206.557242][ T7978] vivid-000: Show Border: false [ 206.562674][ T7978] vivid-000: Show Square: false [ 206.567614][ T7978] vivid-000: Sensor Flipped Horizontally: false [ 206.573898][ T7978] vivid-000: Sensor Flipped Vertically: false [ 206.575033][ T5792] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 206.580211][ T7978] vivid-000: Insert SAV Code in Image: [ 206.586634][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 206.597852][ T7978] false [ 206.600747][ T7978] vivid-000: Insert EAV Code in Image: false [ 206.607111][ T7978] vivid-000: Insert Video Guard Band: false [ 206.613824][ T7978] vivid-000: Reduced Framerate: false [ 206.620340][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.632416][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.642544][ T7978] vivid-000: Enable Capture Cropping: true [ 206.648641][ T5842] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 206.657850][ T7978] vivid-000: Enable Capture Composing: true [ 206.664446][ T7978] vivid-000: Enable Capture Scaler: true [ 206.669186][ T5815] usb 1-1: USB disconnect, device number 15 [ 206.670940][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.682195][ T7978] vivid-000: Timestamp Source: End of Frame [ 206.691882][ T7978] vivid-000: Colorspace: sRGB [ 206.693017][ T5842] usb 4-1: config 0 descriptor?? [ 206.696820][ T7978] vivid-000: Transfer Function: Default [ 206.712174][ T7978] vivid-000: Y'CbCr Encoding: Default [ 206.719328][ T7978] vivid-000: HSV Encoding: Hue 0-179 [ 206.724787][ T7978] vivid-000: Quantization: Default [ 206.730183][ T7978] vivid-000: Apply Alpha To Red Only: false [ 206.736796][ T7978] vivid-000: Standard Aspect Ratio: 4x3 [ 206.742366][ T7978] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 206.750214][ T7978] vivid-000: DV Timings: 640x480p59 inactive [ 206.756283][ T7978] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 206.763795][ T7978] vivid-000: Maximum EDID Blocks: 2 [ 206.770321][ T7978] vivid-000: Limited RGB Range (16-235): false [ 206.777290][ T7978] vivid-000: Rx RGB Quantization Range: Automatic [ 206.783731][ T7978] vivid-000: Power Present: 0x00000001 [ 206.789548][ T7978] tpg source WxH: 640x360 (Y'CbCr) [ 206.794685][ T7978] tpg field: 1 [ 206.798161][ T7978] tpg crop: 640x360@0x0 [ 206.802340][ T7978] tpg compose: 640x360@0x0 [ 206.807063][ T28] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 206.815346][ T7978] tpg colorspace: 8 [ 206.819708][ T7978] tpg transfer function: 0/0 [ 206.824311][ T7978] tpg Y'CbCr encoding: 0/0 [ 206.828946][ T7978] tpg quantization: 0/0 [ 206.833203][ T7978] tpg RGB range: 0/2 [ 206.838138][ T7978] vivid-000: ================== END STATUS ================== [ 207.554636][ T5842] corsair 0003:1B1C:1B02.000E: invalid report_count 26673 [ 207.572015][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.572085][ T5842] corsair 0003:1B1C:1B02.000E: item 0 2 1 9 parsing failed [ 207.591760][ T5842] corsair 0003:1B1C:1B02.000E: parse failed [ 207.592641][ T28] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.597960][ T5842] corsair: probe of 0003:1B1C:1B02.000E failed with error -22 [ 207.618179][ T28] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.627421][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.635547][ T28] usb 2-1: Product: syz [ 207.639775][ T28] usb 2-1: Manufacturer: syz [ 207.644416][ T28] usb 2-1: SerialNumber: syz [ 207.787984][ T5815] usb 4-1: USB disconnect, device number 17 [ 207.863862][ T28] usb 2-1: 0:2 : does not exist [ 207.872662][ T28] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 207.893520][ T28] usb 2-1: USB disconnect, device number 15 [ 207.956821][ T27] audit: type=1326 audit(2000000001.869:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4d8e929 code=0x7ffc0000 [ 207.984981][ T27] audit: type=1326 audit(2000000001.869:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4d8e929 code=0x7ffc0000 [ 208.045009][ T27] audit: type=1326 audit(2000000001.869:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f21f4d8e929 code=0x7ffc0000 [ 208.072150][ T27] audit: type=1326 audit(2000000001.869:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4d8e929 code=0x7ffc0000 [ 208.095645][ T27] audit: type=1326 audit(2000000001.869:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21f4d8e929 code=0x7ffc0000 [ 209.147283][ T8009] loop0: detected capacity change from 0 to 256 [ 209.157308][ T8007] loop3: detected capacity change from 0 to 4096 [ 209.181378][ T8007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.214075][ T8009] FAT-fs (loop0): Directory bread(block 64) failed [ 209.220930][ T5815] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 209.230479][ T8009] FAT-fs (loop0): Directory bread(block 65) failed [ 209.237305][ T8007] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 209.255118][ T8009] FAT-fs (loop0): Directory bread(block 66) failed [ 209.261839][ T8009] FAT-fs (loop0): Directory bread(block 67) failed [ 209.269527][ T8009] FAT-fs (loop0): Directory bread(block 68) failed [ 209.276318][ T8009] FAT-fs (loop0): Directory bread(block 69) failed [ 209.282988][ T8009] FAT-fs (loop0): Directory bread(block 70) failed [ 209.289998][ T8009] FAT-fs (loop0): Directory bread(block 71) failed [ 209.297016][ T8009] FAT-fs (loop0): Directory bread(block 72) failed [ 209.303723][ T8009] FAT-fs (loop0): Directory bread(block 73) failed [ 209.305142][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.425217][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 209.436854][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 209.453254][ T5815] usb 3-1: config 0 has no interface number 0 [ 209.467413][ T5815] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 209.476806][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.494929][ T5815] usb 3-1: Product: syz [ 209.504919][ T5815] usb 3-1: Manufacturer: syz [ 209.514905][ T5815] usb 3-1: SerialNumber: syz [ 209.531576][ T5815] usb 3-1: config 0 descriptor?? [ 209.557418][ T5815] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 210.037989][ T5815] usb 3-1: selecting invalid altsetting 1 [ 210.056548][ T5815] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 210.077635][ T5815] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 210.106912][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 210.124173][ T5815] usb 3-1: media controller created [ 210.143907][ T8013] loop1: detected capacity change from 0 to 32768 [ 210.159716][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.167710][ T8013] [ 210.167710][ T8013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.167710][ T8013] [ 210.214450][ T8013] ERROR: (device loop1): diWrite: ixpxd invalid [ 210.214450][ T8013] [ 210.216482][ T5815] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 210.223911][ T8013] ERROR: (device loop1): txCommit: [ 210.223911][ T8013] [ 210.234037][ T5815] zl10353_read_register: readreg error (reg=127, ret==-71) [ 210.257730][ T5815] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 210.282283][ T5790] [ 210.282283][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.282283][ T5790] [ 210.333339][ T5815] usb 3-1: USB disconnect, device number 19 [ 210.346794][ T5790] [ 210.346794][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.346794][ T5790] [ 210.458951][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.3.699'. [ 210.472709][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.3.699'. [ 210.486729][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.699'. [ 210.680290][ T5841] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.824918][ T5815] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 210.945018][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 211.021152][ T5841] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.092054][ T5841] usb 1-1: config 4 interface 0 has no altsetting 0 [ 211.202011][ T5841] usb 1-1: string descriptor 0 read error: -22 [ 211.247819][ T5841] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 211.321171][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.434032][ T5841] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 211.448354][ T5841] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 211.459375][ T5841] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 211.467449][ T5841] usb 1-1: media controller created [ 211.502998][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.611990][ T5815] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 211.612014][ T5815] usb 2-1: config 0 has no interface number 0 [ 211.612057][ T5815] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 211.612082][ T5815] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 211.661247][ T5815] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 211.670620][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.670643][ T5815] usb 2-1: Product: syz [ 211.670657][ T5815] usb 2-1: Manufacturer: syz [ 211.670671][ T5815] usb 2-1: SerialNumber: syz [ 211.680323][ T5815] usb 2-1: config 0 descriptor?? [ 211.682414][ T8031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 211.682565][ T8031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 211.804963][ T5777] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 212.425410][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.445293][ T8031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 212.452813][ T5777] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.455621][ T8031] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 212.467725][ T5777] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.481637][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.495301][ T5777] usb 4-1: Product: syz [ 212.502522][ T5777] usb 4-1: Manufacturer: syz [ 212.507435][ T5777] usb 4-1: SerialNumber: syz [ 212.565560][ T5841] zl10353_read_register: readreg error (reg=127, ret==0) [ 212.565662][ T8025] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 212.629341][ T5841] usb 1-1: USB disconnect, device number 16 [ 212.726982][ T5777] usb 4-1: 0:2 : does not exist [ 212.731472][ T5777] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 212.771485][ T5777] usb 4-1: USB disconnect, device number 18 [ 212.848797][ T8051] loop2: detected capacity change from 0 to 1024 [ 212.872016][ T8051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.888953][ T8051] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.895881][ T5815] asix 2-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 212.915851][ T5815] asix: probe of 2-1:0.239 failed with error -71 [ 212.919216][ T8051] EXT4-fs error (device loop2): ext4_map_blocks:718: inode #15: block 1: comm syz.2.708: lblock 1 mapped to illegal pblock 1 (length 15) [ 212.926492][ T5815] usb 2-1: USB disconnect, device number 16 [ 212.964254][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.069657][ T8056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.709'. [ 213.078852][ T8056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.709'. [ 213.088103][ T8055] netlink: 60 bytes leftover after parsing attributes in process `syz.2.709'. [ 213.515074][ T5842] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 213.523127][ T5841] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 214.385043][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 214.392536][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.403030][ T5842] usb 3-1: unable to get BOS descriptor or descriptor too short [ 214.410908][ T5841] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 214.420610][ T5841] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 214.430355][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.440408][ T5842] usb 3-1: config 4 interface 0 has no altsetting 0 [ 214.449777][ T5841] usb 1-1: config 0 descriptor?? [ 214.458995][ T5841] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 214.465905][ T5842] usb 3-1: string descriptor 0 read error: -22 [ 214.472148][ T5842] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 214.481258][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 214.489369][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.498439][ T5841] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.507393][ T5841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 214.514479][ T5841] usb 1-1: media controller created [ 214.523535][ T5842] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 214.531815][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.541811][ T5842] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 214.559082][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 214.565053][ T5842] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 214.572194][ T5842] usb 3-1: media controller created [ 214.577753][ T5841] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 214.587393][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 214.609216][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.619281][ T5841] dvb-usb: schedule remote query interval to 150 msecs. [ 214.630497][ T5841] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 214.695886][ T8060] dibusb: i2c wr: len=108 is too big! [ 214.695886][ T8060] [ 214.704723][ T5841] usb 1-1: USB disconnect, device number 17 [ 214.721521][ T5841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 214.737777][ T5842] zl10353_read_register: readreg error (reg=127, ret==0) [ 214.805203][ T5842] usb 3-1: USB disconnect, device number 20 [ 215.291314][ T8071] loop1: detected capacity change from 0 to 1024 [ 215.299315][ T8069] loop3: detected capacity change from 0 to 1024 [ 215.356129][ T8071] hfsplus: bad catalog entry type [ 215.371771][ T58] hfsplus: b-tree write err: -5, ino 4 [ 215.450039][ T42] hfsplus: b-tree write err: -5, ino 4 [ 215.509055][ T8077] loop0: detected capacity change from 0 to 1024 [ 215.616527][ T2942] hfsplus: b-tree write err: -5, ino 4 [ 216.204953][ T5841] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 216.268799][ T8085] loop2: detected capacity change from 0 to 512 [ 216.282145][ T8085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 216.300843][ T8085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 216.315127][ T8085] System zones: 1-12 [ 216.320659][ T8085] EXT4-fs (loop2): 1 truncate cleaned up [ 216.333479][ T8085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.398846][ T5841] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 216.417541][ T5841] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 216.459247][ T5841] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 216.475517][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.683427][ T8095] loop3: detected capacity change from 0 to 1024 [ 216.692596][ T8095] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.708706][ T8095] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 216.717117][ T8095] EXT4-fs (loop3): orphan cleanup on readonly fs [ 216.730832][ T8095] EXT4-fs error (device loop3): __ext4_get_inode_loc:4483: comm syz.3.722: Invalid inode table block 0 in block_group 0 [ 216.754281][ T8095] EXT4-fs (loop3): Remounting filesystem read-only [ 216.764248][ T8095] Quota error (device loop3): write_blk: dquota write failed [ 216.775451][ T8095] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 216.789169][ T8095] EXT4-fs (loop3): 1 truncate cleaned up [ 216.811443][ T8095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.824022][ T28] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 216.892575][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.922428][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.937621][ T5841] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 216.957567][ T5841] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input14 [ 216.970314][ T5841] input: failed to attach handler kbd to device input14, error: -5 [ 216.991739][ T5841] usb 2-1: USB disconnect, device number 17 [ 217.022148][ T8100] loop2: detected capacity change from 0 to 16 [ 217.028624][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 217.036287][ T28] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 217.052082][ T28] usb 1-1: config 0 has no interface number 0 [ 217.060109][ T8100] erofs: (device loop2): mounted with root inode @ nid 36. [ 217.068812][ T28] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.085895][ T28] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 217.103417][ T28] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 217.108568][ T8100] syz.2.723: attempt to access beyond end of device [ 217.108568][ T8100] loop2: rw=0, sector=48, nr_sectors = 16 limit=16 [ 217.124898][ T28] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 217.132386][ T8100] syz.2.723: attempt to access beyond end of device [ 217.132386][ T8100] loop2: rw=0, sector=48, nr_sectors = 16 limit=16 [ 217.143839][ T28] usb 1-1: Product: syz [ 217.150736][ T28] usb 1-1: SerialNumber: syz [ 217.172765][ T28] usb 1-1: config 0 descriptor?? [ 217.191149][ T28] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 217.212710][ T28] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 217.419697][ T8104] loop3: detected capacity change from 0 to 512 [ 217.442497][ T8104] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.486492][ C1] cm109_urb_ctl_callback: 15 callbacks suppressed [ 217.486518][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.505074][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.513832][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.523256][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.532649][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.540323][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.547649][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.554936][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.562102][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.569288][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 217.581387][ T28] usb 1-1: USB disconnect, device number 18 [ 217.587408][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 217.617898][ T8104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 217.627549][ T8104] System zones: 1-12 [ 217.634552][ T8104] EXT4-fs (loop3): 1 truncate cleaned up [ 217.641581][ T8104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.707845][ T28] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 218.409236][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.435002][ T5841] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 218.638220][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.651907][ T5841] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 218.655164][ T28] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 218.660956][ T5841] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 218.679882][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.689818][ T5841] usb 2-1: config 0 descriptor?? [ 218.696859][ T5841] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 218.704099][ T5841] dvb-usb: bulk message failed: -22 (3/0) [ 218.745142][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 219.196489][ T5841] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 219.206262][ T8110] dibusb: i2c wr: len=108 is too big! [ 219.206262][ T8110] [ 219.209227][ T5841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 219.222012][ T5841] usb 2-1: media controller created [ 219.228443][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.241073][ T5841] dvb-usb: bulk message failed: -22 (6/0) [ 219.248309][ T5841] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 219.257225][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 219.270560][ T5841] dvb-usb: schedule remote query interval to 150 msecs. [ 219.277893][ T5841] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 219.287705][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.291018][ T5841] usb 2-1: USB disconnect, device number 18 [ 219.299073][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.315064][ T28] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 219.335743][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.357467][ T28] usb 1-1: config 0 descriptor?? [ 219.365608][ T5841] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 219.385352][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 219.393872][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.405502][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.418907][ T9] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 219.429923][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.442308][ T9] usb 4-1: config 0 descriptor?? [ 219.793919][ T28] pyra 0003:1E7D:2CF6.000F: item fetching failed at offset 5/7 [ 219.802172][ T28] pyra 0003:1E7D:2CF6.000F: parse failed [ 219.808069][ T28] pyra: probe of 0003:1E7D:2CF6.000F failed with error -22 [ 219.878700][ T9] smartjoyplus 0003:0925:8866.0010: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 219.904124][ T8122] loop2: detected capacity change from 0 to 1024 [ 219.904328][ T9] smartjoyplus 0003:0925:8866.0010: no output reports found [ 219.920846][ T8122] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.932897][ T8122] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 219.941347][ T8122] EXT4-fs (loop2): orphan cleanup on readonly fs [ 219.948881][ T8122] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.733: Invalid inode table block 0 in block_group 0 [ 219.962043][ T8122] EXT4-fs (loop2): Remounting filesystem read-only [ 219.968644][ T8122] Quota error (device loop2): write_blk: dquota write failed [ 219.977319][ T8122] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 219.987470][ T8122] EXT4-fs (loop2): 1 truncate cleaned up [ 219.997314][ T8122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 220.035191][ T5841] usb 1-1: USB disconnect, device number 19 [ 220.054441][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.099121][ T28] usb 4-1: USB disconnect, device number 19 [ 220.210909][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 220.435065][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 220.499656][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.547166][ T9] usb 2-1: config 4 interface 0 has no altsetting 0 [ 220.611439][ T9] usb 2-1: string descriptor 0 read error: -22 [ 220.635331][ T9] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 220.664832][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.856521][ T9] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 221.025237][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.080241][ T8124] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 221.090080][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 221.104723][ T9] usb 2-1: media controller created [ 221.134301][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.190204][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 221.253415][ T9] usb 2-1: USB disconnect, device number 19 [ 221.434960][ T5842] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 221.464928][ T5815] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 221.536398][ T8143] loop0: detected capacity change from 0 to 512 [ 221.585834][ T8143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.601247][ T8143] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 221.609542][ T8143] System zones: 1-12 [ 221.654970][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 221.672013][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.695611][ T8143] EXT4-fs (loop0): 1 truncate cleaned up [ 221.702519][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.738800][ T5815] usb 3-1: config 0 has no interface number 0 [ 221.768188][ T5815] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 221.801380][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.836260][ T5815] usb 3-1: Product: syz [ 221.856622][ T5815] usb 3-1: Manufacturer: syz [ 221.862532][ T5815] usb 3-1: SerialNumber: syz [ 221.871033][ T5815] usb 3-1: config 0 descriptor?? [ 221.879636][ T5815] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 221.888616][ T5815] usb 3-1: selecting invalid altsetting 1 [ 221.894387][ T5815] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 221.903112][ T5815] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.913764][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 221.922923][ T5815] usb 3-1: media controller created [ 221.953748][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.969852][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.425294][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.457753][ T5842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.485071][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.493145][ T5842] usb 4-1: Product: syz [ 222.505604][ T5842] usb 4-1: Manufacturer: syz [ 222.510254][ T5842] usb 4-1: SerialNumber: syz [ 222.612805][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.706854][ T8153] loop0: detected capacity change from 0 to 1024 [ 222.742092][ T8153] hfsplus: bad catalog entry type [ 222.785352][ T42] hfsplus: b-tree write err: -5, ino 4 [ 222.812770][ T5842] usb 4-1: 0:2 : does not exist [ 222.831358][ T5842] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 222.870092][ T5842] usb 4-1: USB disconnect, device number 20 [ 223.525265][ T5815] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 223.544334][ T5815] zl10353_read_register: readreg error (reg=127, ret==-110) [ 223.577056][ T5815] usb 3-1: USB disconnect, device number 21 [ 223.615099][ T28] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 223.796511][ T28] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 223.804780][ T28] usb 1-1: config 0 has no interface number 0 [ 223.811220][ T28] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 223.822259][ T28] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 223.839080][ T28] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 223.848515][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.856578][ T28] usb 1-1: Product: syz [ 223.860755][ T28] usb 1-1: Manufacturer: syz [ 223.867502][ T28] usb 1-1: SerialNumber: syz [ 223.873513][ T28] usb 1-1: config 0 descriptor?? [ 223.879286][ T8157] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.887012][ T8157] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.015008][ T5915] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 224.103739][ T8157] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.111282][ T8157] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.199589][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.213142][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.228717][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 224.237974][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.253809][ T5915] usb 2-1: config 0 descriptor?? [ 224.255811][ T5841] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.470313][ T5841] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 224.609399][ T28] asix 1-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 224.651737][ T28] asix: probe of 1-1:0.239 failed with error -71 [ 224.747468][ T5915] apple 0003:05AC:0262.0011: unbalanced delimiter at end of report description [ 224.757663][ T28] usb 1-1: USB disconnect, device number 20 [ 224.764330][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.770977][ T5915] apple 0003:05AC:0262.0011: parse failed [ 224.772527][ T5841] usb 4-1: Product: syz [ 224.782443][ T5841] usb 4-1: Manufacturer: syz [ 224.782677][ T5915] apple: probe of 0003:05AC:0262.0011 failed with error -22 [ 224.787171][ T5841] usb 4-1: SerialNumber: syz [ 224.801482][ T5841] usb 4-1: config 0 descriptor?? [ 225.115089][ T5841] ch341 4-1:0.0: ch341-uart converter detected [ 225.180308][ T28] usb 2-1: USB disconnect, device number 20 [ 225.201358][ T8172] CIFS mount error: No usable UNC path provided in device string! [ 225.201358][ T8172] [ 225.212649][ T8172] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 225.985138][ T5841] usb 4-1: failed to send control message: -71 [ 225.994157][ T5841] ch341-uart: probe of ttyUSB0 failed with error -71 [ 226.028149][ T5841] usb 4-1: USB disconnect, device number 21 [ 226.046254][ T5841] ch341 4-1:0.0: device disconnected [ 226.219399][ T8187] loop1: detected capacity change from 0 to 256 [ 226.228566][ T8187] exfat: Deprecated parameter 'utf8' [ 226.730194][ T8187] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0b800a9a, utbl_chksum : 0xe619d30d) [ 227.879271][ T8215] loop0: detected capacity change from 0 to 256 [ 227.905252][ T8215] exfat: Deprecated parameter 'utf8' [ 228.890276][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 229.098564][ T8231] netlink: 7 bytes leftover after parsing attributes in process `syz.0.769'. [ 229.332425][ T8238] kvm: user requested TSC rate below hardware speed [ 229.523623][ T8244] loop3: detected capacity change from 0 to 2048 [ 229.594551][ T8244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.607756][ T8244] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.682339][ T27] audit: type=1800 audit(2000000023.589:22): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.774" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 229.723465][ T8244] fs-verity (loop3, inode 13): Error -22 reading file data [ 229.750701][ T8244] fs-verity (loop3, inode 13): Error -22 building Merkle tree [ 229.845394][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.217000][ T28] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 230.604992][ T5841] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 230.635001][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 231.025883][ T28] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.037275][ T28] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.046021][ T28] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.059049][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.120096][ T28] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.201748][ T28] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.220913][ T28] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.247074][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.261306][ T28] usb 1-1: config 0 descriptor?? [ 231.305027][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 231.326209][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 231.345148][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.355331][ T5841] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 231.365418][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.378852][ T5841] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.388798][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.406042][ T5841] usb 2-1: config 0 descriptor?? [ 231.492542][ T28] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 231.493487][ T8278] loop2: detected capacity change from 0 to 1024 [ 231.538476][ T8278] EXT4-fs: Ignoring removed nobh option [ 231.544094][ T8278] EXT4-fs: Ignoring removed bh option [ 231.551323][ T8278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.583397][ T8278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.658644][ T9] usb 2-1: USB disconnect, device number 21 [ 231.679210][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.709644][ T5841] usb 1-1: USB disconnect, device number 21 [ 231.723756][ T5841] usblp0: removed [ 232.070190][ T8305] syz.3.794[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.070335][ T8305] syz.3.794[8305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.125599][ T8307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.795'. [ 232.253251][ T27] audit: type=1326 audit(2000000026.159:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca11b858e7 code=0x7ffc0000 [ 232.284949][ T28] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 232.315142][ T27] audit: type=1326 audit(2000000026.189:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca11b2ab19 code=0x7ffc0000 [ 232.364909][ T27] audit: type=1326 audit(2000000026.189:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca11b8e929 code=0x7ffc0000 [ 232.402113][ T27] audit: type=1326 audit(2000000026.189:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca11b858e7 code=0x7ffc0000 [ 232.432185][ T27] audit: type=1326 audit(2000000026.189:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca11b2ab19 code=0x7ffc0000 [ 232.456352][ T27] audit: type=1326 audit(2000000026.189:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca11b858e7 code=0x7ffc0000 [ 232.516638][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 232.522106][ T27] audit: type=1326 audit(2000000026.189:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca11b2ab19 code=0x7ffc0000 [ 232.556522][ T28] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 232.565046][ T28] usb 3-1: config 179 has no interface number 0 [ 232.582592][ T28] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 232.600099][ T27] audit: type=1326 audit(2000000026.189:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca11b858e7 code=0x7ffc0000 [ 232.626663][ T28] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 232.640614][ T28] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.663023][ T27] audit: type=1326 audit(2000000026.189:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca11b2ab19 code=0x7ffc0000 [ 232.702299][ T28] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 232.731852][ T28] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 232.755250][ T28] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 232.773713][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.791832][ T8303] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.006343][ T9] kernel write not supported for file /516/attr/prev (pid: 9 comm: kworker/0:1) [ 233.053472][ T5777] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input17 [ 233.135099][ T28] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 233.253633][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 233.253639][ T9] usb 3-1: USB disconnect, device number 22 [ 233.253781][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 233.277089][ T9] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 233.344966][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 233.353029][ T28] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 233.364882][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.401439][ T28] usb 4-1: config 0 descriptor?? [ 233.628906][ T28] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 233.649234][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.659556][ T28] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 233.666831][ T28] usb 4-1: media controller created [ 233.689716][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.838903][ T28] az6027: usb out operation failed. (-71) [ 233.862030][ T28] az6027: usb out operation failed. (-71) [ 233.874926][ T28] stb0899_attach: Driver disabled by Kconfig [ 233.883605][ T28] az6027: no front-end attached [ 233.883605][ T28] [ 233.893745][ T28] az6027: usb out operation failed. (-71) [ 233.904951][ T28] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 233.915519][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 233.937426][ T28] dvb-usb: schedule remote query interval to 400 msecs. [ 233.954976][ T28] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 233.975286][ T28] usb 4-1: USB disconnect, device number 22 [ 234.034275][ T28] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 234.125056][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 234.281111][ T8373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.822'. [ 234.314953][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 234.322330][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 234.342933][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 234.363669][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 234.380389][ T5842] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 234.404752][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.422599][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.430735][ T9] usb 1-1: SerialNumber: syz [ 234.442748][ T8356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.615114][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 234.623729][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.640237][ T5842] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 234.655664][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.663715][ T5842] usb 3-1: Product: syz [ 234.668847][ T5842] usb 3-1: Manufacturer: syz [ 234.673599][ T5842] usb 3-1: SerialNumber: syz [ 234.680511][ T9] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 234.688329][ T5842] usb 3-1: config 0 descriptor?? [ 234.701162][ T5842] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 234.711428][ T9] usb 1-1: USB disconnect, device number 22 [ 234.834994][ T5825] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 234.867959][ T5841] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 234.899463][ T58] usb 3-1: Failed to submit usb control message: -71 [ 234.899730][ T5842] usb 3-1: USB disconnect, device number 23 [ 234.906930][ T58] usb 3-1: unable to send the bmi data to the device: -71 [ 234.906983][ T58] usb 3-1: unable to get target info from device [ 234.907012][ T58] usb 3-1: could not get target info (-71) [ 234.933401][ T58] usb 3-1: could not probe fw (-71) [ 235.015126][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 235.021911][ T5825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.032832][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.044009][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.053759][ T5825] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.063469][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.076505][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 235.083092][ T5825] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.092641][ T5825] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.100755][ T5825] usb 2-1: Manufacturer: syz [ 235.106129][ T5841] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 235.116528][ T5825] usb 2-1: config 0 descriptor?? [ 235.121710][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.132942][ T5841] usb 4-1: config 0 descriptor?? [ 235.352907][ T5841] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 235.362450][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.375521][ T5841] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 235.383368][ T5841] usb 4-1: media controller created [ 235.401731][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.425514][ T5825] rc_core: IR keymap rc-hauppauge not found [ 235.431537][ T5825] Registered IR keymap rc-empty [ 235.436890][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.475454][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.494993][ T5842] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 235.516566][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 235.531380][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 235.548215][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.551427][ T8382] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 235.569146][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.577595][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.592610][ T5841] az6027: usb out operation failed. (-71) [ 235.599488][ T5841] az6027: usb out operation failed. (-71) [ 235.609523][ T5841] stb0899_attach: Driver disabled by Kconfig [ 235.615980][ T5841] az6027: no front-end attached [ 235.615980][ T5841] [ 235.623794][ T5841] az6027: usb out operation failed. (-71) [ 235.629917][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.637490][ T5841] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 235.650377][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 235.665459][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.675437][ T5841] dvb-usb: schedule remote query interval to 400 msecs. [ 235.683999][ T5841] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 235.695065][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 235.706188][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.715561][ T5842] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 235.734393][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.742894][ T5841] usb 4-1: USB disconnect, device number 23 [ 235.761860][ T5842] pvrusb2: Hardware description: Terratec Grabster AV400 [ 235.775049][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.791772][ T5842] pvrusb2: ********** [ 235.805109][ T5842] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 235.818055][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.829209][ T5841] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 235.837819][ T5842] pvrusb2: Important functionality might not be entirely working. [ 235.849014][ T5842] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 235.862338][ T5842] pvrusb2: ********** [ 235.885747][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.919156][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.955192][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 235.966927][ T8393] loop2: detected capacity change from 0 to 32768 [ 235.976328][ T2316] pvrusb2: Invalid write control endpoint [ 235.982346][ T8393] (syz.2.829,8393,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 236.000809][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 236.008615][ T8393] (syz.2.829,8393,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.026783][ T8393] (syz.2.829,8393,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.030961][ T2316] pvrusb2: Invalid write control endpoint [ 236.048676][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 236.049858][ T8393] (syz.2.829,8393,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 236.060918][ T5825] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.073788][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 236.089575][ T5825] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.090941][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 236.110554][ T2316] pvrusb2: Device being rendered inoperable [ 236.120282][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 236.129791][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 236.135569][ T8393] JBD2: Ignoring recovery information on journal [ 236.143219][ T2316] pvrusb2: Attached sub-driver cx25840 [ 236.149710][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 236.160715][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 236.170692][ T5825] usb 2-1: USB disconnect, device number 22 [ 236.174647][ T8387] pvrusb2: Attempted to execute control transfer when device not ok [ 236.188426][ T5815] usb 1-1: USB disconnect, device number 23 [ 236.228383][ T8393] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 236.271928][ T6731] (kworker/u4:10,6731,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 236.279147][ T8398] sctp: [Deprecated]: syz.3.830 (pid 8398) Use of int in max_burst socket option. [ 236.279147][ T8398] Use struct sctp_assoc_value instead [ 236.305022][ T8393] (syz.2.829,8393,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 236.373698][ T8393] (syz.2.829,8393,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x2e880d5e. Applying ECC. [ 236.388345][ T8393] (syz.2.829,8393,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x960d5e93 [ 236.401608][ T8393] (syz.2.829,8393,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 236.413189][ T8393] (syz.2.829,8393,0):ocfs2_quota_read:201 ERROR: status = -5 [ 236.423218][ T8393] __quota_error: 22 callbacks suppressed [ 236.423234][ T8393] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6 [ 236.441231][ T8393] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 236.450795][ T8393] (syz.2.829,8393,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 236.461070][ T8393] (syz.2.829,8393,0):ocfs2_mknod:314 ERROR: status = -5 [ 236.469454][ T8393] (syz.2.829,8393,0):ocfs2_mknod:502 ERROR: status = -5 [ 236.483470][ T8393] (syz.2.829,8393,1):ocfs2_create:676 ERROR: status = -5 [ 236.485111][ T8402] netlink: 'syz.3.832': attribute type 12 has an invalid length. [ 236.502870][ T8402] netlink: 'syz.3.832': attribute type 29 has an invalid length. [ 236.510805][ T8402] netlink: 'syz.3.832': attribute type 2 has an invalid length. [ 236.519189][ T8402] netlink: 'syz.3.832': attribute type 2 has an invalid length. [ 236.527729][ T8402] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 236.531002][ T5785] ocfs2: Unmounting device (7,2) on (node local) [ 236.535599][ T8402] netlink: 'syz.3.832': attribute type 37 has an invalid length. [ 236.535676][ T8402] netlink: 'syz.3.832': attribute type 2 has an invalid length. [ 236.538094][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.744206][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.242534][ T8404] loop3: detected capacity change from 0 to 32768 [ 237.321046][ T8404] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 237.661491][ T5787] [ 237.663867][ T5787] ====================================================== [ 237.670990][ T5787] WARNING: possible circular locking dependency detected [ 237.678026][ T5787] 6.6.95-syzkaller #0 Not tainted [ 237.683061][ T5787] ------------------------------------------------------ [ 237.690083][ T5787] syz-executor/5787 is trying to acquire lock: [ 237.696241][ T5787] ffff88805b955f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x10b0 [ 237.709416][ T5787] [ 237.709416][ T5787] but task is already holding lock: [ 237.716786][ T5787] ffff88805b983498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 237.729521][ T5787] [ 237.729521][ T5787] which lock already depends on the new lock. [ 237.729521][ T5787] [ 237.739931][ T5787] [ 237.739931][ T5787] the existing dependency chain (in reverse order) is: [ 237.749199][ T5787] [ 237.749199][ T5787] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 237.759740][ T5787] down_write+0x97/0x1f0 [ 237.764515][ T5787] __ocfs2_move_extents_range+0x1a65/0x3360 [ 237.770977][ T5787] ocfs2_move_extents+0x379/0x940 [ 237.776524][ T5787] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 237.782582][ T5787] ocfs2_ioctl+0x195/0x750 [ 237.787507][ T5787] __se_sys_ioctl+0xfd/0x170 [ 