last executing test programs: 3.237613807s ago: executing program 1 (id=7668): r0 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r0, 0x6a86, 0xffeff7f7, 0x21, &(0x7f0000000040)={[0x100]}, 0x8) 2.990420153s ago: executing program 1 (id=7673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x81, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 2.776630271s ago: executing program 0 (id=7676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.695685462s ago: executing program 1 (id=7678): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x3}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0xb}) 2.559187768s ago: executing program 1 (id=7679): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={[{@userxattr}, {@redirect_dir_nofollow}]}) 2.558465453s ago: executing program 5 (id=7680): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) 2.399815553s ago: executing program 0 (id=7682): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.33586612s ago: executing program 5 (id=7683): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000000)=0x3a) 2.213671303s ago: executing program 1 (id=7684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 2.142755842s ago: executing program 0 (id=7686): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x70bd2d, 0x0, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x70}}, 0x0) 2.127718601s ago: executing program 5 (id=7687): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000d1a202000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130023"], 0x78}, 0x1, 0x7}, 0x0) 2.01019335s ago: executing program 2 (id=7688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/34, 0x22}, {0x0}], 0x2) 1.985236312s ago: executing program 4 (id=7689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 1.908333964s ago: executing program 1 (id=7690): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000340)={[{@pquota}, {@discard}, {@swalloc}, {@sysvgroups}, {@logbufs={'logbufs', 0x3d, 0x5}}, {@noalign}, {@inode64}, {@inode64}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$eJzs3QW8rGWheP994ACHDkGwACkxSQkD6VBESVFCkJYUEAGlQwkVFAEFFFCQ7u4u6e7u7o7/58AB8bjgcn9/74XLWuvj2bNn5t2zn3m+87zu2e9mZsl5F51zYGCcgTd68/SfnbPr7csuNuaC6x678+Dr9tphoYeGXTzyGyfjzj7sdI5hp3MODAwMGnY7g964bPBsxxw7wsDggaH/+2djjDraCGMMDIw27Oyw2xmY+Y2T0fd/c7vXhosHOunQb7f9G/9eb8yhNzL0k6WXe2WtgYGBIW/7+qHjmvbf7qi0JeeYb95/Wr3lNsKwqwf987rXTwe/8W/0fQcGRt974J0fH0O3HeltX/u/2dDvOc7kA4vf/j587/9zLTnHfAsM5z90LY447LKZh67x4degseEf5zssuvoDw6Zw0LCJG/y29fJ+PO7/n1pyjnkXHHjndTyw0Dyb3P/a6/vNwXMPDAyeZ2Bg8LwDA4Pne7896j/T+/rgq6qqqvelOeacYehz9hGG+3lgyJs/19LPhRe8PN3dAwODF3rjeeLg5d58LlhVVVVVVVVVH8zmmHOGueD5/zjv9vx/0pO3Hrfn/1VVVVVVVVX/d1pgjjlnGPpcf7jn/xO92/P/xx88dL83/vZ/9pnf+KpX3987UVVVVVVVVVXv2rwL4PP/Sd/t+f9Fx0x6ac//q6qqqqqqqv7vtMhrr7222dteZ2/YxVO/eT09/z/1vluXed8GXFVVVVVVVVX/7V595KTT/vma7xMPDPd676837PcCg4444/LL37eBfjAa9O+/D9n8/R7T/9+GOg85aNKBgbUWf7+HUu9D/2deq77+R8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9w/H/t17//9SjVnjzveA/M+UM15/0z698/b3/By+0wCNbvE9Dfz/6sB7/H1ht0MDAMN9xVhsYGFhojkUWm3pgYOCk62eYcoqBt66bZeh1Xx1vxNffIP7N/0xknnH5hjef7I3ToQ+UgfHfuo0jXr/9BV7bZ8RBww3ibY173H77rbrkczMOfzrVO9+PEd76bMxjH3zzv2UZYbiNhrzDF795+2/el+Gdh4196qFjn2b9NdeZZr2NNv7iamsuv8pKq6y01qzTzzTdjLPOOtNM06y82horTfvGx3eas0lf/zjXe5mzMYafs0fmePucDX/f3mnOJn33OXv9Fne5cMg33pyzwf/NOZvr3eds0tWGfaNxZx9pYLnX52bQwMC4c480sOHQM9ONMjAw7jzDtp1o6LZfG2+EgYGd/nlHh342yluPwUGbD91myXkXnfON3dTAwD9P/9k7vJ/9yMNGPvuw0zmGnc75xrcZZ+CfD8XBsx1z7AhD5+JfpmOMUUcbYYyBgdGGnR12OwOzvnEy2slvbvcO77M+3EBff5mV7d/493pjDgwMjD70k4mXP3WboVP/v/A+7f9P////b16zDHrr8Tho2L9h27zhNcd8C/zze70+DUPnbsRhl8081OQ//Nb2/9K/jXfSIQOTvst43+V1cV6PHl9rnDTBlv+p18Wh8U70LuN9l9fxfcfxLnH37g+8cVP/sfEOt69b8PWPs7+Xfd3Au+/rRqQbWOmSTw2/r/vWOw/xX3aXb87RKMNt9E77uon2nGTzobc/+7vv6xYcOvaR/mVfN8LAwLhzvbmvG7rjm3ekgZ2Gnpl+6Jn5Rho4YOiZGV4/M+rAGUPPfGmFtddYcegF8//742DqQf/yB5qwzuYdbp0Nett9HzTc33cOfuN09H3ffA+nd9hvDhp2t/7LfQU9bsd5l/G+y/tP4TwPvWzFI4dM8J96/yka75B3H+87vV/2O453x2dPvf0/PN631tlIb5uu+d/LOpv0X9fZ0Ls44ttWxnv9OWxF2P6Nzyd669Y22PTBt36mGGm42/2vfqaY/93X2TirDfd12+09MOjd5ma+9zI3n/y3fdAWb5+b9/rz1tSTv3H9iO8yN6PMuuxUb87NyP/NuZnvvzs3sw+M+K9zM3hgnoGBgSmG7R/mfS9zM9G7z817fdyMBtu/8flKb1009w4Hnffm3Aw/F//V3Mz7352bSd963Ezx+nWTjTAw8sgDGy6//vrrTvfGxzfPTv/Gx3dfg3O/l7kc5z8zlx8f/E5z+c+H6hh3X7rvf7EG/22f/ubtz/3fncuBt+ZyYLXhF0t9UOv3f+7yd5e/u/zd5e8uf3f5i3uH4/9vvf7/buN8dedhv9wY6dJJJtz2/R7v+9yH+vj/MN9/Of6/7YSTXDrCwFvXvevx2Te2+UAen535jZPR939zu+GPD/JA3/n47N6zzrz1/9Lx2f+n3lyr7+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4fj/tG/+HcB90y385LADoSM9tNVSC7/f432f+1Af/x/m+y/H/xdeaquHRhh467p3Pf7/xjaO4/93vjTvjh/k4/9vrtWO/9d/Uf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+4djv/P/ubfARx66O4bv/n3AFePu/1J7/d43+c+rMf/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uKGHf8fGO7tLb/b4wKD4///t3sH/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v8wfs/j/Kn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/r/OH7P4/yZ/zOL/2/wxi/9O+WMW/53zxyz+v8sfs/j/Pn/M4r9L/pjF/w/5Yxb/XfPHLP675Y9Z/HfPH7P4/zF/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz/nD9m8f9L/pjFf+/8MYv/PvljFv9988cs/n/NH7P4/y1/zOK/X/6YxX///DGL/9/zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/R/6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/AcN5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yd70H/I+jesDmsV/8tY/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnyx+z+H8jf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/zfzxyz+38ofs/gvmD9m8f92/pjFf6H8MYv/d/LHLP7fzR+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fyx+z+C+ZP2bx/37+mMX/B/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9h/pjFf7n8MYv/8vljFv8f5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/JH7P4r5s/ZvFfL3/M4r9+/pjF/6f5Yxb/DfLHLP4/yx+z+G+YP2bx3yh/zOK/cf6Yxf/n+WMW/1/kj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/2X+mMX/V/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f91/pjF/zf5Yxb/3+aPWfx3yh+z+O+cP2bx/13+mMX/9/ljFv9d8scs/n/IH7P475o/ZvHfLX/M4r97/pjF/4/5Yxb/P+WPWfz3yB+z+O+ZP2bx3yt/zOL/5/wxi/9f8scs/nvnj1n898kfs/jvmz9m8f9r/pjF/2/5Yxb//fLHLP77549Z/P/+r/73/q+P6wOaxf+A1j9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6YxP/18v/3JP6DLs4fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/mPTBda/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljEv/XP83/37P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/kj9m8R8/f8ziP0H+mMX/o/ljFv8J88cs/hPlj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfOH/M4j9J/pjFf9L8MYv/p/PHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/zP5Yxb/qfPHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP03+mMV/2vyxQefsOtLAwMCH3n+6/DHL+p8+f8ziP0P+mMV/xvwxi/+X88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP1v+mMX/G/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8f9W/pjFf8H8MYv/t/PHLP4L5Y9Z/L+TP2bx/27+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/17+mMV/yfwxi//388cs/j/IH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/D/PHLP7L5Y9Z/JfPH7P4/yh/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/cf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/Sf6YxX/d/DGL/3r5Yxb/9fPHLP4/zR+z+G+QP2bx/1n+mMV/w/wxi/9G+WMW/43zxyz+P88fs/j/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/EQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfwHD+SPWfwHvTf/kf/HxvUBzeI/Qusfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v+Z/DGL/9T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/nD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/9nyxyz+38gfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOL/zfwxi/+38scs/gvmj1n8v50/ZvFfKH/M4v+d/DGL/3fzxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fyxyz+S+aPWfy/nz9m8f9B/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5g/ZvFfLn/M4r98/pjF/0f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/j/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/T/LHLP7r5o9Z/NfLH7P4r58/ZvH/af6YxX+D/DGL/8/yxyz+G+aPWfw3yh+z+G+cP2bx/3n+mMX/F/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/mT9m8f9V/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f50/ZvH/Tf6Yxf+3+WMW/53yxyz+O+ePWfx/lz9m8f99/pjFf5f8MYv/H/LHLP675o9Z/HfLH7P4754/ZvH/Y/6Yxf9P+WMW/z3yxyz+e+aPWfz3yh+z+P85f8zi/5f8MYv/3vljFv998scs/vvmj1n8/5o/ZvH/W/6YxX+//DGL//75Yxb/v+ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4v+P/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH5P4jzSQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/JH/M4j9+/pjFf4L8MYv/R/PHLP4T5o9Z/CfKH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOI/cf6YxX+S/DGL/6T5Yxb/T+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/2fyxyz+U+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+33X5D36vG1r8F3b5v+cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfxHHsgfs/gPyh+z+I+QP2bxHzF/zOI/OH/M4j9S/pjFf+T8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+SP2bxHz9/zOI/Qf6Yxf+j+WMW/wnzxyz+E+WPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z84f8ziP0n+mMV/0vwxi/+n88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/M/ljFv+p88cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fzl/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxn/2/9h/lf3RcH9As/nO0/jGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/N/PHLP7fyh+z+C+YP2bx/3b+mMV/ofwxi/938scs/t/NH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/LH7P4L5k/ZvH/fv6Yxf8H+WMW/6Xyxz6k/oOGsx556fyxD6n/6719/S+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD826JxBw2bmw+2/Yv6YZf2vlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH7P4/y5/zOL/+/wxi/8u+WMW/z/kj1n8d80fs/jvlj9m8d89f8zi/8f8MYv/n/LHLP575I9Z/PfMH7P475U/ZvH/c/6Yxf8v+WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V79F/8P/UuD6gWfyvbv1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+Q+MCpdZ/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf0ziP8pA/pjFf1D+mMV/hPwxi/+I+WMW/8H5Yxb/kfLHLP4j549Z/EfJH7P4D8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+b/7CG/Ms5i/94+WMW/4/kj1n8x88fs/hPkD9m8f9o/pjFf8L8MYv/RPljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/p/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvH/TP6YxX/q/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+X84fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/9s+WMW/2/kj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMX/W/ljFv8F88cs/t/OH7P4L5Q/ZvH/Tv6Yxf+7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/826N8jwuK/bdqYxf+X+WMW/1/lj1n8t8sfs/hvnz9m8d/hDf9XXnu/xvUBzeK/Y+sfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx//N78h/pf25cH9As/n9p/WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj8m8R8ykD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+SP2bx/+q7+u/+Pz+uD2gW/6+1/jGL/9fzxyz+s+WPWfy/kT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/2/lj1n8F8wfs/h/O3/M4r9Q/pjF/zv5Yxb/7+aPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+WPWfyXzB+z+H8/f8zi/4P8MYv/UvljFv+l88cs/svkj1n8l80fs/j/MH/M4r9c/pjFf/n8MYv/j/LHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv8f549Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv+f5I9Z/NfNH7P4r5c/ZvFfP3/M4v/T/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOL/8/wxi/8v8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+P8yf8zi/6v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx/3P+mMX/L/ljFv+988cs/vvkj1n8980fs/j/NX/M4v+3/DGL/375Yxb//fPHLP5/zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/x/5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v/Au/mP9b8wrg9oFv8HW/+Yxf+h/DGL/8P5Yxb/R/LHDP6DBg8MeTR/zOA/dP0/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/JvEfdSB/zOI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9I/pjFf/z8MYv/BPljFv+P5o9Z/CfMH7P4T5Q/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvH/VP6YxX/i/DGL/yT5Yxb/SfPHLP6fzh+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/z+SPWfynzh+z+H82f8zi/7n8MYv/5/PHLP5fkPlP9x63s/h/Ueb/XrP4fyl/zOI/Tf6YxX/agYHN3q8hfZCz+E/X+scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+380fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+38sfs/gvmT9m8f9+/pjF/wf5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Yf6YxX+5/DGL//L5Yxb/H+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zh+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yR+z+K+bP2bxXy9/zOK/fv6Yxf+n+WMW/w3yxyz+P8sfs/hvmD9m8d8of8ziv3H+mMX/5/ljFv9f5I9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9l/pjF/1f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/df6Yxf83+WMW/9/mj1n8d8ofs/jvnD9m8f9d/pjF//f5Yxb/XfLHLP5/yB+z+O+aP2bx3y1/zOK/e/6Yxf+P+WMW/z/lj1n898gfs/jvmT9m8d8rf8zi/+f8MYv/X/LHLP57549Z/PfJH7P475s/ZvH/a/6Yxf9v+WMW//3yxyz+++ePWfz/nj9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljH17/PS5826WjnpI/9uH1/9f1f2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4/yN/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHJP6jDeSPWfwH5Y9Z/EfIH7P4j5g/ZvEfnD9m8R8pf8ziP3L+mMV/FJX/qO95S4v/EJX/e8/iP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/0fyxyz+4+ePWfwnyB+z+H80f8ziP2H+mMV/ovwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/hPnj1n8J8kfs/hPmj9m8f90/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Jn/M4j91/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/L+ePWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX+2/DGL/zfyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzN/zOL/rfwxi/+C+WMW/2/nj1n8F8ofs/h/J3/M4v/d/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+9/DGL/5L5Yxb/7+ePWfx/kD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/mj1n8l8sfs/gvnz9m8f9R/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J/8Nv8R3o9xfUCz+J/S+scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/z/yxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+LQv9R38M2Fv+XhP7vJYv/y/ljFv9X8scs/q/mj1n8X8sfk/iPPpA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8kf8ziP37+mMV/gvwxi/9H88cs/hPmj1n8J8ofs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4j9x/pjFf5L8MYv/pPljFv9P549Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8Z97SP6Uxf9rrX/M4v/1/DGL/2z5Yxb/b+SPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/Zv6Yxf9b+WMW/wXzxyz+384fs/gvlD9m8f9O/pjF/7v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/3v5Yxb/JfPHLP7fzx+z+P8gf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+P8wfs/gvlz9m8V8+f8zi/6P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/x/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/J/ljFv9188cs/uvlj1n8188fs/j/NH/M4r9B/pjF/2f5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zx/zOL/i/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/zB+z+P8qf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v84fs/j/Jn/M4v/b/LEPnf/bkN/uv1P+2IfO/x3W/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP/am/8CQgYEPs/8p+WOW9X9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+P8jf8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB9z+Cf/Tjn8B0Z/qEcBZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/MQbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xWN/u/hDlv8VzL6v4cs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/LEPt//tb146xq35Yx9u/7ca47b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+2IfUf8rhLh3jvvyxD6n/6719/d+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+T+I85kD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLH/sV/2GXjvM9j+v/VO/jPmj9mWf9fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/b+WPWfwXzB+z+H87f8ziv1D+mMX/O/ljFv/v5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv/v5Y9Z/JfMH7P4fz9/zOL/g/wxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+P8wf8ziv1z+mMV/+fwxi/+P8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH/uw+g8Zzv93+WMfVv+B4fx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/7hvff/H95XB/QLP73t/4xi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMR/rIH8MYv/oPwxi/8I+WMW/xHzxyz+g/PHLP4j5Y9Z/EfOH7P4j5I/ZvEfkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6Yxf8j+WMW//Hzxyz+E+SPWfw/mj9m8Z8wf8ziP1H+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv+J88cs/pPkj1n8J80fs/h/On/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P5M/ZvGfOn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/5fzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOI/W/6Yxf8bav/lRn+nayz+s6v93zmL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v5o9Z/L+VP2bxXzB/zOL/7fwxi/9C+WMW/+/kj1n8v5s/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v5c/ZvFfMn/M4v/9/DGL/w/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/nD9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/kj9m8V83f8ziv17+mMV//fwxi/9P88cs/hvkj1n8f5Y/ZvHfMH/M4r9R/pjFf+P8MYv/z/MfGBgY9d8usfj/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/sQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP7Y/8fO3Yd7Xdd3HP9xT5azT7sudWnDoTHXZiQyGrUQFcXjzSkTzbxHPQLJjdxIgCmw0Uodmy51s2ATC8ecrVricHPdrWhY1myN2FrlFNfCGHOwyJyx68A5BGdvz7XzZd+vm+/H4w/O+f2O71/K83r5+3lxXWXpf5j+oSz9D9c/lKX/z+gfytL/1fqHsvQ/Qv9Qlv5H6h/K0v81+oey9P9Z/UNZ+g/TP5Sl/1H6h7L0/zn9Q1n6D9c/lKX/0fqHsvQ/Rv9Qlv6v1T+Upf8I/UNZ+v+8/qEs/Y/VP5Sl/y/oH8rS/3X6h7L0/0X9Q1n6/5L+oSz9j9M/lKX/6/UPZek/Uv9Qlv5v0D+Upf/x+oey9B+lfyhL/xP0D2XpP1r/UJb+v6x/KEv/MfqHsvR/o/6hLP1/Rf9Qlv5j9Q9l6f8m/UNZ+r9Z/1CW/r+qfyhL/7foH8rSf5z+oSz9T9Q/lKX/eP1DWfqfpH8oS/+T9Q9l6X+K/qEs/SfoH8rS/1T9Q1n6n6Z/KEv/ifqHsvQ/Xf9Qlv5t+oey9D9D/1CW/mfqH8rS/yz9Q1n6n61/KEv/dv1DWfq/Vf9Qlv5v0z+Upf85+oey9H+7/qEs/c/VP5Sl/yT9Q1n6n6d/KEv/8/UPZen/Dv1DWfpfoH8oS/936h/K0v9C/UNZ+l+kfyhL/4v1D2Xpf4n+oSz9L9U/lKX/ZfqHsvS/XP9Qlv6T9Q9l6X+F/qEs/a/UP5Sl/1X6h7L079A/lKX/1fqHsvSfon8oS/+p+oey9J+mfyhL/3fpH8rS/xr9Q1n6T9c/lKX/DP1DWfrP1D+Upf8s/UNZ+l+rfyhL/9n6h7L0n6N/KEv/ufqHsvSfp38oS//r9A9l6T9f/1CW/u/WP5Sl/wL9Q1n6L9Q/lKX/Iv1DWfpfr38oS//36B/K0v8G/UNZ+t+ofyhL/8X6h7L0X6J/KEv/pfqHsvT/Nf1DWfr/uv6hLP2X6R/K0v+9+oey9P8N/UNZ+r9P/1CW/u/XP5Sl/036h7L0v1n/UJb+t+gfytL/N/UPZem/XP9Qlv6/pX8oS//f1j+Upf+t+oey9L9N/1CW/r+jfyhL/w/oH8rS/3b9Q1n636F/KEv/O/UPZen/u/qHsvT/Pf1DWfrfpX8oS/8P6h/K0v9D+oey9F+hfyhL/5X6h7L0/339Q1n6/4H+oSz979Y/lKX/Kv1DWfrfo38oS/8P6x/K0v8j+oey9F+tfyhL/3v1D2Xp/4f6h7L0X6N/KEv/P9I/lKX/ffqHsvT/Y/1DWfrfr38oS/+P6h/K0v9P9A9l6f8x/UNZ+n9c/1CW/p/QP5Sl/5/qH8rS/5P6h7L0f0D/UJb+a/UPZen/oP6hLP3/TP9Qlv7r9A9l6f+Q/qEs/f9c/1CW/n+hfyhL/4f1D2Xp/5f6h7L0/5T+oSz9P61/KEv/z+gfytL/s/qHsvT/nP6hLP3/Sv9Qlv6f1z+Upf8X9A9l6b9e/1CW/l/UP5Sl/1/rH8rSf4P+oSz9H9E/lKX/l/QPZen/Zf1DWfo/qn8oS/+v6B/K0v+r+oey9P8b/UNZ+j+mfyhL/6/pH8rS/2/1D2Xp/3X9Q1n6/53+oSz9N+ofytL/G/qHsvTfpH8oS/+/1z+Upf8/6B/K0v+b+oey9P9H/UNZ+n9L/1CW/t/WP5Sl/3f0D2Xp/7j+oSz9/0n/UJb+T+gfytL/Sf1DWfpv1j+Upf9T+oey9P9n/UNZ+n9X/1CW/v+ifyhL/+/pH8rSf4v+oSz9n9Y/lKX/9/UPZem/Vf9Qlv7/qn8oS/9t+oey9P83/UNZ+j+jfyhL/3/XP5Sl/3b9Q1n679A/lKX/f+gfytL/B/qHsvTfqX8oS/8f6h/K0v9Z/UNZ+v9I/1CW/s/pH8rS/z/1D2Xp/7z+oSz9f6x/KEv/XfqHkvR/ZUv/UJb+/fQPZenfX/9Qlv4D9A9l6T9Q/1CW/oP0D2XpP1j/UJb+Q/QPZek/VP9Qlv4v0z+Upf9B+oey9H+5/qEs/V+hfyhL/4P1D2Xp/1P6h7L0P0T/0EuuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP81cxcuumby9Okdc3zjG9/4Zu83L/a/mQAAgP9tP/nQ/2L/nQAAAAAAAAAAAAAAAAAAAEBeTfzfib3Y/4wAAAAAAAAAAAAAAPD/XVv7SVsH9NvvqQH7PnjNox27v47eecHU1asfLN1fu358ZvCS/fd9sGvXrl0rnxk3oevhkFar1fm/9squx0N7Hne+/pJhKw7f86iM//ydj1866eCz5qy9beA3Vt7S/vSg3c8Oal1+9bTpHW/o32qVUwa1FnQ+OL5fq1VOG9S6tfPBqM4HEwe11nQ+OGH3g5e1PtP54PVXzpp+VecTp1f+PYOXirb2Ja0B+y22td+/Dfbd/5JhT0zt/trLS3a/2sBW1/6Hr/3SYT1+1u0F9t/9+uWknvvv8z8g8IL6tv9nN3V/7eUl/9v7/4c37FwU/eyF99/9+uVk+4f6BJ//99toz8/9PT7/HxW85N77E4duuL1z/23n3Xdk11MD/yef/3/y+uWUnvvvv9/n/87P8RO6P/8PabXKqQf42wGptLUv3drb+3/v+x/46h43/fbd/z1f2fyKzv3f+1xrWddTg/q4/wm9vf/f1OPvFeibtvZVu3q8//dh/60RwUvu3f+WtQfv/vy/+f4rD93nZ33Z/6k99z9y3oxrR85duOi4aTMmT+mY0jFz7Kgxx48eO3bMmJG7PxHs+fUAf1MgiQN7/28d1OOmX6vVsfd+/X23TOjc/7aHln2k66mhfdz/ab2+/x/l/R9Cw/u3Bg9uLZg8b96c4/f82v1w1J5f9/xlwf778N//Rx/b9Zd1/5lhv1br8L33Iy4dO6Rz/9fPLuu6nhrcx/1P7HX/4/f/s0qgbw7w/f+qHjf77f/ELTfO79z/MT941eaup/r63/+n97r/u73/w4Foa2/V+ibauf8Thiw9o9p1afPnf1CfJvY/bPutO6pdlzPsH+rTxP4nLX/zFdWuy5n2D/VpYv8PzrhsebXrcpb9Q32a2P/zP73jiGrX5Wz7h/o0sf/HvvvU6mrXpd3+oT5N7P+Dd7WfUO26vNX+oT5N7P+46344rtp1eZv9Q32a2P/VLz93TbXrco79Q32a2P8Zu04+tNp1ebv9Q32a2H+/pd9bUu26nGv/UJ8m9v/k5OWzql2XSfYP9Wli/2uGjXi22nU5z/6hPk3sf9nTb5xY7bqcb/9Qnyb2/9U7VjxW7bq8w/6hPk3s/xMXv2pFtetygf1DfZrY/4+GP3RQtevyTvuH+jSx/40b1zxQ7bpcaP9Qnyb2v3LNgOHVrstF9g/1aWL/i0+f8mi163Kx/UN9mtj/6DFfvqjadbnE/qE+Tez/8M9966lq1+VS+4f6NLH/cx+eP7fadbnM/qE+Tex//hEf/3G163K5/UN9mtj/WzqOmFrtuky2f6hPE/svtx20sdp1ucL+oT5N7P/CbavGV7suV9o/1KeJ/a875Asfq3ZdrrJ/qE8T+98+e+bYatelw/6hPk3s/zvvXfy+atflavuH+jSx/9uf+3qpdl2m2D/Up4n9bxl14cXVrstU+4f6NLH/VWc980i16zLN/qE+Tex/+brH51W7Lu+yf6hPE/tfv/7MJ6pdl2vsH+rTxP6PGTHy4GrXZbr9Q32a2P+sC5Z9qNp1mWH/UJ8m9n/K/Xe8ttp1mWn/UJ8m9j/0a+M+We26zLJ/qE8T+//0uPd/qtp1udb+oT5N7H/H+KOPrXZdZts/1KeJ/W96YNSd1a7LHPuH+jSx/w88clfF6zLX/qE+Tex/9uue31btusyzf6hPE/t/06TzF1a7LtfZP9Snif0fevfEL1a7LvPtH+rTxP4v+fb3z6l2Xd5t/1CfJvZ/9GFXHFntuiywf6hPE/ufOm3DzdWuy0L7h/o0sf8JKzeNrnZdFtk/1KeJ/R/y5Nx7ql2X6+0f6tPE/rcOOOzsatflPfYP9Wli//fe8PA3q12XG+wf6tPE/m++6aMd1a7LjfYP9Wli/5/dOXh7teuy2P4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2IHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WQfRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAD//3II6Vg=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x9, 0x8, 0x4, 0x47, 0x3, 0x2007, 0x9, 0x6, 0x35}) 1.907826432s ago: executing program 0 (id=7691): r0 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x2, 0x181840) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="c018b35738ff", 0x6}], 0x1, 0x6) 1.837252467s ago: executing program 5 (id=7692): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) 1.783618101s ago: executing program 2 (id=7693): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) 1.71377516s ago: executing program 4 (id=7694): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 1.67315738s ago: executing program 0 (id=7695): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.610991409s ago: executing program 5 (id=7696): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.489150373s ago: executing program 4 (id=7698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) request_key(0x0, 0x0, 0x0, 0x0) 1.409473106s ago: executing program 2 (id=7699): bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{}, 0x0, &(0x7f00000017c0)='%-010d \x00'}, 0x20) process_vm_readv(0x0, &(0x7f0000000240), 0x1000000000000271, 0x0, 0x0, 0x0) 1.409075259s ago: executing program 0 (id=7700): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x7, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) 1.290983416s ago: executing program 3 (id=7701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x494}}, 0x0) 1.224485611s ago: executing program 5 (id=7702): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.208603686s ago: executing program 2 (id=7703): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000001240)=""/4092, &(0x7f0000000240)=0xffc) 1.139311641s ago: executing program 4 (id=7704): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, &(0x7f0000000680), 0xfe, 0x25f, &(0x7f00000007c0)="$eJzs3T+IHFUcB/DvzO4YL1kkaiOIf0BE9OCInWATG4WAhCAiqBARsVESISbY5cTCxkJrlVSCBLEzWkqaYKMINkZNcTaCHhYeFoqs7M6dnHfrrXd7u3O5+XxgbmZu5s3vDfu+b7eZ3QCtdTjJ0SSdJPNJqiTF+hPurpfDq7sX5q6cTPr9J34thufV+7W1doeSLCZ5KMnlsshL3eTcpWeWfr/62H1vna3u/eDS03MzvclVy0vXHl95//ibnxx78NxX3/x8vMjR9P51X7uvGPG/bpHcMo1ie0TRbboH/B8nXvv4u0Hub01yzzD/VcrUL97bZ264XOWB9/6r7Tu/fH37LPsK7L5+vxq8By72d6LaUStgjyiT9FKUC0nq7bJcWKg/w3/fOVi+fPrMq/Mvnj576oWmZypgt/TybR797MCnhzbk/6dOnX9g/+ol1548cfGHwfZKp+neADNxR70a5H/+ufP3Z5v5/3Ba/QJmZqf5B65/8g/tJf/QXvIP7SX/0F7yD/tYtfVh+Yf2kn9oL/mH9lqffwCgXfoHmn4CGWhK0/MPAAAAAAAAAAAAAAAAAACw2YW5KyfXllnV/OLdZPmRJN1R9TvD3yNObhz+PfhbMTjtH0XdbCLP3jXhBSb00bSfvv7rjS0P3/TjlOuP8eWdzdY/fypZfD3JkW538/grBuNvoiF285jj1fOTXH37ig37Dz812/ob/Xmx2frHriafD+afI6PmnzK3Ddej55/e+K9YHuuVPya8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPzdwAAAP//z0NueQ==") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1.054062116s ago: executing program 3 (id=7705): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x18, &(0x7f0000000000)="03020000008002ff", 0x8) 836.887021ms ago: executing program 2 (id=7706): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x4e22, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0xe, 0xba, 0x9}}], 0x20, 0x2}], 0x1, 0x0) 763.702824ms ago: executing program 3 (id=7707): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffff1a, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdbe, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0xc0c4) 555.05478ms ago: executing program 2 (id=7708): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="050000000000000052f0ab6cd045", 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 536.80688ms ago: executing program 4 (id=7709): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) 473.679412ms ago: executing program 3 (id=7710): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) 333.589133ms ago: executing program 3 (id=7711): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14) 17.810026ms ago: executing program 4 (id=7712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, 0x0) 0s ago: executing program 3 (id=7713): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x2008802, &(0x7f0000000200)={[{@dmask={'dmask', 0x3d, 0x1}}, {@namecase}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@errors_continue}, {@discard}, {@errors_continue}, {@utf8}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x4}) kernel console output (not intermixed with test programs): oop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 660.964134][T20211] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 661.021807][T20211] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 661.089561][ T6157] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 661.100408][T20211] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 661.127514][ T30] audit: type=1800 audit(1762121926.870:71): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6207" name="file2" dev="loop1" ino=1048731 res=0 errno=0 [ 661.251593][T20219] loop4: detected capacity change from 0 to 2048 [ 661.303586][ T30] audit: type=1326 audit(1762121926.970:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 661.366357][ T30] audit: type=1326 audit(1762121926.970:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 661.431857][T20219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 661.479623][ T30] audit: type=1326 audit(1762121926.970:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 661.554735][T20226] loop5: detected capacity change from 0 to 1024 [ 661.572724][ T30] audit: type=1326 audit(1762121926.970:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 661.688196][ T30] audit: type=1326 audit(1762121926.970:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 661.762206][ T30] audit: type=1326 audit(1762121926.970:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 661.849788][ T30] audit: type=1326 audit(1762121926.970:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 661.892828][ T6132] hfsplus: b-tree write err: -5, ino 4 [ 661.896905][T20228] loop3: detected capacity change from 0 to 4096 [ 661.961421][T20228] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 661.985231][ T30] audit: type=1326 audit(1762121926.970:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.095481][T20228] ntfs3(loop3): ino=19, mi_enum_attr [ 662.101474][ T30] audit: type=1326 audit(1762121926.970:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.131156][T20228] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 662.200137][ T30] audit: type=1326 audit(1762121926.970:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.296362][ T30] audit: type=1326 audit(1762121926.970:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.352442][ T30] audit: type=1326 audit(1762121926.970:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.469473][ T30] audit: type=1326 audit(1762121926.970:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.562854][ T30] audit: type=1326 audit(1762121926.970:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.624188][ T30] audit: type=1326 audit(1762121926.970:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.708902][ T30] audit: type=1326 audit(1762121926.970:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.797748][ T30] audit: type=1326 audit(1762121926.970:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20220 comm="syz.0.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x50000 [ 662.808620][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6230'. [ 662.842846][T20258] loop5: detected capacity change from 0 to 64 [ 663.057003][T20232] loop2: detected capacity change from 0 to 32768 [ 663.132025][T20232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6213 (20232) [ 663.202247][T20262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.241320][T20232] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 663.291423][T20232] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 663.592716][T20232] BTRFS info (device loop2): enabling ssd optimizations [ 663.643322][T20232] BTRFS info (device loop2): turning on async discard [ 663.657859][T20232] BTRFS info (device loop2): enabling free space tree [ 663.874654][ T6157] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 663.982211][T20303] tmpfs: Bad value for 'nr_blocks' [ 664.034566][ T6075] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 664.203604][ T6075] usb 5-1: Using ep0 maxpacket: 8 [ 664.210617][ T6075] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 664.226830][ T6075] usb 5-1: config 179 has no interface number 0 [ 664.273663][ T6075] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 664.315502][ T6075] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 664.360789][ T6075] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 664.453706][ T6075] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 664.503934][ T6075] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 664.550659][ T6075] usb 5-1: config 179 interface 65 has no altsetting 0 [ 664.576524][ T6075] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 664.613998][ T6075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.685593][ T6075] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input56 [ 664.937662][ T6075] usb 5-1: USB disconnect, device number 121 [ 665.323753][T20334] loop3: detected capacity change from 0 to 2048 [ 665.367084][T20305] loop5: detected capacity change from 0 to 32768 [ 665.419279][T20305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6248 (20305) [ 665.422051][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6263'. [ 665.441459][T20339] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 665.493210][T20334] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 665.558986][T20334] Remounting filesystem read-only [ 665.559148][T20305] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 665.637262][T20305] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 665.946945][T20320] loop2: detected capacity change from 0 to 32768 [ 665.961630][T20305] BTRFS info (device loop5): enabling ssd optimizations [ 666.001253][T20305] BTRFS info (device loop5): turning on async discard [ 666.032444][T20320] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 666.045276][T20305] BTRFS info (device loop5): enabling free space tree [ 666.225147][ T6311] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 666.240196][T20377] loop4: detected capacity change from 0 to 64 [ 666.273886][T20320] XFS (loop2): Ending clean mount [ 666.374046][T20320] XFS (loop2): syz.2.6253 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 666.412053][ T6311] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 666.439216][ T6311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.473221][ T6311] usb 2-1: Product: syz [ 666.509545][ T6311] usb 2-1: Manufacturer: syz [ 666.550564][ T6311] usb 2-1: SerialNumber: syz [ 666.559516][ T6311] usb 2-1: config 0 descriptor?? [ 666.566998][ T6166] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 666.590657][ T6157] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 666.693907][T20383] loop4: detected capacity change from 0 to 1764 [ 666.747522][T20383] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 666.815216][ T6311] peak_usb 2-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 666.954720][T20372] loop3: detected capacity change from 0 to 32768 [ 667.017384][ T6311] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 667.036239][T20372] (syz.3.6267,20372,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 667.049201][ T6311] peak_usb 2-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71) [ 667.085784][T20372] (syz.3.6267,20372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 667.151392][T20372] (syz.3.6267,20372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x44d2ffae. Applying ECC. [ 667.202085][T20372] (syz.3.6267,20372,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x6e07a1db [ 667.241721][T20372] (syz.3.6267,20372,0):ocfs2_validate_inode_block:1458 ERROR: Checksum failed for dinode 25 [ 667.256264][ T6311] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 667.287619][ T6311] usb 2-1: USB disconnect, device number 103 [ 667.300457][T20372] (syz.3.6267,20372,0):ocfs2_read_locked_inode:597 ERROR: status = -5 [ 667.349631][T20372] (syz.3.6267,20372,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 667.382225][T20372] (syz.3.6267,20372,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 667.402066][T20372] (syz.3.6267,20372,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 6, possibly corrupt fs? [ 667.402103][T20372] (syz.3.6267,20372,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 667.427167][T20372] (syz.3.6267,20372,0):ocfs2_initialize_super:2198 ERROR: status = -22 [ 667.438257][T20372] (syz.3.6267,20372,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 667.992343][T20410] random: crng reseeded on system resumption [ 668.046575][T20405] wg1 speed is unknown, defaulting to 1000 [ 668.363864][T20424] netlink: 'syz.3.6293': attribute type 1 has an invalid length. [ 668.406278][T20424] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6293'. [ 668.446213][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6293'. [ 668.785021][T20442] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6299'. [ 669.143929][T20457] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6307'. [ 669.262806][T20460] xt_l2tp: v2 doesn't support IP mode [ 669.517544][T20468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.884829][T20451] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 670.069296][T20454] loop2: detected capacity change from 0 to 32768 [ 670.072207][T20483] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 670.115549][T20454] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6306 (20454) [ 670.170880][T20486] netlink: 'syz.4.6321': attribute type 21 has an invalid length. [ 670.193940][T20454] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 670.217103][T20486] netlink: 'syz.4.6321': attribute type 1 has an invalid length. [ 670.224861][T20486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6321'. [ 670.254234][T20454] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 670.287125][T20454] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 670.337291][T20461] loop1: detected capacity change from 0 to 32768 [ 670.378716][T20461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6308 (20461) [ 670.434364][T20461] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.516966][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6323'. [ 670.533022][T20461] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 670.570101][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6323'. [ 670.657425][T20498] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 670.700759][T20514] xt_hashlimit: size too large, truncated to 1048576 [ 670.717624][T20454] BTRFS info (device loop2): rebuilding free space tree [ 670.842596][T20454] BTRFS info (device loop2): disabling free space tree [ 670.873480][T20454] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 670.884192][T20461] BTRFS info (device loop1): enabling ssd optimizations [ 670.927487][T20461] BTRFS info (device loop1): turning on async discard [ 670.934297][T20461] BTRFS info (device loop1): enabling free space tree [ 670.957449][T20454] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 670.999551][T20454] BTRFS info (device loop2): setting nodatasum [ 671.005786][T20454] BTRFS info (device loop2): allowing degraded mounts [ 671.046021][ T30] kauditd_printk_skb: 1014 callbacks suppressed [ 671.046041][ T30] audit: type=1326 audit(1762121936.784:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.5.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 671.048246][T20538] netlink: 'syz.3.6331': attribute type 6 has an invalid length. [ 671.052983][T20454] BTRFS info (device loop2): turning on async discard [ 671.097273][ T30] audit: type=1326 audit(1762121936.784:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.5.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 671.119762][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.158734][ T30] audit: type=1326 audit(1762121936.834:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.5.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 671.187728][T20454] BTRFS info (device loop2): enabling disk space caching [ 671.235833][ T30] audit: type=1326 audit(1762121936.834:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.5.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 671.247576][T20454] BTRFS info (device loop2): force clearing of disk cache [ 671.321208][ T30] audit: type=1326 audit(1762121936.834:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.5.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 671.337630][T20454] BTRFS info (device loop2): force zlib compression, level 3 [ 671.357947][ T6160] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 671.397241][T20546] loop0: detected capacity change from 0 to 164 [ 671.490696][T20546] Symlink component flag not implemented [ 671.537808][T20546] Symlink component flag not implemented [ 671.568157][T20546] Symlink component flag not implemented (112) [ 671.590310][T20546] Symlink component flag not implemented (22) [ 671.648387][T20454] BTRFS info (device loop2): balance: start -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=4503599627370496,limit=351830835986432 [ 671.782342][T20454] BTRFS info (device loop2): balance: ended with status: 0 [ 672.034080][ T6157] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 672.973896][ T6177] Bluetooth: hci0: unexpected event for opcode 0x2010 [ 673.238182][T20601] loop5: detected capacity change from 0 to 512 [ 673.331515][T20607] loop4: detected capacity change from 0 to 1024 [ 673.345908][T20601] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 673.372219][T20601] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 673.416281][T20601] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.6361: Failed to acquire dquot type 0 [ 673.466028][T20607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.468314][T20601] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 673.491634][T20601] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 673.501091][T20601] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.6361: Failed to acquire dquot type 0 [ 673.565241][T20601] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 673.601246][T20616] loop1: detected capacity change from 0 to 2048 [ 673.608996][T20601] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.6361: Failed to acquire dquot type 0 [ 673.693613][T20601] EXT4-fs (loop5): 1 orphan inode deleted [ 673.799924][T20601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.839284][ T6167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.846906][T20601] ext4 filesystem being mounted at /1028/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.020812][T20601] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.6361: Failed to acquire dquot type 0 [ 674.184180][ T6166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.297713][T20638] netlink: 'syz.4.6377': attribute type 12 has an invalid length. [ 674.320829][T20639] netlink: 'syz.3.6379': attribute type 10 has an invalid length. [ 674.339680][T20638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6377'. [ 675.109988][ T6403] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 675.282682][ T6403] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 675.317672][ T6403] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 675.354935][ T6403] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 675.377246][ T6403] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 675.397380][ T6403] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 675.408143][ T6403] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.428583][ T6403] usb 6-1: config 0 descriptor?? [ 675.537014][T20656] loop2: detected capacity change from 0 to 32768 [ 675.619916][ T6075] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 675.645433][ T6403] hdpvr 6-1:0.0: firmware version 0x7a dated *A]5&´ùßb‰XðC?_¸õ7æW ±fùöPéeªOIr­(‡ [ 675.677290][ T6403] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 675.799600][ T6075] usb 1-1: Using ep0 maxpacket: 8 [ 675.814797][ T6075] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 675.840930][ T6075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.848488][ T6403] hdpvr 6-1:0.0: device init failed [ 675.863460][ T6075] usb 1-1: Product: syz [ 675.867691][ T6075] usb 1-1: Manufacturer: syz [ 675.872587][ T6403] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 675.899330][ T6403] usb 6-1: USB disconnect, device number 108 [ 675.923931][ T6075] usb 1-1: SerialNumber: syz [ 676.241545][T20699] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 676.374891][ T6075] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 676.410394][ T6075] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 676.432580][ T6075] usb 1-1: USB disconnect, device number 90 [ 676.582422][T20710] CIFS mount error: No usable UNC path provided in device string! [ 676.582422][T20710] [ 676.647323][T20710] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 676.731521][T20713] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 676.740245][T20713] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 677.152535][T20735] loop2: detected capacity change from 0 to 256 [ 677.159646][T20726] bond2: option arp_interval: invalid value (18446744073709551615) [ 677.171477][T20726] bond2: option arp_interval: allowed values 0 - 2147483647 [ 677.187924][T20726] bond2 (unregistering): Released all slaves [ 677.219313][T20736] loop0: detected capacity change from 0 to 512 [ 677.247914][T20735] FAT-fs (loop2): Directory bread(block 64) failed [ 677.278631][T20735] FAT-fs (loop2): Directory bread(block 65) failed [ 677.320475][T20735] FAT-fs (loop2): Directory bread(block 66) failed [ 677.337844][T20735] FAT-fs (loop2): Directory bread(block 67) failed [ 677.353373][T20735] FAT-fs (loop2): Directory bread(block 68) failed [ 677.366805][T20735] FAT-fs (loop2): Directory bread(block 69) failed [ 677.368170][T20736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.374287][T20735] FAT-fs (loop2): Directory bread(block 70) failed [ 677.374321][T20735] FAT-fs (loop2): Directory bread(block 71) failed [ 677.374408][T20735] FAT-fs (loop2): Directory bread(block 72) failed [ 677.374438][T20735] FAT-fs (loop2): Directory bread(block 73) failed [ 677.419737][T20741] vivid-000: ================= START STATUS ================= [ 677.429670][T20741] vivid-000: Generate PTS: true [ 677.439173][T20741] vivid-000: Generate SCR: true [ 677.445065][T20741] tpg source WxH: 640x480 (R'G'B) [ 677.450940][T20741] tpg field: 1 [ 677.454445][T20741] tpg crop: (0,0)/640x480 [ 677.458777][T20741] tpg compose: (0,0)/640x480 [ 677.477265][T20741] tpg colorspace: 8 [ 677.481529][T20736] ext4 filesystem being mounted at /1058/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.511067][T20741] tpg transfer function: 0/0 [ 677.527635][T20741] tpg quantization: 0/0 [ 677.543403][T20741] tpg RGB range: 0/2 [ 677.563904][T20741] vivid-000: ================== END STATUS ================== [ 677.644683][ T6158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.788705][T20751] No such timeout policy "syz1" [ 678.204203][T20767] loop4: detected capacity change from 0 to 64 [ 678.815062][T20745] loop3: detected capacity change from 0 to 32768 [ 678.880254][T20745] JBD2: Ignoring recovery information on journal [ 679.000269][T20745] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 679.224504][ T6168] ocfs2: Unmounting device (7,3) on (node local) [ 679.234723][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 679.234740][ T30] audit: type=1326 audit(1762121944.970:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.0.6457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x7ffc0000 [ 679.263164][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.416978][ T30] audit: type=1326 audit(1762121944.970:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.0.6457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x7ffc0000 [ 679.460219][T20811] loop3: detected capacity change from 0 to 736 [ 679.536706][ T30] audit: type=1326 audit(1762121945.030:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.0.6457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fd2bd78efc9 code=0x7ffc0000 [ 679.590628][ T30] audit: type=1326 audit(1762121945.030:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.0.6457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x7ffc0000 [ 679.613103][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.626000][ T30] audit: type=1326 audit(1762121945.030:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20805 comm="syz.0.6457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bd78efc9 code=0x7ffc0000 [ 679.648416][ C0] vkms_vblank_simulate: vblank timer overrun [ 679.703296][T20818] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 679.868563][T20779] loop2: detected capacity change from 0 to 32768 [ 680.030472][T20830] fuse: Bad value for 'group_id' [ 680.082211][T20830] fuse: Bad value for 'group_id' [ 680.456381][T20840] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6475'. [ 681.146907][T20824] loop1: detected capacity change from 0 to 32768 [ 681.229392][T20824] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 681.243098][ T6075] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 681.327634][T20832] loop0: detected capacity change from 0 to 32768 [ 681.338724][T20824] XFS (loop1): Ending clean mount [ 681.452044][ T6075] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 681.463549][ T6075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.479542][ T6305] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 681.502941][ T6075] usb 6-1: Product: syz [ 681.511956][ T6075] usb 6-1: Manufacturer: syz [ 681.520305][T20832] [ 681.520305][T20832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 681.520305][T20832] [ 681.552982][ T6075] usb 6-1: SerialNumber: syz [ 681.591262][ T6075] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 681.603689][T20832] ERROR: (device loop0): diWrite: ixpxd invalid [ 681.603689][T20832] [ 681.627634][ T6160] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 681.639929][T20832] ERROR: (device loop0): txCommit: [ 681.639929][T20832] [ 681.652491][T20870] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6485'. [ 681.705977][ T6305] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 681.821496][ T6158] [ 681.821496][ T6158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 681.821496][ T6158] [ 681.897296][ T6158] [ 681.897296][ T6158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 681.897296][ T6158] [ 681.924462][T20846] loop3: detected capacity change from 0 to 32768 [ 682.009918][T20846] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 682.152465][T20881] loop2: detected capacity change from 0 to 1764 [ 682.268455][ T6075] usb 6-1: USB disconnect, device number 109 [ 682.274680][T20846] XFS (loop3): Ending clean mount [ 682.586913][ T6168] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 682.794686][T20899] loop4: detected capacity change from 0 to 1024 [ 682.833358][ T6305] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 682.840597][ T6305] ath9k_htc: Failed to initialize the device [ 682.932107][ T6075] usb 6-1: ath9k_htc: USB layer deinitialized [ 683.446281][T20924] loop1: detected capacity change from 0 to 256 [ 683.530949][T20924] FAT-fs (loop1): Directory bread(block 64) failed [ 683.533738][T20926] netlink: 'syz.3.6509': attribute type 2 has an invalid length. [ 683.554437][T20924] FAT-fs (loop1): Directory bread(block 65) failed [ 683.590670][T20924] FAT-fs (loop1): Directory bread(block 66) failed [ 683.605074][T20918] loop4: detected capacity change from 0 to 4096 [ 683.653917][T20924] FAT-fs (loop1): Directory bread(block 67) failed [ 683.704179][T20924] FAT-fs (loop1): Directory bread(block 68) failed [ 683.710743][T20924] FAT-fs (loop1): Directory bread(block 69) failed [ 683.737080][T20918] ntfs3(loop4): ino=b, mi_enum_attr [ 683.755839][T20918] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 683.757256][T20924] FAT-fs (loop1): Directory bread(block 70) failed [ 683.784497][T20918] ntfs3(loop4): Failed to load $Extend (-22). [ 683.813507][T20918] ntfs3(loop4): Failed to initialize $Extend. [ 683.826194][T20924] FAT-fs (loop1): Directory bread(block 71) failed [ 683.840120][T20924] FAT-fs (loop1): Directory bread(block 72) failed [ 683.903809][T20924] FAT-fs (loop1): Directory bread(block 73) failed [ 684.003837][ T6075] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 684.195333][ T6075] usb 6-1: Using ep0 maxpacket: 32 [ 684.212688][ T6075] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 684.246050][ T6075] usb 6-1: config 0 has no interface number 0 [ 684.308762][ T6075] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 684.311295][T20939] wg1 speed is unknown, defaulting to 1000 [ 684.324008][ T6075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.331991][ T6075] usb 6-1: Product: syz [ 684.364481][ T6075] usb 6-1: Manufacturer: syz [ 684.376113][ T6075] usb 6-1: SerialNumber: syz [ 684.426218][ T6075] usb 6-1: config 0 descriptor?? [ 684.481880][ T6075] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 684.498288][ T6075] usb 6-1: selecting invalid altsetting 1 [ 684.509712][ T6075] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 684.656197][ T6075] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 684.715249][ T6075] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 684.783349][ T6075] usb 6-1: media controller created [ 684.863393][ T6075] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.987733][T20971] netlink: 'syz.0.6530': attribute type 2 has an invalid length. [ 685.014629][T20963] loop1: detected capacity change from 0 to 4096 [ 685.072618][ T6075] usb 6-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 685.109142][T20963] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 685.118094][T20971] : entered promiscuous mode [ 685.124121][ T6075] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 685.207497][T20963] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 685.219513][T20978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6533'. [ 685.259997][T20963] ntfs3(loop1): ino=19, mi_enum_attr [ 685.323376][T20963] ntfs3(loop1): failed to convert "c46c" to cp863 [ 685.355332][T20963] ntfs3(loop1): ino=20, mi_enum_attr [ 685.388228][ T6075] DVB: Unable to find symbol mxl5005s_attach() [ 685.444603][ T6075] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 685.572538][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.578960][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.763877][ T6075] usb 6-1: USB disconnect, device number 110 [ 685.824271][T20998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6543'. [ 686.216760][T21011] netlink: 'syz.5.6549': attribute type 6 has an invalid length. [ 686.224520][T21011] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6549'. [ 686.396162][T21018] loop3: detected capacity change from 0 to 16 [ 686.455726][T21009] wg1 speed is unknown, defaulting to 1000 [ 686.514590][T21021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.825379][T21035] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 687.063914][T21041] loop5: detected capacity change from 0 to 16 [ 687.110681][T21018] erofs (device loop3): mounted with root inode @ nid 36. [ 687.125427][T21041] erofs (device loop5): mounted with root inode @ nid 36. [ 687.621281][T21058] loop0: detected capacity change from 0 to 512 [ 687.646324][T21058] EXT4-fs: inline encryption not supported [ 687.676234][T21058] EXT4-fs: Ignoring removed mblk_io_submit option [ 687.733923][T21058] EXT4-fs (loop0): Test dummy encryption mode enabled [ 687.786001][T21058] EXT4-fs (loop0): orphan cleanup on readonly fs [ 687.792386][T21058] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.6573: inode #13: comm syz.0.6573: iget: illegal inode # [ 687.847188][T21058] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6573: couldn't read orphan inode 13 (err -117) [ 687.969500][T21058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 688.086972][T21058] EXT4-fs: inline encryption not supported [ 688.113115][T21058] EXT4-fs: Ignoring removed mblk_io_submit option [ 688.167127][T21058] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 688.230203][T21058] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.6573: Abort forced by user [ 688.259996][ T30] audit: type=1326 audit(1762121953.986:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21080 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 688.330170][T21058] EXT4-fs (loop0): Remounting filesystem read-only [ 688.347814][T21058] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 688.365124][ T30] audit: type=1326 audit(1762121953.986:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21080 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 688.409378][T21088] loop3: detected capacity change from 0 to 256 [ 688.482875][ T30] audit: type=1326 audit(1762121953.986:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21080 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 688.509465][T21088] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 688.524872][ T6158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.556506][ T30] audit: type=1326 audit(1762121953.986:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21080 comm="syz.5.6582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 688.645882][ T6305] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 688.828116][ T6305] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 688.832238][T21094] loop0: detected capacity change from 0 to 2048 [ 688.858375][ T6305] usb 5-1: config 7 has no interface number 0 [ 688.880335][ T6305] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 688.882498][T21067] loop1: detected capacity change from 0 to 32768 [ 688.899826][ T6305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.942049][T21098] sit1: entered promiscuous mode [ 688.942523][ T6305] usb 5-1: Product: syz [ 688.951537][T21100] loop3: detected capacity change from 0 to 64 [ 688.968874][T21098] sit1: entered allmulticast mode [ 688.993323][ T6305] usb 5-1: Manufacturer: syz [ 689.028841][T21094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.041303][T21067] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt [ 689.041303][T21067] [ 689.062233][ T6305] usb 5-1: SerialNumber: syz [ 689.071925][T21067] ERROR: (device loop1): remounting filesystem as read-only [ 689.121431][T21067] jfs_lookup: dtSearch returned -5 [ 689.263965][ T6158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.382531][ T6305] as10x_usb: device has been detected [ 689.416761][ T6305] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 689.525246][ T6305] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 689.615856][T21116] ieee802154 phy0 wpan0: encryption failed: -90 [ 689.666266][ T6305] as10x_usb: error during firmware upload part1 [ 689.693546][ T6305] Registered device Elgato EyeTV DTT Deluxe [ 689.706926][ T6305] usb 5-1: USB disconnect, device number 122 [ 689.818428][ T6305] Unregistered device Elgato EyeTV DTT Deluxe [ 689.827120][ T6305] as10x_usb: device has been disconnected [ 690.082341][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6597'. [ 690.150859][T21137] ipt_ECN: cannot use operation on non-tcp rule [ 690.159707][T21135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6607'. [ 690.674319][T21158] ieee802154 phy0 wpan0: encryption failed: -90 [ 690.771996][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6621'. [ 690.865862][T21168] loop5: detected capacity change from 0 to 16 [ 690.904139][T21168] erofs (device loop5): mounted with root inode @ nid 36. [ 691.502780][T21199] loop2: detected capacity change from 0 to 512 [ 691.517314][ T6403] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 691.540633][T21202] netlink: 'syz.5.6639': attribute type 1 has an invalid length. [ 691.580777][T21199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.681962][T21199] ext4 filesystem being mounted at /1027/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.692647][ T6403] usb 1-1: Using ep0 maxpacket: 8 [ 691.772739][ T6403] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 691.807500][ T6403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.837106][ T6403] usb 1-1: Product: syz [ 691.841892][ T6403] usb 1-1: Manufacturer: syz [ 691.846494][ T6403] usb 1-1: SerialNumber: syz [ 691.890427][ T6403] usb 1-1: config 0 descriptor?? [ 691.911867][ T6157] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.980211][ T6403] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 692.002389][T21220] loop5: detected capacity change from 0 to 4096 [ 692.082268][T21220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.268950][T21220] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.6647: invalid fast symlink length 131109 [ 692.381635][T21234] loop3: detected capacity change from 0 to 1024 [ 692.401461][ T6403] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 692.438168][ T6403] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 692.499470][ T6403] usb 1-1: USB disconnect, device number 91 [ 692.575168][ T6166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.638906][T21237] loop1: detected capacity change from 0 to 1024 [ 692.851244][ T36] hfsplus: b-tree write err: -5, ino 4 [ 692.911731][T21245] loop4: detected capacity change from 0 to 16 [ 692.977996][T21245] erofs (device loop4): mounted with root inode @ nid 36. [ 693.032504][T21248] tmpfs: Bad value for 'mpol' [ 693.059666][T21245] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 693.120692][T21245] erofs (device loop4): read error -117 @ 43 of nid 36 [ 693.413932][T21231] loop2: detected capacity change from 0 to 32768 [ 693.455060][T21231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6655 (21231) [ 693.513106][T21231] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.548830][T21231] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 693.586177][T21257] loop1: detected capacity change from 0 to 4096 [ 693.629739][T21257] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 693.683933][T21264] xt_CT: No such helper "snmp_trap" [ 693.778326][T21257] ntfs3(loop1): ino=1a, mi_enum_attr [ 693.783667][T21257] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 693.856734][T21231] BTRFS info (device loop2): enabling ssd optimizations [ 693.902920][T21231] BTRFS info (device loop2): turning on async discard [ 693.918014][T21231] BTRFS info (device loop2): enabling free space tree [ 694.264076][ T6157] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 694.293953][T21293] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6674'. [ 694.330710][T21294] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 694.337681][T21294] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 694.694766][T21307] loop0: detected capacity change from 0 to 16 [ 694.716815][T21253] loop3: detected capacity change from 0 to 32768 [ 694.754090][T21307] erofs (device loop0): mounted with root inode @ nid 36. [ 694.772080][T21253] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 694.841933][T21307] erofs (device loop0): bogus i_mode (4355) @ nid 46 [ 694.919738][T21253] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 695.007690][ T60] (kworker/u8:4,60,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 695.312058][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6688'. [ 695.343561][ T6168] ocfs2: Unmounting device (7,3) on (node local) [ 695.367207][T21329] loop2: detected capacity change from 0 to 16 [ 695.381951][T21330] loop0: detected capacity change from 0 to 64 [ 695.403136][ T6379] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 695.448832][T21329] erofs (device loop2): mounted with root inode @ nid 36. [ 695.464445][T21330] hfs: unable to read tree header [ 695.509094][T21330] hfs: unable to open catalog tree [ 695.520151][T21330] hfs: can't find a HFS filesystem on dev loop0 [ 695.690447][ T30] audit: type=1326 audit(1762121961.423:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21335 comm="syz.4.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 695.829951][ T30] audit: type=1326 audit(1762121961.423:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21335 comm="syz.4.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 695.858711][ T30] audit: type=1326 audit(1762121961.453:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21335 comm="syz.4.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 695.882481][ T30] audit: type=1326 audit(1762121961.453:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21335 comm="syz.4.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 695.905494][ T30] audit: type=1326 audit(1762121961.453:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21335 comm="syz.4.6694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 696.280452][T21356] loop4: detected capacity change from 0 to 1764 [ 696.319748][T21362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6705'. [ 696.499310][T21365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6706'. [ 697.010167][T21388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6718'. [ 697.471204][T21410] loop4: detected capacity change from 0 to 256 [ 697.478979][T21410] exfat: Deprecated parameter 'utf8' [ 697.582091][T21410] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 697.595443][T21419] libceph: resolve '4' (ret=-3): failed [ 698.609175][T21465] netlink: 'syz.2.6756': attribute type 17 has an invalid length. [ 698.722315][T21465] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 698.959837][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 699.148111][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 699.171521][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.219887][ T9] usb 4-1: Product: syz [ 699.224118][ T9] usb 4-1: Manufacturer: syz [ 699.228706][ T9] usb 4-1: SerialNumber: syz [ 699.271349][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 699.311691][T21446] loop4: detected capacity change from 0 to 32768 [ 699.318302][ T6311] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 699.364205][T21446] [ 699.364205][T21446] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 699.364205][T21446] [ 699.382849][T21489] btrfs: Unexpected value for 'acl' [ 699.443929][T21446] ERROR: (device loop4): ea_get: invalid ea.flag [ 699.443929][T21446] [ 699.480033][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 699.492498][T21446] ERROR: (device loop4): remounting filesystem as read-only [ 699.542036][T21491] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 699.799863][ T6305] usb 4-1: USB disconnect, device number 100 [ 699.854820][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6775'. [ 699.887998][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6775'. [ 699.959981][T21502] ip6gretap2: entered allmulticast mode [ 700.330211][ T30] audit: type=1326 audit(1762121965.942:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.5.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 700.421008][ T30] audit: type=1326 audit(1762121965.942:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21508 comm="syz.5.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 700.443468][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.460683][ T6311] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 700.461085][T21516] netlink: 'syz.4.6781': attribute type 10 has an invalid length. [ 700.467773][ T6311] ath9k_htc: Failed to initialize the device [ 700.541495][ T6305] usb 4-1: ath9k_htc: USB layer deinitialized [ 700.568464][T21516] macvlan1: entered allmulticast mode [ 700.612812][T21516] veth1_vlan: entered allmulticast mode [ 700.659622][T21516] team0: Port device macvlan1 added [ 701.227596][T21544] loop0: detected capacity change from 0 to 128 [ 702.229576][T21583] loop0: detected capacity change from 0 to 256 [ 702.747400][T21607] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 703.054340][T21620] loop1: detected capacity change from 0 to 512 [ 703.109710][T21620] EXT4-fs: Ignoring removed mblk_io_submit option [ 703.131909][T21620] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 703.178834][T21620] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.6833: inode has both inline data and extents flags [ 703.276493][T21620] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6833: couldn't read orphan inode 15 (err -117) [ 703.366748][T21620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.625096][ T6160] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.289076][T21664] loop4: detected capacity change from 0 to 4096 [ 704.339026][T21664] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 704.443273][T21664] ntfs3(loop4): ino=19, mi_enum_attr [ 704.460145][T21664] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 704.467299][T21672] loop3: detected capacity change from 0 to 1024 [ 704.930459][T21690] loop0: detected capacity change from 0 to 256 [ 704.974964][T21690] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 705.041006][T21690] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 705.341885][ T6311] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 705.552296][ T6311] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 705.584248][ T6311] usb 4-1: config 0 has no interface number 0 [ 705.604964][ T6311] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 705.614421][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6877'. [ 705.648856][ T6311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.678335][ T6311] usb 4-1: config 0 descriptor?? [ 705.926860][ T6177] Bluetooth: hci3: Malformed LE Event: 0x0d [ 705.935686][ T6311] usb 4-1: string descriptor 0 read error: -71 [ 705.954037][ T6311] usb-storage 4-1:0.168: USB Mass Storage device detected [ 705.997149][ T6311] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 706.029124][T21725] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 706.151480][T21732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6885'. [ 706.159345][ T6311] usb 4-1: USB disconnect, device number 101 [ 706.178983][T21733] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 706.305659][T21737] loop2: detected capacity change from 0 to 256 [ 706.465442][ T24] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 706.652282][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 706.675054][ T24] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 706.704562][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.758314][ T24] usb 6-1: config 0 descriptor?? [ 706.825087][ T24] as10x_usb: device has been detected [ 706.848615][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 706.885585][ T24] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 706.947227][ T24] as10x_usb: error during firmware upload part1 [ 706.966465][ T24] Registered device nBox DVB-T Dongle [ 707.018480][ T24] usb 6-1: USB disconnect, device number 111 [ 707.104582][ T24] Unregistered device nBox DVB-T Dongle [ 707.107282][ T24] as10x_usb: device has been disconnected [ 707.146295][T21767] loop3: detected capacity change from 0 to 8 [ 707.613708][T21782] loop4: detected capacity change from 0 to 128 [ 707.655576][T21782] EXT4-fs (loop4): Test dummy encryption mode enabled [ 707.700212][T21782] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 707.736484][T21782] ext4 filesystem being mounted at /1051/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 707.826478][ T6167] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.861036][T21758] loop2: detected capacity change from 0 to 32768 [ 707.953674][T21758] ERROR: (device loop2): diAllocAG: error reading iag [ 707.953674][T21758] [ 707.963512][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 708.012282][T21758] ialloc: diAlloc returned -5! [ 708.074831][ T30] audit: type=1326 audit(1762121973.799:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21795 comm="syz.5.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 708.170389][ T30] audit: type=1326 audit(1762121973.799:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21795 comm="syz.5.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 708.271874][ T30] audit: type=1326 audit(1762121973.809:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21795 comm="syz.5.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 708.346863][ T30] audit: type=1326 audit(1762121973.809:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21795 comm="syz.5.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 708.431147][ T30] audit: type=1326 audit(1762121973.809:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21795 comm="syz.5.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 708.628518][T21778] loop3: detected capacity change from 0 to 32768 [ 708.835781][T21812] netlink: 'syz.4.6918': attribute type 32 has an invalid length. [ 708.997403][T21789] loop0: detected capacity change from 0 to 32768 [ 709.040934][T21789] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6908 (21789) [ 709.133220][T21789] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 709.196528][T21789] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 709.283071][T21789] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 709.462125][T21846] loop5: detected capacity change from 0 to 65 [ 709.474871][T21789] BTRFS info (device loop0): rebuilding free space tree [ 709.497346][T21789] BTRFS info (device loop0): disabling free space tree [ 709.523253][T21789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 709.532909][T21789] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 709.573127][T21846] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway [ 709.625017][T21789] BTRFS info (device loop0): setting nodatasum [ 709.631215][T21789] BTRFS info (device loop0): allowing degraded mounts [ 709.680151][T21789] BTRFS info (device loop0): turning on async discard [ 709.734821][T21789] BTRFS info (device loop0): enabling disk space caching [ 709.756851][T21789] BTRFS info (device loop0): force clearing of disk cache [ 709.793269][T21789] BTRFS info (device loop0): force zlib compression, level 3 [ 710.024216][T21861] loop1: detected capacity change from 0 to 64 [ 710.075932][ T6158] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 710.316367][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6935'. [ 710.373630][T21870] netlink: 'syz.2.6935': attribute type 5 has an invalid length. [ 710.411167][T21870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6935'. [ 710.469003][T21879] netlink: 'syz.0.6934': attribute type 1 has an invalid length. [ 710.530722][T21870] geneve2: entered promiscuous mode [ 710.553972][T21870] geneve2: entered allmulticast mode [ 710.605365][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 710.655350][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 710.691889][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 710.733565][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 710.736751][T21885] loop1: detected capacity change from 0 to 256 [ 710.769218][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 710.773795][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6938'. [ 710.801620][T21885] exfat: Deprecated parameter 'utf8' [ 710.841856][T21887] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6938'. [ 710.881538][T21885] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 710.914151][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 710.937912][ T24] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 710.956565][ T24] usb 4-1: config 0 has no interface number 0 [ 710.996315][ T24] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54 [ 711.023792][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.060088][ T24] usb 4-1: Product: syz [ 711.083558][ T24] usb 4-1: Manufacturer: syz [ 711.088192][ T24] usb 4-1: SerialNumber: syz [ 711.149263][ T24] usb 4-1: config 0 descriptor?? [ 711.388738][ T24] snd-usb-audio 4-1:0.102: probe with driver snd-usb-audio failed with error -71 [ 711.433915][ T24] usb 4-1: USB disconnect, device number 102 [ 711.794646][ T6075] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 711.985261][ T6075] usb 3-1: Using ep0 maxpacket: 16 [ 712.010526][ T6075] usb 3-1: too many configurations: 98, using maximum allowed: 8 [ 712.045629][ T6075] usb 3-1: config index 0 descriptor too short (expected 40584, got 9) [ 712.074061][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.092955][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.105050][ T6305] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 712.116113][ T6075] usb 3-1: config index 1 descriptor too short (expected 40584, got 9) [ 712.116145][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.116171][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.117303][ T6075] usb 3-1: config index 2 descriptor too short (expected 40584, got 9) [ 712.117331][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.117356][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.125315][ T6075] usb 3-1: config index 3 descriptor too short (expected 40584, got 9) [ 712.125344][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.125370][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.126643][ T6075] usb 3-1: config index 4 descriptor too short (expected 40584, got 9) [ 712.126677][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.126702][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.127695][ T6075] usb 3-1: config index 5 descriptor too short (expected 40584, got 9) [ 712.127723][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.127748][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.128746][ T6075] usb 3-1: config index 6 descriptor too short (expected 40584, got 9) [ 712.128774][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.128798][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.129792][ T6075] usb 3-1: config index 7 descriptor too short (expected 40584, got 9) [ 712.129819][ T6075] usb 3-1: config 9 has too many interfaces: 48, using maximum allowed: 32 [ 712.129842][ T6075] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 48 [ 712.151618][ T6075] usb 3-1: string descriptor 0 read error: -71 [ 712.151774][ T6075] usb 3-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 712.151803][ T6075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154 [ 712.157087][ T6075] usb 3-1: can't set config #9, error -71 [ 712.164917][ T6075] usb 3-1: USB disconnect, device number 115 [ 712.281726][ T6305] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 712.281764][ T6305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.281790][ T6305] usb 5-1: Product: syz [ 712.281809][ T6305] usb 5-1: Manufacturer: syz [ 712.281829][ T6305] usb 5-1: SerialNumber: syz [ 712.288643][ T6305] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 712.436780][ T6305] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 712.663007][T21949] loop3: detected capacity change from 0 to 16 [ 712.735825][T21949] erofs (device loop3): mounted with root inode @ nid 36. [ 713.071510][ T6311] usb 5-1: USB disconnect, device number 123 [ 713.779940][T21991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.893148][ T6305] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 713.926665][ T6305] ath9k_htc: Failed to initialize the device [ 713.940597][ T6311] usb 5-1: ath9k_htc: USB layer deinitialized [ 714.304892][T22010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6992'. [ 714.502289][T21971] loop2: detected capacity change from 0 to 32768 [ 715.251541][T22043] usb usb1: usbfs: process 22043 (syz.1.7008) did not claim interface 0 before use [ 715.329549][T22003] loop3: detected capacity change from 0 to 32768 [ 715.415745][T22003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6988 (22003) [ 715.497699][T22003] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 715.527845][T22003] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 715.701334][T22067] loop5: detected capacity change from 0 to 2048 [ 715.753290][T22003] BTRFS info (device loop3): enabling ssd optimizations [ 715.778509][T22067] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 715.795004][T22003] BTRFS info (device loop3): turning on async discard [ 715.801790][T22003] BTRFS info (device loop3): enabling free space tree [ 715.832055][ T6121] udevd[6121]: incorrect nilfs2 checksum on /dev/loop5 [ 715.879301][T22055] bond0: option lacp_rate: invalid value (129) [ 715.961215][T22055] bond0 (unregistering): Released all slaves [ 716.002229][ T6121] udevd[6121]: incorrect nilfs2 checksum on /dev/loop5 [ 716.082216][ T6168] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 717.086636][T22118] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 717.150039][T22118] overlayfs: missing 'lowerdir' [ 717.365977][ T9] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 717.565618][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 717.584392][ T9] usb 5-1: config 6 has an invalid interface number: 76 but max is 0 [ 717.614039][ T9] usb 5-1: config 6 has no interface number 0 [ 717.625930][ T9] usb 5-1: config 6 interface 76 has no altsetting 0 [ 717.667070][ T9] usb 5-1: New USB device found, idVendor=04dd, idProduct=8004, bcdDevice=37.80 [ 717.688644][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.719070][ T9] usb 5-1: Product: syz [ 717.723270][ T9] usb 5-1: Manufacturer: syz [ 717.750266][ T9] usb 5-1: SerialNumber: syz [ 717.996636][ T9] usb 5-1: bad CDC descriptors [ 718.029053][ T9] usb 5-1: USB disconnect, device number 124 [ 718.245090][T22167] netlink: 'syz.2.7062': attribute type 2 has an invalid length. [ 718.310974][T22170] loop5: detected capacity change from 0 to 2048 [ 718.422713][T22175] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 718.436144][T22169] loop3: detected capacity change from 0 to 4096 [ 718.461637][T22169] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 718.466197][T22170] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 718.575791][T22170] Remounting filesystem read-only [ 718.583463][T22169] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 718.626813][T22169] ntfs3(loop3): ino=19, mi_enum_attr [ 718.709618][T22169] ntfs3(loop3): failed to convert "c46c" to macroman [ 718.759231][T22169] ntfs3(loop3): ino=20, mi_enum_attr [ 719.247284][T22201] loop0: detected capacity change from 0 to 256 [ 719.392166][T22201] FAT-fs (loop0): Directory bread(block 64) failed [ 719.425842][T22201] FAT-fs (loop0): Directory bread(block 65) failed [ 719.446295][T22201] FAT-fs (loop0): Directory bread(block 66) failed [ 719.452897][T22201] FAT-fs (loop0): Directory bread(block 67) failed [ 719.505057][T22201] FAT-fs (loop0): Directory bread(block 68) failed [ 719.545544][T22201] FAT-fs (loop0): Directory bread(block 69) failed [ 719.595288][T22201] FAT-fs (loop0): Directory bread(block 70) failed [ 719.609764][T22201] FAT-fs (loop0): Directory bread(block 71) failed [ 719.617351][T22201] FAT-fs (loop0): Directory bread(block 72) failed [ 719.636186][T22201] FAT-fs (loop0): Directory bread(block 73) failed [ 719.655899][ T6305] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 719.837125][ T6305] usb 6-1: Using ep0 maxpacket: 8 [ 719.854210][ T6305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 719.888334][ T6305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 719.925956][ T6305] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 719.960012][ T6305] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 720.016001][ T6305] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 720.037173][ T6305] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 720.106039][ T6305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.153908][ T6305] usb 6-1: config 0 descriptor?? [ 720.186736][T22209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 720.350050][T22189] loop1: detected capacity change from 0 to 40427 [ 720.367701][T22189] F2FS-fs: heap/no_heap options were deprecated [ 720.397493][T22189] F2FS-fs (loop1): build fault injection rate: 19 [ 720.465777][T22189] F2FS-fs (loop1): invalid crc value [ 720.644478][ T6305] usb 6-1: USB disconnect, device number 112 [ 720.644919][ T6177] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 720.726691][ T6338] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 720.795056][T22189] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 720.831402][T22189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 720.927045][ T6338] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 720.941083][ T6338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.971644][ T6338] usb 4-1: config 0 has no interface number 0 [ 720.986605][ T6338] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 721.008128][ T6338] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.039523][ T6338] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 721.059337][ T6338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.076937][ T6160] syz-executor: attempt to access beyond end of device [ 721.076937][ T6160] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 721.102312][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 721.102356][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 721.102372][ T6160] Call Trace: [ 721.102382][ T6160] [ 721.102394][ T6160] dump_stack_lvl+0x189/0x250 [ 721.102438][ T6160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.102473][ T6160] ? __pfx_queue_work_on+0x10/0x10 [ 721.102501][ T6160] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 721.102535][ T6160] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 721.102581][ T6160] f2fs_handle_critical_error+0x37c/0x540 [ 721.102627][ T6160] f2fs_write_end_io+0x886/0xb60 [ 721.102675][ T6160] __submit_merged_bio+0x27a/0x6a0 [ 721.102718][ T6160] __submit_merged_write_cond+0x255/0x530 [ 721.102764][ T6160] f2fs_write_data_pages+0x261d/0x3000 [ 721.102828][ T6160] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 721.102868][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.102935][ T6160] ? __mod_zone_page_state+0xd7/0x140 [ 721.102982][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103010][ T6160] ? folios_put_refs+0x58b/0x670 [ 721.103053][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103081][ T6160] ? __lock_acquire+0xab9/0xd20 [ 721.103116][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103144][ T6160] ? do_raw_spin_lock+0x121/0x290 [ 721.103185][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103218][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103245][ T6160] ? do_raw_spin_unlock+0x122/0x240 [ 721.103281][ T6160] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 721.103307][ T6160] do_writepages+0x32e/0x550 [ 721.103345][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103378][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103406][ T6160] ? do_raw_spin_unlock+0x122/0x240 [ 721.103446][ T6160] filemap_fdatawrite+0x199/0x240 [ 721.103481][ T6160] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 721.103562][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103596][ T6160] ? do_raw_spin_unlock+0x122/0x240 [ 721.103636][ T6160] f2fs_sync_dirty_inodes+0x31f/0x830 [ 721.103680][ T6160] f2fs_write_checkpoint+0x93e/0x2440 [ 721.103707][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103735][ T6160] ? __lock_acquire+0xab9/0xd20 [ 721.103792][ T6160] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 721.103883][ T6160] kill_f2fs_super+0x2cc/0x6d0 [ 721.103910][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.103951][ T6160] ? __pfx_kill_f2fs_super+0x10/0x10 [ 721.103998][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.104026][ T6160] ? shrinker_free+0x2ce/0x3e0 [ 721.104057][ T6160] deactivate_locked_super+0xbc/0x130 [ 721.104093][ T6160] cleanup_mnt+0x425/0x4c0 [ 721.104122][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.104150][ T6160] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.104188][ T6160] task_work_run+0x1d4/0x260 [ 721.104228][ T6160] ? __pfx_task_work_run+0x10/0x10 [ 721.104262][ T6160] ? __x64_sys_umount+0x122/0x160 [ 721.104302][ T6160] ? exit_to_user_mode_loop+0x40/0x130 [ 721.104331][ T6160] exit_to_user_mode_loop+0xe9/0x130 [ 721.104356][ T6160] do_syscall_64+0x2bd/0xfa0 [ 721.104389][ T6160] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.104422][ T6160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.104445][ T6160] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.104473][ T6160] ? exc_page_fault+0xab/0x100 [ 721.104509][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.104533][ T6160] RIP: 0033:0x7f46dd5902f7 [ 721.104555][ T6160] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 721.104577][ T6160] RSP: 002b:00007ffc99a50848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 721.104603][ T6160] RAX: 0000000000000000 RBX: 00007f46dd611d7d RCX: 00007f46dd5902f7 [ 721.104620][ T6160] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc99a50900 [ 721.104636][ T6160] RBP: 00007ffc99a50900 R08: 0000000000000000 R09: 0000000000000000 [ 721.104653][ T6160] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc99a51990 [ 721.104670][ T6160] R13: 00007f46dd611d7d R14: 00000000000afe3d R15: 00007ffc99a519d0 [ 721.104710][ T6160] [ 721.113586][ T6338] usb 4-1: Product: syz [ 721.139209][ T6160] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 721.181295][T22238] loop0: detected capacity change from 0 to 32768 [ 721.468229][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.546482][ T6338] usb 4-1: Manufacturer: syz [ 721.551477][ T6338] usb 4-1: SerialNumber: syz [ 721.559161][ T6338] usb 4-1: config 0 descriptor?? [ 721.574443][T22238] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 721.642653][T22264] loop2: detected capacity change from 0 to 2048 [ 721.655501][T22238] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 721.695236][T22264] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 721.735269][T21940] (kworker/u8:0,21940,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 721.756652][ T6117] udevd[6117]: incorrect nilfs2 checksum on /dev/loop2 [ 721.841427][T22268] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 721.932713][T22270] loop5: detected capacity change from 0 to 128 [ 721.972669][ T6158] ocfs2: Unmounting device (7,0) on (node local) [ 722.022399][ T6403] usb 4-1: USB disconnect, device number 103 [ 722.394456][T22281] loop4: detected capacity change from 0 to 512 [ 722.523952][T22286] loop2: detected capacity change from 0 to 128 [ 722.545667][T22281] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.7113: bad orphan inode 15 [ 722.618734][T22294] loop1: detected capacity change from 0 to 256 [ 722.634721][T22281] ext4_test_bit(bit=14, block=5) = 0 [ 722.670720][T22286] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 722.680781][T22281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.754520][T22286] FAT-fs (loop2): Filesystem has been set read-only [ 722.762764][T22294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 722.892817][T22301] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7120'. [ 722.938096][ T6167] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.638615][ T30] audit: type=1326 audit(1762121989.355:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22331 comm="syz.5.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 723.732519][ T30] audit: type=1326 audit(1762121989.355:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22331 comm="syz.5.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 723.848516][ T30] audit: type=1326 audit(1762121989.355:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22331 comm="syz.5.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 723.950961][ T30] audit: type=1326 audit(1762121989.355:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22331 comm="syz.5.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 723.957079][ T6338] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 724.049284][ T30] audit: type=1326 audit(1762121989.355:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22331 comm="syz.5.7137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d438efc9 code=0x7ffc0000 [ 724.127141][ T6305] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 724.198973][ T6338] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 724.209842][ T6338] usb 3-1: config 0 has no interface number 1 [ 724.215977][ T6338] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 724.227635][T22354] loop4: detected capacity change from 0 to 4096 [ 724.235807][ T6338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.247092][ T6403] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 724.263621][T22354] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 724.269423][ T6338] usb 3-1: config 0 descriptor?? [ 724.297167][ T6305] usb 6-1: Using ep0 maxpacket: 32 [ 724.305143][ T6305] usb 6-1: unable to get BOS descriptor or descriptor too short [ 724.320314][ T6305] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.331847][T22354] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 724.347249][ T6305] usb 6-1: config 1 interface 0 has no altsetting 0 [ 724.375809][ T6305] usb 6-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 724.403153][ T6305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.417049][ T6403] usb 4-1: Using ep0 maxpacket: 32 [ 724.425800][T22359] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 724.434230][ T6305] usb 6-1: Product: syz [ 724.449329][ T6305] usb 6-1: Manufacturer: syz [ 724.461286][ T6403] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 724.464229][ T6305] usb 6-1: SerialNumber: syz [ 724.490453][ T6403] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 724.507375][ T6338] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 724.509844][T22354] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 724.527159][ T6403] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.561853][ T6403] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 724.573003][T22354] Remounting filesystem read-only [ 724.606142][ T6403] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 724.617649][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 724.656528][ T6403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.699286][ T6403] usb 4-1: config 0 descriptor?? [ 724.752199][ T6305] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input59 [ 724.823241][ T5175] bcm5974 6-1:1.0: could not read from device [ 724.842271][ T6305] usb 6-1: USB disconnect, device number 113 [ 724.854824][ T5175] bcm5974 6-1:1.0: could not read from device [ 724.866737][ T6338] usb 3-1: USB disconnect, device number 116 [ 724.884146][ T5175] bcm5974 6-1:1.0: could not read from device [ 724.901078][ T6338] qcserial 3-1:0.2: device disconnected [ 724.934159][T22367] loop1: detected capacity change from 0 to 2048 [ 724.947586][ T6403] usb 4-1: USB disconnect, device number 104 [ 724.970218][T22367] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 725.043294][T22372] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 725.340656][ T6177] Bluetooth: hci1: unexpected subevent 0x03 length: 244 > 9 [ 725.624027][T22389] loop1: detected capacity change from 0 to 128 [ 725.740126][T22389] FAT-fs (loop1): Directory bread(block 32) failed [ 725.757559][T22389] FAT-fs (loop1): Directory bread(block 33) failed [ 725.764176][T22389] FAT-fs (loop1): Directory bread(block 34) failed [ 725.817448][T22389] FAT-fs (loop1): Directory bread(block 35) failed [ 725.857501][T22389] FAT-fs (loop1): Directory bread(block 36) failed [ 725.864031][T22389] FAT-fs (loop1): Directory bread(block 37) failed [ 725.906421][T22389] FAT-fs (loop1): Directory bread(block 38) failed [ 725.913293][T22389] FAT-fs (loop1): Directory bread(block 39) failed [ 725.935077][T22389] FAT-fs (loop1): Directory bread(block 40) failed [ 725.945318][T22389] FAT-fs (loop1): Directory bread(block 41) failed [ 725.953665][T22396] loop5: detected capacity change from 0 to 4096 [ 726.142228][T22405] loop3: detected capacity change from 0 to 2048 [ 726.151296][T22408] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 726.175281][T22408] [U] J"—e:ÀÆ" [ 726.190522][T22405] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 726.250397][T22405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 726.277491][ T30] audit: type=1326 audit(1762121991.994:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2db8efc9 code=0x7ffc0000 [ 726.280695][T22389] syz.1.7164: attempt to access beyond end of device [ 726.280695][T22389] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 726.387788][T22389] FAT-fs (loop1): Filesystem has been set read-only [ 726.394675][T22389] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 726.417512][ T30] audit: type=1326 audit(1762121991.994:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2db8efc9 code=0x7ffc0000 [ 726.470442][T22415] loop4: detected capacity change from 0 to 16 [ 726.534882][T22415] erofs (device loop4): mounted with root inode @ nid 36. [ 726.553242][ T30] audit: type=1326 audit(1762121991.994:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f5f2db8efc9 code=0x7ffc0000 [ 726.686966][ T30] audit: type=1326 audit(1762121991.994:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2db8efc9 code=0x7ffc0000 [ 726.736808][ T30] audit: type=1326 audit(1762121991.994:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.2.7173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2db8efc9 code=0x7ffc0000 [ 727.427825][T22453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7190'. [ 727.984811][T22477] usb usb5: usbfs: process 22477 (syz.5.7201) did not claim interface 0 before use [ 728.025141][T22472] loop0: detected capacity change from 0 to 2048 [ 728.188160][ T6125] loop0: p2 p3 < > p4 < p5 > [ 728.192905][ T6125] loop0: partition table partially beyond EOD, truncated [ 728.248234][ T6125] loop0: p3 start 4284289 is beyond EOD, truncated [ 728.324798][T22472] loop0: p2 p3 < > p4 < p5 > [ 728.359604][T22472] loop0: partition table partially beyond EOD, truncated [ 728.394891][T22472] loop0: p3 start 4284289 is beyond EOD, truncated [ 728.475336][T22495] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved [ 728.585770][T22499] CIFS mount error: No usable UNC path provided in device string! [ 728.585770][T22499] [ 728.673350][T22499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 728.764771][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 728.775582][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 728.780754][ T6117] udevd[6117]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 728.865894][T22508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7214'. [ 728.884616][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7214'. [ 729.044462][ T6118] udevd[6118]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 729.060753][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 729.068945][ T6121] udevd[6121]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 729.337922][ T30] audit: type=1326 audit(1762121995.054:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.7221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 729.459428][ T30] audit: type=1326 audit(1762121995.054:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.7221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 729.537177][T22470] loop3: detected capacity change from 0 to 32768 [ 729.575792][ T30] audit: type=1326 audit(1762121995.074:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.7221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 729.649232][ T30] audit: type=1326 audit(1762121995.074:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.7221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 729.672003][ T30] audit: type=1326 audit(1762121995.074:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.4.7221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 729.781430][T22551] sctp: [Deprecated]: syz.5.7228 (pid 22551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.781430][T22551] Use struct sctp_sack_info instead [ 729.788676][T22470] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 729.809745][T22549] netlink: 'syz.2.7229': attribute type 1 has an invalid length. [ 729.818166][T22549] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7229'. [ 729.974746][T22549] NCSI netlink: No device for ifindex 0 [ 730.022569][T22556] loop5: detected capacity change from 0 to 64 [ 730.056952][T22470] XFS (loop3): Ending clean mount [ 730.120276][T22470] XFS (loop3): Quotacheck needed: Please wait. [ 730.202324][T22470] XFS (loop3): Quotacheck: Done. [ 730.505359][ T6168] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 731.039308][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 731.263097][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 731.284932][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.315303][ T9] usb 5-1: Product: syz [ 731.328654][ T9] usb 5-1: Manufacturer: syz [ 731.344211][ T9] usb 5-1: SerialNumber: syz [ 731.377610][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 731.425446][ T6403] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 731.464196][T22567] loop5: detected capacity change from 0 to 32768 [ 731.498774][ T6311] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 731.546953][T22567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7236 (22567) [ 731.651526][ T6311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.677929][T22567] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 731.682990][ T6311] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 731.709573][T22567] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 731.754906][ T6311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 731.787262][ T6311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 731.818784][ T6311] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 731.881910][ T43] usb 5-1: USB disconnect, device number 125 [ 731.890787][ T6311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 731.900923][ T6311] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.924488][ T6311] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 731.933740][ T6311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 731.948743][ T6311] usb 2-1: Product: syz [ 731.952962][ T6311] usb 2-1: Manufacturer: syz [ 731.967744][ T6311] usb 2-1: SerialNumber: syz [ 731.982763][T22606] loop3: detected capacity change from 0 to 256 [ 731.991714][T22567] BTRFS info (device loop5): enabling ssd optimizations [ 732.009486][ T6311] usb 2-1: config 0 descriptor?? [ 732.015864][T22592] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 732.016321][T22579] loop2: detected capacity change from 0 to 32768 [ 732.037790][T22567] BTRFS info (device loop5): turning on async discard [ 732.041818][ T6311] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 732.065082][T22567] BTRFS info (device loop5): enabling free space tree [ 732.136773][T22579] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 732.239426][T22579] XFS (loop2): Ending clean mount [ 732.291771][T22579] XFS (loop2): Quotacheck needed: Please wait. [ 732.304707][ T6166] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 732.326483][ T6310] usb 2-1: USB disconnect, device number 104 [ 732.385566][T22579] XFS (loop2): Quotacheck: Done. [ 732.544012][ T6403] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 732.567756][T22635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7256'. [ 732.579189][ T6403] ath9k_htc: Failed to initialize the device [ 732.620210][ T43] usb 5-1: ath9k_htc: USB layer deinitialized [ 732.658955][ T6157] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 733.089145][T22648] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7263'. [ 733.129007][T22648] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7263'. [ 733.899293][ T6305] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 734.049244][ T6305] usb 5-1: Using ep0 maxpacket: 16 [ 734.068299][ T6305] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 734.100041][ T6305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.108056][ T6305] usb 5-1: Product: syz [ 734.137422][ T6305] usb 5-1: Manufacturer: syz [ 734.171151][ T6305] usb 5-1: SerialNumber: syz [ 734.188649][ T6305] usb 5-1: config 0 descriptor?? [ 734.197049][T22685] ./file0: Can't open blockdev [ 734.206296][ T6305] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 734.420956][ T6305] usb 5-1: USB disconnect, device number 126 [ 734.820125][T22710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.836720][T22712] loop5: detected capacity change from 0 to 256 [ 734.854261][T22712] exfat: Deprecated parameter 'namecase' [ 734.886695][T22674] loop2: detected capacity change from 0 to 32768 [ 734.900706][T22674] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7275 (22674) [ 734.926751][T22674] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 734.961572][T22712] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 735.000142][T22674] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 735.059966][T22674] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 735.270468][T22674] BTRFS info (device loop2): rebuilding free space tree [ 735.374915][T22674] BTRFS info (device loop2): disabling free space tree [ 735.390229][T22742] loop0: detected capacity change from 0 to 256 [ 735.407408][T22739] loop4: detected capacity change from 0 to 8192 [ 735.418359][T22674] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 735.429448][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 735.454722][T22674] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 735.498857][T22674] BTRFS info (device loop2): setting nodatasum [ 735.506699][ T6117] loop4: p1 p3 p4 [ 735.510523][T22742] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 735.522759][ T6117] loop4: partition table partially beyond EOD, truncated [ 735.529927][T22674] BTRFS info (device loop2): allowing degraded mounts [ 735.541825][ T6117] loop4: p1 start 393217 is beyond EOD, truncated [ 735.558242][T22674] BTRFS info (device loop2): turning on async discard [ 735.572606][ T6117] loop4: p3 size 395700 extends beyond EOD, truncated [ 735.589653][T22674] BTRFS info (device loop2): enabling disk space caching [ 735.602383][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 735.607939][T22674] BTRFS info (device loop2): force clearing of disk cache [ 735.618096][ T6117] loop4: p4 start 117571584 is beyond EOD, truncated [ 735.620948][T22674] BTRFS info (device loop2): force zlib compression, level 3 [ 735.625448][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.646019][ T9] usb 2-1: config 0 has no interface number 0 [ 735.654006][ T6310] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 735.660876][T22739] loop4: p1 p3 p4 [ 735.679755][T22739] loop4: partition table partially beyond EOD, truncated [ 735.682420][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 735.688573][T22739] loop4: p1 start 393217 is beyond EOD, [ 735.716835][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.730972][T22739] truncated [ 735.734088][T22739] loop4: p3 size 395700 extends beyond EOD, truncated [ 735.751413][ T9] usb 2-1: Product: syz [ 735.764487][ T9] usb 2-1: Manufacturer: syz [ 735.773901][T22674] BTRFS info (device loop2): balance: start -susage=3,devid=0,vrange=1..3,limit=233 [ 735.776819][ T9] usb 2-1: SerialNumber: syz [ 735.795212][T22739] loop4: p4 start 117571584 is beyond EOD, truncated [ 735.802438][T22674] BTRFS info (device loop2): balance: ended with status: 0 [ 735.813380][ T9] usb 2-1: config 0 descriptor?? [ 735.839832][ T6338] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 735.849803][ T6310] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 735.859672][ T6310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.867663][ T6310] usb 6-1: Product: syz [ 735.876968][ T6310] usb 6-1: Manufacturer: syz [ 735.903706][ T6310] usb 6-1: SerialNumber: syz [ 735.961840][ T6310] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 735.992816][ T6157] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 736.011480][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 736.029562][ T6338] usb 4-1: Using ep0 maxpacket: 32 [ 736.051711][ T6338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.071011][ T6403] usb 2-1: USB disconnect, device number 105 [ 736.133634][ T6338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 736.168531][ T6338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 736.219630][ T6338] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 736.294460][ T6338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 736.323463][ T6338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 736.373087][ T6338] usb 4-1: SerialNumber: syz [ 736.414057][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 736.543498][ T6125] udevd[6125]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 736.659966][ T6338] usb 4-1: USB disconnect, device number 105 [ 737.666844][ T6310] usb 6-1: USB disconnect, device number 114 [ 737.672943][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 737.685105][ T9] ath9k_htc: Failed to initialize the device [ 737.698988][ T6310] usb 6-1: ath9k_htc: USB layer deinitialized [ 737.980294][T22790] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 738.030531][T22792] SET target dimension over the limit! [ 738.184749][T22788] xt_CT: No such helper "netbios-ns" [ 738.290504][ T30] audit: type=1326 audit(1762122004.002:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22797 comm="syz.1.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dd58efc9 code=0x7ffc0000 [ 738.394407][ T30] audit: type=1326 audit(1762122004.042:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22797 comm="syz.1.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f46dd58efc9 code=0x7ffc0000 [ 738.510035][ T30] audit: type=1326 audit(1762122004.042:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22797 comm="syz.1.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dd58efc9 code=0x7ffc0000 [ 738.625478][ T30] audit: type=1326 audit(1762122004.042:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22797 comm="syz.1.7326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dd58efc9 code=0x7ffc0000 [ 738.658582][T22816] loop0: detected capacity change from 0 to 512 [ 738.868875][T22824] netlink: 'syz.4.7339': attribute type 7 has an invalid length. [ 738.934955][T22827] loop2: detected capacity change from 0 to 1024 [ 739.003465][T22827] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 739.054588][T22821] loop1: detected capacity change from 0 to 4096 [ 739.825330][T22853] netlink: 'syz.2.7353': attribute type 5 has an invalid length. [ 739.962037][T22853] ip6erspan0: entered promiscuous mode [ 739.977994][T22857] loop5: detected capacity change from 0 to 256 [ 739.994721][T22819] loop3: detected capacity change from 0 to 32768 [ 740.002470][ T6310] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 740.027501][T22857] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 740.116197][T22819] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 740.202355][ T6310] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 740.232237][ T6310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.262825][ T6310] usb 1-1: config 0 descriptor?? [ 740.279490][T22819] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 740.340091][T22819] XFS (loop3): Ending clean mount [ 740.430735][ T6311] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 740.453853][T22879] loop1: detected capacity change from 0 to 128 [ 740.463174][T22879] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 740.487772][T22819] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode [ 740.503306][T22879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.536266][T22819] XFS (loop3): Unmount and run xfs_repair [ 740.561096][T22819] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 740.593277][T22819] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 740.604077][ T6311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 740.633558][T22819] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 740.642108][ T6311] usb 3-1: config 1 has an invalid interface number: 255 but max is 1 [ 740.658933][ T6311] usb 3-1: config 1 has no interface number 1 [ 740.681739][ T6311] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 740.685469][T22819] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 740.708974][ T6310] ath6kl: Failed to submit usb control message: -71 [ 740.727820][ T6310] ath6kl: unable to send the bmi data to the device: -71 [ 740.749791][ T6311] usb 3-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 740.760569][T22819] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 740.776867][ T6310] ath6kl: Unable to send get target info: -71 [ 740.794111][ T6311] usb 3-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 740.809178][ T6310] ath6kl: Failed to init ath6kl core: -71 [ 740.815260][T22819] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 740.834245][ T6310] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 740.847686][T22819] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 740.856871][ T6311] usb 3-1: config 1 interface 0 has no altsetting 0 [ 740.856900][ T6311] usb 3-1: config 1 interface 255 has no altsetting 0 [ 740.868875][ T6311] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 740.897514][T22819] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 740.917333][ T6310] usb 1-1: USB disconnect, device number 92 [ 740.923531][ T6311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.943225][T22819] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 740.952150][ T6311] usb 3-1: Product: syz [ 740.952173][ T6311] usb 3-1: Manufacturer: syz [ 740.952192][ T6311] usb 3-1: SerialNumber: syz [ 741.088942][ T6168] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 741.210244][ T6311] smsusb:smsusb_probe: board id=8, interface number 0 [ 741.223004][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7369'. [ 741.263705][ T6311] smsusb:smsusb_probe: board id=8, interface number 255 [ 741.314659][ T6311] usb 3-1: USB disconnect, device number 117 [ 741.751036][T22910] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7375'. [ 741.833771][T22914] loop0: detected capacity change from 0 to 1024 [ 741.932589][T22914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.045977][T22914] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.7377: casefold flag without casefold feature [ 742.321571][ T6158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.510787][T22947] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 742.612924][T22934] loop3: detected capacity change from 0 to 8192 [ 742.718402][T22952] loop2: detected capacity change from 0 to 256 [ 742.772981][T22957] netlink: 'syz.1.7392': attribute type 15 has an invalid length. [ 742.816919][T22957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7392'. [ 743.423108][T22969] loop3: detected capacity change from 0 to 4096 [ 743.492234][T22983] bridge0: port 1(bridge_slave_0) entered listening state [ 743.520707][ T6177] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 743.756862][T22987] loop0: detected capacity change from 0 to 8 [ 743.859691][T22987] SQUASHFS error: Failed to read block 0x34e: -5 [ 743.907459][T22987] SQUASHFS error: Unable to read metadata cache entry [34c] [ 743.942035][T22997] xt_NFQUEUE: number of queues (65535) out of range (got 65541) [ 743.990765][ T30] audit: type=1800 audit(1762122009.701:1153): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7406" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 744.334784][T23008] loop3: detected capacity change from 0 to 512 [ 744.376847][T23008] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 744.420228][T23015] netlink: 'syz.5.7419': attribute type 1 has an invalid length. [ 744.433794][T23008] EXT4-fs (loop3): invalid journal inode [ 744.442116][T23016] loop2: detected capacity change from 0 to 16 [ 744.455064][T23008] EXT4-fs (loop3): can't get journal size [ 744.489557][T23016] erofs (device loop2): mounted with root inode @ nid 36. [ 744.491433][T23015] netlink: 'syz.5.7419': attribute type 2 has an invalid length. [ 744.533321][T23008] EXT4-fs (loop3): orphan cleanup on readonly fs [ 744.540692][T23016] erofs (device loop2): ztailpacking inline data across blocks @ nid 36 [ 744.591788][T23008] EXT4-fs (loop3): 1 truncate cleaned up [ 744.599438][T23008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 744.612528][T23016] erofs (device loop2): ztailpacking inline data across blocks @ nid 36 [ 744.620883][T23016] erofs (device loop2): read error -117 @ 32811 of nid 36 [ 744.782326][T23024] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7424'. [ 744.815675][ T6168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.025900][T23024] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7424'. [ 745.187137][T23041] loop0: detected capacity change from 0 to 2048 [ 745.322619][T23041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.573331][ T6158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.986551][T23065] loop2: detected capacity change from 0 to 8192 [ 746.071966][T23065] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 746.293040][T23083] loop0: detected capacity change from 0 to 8 [ 746.378926][T23083] SQUASHFS error: Corrupted symlink [ 746.665679][T23096] sit0: entered promiscuous mode [ 746.677976][T23062] loop5: detected capacity change from 0 to 32768 [ 746.681910][T23096] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7457'. [ 746.721950][T23095] loop3: detected capacity change from 0 to 1024 [ 746.784176][T23062] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 746.838749][ T30] audit: type=1326 audit(1762122012.550:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23104 comm="syz.4.7460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 746.905619][ T30] audit: type=1326 audit(1762122012.580:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23104 comm="syz.4.7460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 746.929196][ T30] audit: type=1326 audit(1762122012.600:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23104 comm="syz.4.7460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f6da638efc9 code=0x7ffc0000 [ 747.016205][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.025052][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.053438][T23062] XFS (loop5): Ending clean mount [ 747.063499][ T13] hfsplus: b-tree write err: -5, ino 4 [ 747.170442][ T6166] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 747.482813][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7469'. [ 748.376576][ T6338] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 748.453787][T23163] loop5: detected capacity change from 0 to 512 [ 748.528212][T23163] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 748.541573][T23167] loop3: detected capacity change from 0 to 256 [ 748.572634][ T6338] usb 2-1: Using ep0 maxpacket: 32 [ 748.585020][ T6338] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 748.595432][ T6338] usb 2-1: config 0 has no interface number 0 [ 748.602099][ T6338] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 748.622552][ T6338] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 748.640666][ T6338] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 748.644680][T23163] Quota error (device loop5): do_check_range: Getting block 24066 out of range 1-5 [ 748.652095][ T6338] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 748.674033][ T6338] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 748.685798][ T6338] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 748.698999][ T6338] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 748.709061][ T6338] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 748.720429][ T6338] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 748.730644][ T6338] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.751972][T23163] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 748.798138][ T6338] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 748.807544][T23163] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7483: Failed to acquire dquot type 1 [ 748.822419][ T6338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.861904][ T6338] usb 2-1: Product: syz [ 748.869683][T23163] EXT4-fs (loop5): 1 truncate cleaned up [ 748.876344][ T6338] usb 2-1: Manufacturer: syz [ 748.893885][T23163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-450000000000 r/w without journal. Quota mode: writeback. [ 748.914310][ T6338] usb 2-1: SerialNumber: syz [ 748.954432][ T6338] usb 2-1: config 0 descriptor?? [ 748.961158][T23149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 748.990918][T23149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 749.018310][ T6338] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 749.062661][ T6338] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 749.111650][ T6338] scsi host1: microtekX6 [ 749.116981][T23163] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.7483: iget: bad extended attribute block 2 [ 749.228966][ T6166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-450000000000. [ 749.403476][ T6338] usb 2-1: USB disconnect, device number 106 [ 749.664482][T23198] loop0: detected capacity change from 0 to 128 [ 749.782044][T23198] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 749.806878][T23169] loop2: detected capacity change from 0 to 32768 [ 749.858207][T23198] ext4 filesystem being mounted at /1250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 749.911770][T23169] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 750.043186][T23169] (syz.2.7486,23169,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 750.135645][ T6158] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 750.244884][ T6157] ocfs2: Unmounting device (7,2) on (node local) [ 750.530403][T23225] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7512'. [ 750.680098][T23231] netlink: 964 bytes leftover after parsing attributes in process `syz.4.7514'. [ 750.966022][T23236] loop0: detected capacity change from 0 to 4096 [ 751.012495][T23236] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 751.105915][T23236] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 751.138646][T23236] ntfs3(loop0): ino=19, mi_enum_attr [ 751.184305][T23249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7523'. [ 751.223969][T23249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7523'. [ 751.240657][T23236] ntfs3(loop0): failed to convert "c46c" to default [ 751.262517][T23236] ntfs3(loop0): ino=20, mi_enum_attr [ 751.304930][T23254] netlink: 830 bytes leftover after parsing attributes in process `syz.5.7525'. [ 751.504317][T23260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7528'. [ 751.539174][T23260] bond2: option ad_actor_sys_prio: invalid value (0) [ 751.546261][T23260] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 751.607837][T23260] bond2 (unregistering): Released all slaves [ 751.637898][T23267] netlink: 'syz.3.7533': attribute type 79 has an invalid length. [ 751.698283][T23269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.785276][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7534'. [ 751.930946][T23275] Cannot find del_set index 43 as target [ 752.218957][T23291] loop4: detected capacity change from 0 to 256 [ 752.287295][T23291] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 752.357824][T23295] loop5: detected capacity change from 0 to 16 [ 752.406293][T23295] erofs (device loop5): mounted with root inode @ nid 36. [ 752.464575][T23295] syz.5.7545: attempt to access beyond end of device [ 752.464575][T23295] loop5: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 752.499415][T23301] netlink: 'syz.0.7548': attribute type 10 has an invalid length. [ 752.510588][T23295] syz.5.7545: attempt to access beyond end of device [ 752.510588][T23295] loop5: rw=0, sector=46, nr_sectors = 1 limit=16 [ 752.530166][T23301] batman_adv: batadv0: Adding interface: wlan0 [ 752.587678][T23301] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.615044][T23295] erofs (device loop5): read error -5 @ 0 of nid 36 [ 752.716300][T23306] netlink: 'syz.3.7549': attribute type 10 has an invalid length. [ 752.737629][T23301] batman_adv: batadv0: Interface activated: wlan0 [ 752.754644][T23306] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7549'. [ 752.787337][T23310] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 752.971117][T23314] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7554'. [ 753.116338][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7559'. [ 753.140881][T23324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7559'. [ 753.395805][T23336] xt_SECMARK: invalid mode: 2 [ 753.465050][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7566'. [ 754.570742][T23392] loop4: detected capacity change from 0 to 256 [ 754.753919][T23392] FAT-fs (loop4): Directory bread(block 64) failed [ 754.790700][T23392] FAT-fs (loop4): Directory bread(block 65) failed [ 754.832874][T23392] FAT-fs (loop4): Directory bread(block 66) failed [ 754.839483][T23392] FAT-fs (loop4): Directory bread(block 67) failed [ 754.890381][T23392] FAT-fs (loop4): Directory bread(block 68) failed [ 754.920516][T23392] FAT-fs (loop4): Directory bread(block 69) failed [ 754.933665][T23392] FAT-fs (loop4): Directory bread(block 70) failed [ 754.956561][T23392] FAT-fs (loop4): Directory bread(block 71) failed [ 754.976977][T23392] FAT-fs (loop4): Directory bread(block 72) failed [ 755.007314][T23392] FAT-fs (loop4): Directory bread(block 73) failed [ 755.372964][T23420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7606'. [ 755.384687][T23377] loop0: detected capacity change from 0 to 32768 [ 755.407006][T23420] netlink: 'syz.5.7606': attribute type 1 has an invalid length. [ 756.157463][T23450] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.183378][T23453] binder: 23451:23453 ioctl c0306201 200000000540 returned -22 [ 756.374295][T23457] comedi comedi2: multiq3: I/O port conflict (0x10000,16) [ 756.422972][ T6310] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 756.597450][ T6310] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 756.613451][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 756.660242][ T6310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 756.675795][T23468] loop2: detected capacity change from 0 to 16 [ 756.688219][ T6310] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 756.726597][ T6310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.749097][T23468] erofs (device loop2): mounted with root inode @ nid 36. [ 756.801840][ T6310] usb 1-1: config 0 descriptor?? [ 756.821900][T23455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 756.842262][ T6310] hub 1-1:0.0: USB hub found [ 756.857201][T23474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7632'. [ 756.968146][T23477] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 756.988441][ T6311] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 757.059193][ T6310] hub 1-1:0.0: 2 ports detected [ 757.141252][T23486] loop1: detected capacity change from 0 to 128 [ 757.163043][ T6311] usb 6-1: Using ep0 maxpacket: 16 [ 757.182654][ T6311] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 757.192415][ T6403] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 757.214882][ T6311] usb 6-1: config 0 has no interface number 0 [ 757.221057][ T6311] usb 6-1: config 0 interface 237 has no altsetting 0 [ 757.243920][T23486] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.269118][ T6310] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 757.284418][T23492] loop2: detected capacity change from 0 to 512 [ 757.302138][ T6310] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 757.317943][ T6311] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 757.330390][T23486] ext4 filesystem being mounted at /1303/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 757.343228][ T6311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.368510][ T6310] usbhid 1-1:0.0: can't add hid device: -71 [ 757.389385][T23492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.404076][ T6310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 757.412669][ T6311] usb 6-1: Product: syz [ 757.432254][T23492] ext4 filesystem being mounted at /1185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.438219][ T6403] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.444760][T23486] EXT4-fs warning (device loop1): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 757.454223][ T6311] usb 6-1: Manufacturer: syz [ 757.492894][ T6403] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 757.506018][ T6310] usb 1-1: USB disconnect, device number 93 [ 757.508283][T23492] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.7640: corrupted xattr block 33: invalid header [ 757.523128][ T6311] usb 6-1: SerialNumber: syz [ 757.556909][ T6311] usb 6-1: config 0 descriptor?? [ 757.566344][ T6403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 757.603632][T23492] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.7640: corrupted xattr block 33: invalid header [ 757.617143][ T6311] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 found [ 757.618589][ T6403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 757.618621][ T6403] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 757.621686][ T6403] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 757.655757][T23492] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 757.665273][ T6403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 757.676461][ T6403] usb 5-1: Product: syz [ 757.679041][ T6160] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 757.680639][ T6403] usb 5-1: Manufacturer: syz [ 757.694503][ T6403] usb 5-1: SerialNumber: syz [ 757.704480][ T6403] usb 5-1: config 0 descriptor?? [ 757.825139][T23506] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 757.836986][ T6311] snd_usb_podhd 6-1:0.237: cannot get proper max packet size [ 757.842023][ T6157] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.856553][ T6311] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 now disconnected [ 757.880428][ T6311] snd_usb_podhd 6-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 757.888755][T23506] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 757.935767][ T6403] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 757.970709][ T6403] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 758.029727][ T6311] usb 6-1: USB disconnect, device number 115 [ 758.150047][ T6403] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 758.179759][ T6403] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 758.233919][ T6403] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 758.263868][ T6403] usb 5-1: USB disconnect, device number 127 [ 758.398924][T23521] netlink: 'syz.3.7654': attribute type 3 has an invalid length. [ 758.425329][T23521] netlink: 'syz.3.7654': attribute type 3 has an invalid length. [ 758.536739][T23526] loop0: detected capacity change from 0 to 1024 [ 758.877290][T23529] loop3: detected capacity change from 0 to 4096 [ 758.895808][T23529] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 758.982015][T23540] mmap: syz.4.7661 (23540): VmData 175878144 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 759.059320][T23529] ntfs3(loop3): mft corrupted [ 759.060114][T23512] loop2: detected capacity change from 0 to 32768 [ 759.079623][T23529] ntfs3(loop3): Failed to load $Extend (-22). [ 759.130452][T23529] ntfs3(loop3): Failed to initialize $Extend. [ 759.173412][T23512] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 759.254771][T23529] ntfs3(loop3): ino=1e, mi_enum_attr [ 759.262533][T23529] ntfs3(loop3): ino=1e, mi_enum_attr [ 759.417301][T23512] XFS (loop2): Ending clean mount [ 759.674472][ T6157] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 760.154110][T23586] overlayfs: missing 'lowerdir' [ 760.722573][T23568] loop3: detected capacity change from 0 to 32768 [ 760.804983][T23568] read_mapping_page failed! [ 760.831586][T23568] ialloc: diAlloc returned -5! [ 761.184833][T23620] bridge4: entered promiscuous mode [ 761.214511][T23620] bridge4: entered allmulticast mode [ 761.531843][T23636] loop4: detected capacity change from 0 to 128 [ 761.583437][T23636] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 761.658400][T23636] ext4 filesystem being mounted at /1192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 761.690367][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.697602][ T6403] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 761.814863][T23636] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.7704: No space for directory leaf checksum. Please run e2fsck -D. [ 761.888395][T23636] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.7704: checksumming directory block 0 [ 761.916624][ T6403] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 761.928910][ T6403] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.948873][ T6403] usb 6-1: Product: syz [ 761.953115][ T6403] usb 6-1: Manufacturer: syz [ 761.973253][T23628] loop0: detected capacity change from 0 to 32768 [ 761.976087][ T6403] usb 6-1: SerialNumber: syz [ 762.017878][T23628] (syz.0.7700,23628,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 762.044394][ T6403] usb 6-1: config 0 descriptor?? [ 762.049517][T23628] (syz.0.7700,23628,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 762.058809][ T6403] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 116 [ 762.110049][ T6167] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.127790][T23608] loop1: detected capacity change from 0 to 32768 [ 762.158726][T23628] JBD2: Ignoring recovery information on journal [ 762.179075][T23608] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 762.322172][T23608] XFS (loop1): Ending clean mount [ 762.366482][T23608] XFS (loop1): Quotacheck needed: Please wait. [ 762.385630][T23628] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 762.476434][ T6403] (null): failure reading functionality [ 762.482440][T23608] XFS (loop1): Quotacheck: Done. [ 762.495371][ T6403] i2c i2c-1: failure reading functionality [ 762.518449][ T6403] i2c i2c-1: connected i2c-tiny-usb device [ 762.568027][ T6403] usb 6-1: USB disconnect, device number 116 [ 762.571090][T23628] [ 762.576351][T23628] ====================================================== [ 762.583356][T23628] WARNING: possible circular locking dependency detected [ 762.590367][T23628] syzkaller #0 Not tainted [ 762.594772][T23628] ------------------------------------------------------ [ 762.601779][T23628] syz.0.7700/23628 is trying to acquire lock: [ 762.607834][T23628] ffff8880679ded80 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1ca/0x270 [ 762.620379][T23628] [ 762.620379][T23628] but task is already holding lock: [ 762.627726][T23628] ffff88804d6580a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30 [ 762.637305][T23628] [ 762.637305][T23628] which lock already depends on the new lock. [ 762.637305][T23628] [ 762.647689][T23628] [ 762.647689][T23628] the existing dependency chain (in reverse order) is: [ 762.656688][T23628] [ 762.656688][T23628] -> #6 (&dquot->dq_lock){+.+.}-{4:4}: [ 762.664341][T23628] lock_acquire+0x120/0x360 [ 762.669354][T23628] __mutex_lock+0x187/0x1350 [ 762.674461][T23628] dqget+0x72a/0xf10 [ 762.678866][T23628] dquot_transfer+0x2f8/0x6d0 [ 762.684053][T23628] ext4_setattr+0x865/0x1bc0 [ 762.689152][T23628] notify_change+0xc1a/0xf40 [ 762.694258][T23628] chown_common+0x40c/0x5c0 [ 762.699273][T23628] do_fchownat+0x161/0x270 [ 762.704198][T23628] __x64_sys_fchownat+0xb5/0xd0 [ 762.709560][T23628] do_syscall_64+0xfa/0xfa0 [ 762.714580][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.720980][T23628] [ 762.720980][T23628] -> #5 (&ei->xattr_sem){++++}-{4:4}: [ 762.728536][T23628] lock_acquire+0x120/0x360 [ 762.733547][T23628] down_read+0x46/0x2e0 [ 762.738224][T23628] ext4_setattr+0x855/0x1bc0 [ 762.743324][T23628] notify_change+0xc1a/0xf40 [ 762.748431][T23628] chown_common+0x40c/0x5c0 [ 762.753441][T23628] do_fchownat+0x161/0x270 [ 762.758363][T23628] __x64_sys_chown+0x82/0xa0 [ 762.763461][T23628] do_syscall_64+0xfa/0xfa0 [ 762.768482][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.774888][T23628] [ 762.774888][T23628] -> #4 (jbd2_handle){++++}-{0:0}: [ 762.782187][T23628] lock_acquire+0x120/0x360 [ 762.787200][T23628] start_this_handle+0x1fa7/0x21c0 [ 762.792830][T23628] jbd2__journal_start+0x2c1/0x5b0 [ 762.798458][T23628] jbd2_journal_start+0x2a/0x40 [ 762.803830][T23628] ocfs2_start_trans+0x376/0x6d0 [ 762.809281][T23628] ocfs2_shutdown_local_alloc+0x200/0xa10 [ 762.815519][T23628] ocfs2_dismount_volume+0x201/0x8d0 [ 762.821322][T23628] generic_shutdown_super+0x135/0x2c0 [ 762.827206][T23628] kill_block_super+0x44/0x90 [ 762.832397][T23628] deactivate_locked_super+0xbc/0x130 [ 762.838278][T23628] cleanup_mnt+0x425/0x4c0 [ 762.843203][T23628] task_work_run+0x1d4/0x260 [ 762.848308][T23628] exit_to_user_mode_loop+0xe9/0x130 [ 762.854098][T23628] do_syscall_64+0x2bd/0xfa0 [ 762.859206][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.865603][T23628] [ 762.865603][T23628] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 762.874116][T23628] lock_acquire+0x120/0x360 [ 762.879133][T23628] down_read+0x46/0x2e0 [ 762.883805][T23628] ocfs2_start_trans+0x36a/0x6d0 [ 762.889255][T23628] ocfs2_shutdown_local_alloc+0x200/0xa10 [ 762.895494][T23628] ocfs2_dismount_volume+0x201/0x8d0 [ 762.901297][T23628] generic_shutdown_super+0x135/0x2c0 [ 762.907185][T23628] kill_block_super+0x44/0x90 [ 762.912378][T23628] deactivate_locked_super+0xbc/0x130 [ 762.918261][T23628] cleanup_mnt+0x425/0x4c0 [ 762.923187][T23628] task_work_run+0x1d4/0x260 [ 762.928297][T23628] exit_to_user_mode_loop+0xe9/0x130 [ 762.934090][T23628] do_syscall_64+0x2bd/0xfa0 [ 762.939199][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.945599][T23628] [ 762.945599][T23628] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 762.953076][T23628] lock_acquire+0x120/0x360 [ 762.958088][T23628] ocfs2_start_trans+0x26b/0x6d0 [ 762.963539][T23628] ocfs2_write_info+0x11d/0x350 [ 762.968903][T23628] quota_setinfo+0x2f9/0x310 [ 762.973999][T23628] __se_sys_quotactl+0x279/0x950 [ 762.979454][T23628] do_syscall_64+0xfa/0xfa0 [ 762.984474][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.990872][T23628] [ 762.990872][T23628] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 762.999736][T23628] lock_acquire+0x120/0x360 [ 763.004747][T23628] down_write+0x96/0x1f0 [ 763.009494][T23628] ocfs2_lock_global_qf+0x1e8/0x270 [ 763.015206][T23628] ocfs2_write_info+0xd6/0x350 [ 763.020481][T23628] quota_setinfo+0x2f9/0x310 [ 763.025578][T23628] __se_sys_quotactl+0x279/0x950 [ 763.031036][T23628] do_syscall_64+0xfa/0xfa0 [ 763.036054][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.042452][T23628] [ 763.042452][T23628] -> #0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}: [ 763.052965][T23628] validate_chain+0xb9b/0x2140 [ 763.058245][T23628] __lock_acquire+0xab9/0xd20 [ 763.063427][T23628] lock_acquire+0x120/0x360 [ 763.068434][T23628] down_write+0x96/0x1f0 [ 763.073181][T23628] ocfs2_lock_global_qf+0x1ca/0x270 [ 763.078890][T23628] ocfs2_acquire_dquot+0x2b0/0xb30 [ 763.084515][T23628] dqget+0x7b1/0xf10 [ 763.088920][T23628] dquot_set_dqblk+0x2b/0xfa0 [ 763.094110][T23628] quota_setquota+0x4b7/0x540 [ 763.099295][T23628] __se_sys_quotactl+0x279/0x950 [ 763.104752][T23628] do_syscall_64+0xfa/0xfa0 [ 763.109773][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.116173][T23628] [ 763.116173][T23628] other info that might help us debug this: [ 763.116173][T23628] [ 763.126382][T23628] Chain exists of: [ 763.126382][T23628] &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ei->xattr_sem --> &dquot->dq_lock [ 763.126382][T23628] [ 763.142204][T23628] Possible unsafe locking scenario: [ 763.142204][T23628] [ 763.149639][T23628] CPU0 CPU1 [ 763.154987][T23628] ---- ---- [ 763.160331][T23628] lock(&dquot->dq_lock); [ 763.164739][T23628] lock(&ei->xattr_sem); [ 763.171578][T23628] lock(&dquot->dq_lock); [ 763.178507][T23628] lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]); [ 763.185801][T23628] [ 763.185801][T23628] *** DEADLOCK *** [ 763.185801][T23628] [ 763.193928][T23628] 2 locks held by syz.0.7700/23628: [ 763.199107][T23628] #0: ffff88807f6800e0 (&type->s_umount_key#102){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 763.209059][T23628] #1: ffff88804d6580a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30 [ 763.219083][T23628] [ 763.219083][T23628] stack backtrace: [ 763.224962][T23628] CPU: 1 UID: 0 PID: 23628 Comm: syz.0.7700 Not tainted syzkaller #0 PREEMPT(full) [ 763.224988][T23628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 763.225002][T23628] Call Trace: [ 763.225012][T23628] [ 763.225022][T23628] dump_stack_lvl+0x189/0x250 [ 763.225058][T23628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.225088][T23628] ? __pfx__printk+0x10/0x10 [ 763.225111][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225136][T23628] ? print_lock_name+0xde/0x100 [ 763.225158][T23628] print_circular_bug+0x2ee/0x310 [ 763.225189][T23628] check_noncircular+0x134/0x160 [ 763.225219][T23628] validate_chain+0xb9b/0x2140 [ 763.225244][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225273][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225297][T23628] ? lockdep_unlock+0x89/0x120 [ 763.225329][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225353][T23628] ? look_up_lock_class+0x74/0x170 [ 763.225384][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225409][T23628] ? register_lock_class+0x51/0x320 [ 763.225432][T23628] __lock_acquire+0xab9/0xd20 [ 763.225456][T23628] ? ocfs2_lock_global_qf+0x1ca/0x270 [ 763.225482][T23628] lock_acquire+0x120/0x360 [ 763.225502][T23628] ? ocfs2_lock_global_qf+0x1ca/0x270 [ 763.225535][T23628] down_write+0x96/0x1f0 [ 763.225553][T23628] ? ocfs2_lock_global_qf+0x1ca/0x270 [ 763.225577][T23628] ? __pfx_down_write+0x10/0x10 [ 763.225609][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225636][T23628] ? do_raw_spin_unlock+0x122/0x240 [ 763.225668][T23628] ocfs2_lock_global_qf+0x1ca/0x270 [ 763.225696][T23628] ? __pfx_ocfs2_lock_global_qf+0x10/0x10 [ 763.225726][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225756][T23628] ocfs2_acquire_dquot+0x2b0/0xb30 [ 763.225786][T23628] ? from_kuid+0x1b0/0x640 [ 763.225807][T23628] ? __pfx_ocfs2_acquire_dquot+0x10/0x10 [ 763.225834][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225860][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.225885][T23628] ? percpu_counter_add_batch+0xea/0x1e0 [ 763.225920][T23628] dqget+0x7b1/0xf10 [ 763.225949][T23628] dquot_set_dqblk+0x2b/0xfa0 [ 763.225982][T23628] quota_setquota+0x4b7/0x540 [ 763.226004][T23628] ? __pfx_quota_setquota+0x10/0x10 [ 763.226023][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.226055][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.226085][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.226110][T23628] ? do_quotactl+0x734/0x860 [ 763.226146][T23628] __se_sys_quotactl+0x279/0x950 [ 763.226178][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.226203][T23628] ? __se_sys_futex+0x36f/0x400 [ 763.226238][T23628] ? __pfx___se_sys_quotactl+0x10/0x10 [ 763.226270][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.226299][T23628] ? do_syscall_64+0xbe/0xfa0 [ 763.226328][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.226355][T23628] do_syscall_64+0xfa/0xfa0 [ 763.226384][T23628] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.226413][T23628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.226434][T23628] ? srso_alias_return_thunk+0x5/0xfbef5 [ 763.226459][T23628] ? exc_page_fault+0xab/0x100 [ 763.226487][T23628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.226509][T23628] RIP: 0033:0x7fd2bd78efc9 [ 763.226529][T23628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.226548][T23628] RSP: 002b:00007fd2be5fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 763.226570][T23628] RAX: ffffffffffffffda RBX: 00007fd2bd9e5fa0 RCX: 00007fd2bd78efc9 [ 763.226587][T23628] RDX: 0000000000000000 RSI: 0000200000005bc0 RDI: ffffffff80000800 [ 763.226602][T23628] RBP: 00007fd2bd811f91 R08: 0000000000000000 R09: 0000000000000000 [ 763.226616][T23628] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 763.226631][T23628] R13: 00007fd2bd9e6038 R14: 00007fd2bd9e5fa0 R15: 00007fff05abb0d8 [ 763.226656][T23628] [ 763.740478][T23665] loop3: detected capacity change from 0 to 256 [ 763.785891][T23665] exfat: Deprecated parameter 'namecase' [ 763.791689][T23665] exfat: Deprecated parameter 'utf8' [ 763.844391][ T6160] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 763.858840][T23665] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 763.864928][ T6158] ocfs2: Unmounting device (7,0) on (node local)