237.792610][ T5787] do_syscall_64+0x55/0xb0 [ 237.797553][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.803956][ T5787] [ 237.803956][ T5787] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 237.814456][ T5787] __lock_acquire+0x2ddb/0x7c80 [ 237.819815][ T5787] lock_acquire+0x197/0x410 [ 237.824825][ T5787] down_write+0x97/0x1f0 [ 237.829635][ T5787] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 237.835953][ T5787] ocfs2_flush_truncate_log+0x4f/0x60 [ 237.841833][ T5787] ocfs2_sync_fs+0x117/0x310 [ 237.846932][ T5787] sync_filesystem+0x1c2/0x220 [ 237.852482][ T5787] generic_shutdown_super+0x6f/0x2b0 [ 237.858556][ T5787] kill_block_super+0x44/0x90 [ 237.864115][ T5787] deactivate_locked_super+0x97/0x100 [ 237.870344][ T5787] cleanup_mnt+0x429/0x4c0 [ 237.875364][ T5787] task_work_run+0x1ce/0x250 [ 237.880462][ T5787] exit_to_user_mode_loop+0xe6/0x110 [ 237.886311][ T5787] exit_to_user_mode_prepare+0xb1/0x140 [ 237.892520][ T5787] syscall_exit_to_user_mode+0x1a/0x50 [ 237.898525][ T5787] do_syscall_64+0x61/0xb0 [ 237.903471][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.909872][ T5787] [ 237.909872][ T5787] other info that might help us debug this: [ 237.909872][ T5787] [ 237.920096][ T5787] Possible unsafe locking scenario: [ 237.920096][ T5787] [ 237.927529][ T5787] CPU0 CPU1 [ 237.932877][ T5787] ---- ---- [ 237.938241][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 237.945622][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 237.955415][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 237.965208][ T5787] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 237.972573][ T5787] [ 237.972573][ T5787] *** DEADLOCK *** [ 237.972573][ T5787] [ 237.980698][ T5787] 2 locks held by syz-executor/5787: [ 237.985964][ T5787] #0: ffff888078e9a0e0 (&type->s_umount_key#84){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 237.996138][ T5787] #1: ffff88805b983498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 238.009272][ T5787] [ 238.009272][ T5787] stack backtrace: [ 238.015160][ T5787] CPU: 1 PID: 5787 Comm: syz-executor Not tainted 6.6.95-syzkaller #0 [ 238.023297][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.033345][ T5787] Call Trace: [ 238.036612][ T5787] [ 238.039540][ T5787] dump_stack_lvl+0x16c/0x230 [ 238.044210][ T5787] ? load_image+0x3b0/0x3b0 [ 238.048699][ T5787] ? show_regs_print_info+0x20/0x20 [ 238.053889][ T5787] ? print_circular_bug+0x12b/0x1a0 [ 238.059084][ T5787] check_noncircular+0x2bd/0x3c0 [ 238.064011][ T5787] ? print_deadlock_bug+0x5d0/0x5d0 [ 238.069202][ T5787] ? lockdep_lock+0xe0/0x220 [ 238.073783][ T5787] ? _find_first_zero_bit+0xd3/0x100 [ 238.079057][ T5787] __lock_acquire+0x2ddb/0x7c80 [ 238.083906][ T5787] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 238.089875][ T5787] ? __lock_acquire+0x7c80/0x7c80 [ 238.094886][ T5787] ? verify_lock_unused+0x140/0x140 [ 238.100081][ T5787] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 238.105710][ T5787] ? do_raw_spin_lock+0x121/0x2c0 [ 238.110740][ T5787] ? mutex_unlock+0x10/0x10 [ 238.115242][ T5787] lock_acquire+0x197/0x410 [ 238.119739][ T5787] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 238.125713][ T5787] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 238.131684][ T5787] ? __might_sleep+0xe0/0xe0 [ 238.136367][ T5787] ? read_lock_is_recursive+0x20/0x20 [ 238.141735][ T5787] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 238.147878][ T5787] ? __wake_up+0x11f/0x190 [ 238.152299][ T5787] down_write+0x97/0x1f0 [ 238.156529][ T5787] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 238.162499][ T5787] ? down_read_killable+0x340/0x340 [ 238.167686][ T5787] ? _raw_write_unlock+0x28/0x40 [ 238.172611][ T5787] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 238.178496][ T5787] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 238.184310][ T5787] ? ocfs2_truncate_log_needs_flush+0x2e0/0x2e0 [ 238.190541][ T5787] ? read_lock_is_recursive+0x20/0x20 [ 238.195902][ T5787] ? down_write+0x162/0x1f0 [ 238.200394][ T5787] ? down_read_killable+0x340/0x340 [ 238.205754][ T5787] ? __rwlock_init+0x150/0x150 [ 238.210512][ T5787] ocfs2_flush_truncate_log+0x4f/0x60 [ 238.215877][ T5787] ocfs2_sync_fs+0x117/0x310 [ 238.220548][ T5787] ? ocfs2_put_super+0x1c0/0x1c0 [ 238.225474][ T5787] ? writeback_inodes_sb_nr+0x30/0x30 [ 238.230838][ T5787] ? get_nr_dirty_inodes+0x1d4/0x220 [ 238.236110][ T5787] sync_filesystem+0x1c2/0x220 [ 238.240857][ T5787] generic_shutdown_super+0x6f/0x2b0 [ 238.246130][ T5787] kill_block_super+0x44/0x90 [ 238.250801][ T5787] deactivate_locked_super+0x97/0x100 [ 238.256159][ T5787] cleanup_mnt+0x429/0x4c0 [ 238.260563][ T5787] task_work_run+0x1ce/0x250 [ 238.265142][ T5787] ? task_work_cancel+0x240/0x240 [ 238.270162][ T5787] ? exit_to_user_mode_loop+0x3b/0x110 [ 238.275616][ T5787] exit_to_user_mode_loop+0xe6/0x110 [ 238.280889][ T5787] exit_to_user_mode_prepare+0xb1/0x140 [ 238.286419][ T5787] syscall_exit_to_user_mode+0x1a/0x50 [ 238.291864][ T5787] do_syscall_64+0x61/0xb0 [ 238.296280][ T5787] ? clear_bhb_loop+0x40/0x90 [ 238.300959][ T5787] ? clear_bhb_loop+0x40/0x90 [ 238.305629][ T5787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.311603][ T5787] RIP: 0033:0x7fe7e158fc57 [ 238.316018][ T5787] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 238.335625][ T5787] RSP: 002b:00007fffd64f4838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 238.344030][ T5787] RAX: 0000000000000000 RBX: 00007fe7e1610925 RCX: 00007fe7e158fc57 [ 238.351986][ T5787] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd64f48f0 [ 238.359950][ T5787] RBP: 00007fffd64f48f0 R08: 0000000000000000 R09: 0000000000000000 [ 238.367914][ T5787] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd64f5980 [ 238.375872][ T5787] R13: 00007fe7e1610925 R14: 0000000000039fd0 R15: 00007fffd64f59c0 [ 238.383838][ T5787] [ 238.408720][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 238.536505][ T8430] loop0: detected capacity change from 0 to 32768 [ 238.543683][ T8430] XFS: noikeep mount option is deprecated. [ 238.566138][ T8430] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.588822][ T8430] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 238.610132][ T8430] XFS (loop0): Starting recovery (logdev: internal) [ 238.623650][ T8430] XFS (loop0): Ending recovery (logdev: internal) [ 238.640727][ T8430] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x516/0x640, xfs_bnobt block 0x8 [ 238.652371][ T8430] XFS (loop0): Unmount and run xfs_repair [ 238.665382][ T5795] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb