last executing test programs: 14.948286313s ago: executing program 0 (id=8101): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000001500)) 14.784604859s ago: executing program 0 (id=8102): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x1, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f1439fae"}, 0x0, 0x2, {0x0}}) 14.582573998s ago: executing program 0 (id=8103): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) sendmmsg$inet_sctp(r0, &(0x7f0000002980)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x820b, 0x5, 0x8}}], 0x20}], 0x1, 0x20000850) 14.367310091s ago: executing program 0 (id=8105): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@noswap}]}) 14.124764236s ago: executing program 0 (id=8108): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000740)={'lo\x00', {0x2, 0x0, @broadcast}}) 13.68961075s ago: executing program 0 (id=8113): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 7.637952616s ago: executing program 3 (id=8175): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80585414, &(0x7f00000000c0)) 7.463647161s ago: executing program 3 (id=8177): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4) sendmmsg$inet6(r0, &(0x7f00000059c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000003980)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}], 0x3, 0xc000) 7.352002886s ago: executing program 5 (id=8178): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) bind$bt_hci(r0, &(0x7f00000003c0), 0x6) 7.166138905s ago: executing program 3 (id=8179): openat$snapshot(0xffffff9c, &(0x7f0000001380), 0x8a01, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfdef) 7.043842921s ago: executing program 5 (id=8180): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x28, 0x4470, &(0x7f0000008c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) rmdir(&(0x7f00000004c0)='./file1\x00') 6.103511619s ago: executing program 3 (id=8185): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file2\x00', 0x0, &(0x7f0000000180), 0x1, 0x9715, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0xf3) fadvise64(r0, 0xfffffffffffffffc, 0x2, 0x4) 5.936371213s ago: executing program 2 (id=8186): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={r1, 0x1, 0x0, 0x0, 0x0}) 5.486910146s ago: executing program 4 (id=8187): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000001a40)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5f87, &(0x7f000000d1c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5.386814077s ago: executing program 2 (id=8188): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000400)=@gcm_256={{0x304}, "8864defd620b1234", "be9b8eadc95a285fe519039c272bac6427267883376240b658ae82bbb3bd183d", "7bb7a48e", "ebe492104faf9ea0"}, 0x38) 5.155846314s ago: executing program 5 (id=8189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xea7e8000) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000004400), &(0x7f0000002140)=0x4) 5.106654569s ago: executing program 2 (id=8190): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 4.839800745s ago: executing program 3 (id=8191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 3.899114903s ago: executing program 4 (id=8192): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000000), 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000800)="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") 3.12731849s ago: executing program 1 (id=8196): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x2, [@datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], 'u'}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000340)}, 0x20) 2.942052313s ago: executing program 1 (id=8197): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x20002000) 2.321313296s ago: executing program 4 (id=8198): r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 1.721213464s ago: executing program 4 (id=8199): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045006, 0x0) 1.595286354s ago: executing program 4 (id=8200): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000400)='./file1\x00', 0x0, &(0x7f0000000180)={[{@attr2}, {@uquota}, {@grpquota}]}, 0x3, 0x9856, &(0x7f000001c900)="$eJzs3QW4ZXWhuP8zw9CNhYEMjUU3BqEggoCElBLSkgJKGIAIAqKApKAIKFIiSIl0d3d3d3f8n2FmdBxfuPr/3edyr+/7Ps+Zvffaa6+z9vez1jpnsw57r7jIsgsNDEwyMLyRl3/v0Jc/efSWLy+007HXH/HSoocvfvSIyWMNvxgydMTlVCMupx4YGBg0YjmDhk8bPOTEkwYPjDMwMHjU5U4w7viDJhgYWGvEzQVGXM49/GLCa0bO99Zo8YoOW41Buw7/Gv5NBwYGxh125ZmBmVcYdTkj1muWf3qi0lZccNFF/m71N7dh4zdkxPVRv8Ya/jXhZQMDE146wNvHoPf2Gb39/SfZ+4KVVn6P1+P/RCsuuOhio/kP2xfHGDFt7mH7+Oj7oLHRt/Ohc98x8hg0CA+c/0daccFFlhh45+P8wKpvHrT5W28fNwePNzAwePyBgcETDAwMnnBgYPBEAwODJ36vXer/rfd046uqqqr3pAUXmn2hYa/3Rvt9YJyRv9fS74WrvLHUHQMDA2MOn2fwXCNfC1ZVVVVVVVXV/84WXGj2heH1/yTv9vr/hFNfnbHX/1VVVVVVVVX/d1pswYVmH/Y6frTX/5O/2+v/7R54ccMRf/s/9/BHvfnePomqqqqqqqqqeteW+erbr//HH+31/9B3e/3/8Py7PDhivpH/3eCNURY5aJS/J3htlOljjDL/q6NMHzLK9FHnH2tgYPCQEdNf//vkweMNu++f5x88ybD1HjH9lVGmz/L3/795yLSjTJ91lOnTjzJ9thHrOmz6DKNMn3OU+Wf8V8a2qqqqqqqqqqqqqqqqqqrqf6o3nzj1zL+/5/vHB0Z5//a/vY/7iL8LGHTc2Vdf/Z6t6P+OBv3z30Ns916v0/9rw5zHOWrowMDGy7/Xq1LvQe/15zXUe1v+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uHc7//+39/6c4fK2R/8/83IfuPuVEoz52/VGuj/M/utbvWf+p5/8H1h80MDDCd5JhrksuuMxyMw4MDEw05e6HzjHwt/vmGXbf/JONMeINEoa/DcJ0Q3jB2434VPTtRsw6YhnHvb38xd46ZIxBo63EKE168mGHrbfiS3OMfjn9Oz+PwSOvfOCSrRYe+V4Wg0eb6Z2205HLH/lcRncese4zDlv3mbfYaNOZN996m8+sv9Ea66697tobzzv33PPMOfdc88428zrrb7j2LMP/facxG/r2v9P8K2M2+ehj9sSCo47Z6M/tncZs6LuP2dtLHHuv1TYYOWajr9p/NWbTvPuYDV1/xDcaMnTMgdXfHptBAwNDph1zYKthN2Yde2BgyHQj5p182LyfnWzwwMAef3+iw66N/bdtcNB2w+ZZcZFlF/r7x+7/88fvv8Pn2Y81/GLIiCEZMtWIy6mHf5tJBv6+KQ4ecuJJg4c9938Y5gnGHX/QBAMDa424ucCIy3lH3HvlyPne4XPWR1vRt99mZdfhX3/zGHfYlWOWnvimUZfzDgT/Hf3/+vn/T17zDPrbQA0a8TVinuFeCy662N+/19vDsMDI94QZ9rNlmMn/w8fY/5f90/oOHeftN7l9p/V9l/fFHf78Yfua/rHzhv53vS8uHzuWePvfof/KsWPg3Y8dY/z96t+nrn3FFKMfOxZ/51X8h/1i5BiNPdpM73TsmHH/Bbd9+9j07seOJdYf8UFDfz92DB4YGDLNyGPHsAPJ9GMO7DHsxmzDbsww5sARw27M/vaNcQfOHnZjpjU32XCtQW+/bc+I5c4ybLkLTDbo7Sd/9cwLHj3G3m+9Ne2IdZlltAPriO1j6Kg/HxecbPiwjXwsLffuLYbfN/2I5c76byx35GNpufNsNvy+GUYsd7bRljvGuyx35GNH7g/DZn17f5hx0D/84Sfsv4uMtv8OGnlYH+UhI7/GGv414WUjPxsK9pd/67hD++8k77K+7/K5Vri9DZu2w5JXnPrf9blWtL7jvPv6vtPncL/j+m4w7lZL/Tes76BR1vcftrNN5xu+rcw4Yjub89/Yfkc+dvTj2Jhv3zucYcZ/5Ti2wD8dx7YfY/BoKz9K7/Q70Fow//Drk/9tafMeOcbEI8d+zNGW+1/9DjTjux/HJll/tMctcvDAIBrzhx8/bL2x/4sxH3PgH39XHznmIx/7bmM+wz+P+aB/GvN53n3M/9XfO2ecZvj9Y7zLmA/eefMlR475WP/mmM/w7475AgNj0JjvccDwcXu34+k7jfnIx/7jmA8Z+NLAwMC0I8Z8+n9lO5/lv2c7Hw/mH379gb9NumSKM3Yb5Rgz6N8Z8+n/3TEf+rftfNq375t68MBYYw1stcYWW2w26/B/R96cbfi/fCx6+v7h4/xuP0vfyWjkY99tv5j2XzEa+t9j9JEh/zz/yBcdI28vf/Yxk/7/PRZN++8ZDVpkgI9Fp1w0fNze7feidxrzkY+ln4NDR3n86K/r3uX9KPE5DZu23/773D5ykSMe1vtR/uv9w2Y78r/xrT/6Qb7+U+u//7vL313+7vJ3l7+4dzj//7f3/394kmUfG/Eiecw951t3zfd6fd/j/qPP/4/w/Yfz/2uuO9+ew14KjrjvXc/PDp/nf+X52bmHX0x4zcj5Rj8/yCv6zudnZ9hrpmUG/mfOz/7/auS++i+8ju/47y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Duf/R/6N8tAD37h/uxEnQsfcd58133iv1/c97j/6/P8I3384///GmvvsO3jgb/e96/n/4fM4zv8vdeDeJw38Lz7/P3Jf7fx//Rfl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7i3uH8/wIj/w5grtXW2XXk3wNsPOsXdnyv1/c97j/1/H+f/++t47+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Ijz/wOjfazj0m0XGJz//7/dO/h/LX/M4r9M/pjFf9n8MYv/cvljFv/l88cs/l/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9v5I9Z/L+ZP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/b+WPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP7fzh+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP7fyR+z+G+WP2bx3zx/zOK/Rf6Yxf+7+WMW/+/lj1n8t8wfs/hvlT9m8d86f8ziv03+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMV/2/wxi/92+WMW/+3zxyz+P84fs/jvkD9m8f9J/pjFf8f8MYv/TvljFv+f5o9Z/HfOH7P475I/ZvHfNX/M4v+z/DGL/275Yxb/n+ePWfx/kT9m8d89f8ziv0f+mMV/z/wxi/8v88cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/+v8scs/gfkj1n8D8wfs/j/On/M4v+b/DGL/0H5Yxb/3+aPWfwPzh+z+B+SP2bxPzR/zOL/u/wxi//v88cs/oflj1n8/5A/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/n/MH7P4H5M/ZvH/U/6Yxf/Y/DGL/3H5Yxb/P+ePWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/1/yxyz+p+SPWfz/mj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj0n8Bw3kj1n8B+WPWfwH549Z/MfIH7P4D8kfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/yfLHLP7vyx+z+L8/f8zi/4H8MYv/B/PHLP4fyh+z+E+eP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnyJ/zOL/8fwxi/+U+WMW/6H5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv9P5I9Z/D+ZP2bx/1T+mMX/0/ljFv/P5I9Z/GfKH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/7PljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bx/2L+mMX/S/ljFv9F8scs/ovmj1n8v5w/ZvFfLH/M4v+V/DGL/+L5Yxb/JfLHLP5fzR+z+C+ZP2bxXyp/zOK/dP6Yxf9r+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bx/3r+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+H8jf8zi/838MYv/qvljFv/V8scs/qvnj1n818gfs/h/K3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f92/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8f9O/pjFf7P8MYv/5vljFv8t8scs/t/NH7P4fy9/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP7b5o9Z/LfLH7P4b58/ZvH/cf6YxX+H/DGL/0/yxyz+O+aPWfx3yh+z+P80f8ziv3P+mMV/l/wxi/+u+WMW/5/lj1n8d8sfs/j/PH/M4v+L/DGL/+75Yxb/PfLHLP575o9Z/H+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/H+VP2bxPyB/zOJ/YP6Yxf/X+WMW/9/kj1n8D8ofs/j/Nn/M4n9w/pjF/5D8MYv/ofljFv/f5Y9Z/H+fP2bxPyx/zOL/h/wxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bx/2P+mMX/mPwxi/+f8scs/sfmj1n8j8sfs/j/OX/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8/5I/ZvE/JX/M4v/X/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/TOL/9tX8/zmL/6D8MYv/4Pwxi/8Y+WMW/yH5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMX/ffljFv/3549Z/D+QP2bx/2D+mMX/Q/ljFv/J88cs/h/OH7P4fyR/zOL/0fwxi//H8scs/lPkj1n8P54/ZvGfMn/M4j80f8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/ifwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4r9A/pjFf8H8MYv/QvljFv+F88cs/l/MH7P4fyl/zOK/SP6YxX/R/DGL/5fzxyz+i+WPWfy/kj9m8V88f8ziv0T+mMX/q/ljFv8l88cs/kvlj1n8l84fs/h/LX/M4r9M/pjFf9n8MYv/cvljFv/l88cs/l/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9v5I9Z/L+ZP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/b+WPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP7fzh+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP7fyR+z+G+WP2bx3zx/zOK/Rf6Yxf+7+WMW/+/lj1n8t8wfs/hvlT9m8d86f8ziv03+mMX/+/ljFv8f5I9Z/H+YP2bx/1H+mMV/2/wxi/92+WMW/+3zxyz+P84fs/jvkD9m8f9J/pjFf8f8MYv/TvljFv+f5o9Z/HfOH7P475I/ZvHfNX/M4v+z/DGL/275Yxb/n+ePWfx/kT9m8d89f8ziv0f+mMV/z/wxi/8v88cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/+v8scs/gfkj1n8D8wfs/j/On/M4v+b/DGL/0H5Yxb/3+aPWfwPzh+z+B+SP2bxPzR/zOL/u/wxi//v88cs/oflj1n8/5A/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/n/MH7P4H5M/ZvH/U/6Yxf/Y/DGL/3H5Yxb/P+ePWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/1/yxyz+p+SPWfz/mj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj0n8xxjIH7P4D8ofs/gPzh+z+I+RP2bxH5I/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+k+WPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8Z88f8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziP0X+mMX/4/ljFv8p88cs/kPzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/gvkj1n8F8wfs/gvlD9m8V84f8zi/8X8MYv/l/LHLP6L5I9Z/BfNH7P4fzl/zOK/WP6Yxf8r+WMW/8Xzxyz+S+SPWfy/mj9m8V8yf8ziv1T+mMV/6fwxi//X8scs/svkj1n8l80fs/gvlz9m8V8+f8zi//X8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8f9G/pjF/5v5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvH/Vv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/t/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v+d/DGL/2b5Yxb/zfPHLP5b5I9Z/L+bP2bx/17+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfy3zR+z+G+XP2bx3z5/zOL/4/wxi/8O+WMW/5/kj1n8d8wfs/jvlD9m8f9p/pjFf+f8MYv/LvljFv9d88cs/j/LH7P475Y/ZvH/ef6Yxf8X+WMW/93zxyz+e+SPWfz3zB+z+P8yf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+P8qf8zif0D+mMX/wPwxi/+v88cs/r/JH7P4H5Q/ZvH/bf6Yxf/g/DGL/yH5Yxb/Q/PHLP6/yx+z+P8+f8zif1j+mMX/D/ljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zi/8f8MYv/MfljFv8/5Y9Z/I/NH7P4H5c/ZvH/c/6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4/yV/zOJ/Sv6Yxf+v+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/yED+mMV/UP6YxX9w/pjFf4z8MYv/kPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4v++/DGL//vzxyz+H8gfs/h/MH/M4v+h/DGL/+T5Yxb/D+ePWfw/kj9m8f9o/pjF/2P5Yxb/KfLHLP4fzx+z+E+ZP2bxH5o/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9E/pjF/5P5Yxb/T+WPWfw/nT9m8f9M/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/L+aPWfy/lD9m8V8kf8ziv2j+mMX/y/ljFv/F8scs/l/JH7P4L54/ZvFfIn/M4v/V/DGL/5L5Yxb/pfLHLP5L549Z/L+WP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/r+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/zfyxyz+38wfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+38scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/2/nj1n8N8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/+/kj1n8N8sfs/hvnj9m8d8if8zi/938MYv/9/LHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4r9t/pjFf7v8MYv/9vljFv8f549Z/HfIH7P4/2QU/zHfi/X6X5rFf8f2f8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PHLP6H5I9Z/A/NH7P4/y5/zOL/+/wxi/9h+WMW/z/kj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8f88cs/sfkj1n8/5Q/ZvE/Nn/M4n9c/pjF/8/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v+X/DGL/yn5Yxb/v+aPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/zEH8scs/oPyxyz+g/PHLP5j5I9Z/Ifkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6YxX/S/DGL/2T5Yxb/9+WPWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfwnzx+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+RP2bx/3j+mMV/yvwxi//Q/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/Z/LHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+H8xf8zi/6X8MYv/IvljFv9F88cs/l/OH7P4L5Y/ZvH/Sv6YxX/x/DGL/xL5Yxb/r+aPWfyXzB+z+C+VP2bxXzp/zOL/tfwxi/8y+WMW/2Xzxyz+y+WPWfyXzx+z+H89f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfy/kT9m8f9m/pjFf9X8MYv/avljFv/V88cs/mvkj1n8v5U/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/h/O3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/pvkj1n8N80fs/h/J3/M4r9Z/pjFf/P8MYv/FvljFv/v5o9Z/L+XP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/bfPHLP7b5Y9Z/LfPH7P4/zh/zOK/Q/6Yxf8n+WMW/x3zxyz+O+WPWfx/mj9m8d85f8ziv0v+mMV/1/wxi//P8scs/rvlj1n8f54/ZvH/Rf6YxX/3/DGL/x75Yxb/PfPHLP6/zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP6/yh+z+B+QP2bxPzB/zOL/6/wxi/9v8scs/gflj1n8f5s/ZvE/OH/M4n9I/pjF/9D8MYv/7/LHLP6/zx+z+B+WP2bx/0P+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+P8xf8zif0z+mMX/T/ljFv9j88cs/sflj1n8/5w/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/n/JH7P4n5I/ZvH/a/6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH2sgf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4T5Y/ZvF/X/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX/y/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/xT5Yxb/j+ePWfynzB+z+A/NH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/h/In/M4v/J/DGL/6fyxyz+n84fs/h/Jn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/xfzxyz+X8ofs/gvkj9m8V80f8zi/+X8MYv/YvljFv+v5I9Z/BfPH7P4L5E/ZvH/av6YxX/J/DGL/1L5Yxb/pfPHLP5fyx+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/9fzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf8b+WMW/2/mj1n8V80fs/ivlj9m8V89f8ziv0b+mMX/W/ljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/+388cs/hvkj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/938scs/pvlj1n8N88fs/hvkT9m8f9u/pjF/3v5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvHfNn/M4r9d/pjFf/v8MYv/j/PHLP475I9Z/H+SP2bx3zF/zOK/U/6Yxf+n+WMW/53zxyz+u+SPWfx3zR+z+P8sf8ziv1v+mMX/5/ljFv9f5I9Z/HfPH7P475E/ZvHfM3/M4v/L/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4v+r/DGL/wH5Yxb/A/PHLP6/zh+z+P8mf8zif1D+mMX/t/ljFv+D88cs/ofkj1n8D80fs/j/Ln/M4v/7/DGL/2H5Yxb/P+SPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/x/zxyz+x+SPWfz/lD9m8T82f8zif1z+mMX/z/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/5f8MYv/KfljFv+/5o9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/sQfyxyz+g/LHLP6D88cs/mPkj1n8h+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35Y9Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/CfPH7P4fzh/zOL/kfwxi/9H88cs/h/LH7P4T5E/ZvH/eP6YxX/K/DGL/9D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4fzF/zOL/pfwxi/8i+WMW/0Xzxyz+X84fs/gvlj9m8f9K/pjFf/H8MYv/EvljFv+v5o9Z/JfMH7P4L5U/ZvFfOn/M4v+1/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4fz1/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/L+RP2bx/2b+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfy/lT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+H87f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfw3zR+z+H8nf8ziv1n+mMV/8/wxi/8W+WMW/+/mj1n8v5c/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv9t88cs/tvlj1n8t88fs/j/OH/M4r9D/pjF/yf5Yxb/HfPHLP475Y9Z/H+aP2bx3zl/zOK/S/6YxX/X/DGL/8/yxyz+u+WPWfx/nj9m8f9F/pjFf/f8MYv/HvljFv8988cs/r/MH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/r/KH7P4H5A/ZvE/MH/M4v/r/DGL/2/yxyz+B+WPWfx/mz9m8T84f8zif0j+mMX/0Pwxi//v8scs/r/PH7P4H5Y/ZvH/Q/6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4/zF/zOJ/TP6Yxf9P+WMW/2Pzxyz+x+WPWfz/nD9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+f8kfs/ifkj9m8f9r/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvEfZyB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8f9Q/pjFf/L8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/FPljFv+P549Z/KfMH7P4D80fs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+H8if8zi/8n8MYv/p/LHLP6fzh+z+H8mf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/F/PHLP5fyh+z+C+SP2bxXzR/zOL/5fwxi/9i+WMW/6/kj1n8F88fs/gvkT9m8f9q/pjFf8n8MYv/UvljFv+l88cs/l/LH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/1/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjF/xv5Yxb/b+aPWfxXzR+z+K+WP2bxXz1/zOK/Rv6Yxf9b+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/7fzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/3fyxyz+m+WPWfw3zx+z+G+RP2bx/27+mMX/e/ljFv8t88cs/lvlj1n8t84fs/hvkz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8d82f8ziv13+mMV/+/wxi/+P88cs/jvkj1n8f5I/ZvHfMX/M4r9T/pjF/6f5Yxb/nfPHLP675I9Z/HfNH7P4/yx/zOK/W/6Yxf/n+WMW/1/kj1n8d88fs/jvkT9m8d8zf8zi/8v8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zi/6v8MYv/AfljFv8D88cs/r/OH7P4/yZ/zOJ/UP6Yxf+3+WMW/4Pzxyz+h+SPWfwPzR+z+P8uf8zi//v8MYv/YfljFv8/5I9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/H/PHLP7H5I9Z/P+UP2bxPzZ/zOJ/XP6Yxf/P+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOL/l/wxi/8p+WMW/7/mj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv9xB/LHLP6D8scs/oPzxyz+Y+SPWfyH5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+2H+i/5gjro7qP2n+2H+iP+3/k+WPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8Z88f8zi/+H8MYv/R/LHLP4fzR+z+H8sf8ziP0X+mMX/4/ljFv8p88cs/kPzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/gvkj1n8F8wfs/gvlD9m8V84f8zi/8X8MYv/l/LHLP6L5I9Z/BfNH7P4fzl/zOK/WP6Yxf8r+WMW/8Xzxyz+S+SPWfy/mj9m8V8yf8ziv1T+mMV/6fwxi//X8scs/svkj1n8l80fs/gvlz9m8V8+f8zi//X8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8f9G/pjF/5v5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvH/Vv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/t/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v+d/DGL/2b5Yxb/zfPHLP5b5I9Z/L+bP2bx/17+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfy3zR+z+G+XP2bx3z5/zOL/4/wxi/8O+WMW/5/kj1n8d8wfs/jvlD9m8f9p/pjFf+f8MYv/LvljFv9d88cs/j/LH7P475Y/ZvH/ef6Yxf8X+WMW/93zxyz+e+SPWfz3zB+z+P8yf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+P8qf8zif0D+mMX/wPwxi/+v88cs/r/JH7P4H5Q/ZvH/bf6Yxf/g/DGL/yH5Yxb/Q/PHLP6/yx+z+P8+f8zif1j+mMX/D/ljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zi/8f8MYv/MfljFv8/5Y9Z/I/NH7P4H5c/ZvH/c/6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4/yV/zOJ/Sv6Yxf+v+WMW/1Pzxyz+p+WPWfxPzx+z+J/xj/7j/o+v1//SLP5ntv9jFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/Arn/oHd4/hb/C+X+75TF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxif94A/ljFv93+vxbexb/wfljFv8x8scs/kPyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjFf7L8MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/h/LHLP6T549Z/D+cP2bx/0j+mMX/o/ljFv+P5Y9Z/KfIH7P4fzx/zOI/Zf6YxX9o/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/L+YP2bx/1L+mMV/kfwxi/+i+WMW/y/nj1n8F8sfs/h/JX/M4r94/pjFf4n8MYv/V/PHLP5L5o9Z/JfKH7P4L50/ZvH/Wv6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/L+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP7fyB+z+H8zf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+38ofs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfy/nT9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfy/kz9m8d8sf8ziv3n+mMV/i/wxi/9388cs/t/LH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/tvljFv/t8scs/tvnj1n8f5w/ZvHfIX/M4v+T/DGL/475Yxb/nfLHLP4/zR+z+O+cP2bx3yV/zOK/a/6Yxf9n+WMW/93yxyz+P88fs/j/In/M4r97/pjFf4/8MYv/nvljFv9f5o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv9f5Y9Z/A/IH7P4H5g/ZvH/df6Yxf83+WMW/4Pyxyz+v80fs/gfnD9m8T8kf8zif2j+mMX/d/ljFv/f549Z/A/LH7P4/yF/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/P+YP2bxPyZ/zOL/p/wxi/+x+WMW/+Pyxyz+f84fs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/7/kj1n8T8kfs/j/NX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH5P4jz+QP2bxH5Q/ZvEfnD9m8R8jf8ziPyR/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/i/L3/M4v/+/DGL/wfyxyz+H8wfs/h/KH/M4j95/pjF/8P5Yxb/j+SPWfw/mj9m8f9Y/pjFf4r8MYv/x/PHLP5T5o9Z/Ifmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfw/kz9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/4v5Yxb/L+WPWfwXyR+z+C+aP2bx/3L+mMV/sfwxi/9X8scs/ovnj1n8l8gfs/h/NX/M4r9k/pjFf6n8MYv/0vljFv+v5Y9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjF/+v5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4v+N/DGL/zfzxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOL/rfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6Yxf/b+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6Yxf87+WMW/83yxyz+m+ePWfy3yB+z+H83f8zi/738MYv/lvljFv+t8scs/lvnj1n8t8kfs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/hvmz9m8d8uf8ziv33+mMX/x/ljFv8d8scs/j/JH7P475g/ZvHfKX/M4v/T/DGL/875Yxb/XfLHLP675o9Z/H+WP2bx3y1/zOL/8/wxi/8v8scs/rvnj1n898gfs/jvmT9m8f9l/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8f9V/pjF/4D8MYv/gfljFv9f549Z/H+TP2bxPyh/zOL/2/wxi//B+WMW/0Pyxyz+h+aPWfx/lz9m8f99/pjF/7D8MYv/H/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/4/5Yxb/Y/LHLP5/yh+z+B+bP2bxPy5/zOL/5/wxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/0v+mMX/lPwxi/9f88cs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYn/BAP5Yxb/QfljFv/B+WMW/zHyxyz+Q/LHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//78scs/u/PH7P4fyB/zOL/wfwxi/+H8scs/pPnj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8p8gfs/h/PH/M4j9l/pjFf2j+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf8T+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjFf4H8MYv/gvljFv+F8scs/gvnj1n8v5g/ZvH/Uv6YxX+R/DGL/6L5Yxb/L+ePWfwXyx+z+H8lf8ziv3j+mMV/ifwxi/9X88cs/kvmj1n8l8ofs/gvnT9m8f9a/pjFf5n8MYv/svljFv/l8scs/svnj1n8v54/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/t/IH7P4fzN/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP7fyh+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/L+dP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/L+TP2bx3yx/zOK/ef6YxX+L/DGL/3fzxyz+38sfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi//388cs/j/IH7P4/zB/zOL/o/wxi/+2+WMW/+3yxyz+2+ePWfx/nD9m8d8hf8zi/5P8MYv/jvljFv+d8scs/j/NH7P475w/ZvHfJX/M4r9r/pjF/2f5Yxb/3fLHLP4/zx+z+P8if8ziv3v+mMV/j/wxi/+e+WMW/1/mj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/1/lj1n8D8gfs/gfmD9m8f91/pjF/zf5Yxb/g/LHLP6/zR+z+B+cP2bxPyR/zOJ/aP6Yxf93+WMW/9/nj1n8D8sfs/j/IX/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8/5j/Pzf2iEuB/zH5Y5b9/0/5Yxb/Y/PHLP7H5Y9Z/P+cP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP5/yR+z+J+SP2bx/2v+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8Z9wIH/M4j8of8ziPzh/zOI/Rv6YxX9I/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+E+WP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bx/1D+mMV/8vwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi/8U+WMW/4/nj1n8p8wfs/gPzR+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/gvkD9m8V8wf8ziv1D+mMV/4fwxi/8X88cs/l/KH7P4L5I/ZvFfNH/M4v/l/DGL/2L5Yxb/r+SPWfwXzx+z+C+RP2bx/2r+mMV/yfwxi/9S+WMW/6Xzxyz+X8sfs/gvkz9m8V82f8ziv1z+mMV/+fwxi//X88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/G/ljFv9v5o9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjF/1v5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/t/PHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/d/LHLP6b5Y9Z/DfPH7P4b5E/ZvH/bv6Yxf97+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx3zZ/zOK/Xf6YxX/7/DGL/4/zxyz+O+SPWfx/kj9m8d8xf8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PH/hP9Bw0MbDcwmv8h+WP/if60/x+aP2bx/13+mMX/9/ljFv/D8scs/n/IH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv8/5o9Z/I/JH7P4/yl/zOJ/bP6Yxf+4/DGL/5/zxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf8v+WMW/1Pyxyz+f80fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+r8h/rX57T4v+cyv9fz+L/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38sck/hMN5I9Z/Aflj1n8B+ePWfzHyB+z+A/JH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78sfs/i/P3/M4v+B/DGL/wfzxyz+H8ofs/hPnj9m8f9w/pjF/yP5Yxb/j+aPWfw/lj9m8Z8if8zi//H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f9i/pjF/0v5Yxb/RfLHLP6L5o9Z/L+cP2bxXyx/zOL/lfwxi//i+WMW/yXyxyz+X80fs/gvmT9m8V8qf8ziv3T+mMX/a/ljFv9l8scs/svmj1n8l8sfs/gvnz9m8f96/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/h/I3/M4v/N/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4fyt/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/dv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Tv6YxX+z/DGL/+b5Yxb/LfLHLP7fzR+z+H8vf8ziv2X+mMV/q/wxi//W+WMW/23yxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+2+aPWfy3yx+z+G+fP2bx/3H+mMV/h/yxUf3HHfjP9f9J/phl/98xf8ziv1P+mMX/p/ljFv+d88cs/rvkj1n8d80fs/j/LH/M4r9b/pjF/+f5Yxb/X+SPWfx3zx+z+O+RP2bx3zN/zOL/y/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/q/wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/7f5Yxb/g/PHLP6H5I9Z/A/NH7P4/y5/zOL/+/wxi/9h+WMW/z/kj1n8D88fs/gfkT82mv/x/6n+R+aPWfb/o/LHLP5H549Z/P+YP2bxPyZ/zOL/p/wxi/+x+WMW/+Pyxyz+f84fs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/7/kj1n8T8kfs/j/NX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8sfeeuutbQ3+T+aPWfb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+Ew/kj1n8B+WPWfwH549Z/MfIH7P4D8kfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+f//7Fz9/Fa1/Udx3/AFyVT0LlaaBiBKJoKgopk3qClHoGj3VhKgpLizQRlSoGulOzG2spZrnJtpXmTOlMLZ801HOWc00WzotpmY2zmWCtclhO3SvY4cA5xTh/OPD9+/dz6PJ9/wLmu0+cKeT3qzXV4HENZ+u+ofyhL/530D2XpP1z/UJb+I/QPZem/s/6hLP130T+Upf+v6R/K0n9X/UNZ+v+6/qEs/V+kfyhL/xfrH8rS/zf0D2Xp/xL9Q1n6j9Q/lKX/bvqHsvTfXf9Qlv4v1T+Upf8o/UNZ+u+hfyhL/5fpH8rSf7T+oSz9X65/KEv/MfqHsvQfq38oS/899Q9l6T9O/1CW/nvpH8rSf2/9Q1n6j9c/lKX/PvqHsvTfV/9Qlv6v0D+Upf9++oey9N9f/1CW/gfoH8rSf4L+oSz9J+ofytL/QP1DWfpP0j+Upf9k/UNZ+h+kfyhL/4P1D2Xpf4j+oSz9p+gfytL/UP1DWfpP1T+Upf8r9Q9l6X+Y/qEs/V+lfyhL/8P1D2Xpf4T+oSz9j9Q/lKX/UfqHsvSfpn8oS/+j9Q9l6X+M/qEs/V+tfyhL/9foH8rS/1j9Q1n6H6d/KEv/4/UPZenfoX8oS/8T9A9l6T9d/1CW/jP0D2XpP1P/UJb+nfqHsvQ/Uf9Qlv4n6R/K0v+1+oey9H+d/qEs/V+vfyhL/zfoH8rS/2T9Q1n6v/F/679hxC/5F/Z/U5b+b/K//1CW/qfoH8rS/1T9Q1n6z9I/lKX/m/UPZel/mv6hLP1n6x/K0n+O/qEs/U/XP5Sl/xn6h7L0n6t/KEv/t+gfytL/TP1DWfqfpX8oS/95+oey9D9b/1CW/ufoH8rS/1z9Q1n6n6d/KEv/39Q/lKX/+fqHsvSfr38oS/8F+oey9L9A/1CW/hfqH8rSf6H+oSz9f0v/UJb+F+kfytL/Yv1DWfov0j+Upf9b9Q9l6f82/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZen/2/qHsvR/u/6hLP3foX8oS//L9A9l6X+5/qEs/ZfqH8rS/536h7L0v0L/UJb+79I/lKX/u/UPZen/Hv1DWfq/V/9Qlv5X6h/K0v99+oey9H+//qEs/X9H/1CW/r+rfyhL/w/oH8rS/4P6h7L0v0r/UJb+v6d/KEv/q/UPZen/If1DWfp/WP9Qlv7X6B/K0v/39Q9l6f8R/UNZ+n9U/1CW/h/TP5Sl/7X6h7L0/wP9Q1n6f1z/UJb+f6h/KEv/P9I/lKX/J/QPZen/Sf1DWfpfp38oS//r9Q9l6f8p/UNZ+t+gfyhL/xv1D2Xpf5P+oSz9b9Y/lKX/p/UPZel/i/6hLP1v1T+Upf9t+oey9P9j/UNZ+t+ufyhL/8/oH8rS/w79Q1n636l/KEv/u/QPZen/Wf1DWfp/Tv9Qlv7L9A9l6X+3/qEs/f9E/1CW/vfoH8rS//P6h7L0/4L+oSz9/1T/UJb+9+ofytL/z/QPZen/Rf1DWfr/uf6hLP2X6x/K0v8+/UNZ+v+F/qEs/VfoH8rS/0v6h7L0/7L+oSz979c/lKX/X+ofytL/Af1DWfr/lf6hLP0f1D+Upf9f6x/K0v8h/UNZ+j+sfyhL/7/RP5Sl/1f0D2Xpv1L/UJb+X9U/lKX/3+ofytL/Ef1DWfp/Tf9Qlv5f1z+Upf839A9l6b9K/1CW/t/UP5Sl/7f0D2Xp/239Q1n6/53+oSz9/17/UJb+/6B/KEv/R/UPZen/Hf1DWfr/o/6hLP1X6x/K0v+f9A9l6b9G/1CW/v+sfyhL/3/RP5Sl/2P6h7L0/67+oSz9H9c/lKX/v+ofytJ/rf6hLP3/Tf9Qlv7f0z+Upf+/6x/K0v/7+oey9P+B/qEs/dfpH8rS/wn9Q1n6/4f+oSz9f6h/KEv/J/UPZen/o9T9y1Y/k6X/j1P337os/Z/SP5Sl/3/qH8rS/2n9Q1n6r9c/lKX/M/qHsvT/L/1DWfr/t/6hLP1/on8oS/+f6h/K0v9n+oey9H9W/1CW/hv0DyXpv3OlfyhL/0H6h7L0H6x/KEv/IfqHsvQv+oey9B+qfyhL/+30D2Xpv73+oSz9h+kfytL/BfqHsvTfQf9Qlv4v1D+Upf+O+oey9N9J/1CW/sP1D2XpP0L/0K9cfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgqjo6p60bMqjXU0O2fDBq5byNPx+0/pRzb77587v0/Nz96enBSw7e8sGGDRs2DH6q+kr3w+2rqur6b9u5+/Gwvsddr3/5tGvHb3pURt/wzL63L37m6PfeterW9cfdMv32oRufHVqdcfZ58+dNHFxVZezQaknXgwMHVVXZa2h1ddeDSV0P9h5a3dr1YPLGBy+oVnQ9OODMC+ef1fXE+Nq/ZwDw/11H59JqSK/Frnr9aWDL/b982t1Le37u5yV7Xq1U3ft/77Jd39bncz22sv89r19e3nf/B/wPCAD8goHt//2je37u5yV/4f3/zAs+uir63Nb3v+f1yxj7DwDNC77+32uj+37dv8/X/6M/B2y+P//0a7bv2v9b1p+8qPup8ly+/v/z1y9j++7/4F5f/x9UVWXPnq//b19VZdw2/nYAQAodne9c19/7//73v+zW52bQlvu/yx0rTu7a/9U73PXi7qeGDnD/9+zv/f+xfX6tAMBz09H5qQ193v8PYP+rvYKX3Lz/xyx56EVd+/+11d8dvcXnBrL/4/ru/4RFCxZOuPiSS/c/b8Hcc+adM++CqVOmHHrwlEOmTpqw8SsCm37cxt8UAPgVt23v/6sd+twMqqrHN99/YPmoh7r2f9LHjz+3+6lhA9z/vfp9/z/a+38A6GXM4Gq77aolcxctuujATT/2PJy06cdN/7Fg/wfw9/9je76Jrud7BgdV1Us233de/L7BXft/49jdlnc/td0A93/vfvf/qN7fqwgAPDfb+P7/rD43vfZ/xJDbpnbt/wnj9rmy+6mB/v3/+H73/3rv/wGgjo7O6pf6Jrpr/6/Y8WfX1bsu+/j+PwBoXhv7/8Sod42pd132tf8A0Lw29n/ekTvdU++6vML+A0Dz2tj/BzuumV3vuuxn/wGgeW3s/4zzRz1c77rsb/8BoHlt7P/oS89cXO+6HGD/AaB5bez/7aesW1Pvukyw/wDQvDb2/7Rhq5+sd10m2n8AaF4b+//tfU86u951OdD+A0Dz2tj/Lx52wKP1rssk+w8AzWtj/yeOvH5Gvesy2f4DQPPa2P8PX3jETfWuy0H2HwCa18b+j5z52cn1rsvB9h8AmtfG/r/1tK9eVe+6HGL/AaB5bez/s5cdNbLedZli/wGgeW3s/4oH95hV77ocav8BoHlt7P/0x69eWe+6TLX/ANC8NvZ/76eeWFjvurzS/gNA89rY/89864y19a7LYfYfAJrXxv4Pv/7ZEfWuy6vsPwA0r439f88VC6+td10Ot/8A0Lw29v971wwfV++6HGH/AaB5bez/Wz63dFm963Kk/QeA5rWx/19/bPL0etflKPsPAM1rY/9P/dLy79S7LtPsPwA0r439P/iR++fWuy5H238AaF4b+3/fj2Y+Xe+6HGP/AaB5bez/S9/9jT3qXZdX238AaF4b+/+xT89+f73r8hr7DwDNa2P/f/KFsQfVuy7H2n8AaF4b+7/wI3fcWO+6HGf/AaB5bex/534/XlPvuhxv/wGgeW3s/wPD37G43nXpsP8A0Lw29v+2lw15uN51OcH+A0Dz2tj/MYd/cHa96zLd/gNA89rY/6XTd72n3nWZYf8BoHlt7P8Lz/vEmHrXZab9B4DmtbH/5yx57Lp616XT/gNA89rY/x/MWjCs3nU50f4DQPPa2P/dd5gzst51Ocn+A0Dz2tj/q8c/clW96/Ja+w8AzWtj/3869c7J9a7L6+w/ADSvjf1fvPvom+pdl9fbfwBoXhv7/80F982od13eYP8BoHlt7P+cEyc+Wu+6nGz/AaB5bez/pDmdZ9e7Lm+0/wDQvDb2/963r3iy3nV5k/0HgOa1sf9XPvDJZfWuyyn2HwCa18b+77h253H1rsup9h8AmtfG/p/x9AXX1rsus+w/ADSvjf3//qo1I+pdlzfbfwBoXhv733HDZWvrXZfT7D8ANK+N/f/y0h8urHddZtt/AGheG/t/54euWlnvusyx/wDQvDb2f9zd1ax61+V0+w8Azbv4kkvPnzt//ryLfOADH/hg8wfP9/8zAQAATfv5H/qf718JAAAAAAAAAAAAAAAAAAAA5NXGv07s+f5nBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+hx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAAAE+VuvMEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwAAAP//XuvQlg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x7, 0x0, 0x9, 0x0, 0x474}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}]}) 844.069597ms ago: executing program 2 (id=8201): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 774.995312ms ago: executing program 1 (id=8202): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000300)={0x11}, 0x0) 717.632164ms ago: executing program 3 (id=8203): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000140)={0x40, 0x0, 0x7, "08e2b608f271c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 590.325723ms ago: executing program 5 (id=8204): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 434.236653ms ago: executing program 1 (id=8205): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x8481, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x980) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x800) 403.118561ms ago: executing program 5 (id=8206): io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 362.082423ms ago: executing program 2 (id=8207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000341a00001c00000008000100", @ANYRES32, @ANYBLOB="0800040000000000080003"], 0x2c}}, 0x0) 244.850955ms ago: executing program 1 (id=8208): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) 164.040576ms ago: executing program 4 (id=8209): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x2, 0x6f2, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x541b, 0x0) 53.990808ms ago: executing program 2 (id=8210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100ff00000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)={[{@very_degraded}, {@erasure_code}, {@data_replicas={'data_replicas', 0x3d, 0x3}}, {@acl}, {@noexcl}, {@inodes_use_key_cache}, {@move_bytes_in_flight={'move_bytes_in_flight', 0x3d, 0xe}}, {@btree_node_mem_ptr_optimization}]}, 0x1, 0x58ad, &(0x7f0000005980)="$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") 49.791193ms ago: executing program 5 (id=8211): io_setup(0xfb, &(0x7f0000000140)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="13", 0x1}]) 0s ago: executing program 1 (id=8212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x94}, @NFTA_NG_TYPE={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): de63fa2cbd [ 606.591820][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/986211a9-7d00-4ebf-a576-e3de63fa2cbd.tmp-b7:0' failed: Read-only file system [ 606.621218][T21889] XFS (loop0): Ending clean mount [ 606.856383][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7250'. [ 606.899613][ T5235] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 606.976776][T21951] loop5: detected capacity change from 0 to 256 [ 607.112173][T21951] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 607.312721][T21955] program syz.3.7257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 607.770184][T21963] vivid-000: disconnect [ 607.776885][T21958] vivid-000: reconnect [ 608.533133][T21979] loop4: detected capacity change from 0 to 1024 [ 608.761438][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 608.965004][T21979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.018335][T21995] loop3: detected capacity change from 0 to 4096 [ 609.111574][T21997] loop5: detected capacity change from 0 to 256 [ 609.181201][T21979] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.217745][T21979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 609.240974][T21997] FAT-fs (loop5): Directory bread(block 64) failed [ 609.244986][T17471] udevd[17471]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 609.266337][T21997] FAT-fs (loop5): Directory bread(block 65) failed [ 609.279859][T21997] FAT-fs (loop5): Directory bread(block 66) failed [ 609.297741][T21997] FAT-fs (loop5): Directory bread(block 67) failed [ 609.309789][T17471] udevd[17471]: symlink '../../loop3' '/dev/disk/by-uuid/275C1089492DF3B0.tmp-b7:3' failed: Read-only file system [ 609.325810][T21997] FAT-fs (loop5): Directory bread(block 68) failed [ 609.332421][T21997] FAT-fs (loop5): Directory bread(block 69) failed [ 609.344538][T21979] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 609.380006][T21979] EXT4-fs (loop4): can't enable nombcache during remount [ 609.401658][T21997] FAT-fs (loop5): Directory bread(block 70) failed [ 609.408246][T21997] FAT-fs (loop5): Directory bread(block 71) failed [ 609.499374][T21997] FAT-fs (loop5): Directory bread(block 72) failed [ 609.537102][T21997] FAT-fs (loop5): Directory bread(block 73) failed [ 609.566928][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.652092][ T47] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 609.859265][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 609.903351][ T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.928540][ T47] usb 2-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 609.957104][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.005442][ T47] usb 2-1: config 0 descriptor?? [ 610.039265][ T47] r8712u: register rtl8712_netdev_ops to netdev_ops [ 610.059424][ T47] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 610.108376][T22020] loop5: detected capacity change from 0 to 1024 [ 610.223376][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 610.275695][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system [ 610.403953][T22027] loop4: detected capacity change from 0 to 128 [ 610.476267][ T47] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 610.505076][ T47] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 610.527511][ T47] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 610.697305][ T25] usb 2-1: USB disconnect, device number 42 [ 611.007085][ T47] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 611.427634][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 611.461665][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.492607][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.502402][ T47] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 611.557659][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.598606][ T47] usb 5-1: config 0 descriptor?? [ 612.201027][ T47] ft260 0003:0403:6030.0035: unknown main item tag 0x0 [ 612.392183][ T47] ft260 0003:0403:6030.0035: failed to retrieve chip version [ 612.399938][ T47] ft260 0003:0403:6030.0035: probe with driver ft260 failed with error -71 [ 612.449540][ T47] usb 5-1: USB disconnect, device number 32 [ 612.496908][T22081] loop5: detected capacity change from 0 to 256 [ 612.725432][T22081] FAT-fs (loop5): Directory bread(block 64) failed [ 612.732788][T22081] FAT-fs (loop5): Directory bread(block 65) failed [ 612.771515][T22081] FAT-fs (loop5): Directory bread(block 66) failed [ 612.786517][T22081] FAT-fs (loop5): Directory bread(block 67) failed [ 612.824352][T22081] FAT-fs (loop5): Directory bread(block 68) failed [ 612.853520][T22081] FAT-fs (loop5): Directory bread(block 69) failed [ 612.883422][T22081] FAT-fs (loop5): Directory bread(block 70) failed [ 612.916916][T22081] FAT-fs (loop5): Directory bread(block 71) failed [ 612.969112][T22081] FAT-fs (loop5): Directory bread(block 72) failed [ 613.011623][T22081] FAT-fs (loop5): Directory bread(block 73) failed [ 613.090694][T22079] loop3: detected capacity change from 0 to 32768 [ 613.205789][T22079] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 613.276509][T22096] loop4: detected capacity change from 0 to 8 [ 613.302489][T22079] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 613.352884][T22079] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 613.396014][T22096] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 613.440066][T17471] udevd[17471]: symlink '../../loop4' '/dev/disk/by-label/Compressed.tmp-b7:4' failed: Read-only file system [ 613.466809][ T5294] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 613.473649][ T5294] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 613.549224][ T5294] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 69ms [ 613.556954][ T5294] gfs2: fsid=syz:syz.0: jid=0: Done [ 613.567821][T22079] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 614.141025][T22108] loop0: detected capacity change from 0 to 32768 [ 614.230120][T22119] loop3: detected capacity change from 0 to 256 [ 614.312574][T22119] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 614.350113][T22108] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 614.357498][T22113] tipc: Started in network mode [ 614.364764][T22113] tipc: Node identity 00002e00000000000000000000002d01, cluster identity 4711 [ 614.411035][T22113] tipc: Enabling of bearer rejected, failed to enable media [ 614.439316][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 614.479483][ T29] audit: type=1326 audit(579.731:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22124 comm="syz.1.7321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe93c97dff9 code=0x0 [ 614.700099][T22130] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 614.706666][T22130] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 614.761045][T22130] vhci_hcd vhci_hcd.0: Device attached [ 615.013779][ T47] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 615.122299][T17611] udevd[17611]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 615.328770][T22108] (syz.0.7314,22108,0):ocfs2_check_set_options:1208 ERROR: User quotas were requested, but this filesystem does not have the feature enabled. [ 615.727535][ T5235] ocfs2: Unmounting device (7,0) on (node local) [ 616.126942][T22137] loop5: detected capacity change from 0 to 32768 [ 616.360603][T22132] vhci_hcd: connection reset by peer [ 616.378640][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 616.395229][ T12] vhci_hcd: stop threads [ 616.399511][ T12] vhci_hcd: release socket [ 616.403449][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 616.426342][ T12] vhci_hcd: disconnect device [ 616.445111][ T47] vhci_hcd: vhci_device speed not set [ 616.550245][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7342'. [ 616.572368][T22176] loop0: detected capacity change from 0 to 256 [ 616.609538][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.642950][ T25] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 616.668537][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.715984][ T25] usb 2-1: config 0 descriptor?? [ 616.768146][ T29] audit: type=1800 audit(581.882:299): pid=22176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7344" name="file1" dev="loop0" ino=1048817 res=0 errno=0 [ 616.810071][ T29] audit: type=1804 audit(581.919:300): pid=22176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7344" name="/newroot/1167/file0/file1" dev="loop0" ino=1048817 res=1 errno=0 [ 617.174610][ T25] megaworld 0003:07B5:0312.0036: item fetching failed at offset 1/3 [ 617.192797][ T25] megaworld 0003:07B5:0312.0036: parse failed [ 617.205059][ T25] megaworld 0003:07B5:0312.0036: probe with driver megaworld failed with error -22 [ 617.239714][T22187] loop3: detected capacity change from 0 to 2048 [ 617.302950][T22187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.335555][T21530] udevd[21530]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 617.389883][ T47] usb 2-1: USB disconnect, device number 43 [ 617.451419][ T29] audit: type=1804 audit(582.500:301): pid=22187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7347" name=2F6E6577726F6F742F313236382F66696C65312F02 dev="loop3" ino=18 res=1 errno=0 [ 617.554683][ T5241] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.916935][T22194] loop5: detected capacity change from 0 to 32768 [ 618.140328][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 618.377334][T22207] loop0: detected capacity change from 0 to 32768 [ 618.384779][T22207] XFS: attr2 mount option is deprecated. [ 618.390449][T22207] XFS: ikeep mount option is deprecated. [ 618.396259][T22207] XFS: noikeep mount option is deprecated. [ 618.402568][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 618.455402][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:0' failed: Read-only file system [ 618.529170][T22207] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 618.807972][T22202] loop3: detected capacity change from 0 to 40427 [ 618.860194][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 618.968774][T22202] F2FS-fs (loop3): invalid crc value [ 618.979226][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.990500][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.011620][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.033407][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 619.043491][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.053202][T17471] udevd[17471]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 619.075686][ T9] usb 5-1: config 0 descriptor?? [ 619.102972][T22202] F2FS-fs (loop3): Found nat_bits in checkpoint [ 619.122557][T22207] XFS (loop0): Ending clean mount [ 619.167744][T22207] XFS (loop0): Quotacheck needed: Please wait. [ 619.212974][T22202] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 619.363918][T22207] XFS (loop0): Quotacheck: Done. [ 619.488585][ T5235] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 619.578478][T22242] netlink: 'syz.5.7368': attribute type 12 has an invalid length. [ 619.605498][T22242] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7368'. [ 619.653771][ T9] microsoft 0003:045E:07DA.0037: unknown main item tag 0x0 [ 619.668771][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0037/input/input52 [ 619.702950][ T9] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 619.763730][T22248] netlink: 'syz.5.7372': attribute type 58 has an invalid length. [ 620.213397][T22261] netlink: 'syz.0.7378': attribute type 1 has an invalid length. [ 620.218110][T22263] gretap0: entered promiscuous mode [ 620.230300][ T47] usb 5-1: USB disconnect, device number 33 [ 620.279320][T22261] netlink: 9368 bytes leftover after parsing attributes in process `syz.0.7378'. [ 620.327651][T22263] gretap0: left promiscuous mode [ 620.334491][T22261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7378'. [ 620.724747][T22273] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7382'. [ 620.745105][T22273] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 620.887591][T22277] syz.1.7384: attempt to access beyond end of device [ 620.887591][T22277] nbd1: rw=0, sector=16, nr_sectors = 8 limit=0 [ 620.930064][T22277] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 2, size 4096) [ 620.995983][T22277] syz.1.7384: attempt to access beyond end of device [ 620.995983][T22277] nbd1: rw=0, sector=128, nr_sectors = 8 limit=0 [ 621.009579][T22277] REISERFS warning (device nbd1): sh-2006 read_super_block: bread failed (dev nbd1, block 16, size 4096) [ 621.021471][T22277] REISERFS warning (device nbd1): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd1 [ 621.134133][T22262] loop5: detected capacity change from 0 to 32768 [ 621.200165][T22262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7377 (22262) [ 621.293524][T22262] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 621.306748][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:5' failed: Read-only file system [ 621.341009][T22262] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 621.353587][T22262] BTRFS info (device loop5): using free-space-tree [ 621.821500][T22317] loop4: detected capacity change from 0 to 1024 [ 621.861923][T22317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 621.942257][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 622.087628][T22275] loop0: detected capacity change from 0 to 32768 [ 622.297766][ T5240] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 622.319084][T22317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.354198][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 622.396663][T22275] JBD2: Ignoring recovery information on journal [ 622.574102][T22275] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 622.653813][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.862905][T22275] (syz.0.7383,22275,0):ocfs2_reflink_ioctl:4420 ERROR: status = -14 [ 623.202710][ T47] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 623.242163][ T5235] ocfs2: Unmounting device (7,0) on (node local) [ 623.377004][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.416218][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.471685][ T47] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 623.495411][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.539061][T22352] loop4: detected capacity change from 0 to 764 [ 623.550790][T22355] loop0: detected capacity change from 0 to 1024 [ 623.552317][ T47] usb 6-1: config 0 descriptor?? [ 623.613915][T17471] udevd[17471]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 623.651018][T17471] udevd[17471]: symlink '../../loop0' '/dev/disk/by-uuid/0f76b7e0-a395-392e-9506-9fb3b29b70e3.tmp-b7:0' failed: Read-only file system [ 623.688427][T22352] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 623.747961][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system [ 623.770816][T22352] Symlink component flag not implemented [ 623.776493][T22352] Symlink component flag not implemented [ 623.819122][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system [ 623.826491][T22352] Symlink component flag not implemented (128) [ 623.896782][T22352] Symlink component flag not implemented (122) [ 624.085056][ T47] appleir 0003:05AC:8241.0038: item fetching failed at offset 5/7 [ 624.093839][ T47] appleir 0003:05AC:8241.0038: parse failed [ 624.101927][ T47] appleir 0003:05AC:8241.0038: probe with driver appleir failed with error -22 [ 624.120149][T22365] netlink: 'syz.0.7413': attribute type 9 has an invalid length. [ 624.147559][T22365] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7413'. [ 624.239795][T22370] netlink: 'syz.0.7413': attribute type 9 has an invalid length. [ 624.255851][T22370] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7413'. [ 624.298710][ T47] usb 6-1: USB disconnect, device number 36 [ 624.336419][T22372] loop4: detected capacity change from 0 to 8 [ 624.428893][T22376] netlink: 4412 bytes leftover after parsing attributes in process `syz.2.7417'. [ 624.457302][T22372] SQUASHFS error: xz decompression failed, data probably corrupt [ 624.477637][T22372] SQUASHFS error: Failed to read block 0x60: -5 [ 624.544654][T22372] SQUASHFS error: xz decompression failed, data probably corrupt [ 624.567260][T22372] SQUASHFS error: Failed to read block 0x60: -5 [ 624.591478][ T29] audit: type=1800 audit(589.109:302): pid=22372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7416" name="file0" dev="loop4" ino=1 res=0 errno=0 [ 625.109008][T22396] loop5: detected capacity change from 0 to 1024 [ 625.170109][T22396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.254224][T22396] EXT4-fs error (device loop5): ext4_get_first_dir_block:3554: inode #11: comm syz.5.7428: directory missing '..' [ 625.271402][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 625.464186][ T5240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.950705][T22390] loop3: detected capacity change from 0 to 32768 [ 625.958050][T22390] btrfs: Deprecated parameter 'usebackuproot' [ 625.964263][T22390] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 625.978958][T22390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7425 (22390) [ 626.054099][T22390] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 626.065040][T22390] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 626.073787][T22390] BTRFS info (device loop3): disk space caching is enabled [ 626.081247][T22390] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 626.148624][ T5293] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 626.179275][T21530] udevd[21530]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 626.318214][T22390] BTRFS info (device loop3): rebuilding free space tree [ 626.368124][T22390] BTRFS info (device loop3): disabling free space tree [ 626.400572][T22390] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 626.432255][T22390] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 626.457082][ T5293] usb 6-1: Using ep0 maxpacket: 8 [ 626.595189][T22440] usb usb8: usbfs: process 22440 (syz.1.7441) did not claim interface 0 before use [ 626.605773][T22440] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 626.622669][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.634355][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.644272][ T5293] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 626.653841][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.667422][ T5293] usb 6-1: config 0 descriptor?? [ 626.734302][T22442] loop4: detected capacity change from 0 to 128 [ 626.746422][ T5241] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 626.779132][T22442] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 626.945811][ T5227] sysv_free_block: trying to free block not in datazone [ 626.970104][ T5227] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 627.130308][ T5293] waltop 0003:172F:0034.0039: item fetching failed at offset 2/5 [ 627.159426][ T5293] waltop 0003:172F:0034.0039: probe with driver waltop failed with error -22 [ 627.380040][ T5293] usb 6-1: USB disconnect, device number 37 [ 627.852977][ T47] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 628.047096][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 628.065207][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.093434][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.118661][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.146836][ T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 628.158196][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.185816][ T47] usb 4-1: config 0 descriptor?? [ 628.396478][ T25] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 628.600450][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 628.638261][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.662363][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.675421][ T47] ryos 0003:1E7D:31CE.003A: unknown main item tag 0x0 [ 628.686514][ T25] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 628.696145][ T47] ryos 0003:1E7D:31CE.003A: unbalanced delimiter at end of report description [ 628.718562][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.729915][ T47] ryos 0003:1E7D:31CE.003A: parse failed [ 628.735648][ T47] ryos 0003:1E7D:31CE.003A: probe with driver ryos failed with error -22 [ 628.759086][ T25] usb 6-1: config 0 descriptor?? [ 628.906282][ T5294] usb 4-1: USB disconnect, device number 40 [ 628.970563][ T5293] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 629.165432][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.198663][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.215545][ T5293] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 629.216662][ T25] belkin 0003:1020:0006.003B: unknown main item tag 0xd [ 629.257865][ T25] belkin 0003:1020:0006.003B: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.5-1/input0 [ 629.262533][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.319425][ T5293] usb 5-1: config 0 descriptor?? [ 629.468801][ T47] usb 6-1: USB disconnect, device number 38 [ 629.477569][T20977] Bluetooth: hci8: command 0x0405 tx timeout [ 629.552336][T22494] netlink: 'syz.2.7466': attribute type 58 has an invalid length. [ 629.791304][ T5293] wacom 0003:056A:0317.003C: unknown main item tag 0x0 [ 629.813996][ T5293] wacom 0003:056A:0317.003C: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 629.864639][ T5293] wacom 0003:056A:0317.003C: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 629.912804][ T5293] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.003C/input/input53 [ 630.097481][ T8] usb 5-1: USB disconnect, device number 34 [ 630.211604][T22511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7477'. [ 630.255745][T22511] Êü: entered promiscuous mode [ 631.361022][T22503] loop3: detected capacity change from 0 to 32768 [ 631.481898][ T5293] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 631.667388][T21530] udevd[21530]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system [ 631.961576][T22536] loop0: detected capacity change from 0 to 32768 [ 631.968990][T22536] XFS: ikeep mount option is deprecated. [ 632.085533][ T5293] usb 6-1: Using ep0 maxpacket: 8 [ 632.094929][T22547] netlink: 'syz.4.7491': attribute type 1 has an invalid length. [ 632.153067][T17611] udevd[17611]: symlink '../../loop0' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:0' failed: Read-only file system [ 632.240432][T22536] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 632.468800][T22525] warn_alloc: 3 callbacks suppressed [ 632.468823][T22525] syz.1.7484: vmalloc error: size 3874816, failed to allocated page array size 7568, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 632.492121][T22525] CPU: 0 UID: 0 PID: 22525 Comm: syz.1.7484 Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 632.502930][T22525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 632.513028][T22525] Call Trace: [ 632.516331][T22525] [ 632.519297][T22525] dump_stack_lvl+0x241/0x360 [ 632.524025][T22525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.529261][T22525] ? __pfx__printk+0x10/0x10 [ 632.533908][T22525] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 632.540354][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.546007][T22525] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 632.552533][T22525] warn_alloc+0x278/0x410 [ 632.556892][T22525] ? __pfx_warn_alloc+0x10/0x10 [ 632.561774][T22525] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 632.567958][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.573619][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.579278][T22525] ? __get_vm_area_node+0x23d/0x270 [ 632.584515][T22525] __vmalloc_node_range_noprof+0x691/0x13f0 [ 632.590453][T22525] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 632.596459][T22525] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.602808][T22525] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 632.608988][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.614654][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.620310][T22525] ? __get_vm_area_node+0x23d/0x270 [ 632.625538][T22525] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 632.631451][T22525] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 632.637621][T22525] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 632.643383][T22525] ? rcu_is_watching+0x15/0xb0 [ 632.648164][T22525] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 632.654506][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.660164][T22525] ? rcu_is_watching+0x15/0xb0 [ 632.664956][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.670603][T22525] ? __kmalloc_node_noprof+0x247/0x440 [ 632.676088][T22525] ? __kvmalloc_node_noprof+0x72/0x190 [ 632.681566][T22525] __kvmalloc_node_noprof+0x142/0x190 [ 632.686960][T22525] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 632.693249][T22525] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 632.699253][T22525] ? tpg_update_mv_step+0x361/0x4f0 [ 632.704482][T22525] vivid_update_format_cap+0x133c/0x2090 [ 632.710148][T22525] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 632.716146][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.721800][T22525] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 632.727652][T22525] __video_do_ioctl+0xc25/0xdd0 [ 632.732544][T22525] ? __pfx___video_do_ioctl+0x10/0x10 [ 632.737943][T22525] ? srso_alias_return_thunk+0x5/0xfbef5 [ 632.743588][T22525] ? __might_fault+0xc6/0x120 [ 632.748278][T22525] video_usercopy+0x89d/0x1180 [ 632.753080][T22525] ? __pfx___video_do_ioctl+0x10/0x10 [ 632.758478][T22525] ? __pfx_video_usercopy+0x10/0x10 [ 632.763713][T22525] ? __fget_files+0x29/0x470 [ 632.768324][T22525] ? __fget_files+0x3f3/0x470 [ 632.773023][T22525] v4l2_ioctl+0x18b/0x1e0 [ 632.777372][T22525] ? __pfx_v4l2_ioctl+0x10/0x10 [ 632.782243][T22525] __se_sys_ioctl+0xfb/0x170 [ 632.786860][T22525] do_syscall_64+0xf3/0x230 [ 632.791382][T22525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.797305][T22525] RIP: 0033:0x7fe93c97dff9 [ 632.801732][T22525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.821357][T22525] RSP: 002b:00007fe93c3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.829795][T22525] RAX: ffffffffffffffda RBX: 00007fe93cb35f80 RCX: 00007fe93c97dff9 [ 632.837780][T22525] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 632.845758][T22525] RBP: 00007fe93c9f0296 R08: 0000000000000000 R09: 0000000000000000 [ 632.853769][T22525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.861757][T22525] R13: 0000000000000000 R14: 00007fe93cb35f80 R15: 00007fff64422568 [ 632.869809][T22525] [ 632.875215][T22525] Mem-Info: [ 632.878379][T22525] active_anon:10474 inactive_anon:2 isolated_anon:0 [ 632.878379][T22525] active_file:1607 inactive_file:38967 isolated_file:0 [ 632.878379][T22525] unevictable:768 dirty:486 writeback:0 [ 632.878379][T22525] slab_reclaimable:6428 slab_unreclaimable:115046 [ 632.878379][T22525] mapped:36405 shmem:5645 pagetables:1081 [ 632.878379][T22525] sec_pagetables:0 bounce:0 [ 632.878379][T22525] kernel_misc_reclaimable:0 [ 632.878379][T22525] free:1231701 free_pcp:6309 free_cma:0 [ 632.925140][T22525] Node 0 active_anon:41896kB inactive_anon:8kB active_file:6428kB inactive_file:155792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145620kB dirty:1940kB writeback:0kB shmem:21044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11708kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no [ 632.958383][T22525] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 632.978821][T22556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7495'. [ 632.989749][T22525] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 633.026611][T22525] lowmem_reserve[]: 0 2465 2466 0 0 [ 633.032860][T22525] Node 0 DMA32 free:988068kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:41860kB inactive_anon:8kB active_file:6428kB inactive_file:154960kB unevictable:1536kB writepending:1924kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:24888kB local_pcp:23848kB free_cma:0kB [ 633.063567][T22525] lowmem_reserve[]: 0 0 0 0 0 [ 633.068365][T22525] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 633.095777][T22525] lowmem_reserve[]: 0 0 0 0 0 [ 633.096859][T22536] XFS (loop0): Ending clean mount [ 633.101057][T22525] Node 1 Normal free:3923076kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:248kB free_cma:0kB [ 633.136658][T22525] lowmem_reserve[]: 0 0 0 0 0 [ 633.138646][T22536] XFS (loop0): Quotacheck needed: Please wait. [ 633.142543][T22525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 633.160987][T22525] Node 0 DMA32: 152*4kB (UME) 82*8kB (ME) 82*16kB (ME) 95*32kB (ME) 72*64kB (UME) 29*128kB (UME) 36*256kB (ME) 18*512kB (ME) 9*1024kB (ME) 2*2048kB (UM) 229*4096kB (M) = 983664kB [ 633.179216][T22525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 633.191074][T22525] Node 1 Normal: 124*4kB (UE) 15*8kB (UME) 37*16kB (UME) 194*32kB (UME) 85*64kB (UME) 27*128kB (UM) 19*256kB (UM) 11*512kB (UM) 1*1024kB (M) 2*2048kB (U) 950*4096kB (ME) = 3923128kB [ 633.210176][T22525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.220362][T22525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.229882][T22525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.240151][T22525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.250229][T22525] 46092 total pagecache pages [ 633.254930][T22525] 2 pages in swap cache [ 633.259181][T22525] Free swap = 124328kB [ 633.263453][T22525] Total swap = 124996kB [ 633.267626][T22525] 2097051 pages RAM [ 633.271522][T22525] 0 pages HighMem/MovableOnly [ 633.276317][T22525] 427075 pages reserved [ 633.280620][T22525] 0 pages cma reserved [ 633.286811][T22536] XFS (loop0): Quotacheck: Done. [ 633.544944][T22562] xt_bpf: check failed: parse error [ 633.719076][ T5235] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 634.191756][T22571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7502'. [ 634.778621][ T25] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 634.981593][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 634.993776][ T25] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 635.008319][ T25] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 635.038452][T22583] loop4: detected capacity change from 0 to 128 [ 635.044896][ T25] usb 4-1: Product: syz [ 635.066799][ T25] usb 4-1: Manufacturer: syz [ 635.101340][ T25] usb 4-1: SerialNumber: syz [ 635.144474][ T25] usb 4-1: config 0 descriptor?? [ 635.168963][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:4' failed: Read-only file system [ 635.448204][ T25] usb 4-1: USB disconnect, device number 41 [ 635.848046][ T5292] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 636.037548][ T5292] usb 5-1: Using ep0 maxpacket: 16 [ 636.063018][ T5292] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 636.128613][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.193579][ T5292] usb 5-1: config 0 descriptor?? [ 636.214890][ T5292] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 636.250196][ T47] IPVS: starting estimator thread 0... [ 636.265277][ T5292] usb 5-1: Detected FT4232H [ 636.357372][T22588] IPVS: using max 17 ests per chain, 40800 per kthread [ 636.441674][ T5292] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 636.467271][ T5292] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 636.690924][ T5292] usb 5-1: USB disconnect, device number 35 [ 636.705089][ T5292] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 636.769464][ T5292] ftdi_sio 5-1:0.0: device disconnected [ 637.146667][T22582] loop5: detected capacity change from 0 to 32768 [ 637.161214][ T5293] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 637.168824][ T5293] usb 6-1: can't read configurations, error -71 [ 637.193340][T22582] JBD2: Ignoring recovery information on journal [ 637.437054][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/03e7aa51-a951-448e-b9eb-6dd609435e20.tmp-b7:5' failed: Read-only file system [ 637.683505][T22593] loop3: detected capacity change from 0 to 32768 [ 637.747156][T22582] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 637.784366][T21530] udevd[21530]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system [ 637.839484][T22606] loop4: detected capacity change from 0 to 512 [ 637.857138][T22606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 637.932563][ T29] audit: type=1800 audit(601.422:303): pid=22582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7507" name="file0" dev="loop5" ino=16947 res=0 errno=0 [ 638.007229][T17471] udevd[17471]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 638.229284][ T5240] ocfs2: Unmounting device (7,5) on (node local) [ 638.276611][T22606] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.7516: corrupted in-inode xattr: invalid ea_ino [ 638.339910][T22606] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.7516: couldn't read orphan inode 15 (err -117) [ 638.375769][T22606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.701945][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.303874][T22628] loop4: detected capacity change from 0 to 256 [ 640.392967][T22613] loop3: detected capacity change from 0 to 40427 [ 640.401904][T22613] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 640.410322][T22613] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 640.449254][T22628] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x73fca6c6, utbl_chksum : 0xe619d30d) [ 640.501310][ T5292] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 640.539312][T22613] F2FS-fs (loop3): Found nat_bits in checkpoint [ 640.712514][T22638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7529'. [ 640.721710][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7529'. [ 640.726625][T22613] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 640.755853][T22613] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 640.771811][T22635] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.961789][ T5292] usb 3-1: device descriptor read/all, error -71 [ 641.320143][T22655] tipc: Cannot configure node identity twice [ 641.369422][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 641.551195][T21530] udevd[21530]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 641.570617][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.627490][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.655494][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 641.702683][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.743881][ T25] usb 5-1: config 0 descriptor?? [ 642.158177][T22675] loop5: detected capacity change from 0 to 2048 [ 642.203026][ T25] cp2112 0003:10C4:EA90.003D: unknown main item tag 0x0 [ 642.250470][ T25] cp2112 0003:10C4:EA90.003D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 642.275667][T22682] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.286010][T22675] NILFS error (device loop5): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 642.303949][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:5' failed: Read-only file system [ 642.328255][ T5292] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 642.336334][T22675] Remounting filesystem read-only [ 642.343401][T22675] NILFS error (device loop5): nilfs_readdir: bad page in #2 [ 642.419063][ T25] cp2112 0003:10C4:EA90.003D: error requesting version [ 642.428378][ T25] cp2112 0003:10C4:EA90.003D: probe with driver cp2112 failed with error -71 [ 642.458658][ T25] usb 5-1: USB disconnect, device number 36 [ 642.516423][ T5292] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 642.533981][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.562703][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.576391][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.583926][T22684] loop5: detected capacity change from 0 to 1024 [ 642.584145][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.601642][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.616268][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.629459][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.639073][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.659201][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.686671][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.717962][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.759348][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.769536][ T35] hfsplus: b-tree write err: -5, ino 4 [ 642.772592][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 642.777266][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.814399][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.825480][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system [ 642.857798][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.866049][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.876347][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.887890][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.895587][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.904851][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.922014][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.931597][ T5292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 642.940779][ T5292] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 642.951950][ T5292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 642.962398][ T5292] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 642.971989][ T5292] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 642.972022][ T5292] usb 2-1: Product: syz [ 642.972043][ T5292] usb 2-1: Manufacturer: syz [ 642.972065][ T5292] usb 2-1: SerialNumber: syz [ 642.974112][ T5292] usb 2-1: config 0 descriptor?? [ 643.005377][ T5292] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 643.284273][ T5292] usb 2-1: USB disconnect, device number 44 [ 643.307106][ T5292] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 644.120649][T22702] loop4: detected capacity change from 0 to 32768 [ 644.155848][T22690] loop5: detected capacity change from 0 to 32768 [ 644.163325][T22690] XFS: noikeep mount option is deprecated. [ 644.169310][T22690] XFS: ikeep mount option is deprecated. [ 644.175004][T22690] XFS: noikeep mount option is deprecated. [ 644.195684][T22702] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 644.204132][T22702] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 644.223928][T22702] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 644.247622][ T5296] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 644.254806][ T5296] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 644.261923][T22690] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 644.342804][T17471] udevd[17471]: symlink '../../loop5' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:5' failed: Read-only file system [ 644.364289][ T5296] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 101ms [ 644.372010][ T5296] gfs2: fsid=syz:syz.0: jid=0: Done [ 644.377349][T22702] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 644.389253][T22690] XFS (loop5): Ending clean mount [ 644.440109][T22690] XFS (loop5): Quotacheck needed: Please wait. [ 644.873474][ T5292] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 645.091610][ T5292] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 645.122335][ T5292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.201047][ T5292] usb 2-1: config 0 has no interface number 0 [ 645.280900][ T5292] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 645.297324][T22690] XFS (loop5): Quotacheck: Done. [ 645.375659][ T29] audit: type=1326 audit(608.289:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.411287][ T5292] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.414793][ T29] audit: type=1326 audit(608.326:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.518980][T22726] Process accounting resumed [ 645.569107][ T29] audit: type=1326 audit(608.326:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.574199][ T5240] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 645.591321][ T29] audit: type=1326 audit(608.326:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.631769][ T29] audit: type=1326 audit(608.326:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.654892][ T29] audit: type=1326 audit(608.326:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.677084][ T29] audit: type=1326 audit(608.326:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.700071][ T29] audit: type=1326 audit(608.326:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22726 comm="syz.0.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73997dff9 code=0x7ffc0000 [ 645.722104][ T29] audit: type=1800 audit(608.372:312): pid=22690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7551" name="bus" dev="loop5" ino=1067 res=0 errno=0 [ 645.796194][ T5292] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 645.805491][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.851728][T22733] loop0: detected capacity change from 0 to 128 [ 645.890970][ T5292] usb 2-1: Product: syz [ 645.904249][ T5292] usb 2-1: Manufacturer: syz [ 645.911680][ T5292] usb 2-1: SerialNumber: syz [ 645.940513][ T5292] usb 2-1: config 0 descriptor?? [ 646.022685][T17471] udevd[17471]: symlink '../../loop0' '/dev/disk/by-uuid/1DD9-F30B.tmp-b7:0' failed: Read-only file system [ 646.032686][T22735] loop4: detected capacity change from 0 to 512 [ 646.089997][T22735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 646.368615][T22735] EXT4-fs (loop4): orphan cleanup on readonly fs [ 646.371739][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 646.404314][T22735] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7567: bg 0: block 248: padding at end of block bitmap is not set [ 646.522459][T22735] Quota error (device loop4): write_blk: dquota write failed [ 646.576709][T22735] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.7567: Failed to acquire dquot type 1 [ 646.636969][T22735] EXT4-fs (loop4): 1 truncate cleaned up [ 646.677216][T22735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 646.730983][ T5293] usb 2-1: USB disconnect, device number 45 [ 646.802882][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.988087][T22753] netlink: 'syz.2.7573': attribute type 3 has an invalid length. [ 647.281719][T22761] loop0: detected capacity change from 0 to 512 [ 647.330671][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 647.380387][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 647.436420][T22765] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7581'. [ 647.462925][T22761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.532738][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.558774][T22745] loop5: detected capacity change from 0 to 32768 [ 647.621707][T22773] netlink: 'syz.1.7583': attribute type 25 has an invalid length. [ 647.740016][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:5' failed: Read-only file system [ 647.757289][T22781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7588'. [ 647.787404][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 647.982410][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 647.992040][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.014557][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.059911][T22745] XFS (loop5): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 648.074607][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 648.080744][T22787] loop0: detected capacity change from 0 to 4096 [ 648.104153][T22787] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 648.106280][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.145232][ T8] usb 3-1: config 0 descriptor?? [ 648.222224][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-label/쨙ಘ긓kaller.tmp-b7:0' failed: Read-only file system [ 648.229896][T22796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 648.240820][T22796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.251772][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:0' failed: Read-only file system [ 648.260207][T22787] ntfs3(loop0): ino=1b, "file0" failed to parse mft record [ 648.293302][T22796] vhci_hcd vhci_hcd.0: Device attached [ 648.350978][T22787] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 648.578357][T22787] ntfs3(loop0): ino=1b, "file0" attr_set_size [ 648.699397][ T8] logitech 0003:046D:CA03.003E: unknown main item tag 0x0 [ 648.715377][T22797] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 648.735435][ T36] vhci_hcd: stop threads [ 648.739703][ T36] vhci_hcd: release socket [ 648.745687][ T8] logitech 0003:046D:CA03.003E: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.2-1/input0 [ 648.764389][ T36] vhci_hcd: disconnect device [ 648.770050][ T8] logitech 0003:046D:CA03.003E: no inputs found [ 648.778377][T22745] XFS (loop5): Ending clean mount [ 648.959342][ T8] usb 3-1: USB disconnect, device number 31 [ 649.068584][ T5240] XFS (loop5): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 649.379974][ T5296] kernel write not supported for file /input/event0 (pid: 5296 comm: kworker/1:5) [ 649.810345][T22818] loop5: detected capacity change from 0 to 4096 [ 649.963967][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:5' failed: Read-only file system [ 649.973991][T22824] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 649.993467][T22821] loop4: detected capacity change from 0 to 2048 [ 650.062913][T17471] udevd[17471]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system [ 650.190128][T22806] loop0: detected capacity change from 0 to 32768 [ 650.216787][T22831] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 650.277719][T22821] NILFS error (device loop4): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 650.381030][T22821] Remounting filesystem read-only [ 650.386109][T22821] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 650.430220][T22806] JBD2: Ignoring recovery information on journal [ 650.457509][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 650.689420][T22806] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 651.144313][ T5235] ocfs2: Unmounting device (7,0) on (node local) [ 651.317155][T22846] loop5: detected capacity change from 0 to 40427 [ 651.367497][T17471] udevd[17471]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system [ 651.394799][T22846] F2FS-fs (loop5): invalid crc value [ 651.480673][T22846] F2FS-fs (loop5): Found nat_bits in checkpoint [ 651.593474][T22862] loop4: detected capacity change from 0 to 136 [ 651.660033][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system [ 651.692377][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system [ 651.709920][T22846] F2FS-fs (loop5): Start checkpoint disabled! [ 651.742021][T22846] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 651.804190][T22846] F2FS-fs (loop5): Stopped filesystem due to reason: 0 [ 651.879723][T22868] loop4: detected capacity change from 0 to 1024 [ 651.955061][T22868] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 651.968760][T22868] hfsplus: xattr searching failed [ 651.995287][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 652.003284][T22872] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 652.045262][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system [ 652.191771][T22877] IPVS: length: 60 != 8 [ 652.477707][T22884] loop4: detected capacity change from 0 to 256 [ 652.568050][T22884] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 653.485576][T22881] loop0: detected capacity change from 0 to 32768 [ 653.605382][T22881] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 653.707087][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/ed37bf6e-74ea-4e01-afba-5fee274b0f3a.tmp-b7:0' failed: Read-only file system [ 653.850616][T22881] XFS (loop0): Starting recovery (logdev: internal) [ 653.934033][T22881] XFS (loop0): Ending recovery (logdev: internal) [ 654.017532][ T5235] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 654.112896][T22899] loop4: detected capacity change from 0 to 32768 [ 654.121171][T22899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7635 (22899) [ 654.167978][T22899] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 654.168640][ T5296] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 654.209510][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:4' failed: Read-only file system [ 654.222887][T22899] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 654.231739][T22899] BTRFS info (device loop4): using free-space-tree [ 654.257123][ T5292] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 654.418614][ T5292] usb 2-1: Using ep0 maxpacket: 8 [ 654.435235][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.459018][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.565934][ T5292] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 654.634684][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.655839][ T5296] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 654.678044][ T5292] usb 2-1: config 0 descriptor?? [ 654.683221][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.705172][ T5296] usb 3-1: Product: syz [ 654.735448][ T5296] usb 3-1: Manufacturer: syz [ 654.740546][T22948] program syz.0.7644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.764924][ T5296] usb 3-1: SerialNumber: syz [ 654.776508][ T5296] usb 3-1: config 0 descriptor?? [ 654.799113][ T5296] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 032 [ 654.894274][ T5227] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 655.039603][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7649'. [ 655.169565][ T5292] hid-led 0003:04D8:F372.003F: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 655.431920][ T5292] hid-led 0003:04D8:F372.003F: Greynut Luxafor initialized [ 655.564006][T22963] loop4: detected capacity change from 0 to 1024 [ 655.590689][ T5296] i2c i2c-1: failure reading functionality [ 655.597622][ T5292] usb 2-1: USB disconnect, device number 46 [ 655.650498][ T5296] i2c i2c-1: connected i2c-tiny-usb device [ 655.659718][ T2631] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 655.680607][T22963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.691999][ T5296] usb 3-1: USB disconnect, device number 32 [ 655.752851][ T2631] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 655.799219][ T2631] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 655.825497][T22963] EXT4-fs error (device loop4): ext4_get_first_dir_block:3554: inode #11: comm syz.4.7654: directory missing '..' [ 655.841079][ T25] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 655.867917][ T25] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 655.924754][ T2631] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 655.949364][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 655.978807][ T2631] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 656.012692][ T5296] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 656.027630][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 656.063325][ T2631] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 656.074182][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.087484][ T2631] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 656.135286][ T2631] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 656.147754][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 656.189553][ T2631] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 656.273400][ T2631] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 656.300426][T20977] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 656.310930][ T2631] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 656.326754][ T5296] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 656.335022][T20977] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 656.345196][ T5296] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 656.354767][ T5296] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 656.363813][ T5296] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 656.414418][T20977] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 656.481848][T20977] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 656.500490][T20977] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 656.508220][T20977] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 656.560409][T22969] lo speed is unknown, defaulting to 1000 [ 656.601685][T22981] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.7660'. [ 656.685767][T22981] openvswitch: netlink: Actions may not be safe on all matching packets [ 656.946403][T22969] lo speed is unknown, defaulting to 1000 [ 656.952617][T22961] loop5: detected capacity change from 0 to 32768 [ 656.959800][ T5292] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 657.014803][T22961] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 657.074427][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system [ 657.126453][ T5292] usb 2-1: Using ep0 maxpacket: 16 [ 657.157582][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.227220][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.277073][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 657.314046][T22961] XFS (loop5): Ending clean mount [ 657.323951][ T5292] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 657.354378][T22961] XFS (loop5): Quotacheck needed: Please wait. [ 657.392952][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.452496][ T5292] usb 2-1: config 0 descriptor?? [ 657.495196][T22961] XFS (loop5): Quotacheck: Done. [ 657.558833][T22984] loop0: detected capacity change from 0 to 32768 [ 657.581733][T22984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7662 (22984) [ 657.639473][T22984] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 657.690794][T22984] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 657.699303][T22984] BTRFS info (device loop0): using free-space-tree [ 657.789932][ T5240] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 657.814825][T22969] chnl_net:caif_netlink_parms(): no params data found [ 657.815271][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:0' failed: Read-only file system [ 657.980479][ T5292] microsoft 0003:045E:07DA.0040: ignoring exceeding usage max [ 657.992425][ T5292] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 658.011433][ T5292] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 658.028502][ T5292] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 658.049533][ T5292] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 658.069953][ T5292] microsoft 0003:045E:07DA.0040: unknown main item tag 0x0 [ 658.184658][ T5292] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0040/input/input57 [ 658.225651][T23025] netlink: zone id is out of range [ 658.230882][T23025] netlink: zone id is out of range [ 658.284155][T23025] netlink: set zone limit has 4 unknown bytes [ 658.309335][ T5235] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 658.389211][ T5292] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 658.447364][ T5292] usb 2-1: USB disconnect, device number 47 [ 658.649428][T23035] loop5: detected capacity change from 0 to 8 [ 658.678894][T23034] loop4: detected capacity change from 0 to 1764 [ 658.784205][T20977] Bluetooth: hci9: command tx timeout [ 658.837588][T23035] SQUASHFS error: xz decompression failed, data probably corrupt [ 658.837630][T23035] SQUASHFS error: Failed to read block 0x60: -5 [ 658.849506][T22969] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.849584][T22969] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.849755][T22969] bridge_slave_0: entered allmulticast mode [ 658.854022][T22969] bridge_slave_0: entered promiscuous mode [ 658.870861][T22969] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.870947][T22969] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.871126][T22969] bridge_slave_1: entered allmulticast mode [ 658.872277][T22969] bridge_slave_1: entered promiscuous mode [ 658.946056][T23035] SQUASHFS error: xz decompression failed, data probably corrupt [ 659.048381][T22969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.113596][T22969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.122605][T23035] SQUASHFS error: Failed to read block 0x60: -5 [ 659.171092][T23044] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7676'. [ 659.184905][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 659.184923][ T29] audit: type=1800 audit(621.017:313): pid=23035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7668" name="file0" dev="loop5" ino=1 res=0 errno=0 [ 659.376263][T22969] team0: Port device team_slave_0 added [ 659.448599][T22969] team0: Port device team_slave_1 added [ 659.804820][T22969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.811816][T22969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.839207][T22969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.875906][T23067] loop0: detected capacity change from 0 to 2048 [ 659.907162][T22969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.914364][T22969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.941450][T22969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.044986][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 660.157288][T23067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 660.201927][T22969] hsr_slave_0: entered promiscuous mode [ 660.272155][T22969] hsr_slave_1: entered promiscuous mode [ 660.310958][T22969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.366070][T22969] Cannot create hsr debugfs directory [ 660.413364][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.587225][T23081] Dead loop on virtual device ip6_vti0, fix it urgently! [ 660.948464][T23077] loop4: detected capacity change from 0 to 32768 [ 661.048711][ T5248] Bluetooth: hci9: command tx timeout [ 661.225890][T21530] udevd[21530]: symlink '../../loop4' '/dev/disk/by-uuid/9f1cad42-11bd-4e12-8f0b-f07876b81d9a.tmp-b7:4' failed: Read-only file system [ 661.377800][T23087] loop5: detected capacity change from 0 to 4096 [ 661.496213][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 661.537333][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:5' failed: Read-only file system [ 661.565285][T23077] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 661.611510][T23087] ntfs3(loop5): ino=21, "bus" fallocate(0x10) is not supported [ 661.693035][T22969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.851322][T23077] XFS (loop4): Ending clean mount [ 662.034741][T22969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.075741][T23091] loop0: detected capacity change from 0 to 40427 [ 662.109472][T23091] F2FS-fs (loop0): invalid crc value [ 662.121771][T21530] udevd[21530]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 662.141019][T23091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 662.162138][ T5227] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 662.249429][ T1259] ieee802154 phy0 wpan0: encryption failed: -22 [ 662.345805][T22969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.373574][T23091] F2FS-fs (loop0): Start checkpoint disabled! [ 662.416306][T23091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 662.475946][T23091] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 662.534569][T22969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.930941][T22969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 662.972032][T22969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 663.006049][T22969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 663.069796][T22969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 663.202619][T23128] loop5: detected capacity change from 0 to 1024 [ 663.280838][ T5248] Bluetooth: hci9: command tx timeout [ 663.344622][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system [ 663.362889][T23128] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 663.395156][T23128] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 663.428739][T21530] udevd[21530]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system [ 663.485095][T22969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.553575][ T79] hfsplus: b-tree write err: -5, ino 4 [ 663.576097][T22969] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.589928][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.597117][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.658185][T23120] loop4: detected capacity change from 0 to 32768 [ 663.692544][T23120] XFS: ikeep mount option is deprecated. [ 663.734245][T23136] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7713'. [ 663.798394][T23120] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 663.818657][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.825858][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.871411][T17471] udevd[17471]: symlink '../../loop4' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:4' failed: Read-only file system [ 663.908014][T23120] XFS (loop4): Ending clean mount [ 663.919719][T23120] XFS (loop4): Quotacheck needed: Please wait. [ 664.022297][T23120] XFS (loop4): Quotacheck: Done. [ 664.066915][T22969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.126841][T23150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7717'. [ 664.207755][ T5227] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 664.681656][T23167] loop4: detected capacity change from 0 to 256 [ 664.715544][T22969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.793279][T22969] veth0_vlan: entered promiscuous mode [ 664.800624][T21530] printk: udevd: 6 output lines suppressed due to ratelimiting [ 664.826127][T22969] veth1_vlan: entered promiscuous mode [ 664.883103][T22969] veth0_macvtap: entered promiscuous mode [ 664.910582][T22969] veth1_macvtap: entered promiscuous mode [ 665.044060][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.054811][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.064758][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.075386][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.085881][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.096411][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.106472][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.117041][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.126960][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.137484][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.148291][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.159586][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.169561][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.180073][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.190206][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.200823][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.210771][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.221276][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.232906][T22969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.376039][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.386706][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.404460][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.415211][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.425628][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.436650][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.446484][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.457632][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.501238][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.521699][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.532009][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.543083][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.553420][ T5248] Bluetooth: hci9: command tx timeout [ 665.561098][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.572670][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.582918][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.595584][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.605783][T22969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.616810][T22969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.629756][T22969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.668776][T22969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.685849][T22969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.694982][T22969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.718931][T22969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.999096][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.042543][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.091684][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.099710][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.659843][T23192] loop5: detected capacity change from 0 to 32768 [ 666.692064][T23192] XFS: ikeep mount option is deprecated. [ 667.030872][T23192] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 667.343080][T23192] XFS (loop5): Ending clean mount [ 667.363827][T23192] XFS (loop5): Quotacheck needed: Please wait. [ 667.455677][T23192] XFS (loop5): Quotacheck: Done. [ 667.559801][ T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 667.634595][ T5240] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 667.739867][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 667.793777][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.841504][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.917352][ T25] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 667.983380][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.228158][T23244] loop4: detected capacity change from 0 to 32768 [ 668.309346][ T25] usb 4-1: config 0 descriptor?? [ 668.426581][T23244] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 668.760118][ T25] hid-multitouch 0003:1FD2:6007.0041: unknown main item tag 0x0 [ 668.767962][ T25] hid-multitouch 0003:1FD2:6007.0041: unknown main item tag 0x0 [ 668.775740][ T25] hid-multitouch 0003:1FD2:6007.0041: unknown main item tag 0x0 [ 668.783408][ T25] hid-multitouch 0003:1FD2:6007.0041: unknown main item tag 0x0 [ 668.791206][ T25] hid-multitouch 0003:1FD2:6007.0041: unknown main item tag 0x0 [ 668.823719][ T25] hid-multitouch 0003:1FD2:6007.0041: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 668.869814][T23244] XFS (loop4): Ending clean mount [ 668.901669][T23244] XFS (loop4): Quotacheck needed: Please wait. [ 668.973912][T23244] XFS (loop4): Quotacheck: Done. [ 668.984542][ T25] usb 4-1: USB disconnect, device number 42 [ 669.071299][ T5227] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 669.123032][ T5293] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 669.304189][ T5293] usb 6-1: Using ep0 maxpacket: 8 [ 669.311362][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.358778][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.399204][ T5293] usb 6-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 669.447654][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.479386][ T5293] usb 6-1: config 0 descriptor?? [ 669.553407][T23281] loop0: detected capacity change from 0 to 1024 [ 669.697772][T23281] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 669.717113][T23281] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 669.806949][T23291] loop4: detected capacity change from 0 to 64 [ 669.871561][ T79] hfsplus: b-tree write err: -5, ino 4 [ 669.968834][ T5293] wacom 0003:056A:4135.0042: unknown main item tag 0x0 [ 669.987447][ T5293] wacom 0003:056A:4135.0042: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 670.041558][T20977] Bluetooth: hci6: command 0x0406 tx timeout [ 670.176397][ T5296] usb 6-1: USB disconnect, device number 41 [ 670.605374][T23320] loop3: detected capacity change from 0 to 4096 [ 671.347360][T23352] loop5: detected capacity change from 0 to 128 [ 671.677479][T23333] block device autoloading is deprecated and will be removed. [ 671.686601][T23333] loop0: detected capacity change from 0 to 32768 [ 671.793420][T23333] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 671.919657][T23333] XFS (loop0): Ending clean mount [ 671.942054][T23333] XFS (loop0): Quotacheck needed: Please wait. [ 672.038853][T23370] loop5: detected capacity change from 0 to 1024 [ 672.080599][T23333] XFS (loop0): Quotacheck: Done. [ 672.081547][T23370] hfsplus: bad catalog entry type [ 672.168935][T23338] loop3: detected capacity change from 0 to 32768 [ 672.261976][T23338] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7792 (23338) [ 672.381145][T23338] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 672.413729][T23338] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 672.428693][T23338] BTRFS info (device loop3): using free-space-tree [ 672.890482][ T5235] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 672.900698][ T1831] hfsplus: b-tree write err: -5, ino 4 [ 672.971103][T23388] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 673.347641][T23338] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 673.602082][T23405] loop5: detected capacity change from 0 to 64 [ 673.663250][T22969] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 673.900338][T23412] loop4: detected capacity change from 0 to 512 [ 674.202796][T23412] EXT4-fs (loop4): 1 truncate cleaned up [ 674.209444][T23412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.380059][T23435] loop3: detected capacity change from 0 to 1024 [ 674.447417][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.752451][T23452] loop4: detected capacity change from 0 to 16 [ 674.804597][T23452] erofs: (device loop4): mounted with root inode @ nid 36. [ 675.299938][T23440] loop5: detected capacity change from 0 to 32768 [ 675.331038][T23469] loop0: detected capacity change from 0 to 512 [ 675.345899][T23469] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 675.494548][T23440] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 675.544782][ T5296] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 675.708728][ T5296] usb 2-1: Using ep0 maxpacket: 16 [ 675.732482][ T5296] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 675.757809][ T5296] usb 2-1: config 0 has no interface number 0 [ 675.804993][ T5296] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 675.850779][T23440] XFS (loop5): Ending clean mount [ 675.859449][T23440] XFS (loop5): Quotacheck needed: Please wait. [ 675.870993][ T5296] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 675.929930][ T5296] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 675.952098][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 676.000883][T23440] XFS (loop5): Quotacheck: Done. [ 676.010571][ T5296] usb 2-1: Product: syz [ 676.020959][ T5296] usb 2-1: SerialNumber: syz [ 676.115315][ T5296] usb 2-1: config 0 descriptor?? [ 676.134982][ T5296] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 676.165543][ T5296] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input61 [ 676.362360][ C1] cm109_urb_ctl_callback: 232 callbacks suppressed [ 676.362389][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.376238][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.381053][T23485] loop3: detected capacity change from 0 to 32768 [ 676.383442][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.397062][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.404469][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.411668][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.418195][T23499] loop4: detected capacity change from 0 to 1024 [ 676.418811][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.432298][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.439595][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.454082][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 676.479026][ T25] usb 2-1: USB disconnect, device number 48 [ 676.485012][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 676.495022][ T25] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 676.566850][T23499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.841153][ T5240] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 677.036350][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.244023][T23515] loop3: detected capacity change from 0 to 16 [ 677.270476][T23515] erofs: (device loop3): mounted with root inode @ nid 36. [ 678.025409][T23531] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 678.226793][T23535] loop0: detected capacity change from 0 to 128 [ 678.278016][T23535] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 678.291620][T23535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.822193][T23567] loop5: detected capacity change from 0 to 32768 [ 679.840695][T23567] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7887 (23567) [ 679.894828][T23567] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 679.909170][T23567] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 679.921877][ T5293] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 679.924317][T23567] BTRFS info (device loop5): using free-space-tree [ 680.095472][ T5293] usb 5-1: Using ep0 maxpacket: 16 [ 680.108470][ T5293] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.120547][ T29] audit: type=1800 audit(640.363:314): pid=23567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7887" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 680.166374][ T5293] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.224962][ T5293] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 680.238619][ T5293] usb 5-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 680.262480][ T5293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 680.269905][ T5293] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 680.279823][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.293931][ T5293] usb 5-1: config 0 descriptor?? [ 680.470467][T23573] loop0: detected capacity change from 0 to 32768 [ 680.620798][T23573] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 680.647854][ T5240] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 680.845130][ T5235] ocfs2: Unmounting device (7,0) on (node local) [ 680.895546][ T5293] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5010.0043/input/input62 [ 681.102680][ T5293] kye 0003:0458:5010.0043: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 681.269827][ T25] usb 5-1: USB disconnect, device number 37 [ 682.309370][T23625] loop3: detected capacity change from 0 to 32768 [ 682.327056][ T5296] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 682.342662][T23625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7909 (23625) [ 682.500254][ T5296] usb 5-1: Using ep0 maxpacket: 16 [ 682.512096][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.531108][T23625] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 682.553495][T23625] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 682.555782][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.587094][T23625] BTRFS info (device loop3): using free-space-tree [ 682.616448][ T5296] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 682.645504][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.664739][ T5296] usb 5-1: config 0 descriptor?? [ 682.744489][T23636] loop5: detected capacity change from 0 to 32768 [ 682.751206][T23625] BTRFS info (device loop3): checking UUID tree [ 682.808002][T23636] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 683.031649][T22969] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 683.069684][ T5240] ocfs2: Unmounting device (7,5) on (node local) [ 683.149138][T23642] loop0: detected capacity change from 0 to 32768 [ 683.156614][T23642] XFS: ikeep mount option is deprecated. [ 683.283083][ T5296] ntrig 0003:1B96:0008.0044: unbalanced delimiter at end of report description [ 683.292950][ T5296] ntrig 0003:1B96:0008.0044: parse failed [ 683.298788][ T5296] ntrig 0003:1B96:0008.0044: probe with driver ntrig failed with error -22 [ 683.450651][T23642] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 683.453619][ T25] usb 5-1: USB disconnect, device number 38 [ 683.827746][T23642] XFS (loop0): Ending clean mount [ 683.985134][T23690] netlink: 'syz.3.7919': attribute type 1 has an invalid length. [ 684.018221][T23690] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.7919'. [ 684.050119][ T5235] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 684.125507][T23690] netlink: 'syz.3.7919': attribute type 1 has an invalid length. [ 684.278350][T23697] loop4: detected capacity change from 0 to 256 [ 684.331362][ T5293] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 684.344923][T23697] exfat: Deprecated parameter 'namecase' [ 684.350692][T23697] exfat: Deprecated parameter 'namecase' [ 684.400278][T23697] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 684.524978][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.547892][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.557778][ T5293] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 684.602494][T23707] loop3: detected capacity change from 0 to 512 [ 684.628220][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.635978][T23707] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 684.670162][ T5293] usb 2-1: config 0 descriptor?? [ 684.952061][T23713] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7937'. [ 684.992043][T23713] NCSI netlink: No device for ifindex 33554690 [ 685.146699][ T5293] logitech-djreceiver 0003:046D:C513.0045: unknown main item tag 0x0 [ 685.184937][ T5293] logitech-djreceiver 0003:046D:C513.0045: unknown main item tag 0x0 [ 685.397149][ T5293] usb 2-1: USB disconnect, device number 49 [ 685.605330][T23709] loop4: detected capacity change from 0 to 32768 [ 685.655142][T23709] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 685.850812][ T5227] ocfs2: Unmounting device (7,4) on (node local) [ 685.863435][T23741] loop6: detected capacity change from 0 to 524287999 [ 686.177015][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7953'. [ 686.581260][T23759] loop4: detected capacity change from 0 to 4096 [ 686.624865][T23759] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 686.650597][T23759] ntfs3(loop4): volume is dirty and "force" flag is not set! [ 686.754747][T23759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7951'. [ 686.781534][ T5296] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 686.950869][T23777] delete_channel: no stack [ 686.974789][ T5296] usb 6-1: Using ep0 maxpacket: 16 [ 687.008119][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.051085][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.060950][ T5296] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 687.096225][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.192298][ T5296] usb 6-1: config 0 descriptor?? [ 687.260176][T23790] loop4: detected capacity change from 0 to 256 [ 687.323892][T23791] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 687.431559][T23793] loop3: detected capacity change from 0 to 1024 [ 687.601818][ T1831] hfsplus: b-tree write err: -5, ino 4 [ 687.679645][ T5296] hid-led 0003:1294:1320.0046: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0 [ 687.710581][ T5296] hid-led 0003:1294:1320.0046: Riso Kagaku Webmail Notifier initialized [ 687.776699][ T5292] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 687.902772][ T5293] usb 6-1: USB disconnect, device number 42 [ 687.913550][ T8] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 687.923052][ T8] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 687.933331][ T8] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 687.951653][ T5292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.965881][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 688.016915][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 688.078356][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 688.121607][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 688.156006][ T5294] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 688.177510][ T5292] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 688.186805][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 688.195377][ T5292] usb 2-1: Product: syz [ 688.199728][ T5292] usb 2-1: Manufacturer: syz [ 688.204413][ T5292] usb 2-1: SerialNumber: syz [ 688.211477][ T5292] usb 2-1: config 0 descriptor?? [ 688.361648][ T5294] usb 4-1: Using ep0 maxpacket: 32 [ 688.379769][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.393265][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.426028][ T5294] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 688.457510][ T5292] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 688.469667][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.470990][ T5292] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 688.524268][ T5294] usb 4-1: config 0 descriptor?? [ 688.669561][ T5292] radio-si470x 2-1:0.0: software version 126, hardware version 134 [ 688.701162][ T5292] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 688.889748][ T5292] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 688.909564][ T5292] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 688.930465][ T5292] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 688.960016][ T5292] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 688.992643][ T5294] logitech 0003:046D:C298.0047: unbalanced collection at end of report description [ 688.993218][ T5294] logitech 0003:046D:C298.0047: parse failed [ 688.993292][ T5294] logitech 0003:046D:C298.0047: probe with driver logitech failed with error -22 [ 689.025362][ T5292] usb 2-1: USB disconnect, device number 50 [ 689.330827][ T5294] usb 4-1: USB disconnect, device number 43 [ 689.598707][T23827] loop4: detected capacity change from 0 to 32768 [ 689.647411][T23827] XFS (loop4): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 689.713668][T23838] loop5: detected capacity change from 0 to 32768 [ 689.799100][T23861] loop0: detected capacity change from 0 to 512 [ 689.869612][T23827] XFS (loop4): Ending clean mount [ 689.953275][T23838] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 689.963306][T23861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.073701][T23861] fs-verity: sha512 using implementation "sha512-avx2" [ 690.107303][T23838] XFS (loop5): Ending clean mount [ 690.122287][T23861] EXT4-fs warning (device loop0): ext4_begin_enable_verity:135: inode #15: comm syz.0.8004: verity is only allowed on extent-based files [ 690.550368][ T8] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 690.750366][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.761029][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 690.793281][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.802583][ T5227] XFS (loop4): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 690.826449][ T8] usb 4-1: config 0 descriptor?? [ 690.845954][ T8] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 690.896823][ T8] usb 4-1: No valid video chain found. [ 690.913290][ T5240] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 690.961659][ T5235] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.118953][T23892] tipc: Enabling of bearer rejected, failed to enable media [ 691.119408][ T5292] usb 4-1: USB disconnect, device number 44 [ 691.657469][T23901] loop0: detected capacity change from 0 to 32768 [ 691.959994][T23901] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 692.067919][T23926] loop4: detected capacity change from 0 to 1024 [ 692.086033][T23927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8028'. [ 692.099073][ T8] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 692.283769][ T5294] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 692.292071][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 692.299675][ T8] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.327550][ T8] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.348804][ T8] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 692.358627][ T8] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 692.398946][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 692.427996][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 692.450067][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.469182][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.510620][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.531894][ T5294] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 692.547463][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.596625][ T8] usb 2-1: config 0 descriptor?? [ 692.602927][ T5294] usb 4-1: config 0 descriptor?? [ 693.029755][T23951] loop5: detected capacity change from 0 to 64 [ 693.098352][ T5294] samsung 0003:0419:0600.0048: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 693.136469][ T8] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5010.0049/input/input63 [ 693.177817][T23951] syz.5.8039: attempt to access beyond end of device [ 693.177817][T23951] loop5: rw=0, sector=548, nr_sectors = 2 limit=64 [ 693.193630][ T5293] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 693.211321][T23901] XFS (loop0): Ending clean mount [ 693.224655][T23951] Buffer I/O error on dev loop5, logical block 274, async page read [ 693.233092][ T8] kye 0003:0458:5010.0049: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 693.318499][ T5237] usb 4-1: USB disconnect, device number 45 [ 693.329151][T23951] syz.5.8039: attempt to access beyond end of device [ 693.329151][T23951] loop5: rw=0, sector=548, nr_sectors = 2 limit=64 [ 693.377877][T23951] Buffer I/O error on dev loop5, logical block 274, async page read [ 693.391387][ T5293] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 693.403542][ T5292] usb 2-1: USB disconnect, device number 51 [ 693.411302][ T5235] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 693.412497][ T5293] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 693.446252][ T5293] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 693.450346][ T29] audit: type=1800 audit(652.621:315): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8039" name="file3" dev="loop5" ino=6 res=0 errno=0 [ 693.455409][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.507509][T23949] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 693.519321][ T5293] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 693.736557][T23961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8045'. [ 694.363332][T23977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8051'. [ 694.591817][ T5293] usb 3-1: USB disconnect, device number 33 [ 694.773949][T23983] autofs: Bad value for 'uid' [ 694.779373][T23983] autofs: Bad value for 'uid' [ 694.805669][T23976] loop5: detected capacity change from 0 to 32768 [ 694.813838][ T5296] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 694.963581][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8056'. [ 695.126790][ T29] audit: type=1326 audit(654.180:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.159940][T23976] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 695.197896][ T5296] usb 5-1: Using ep0 maxpacket: 16 [ 695.203647][ T29] audit: type=1326 audit(654.180:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.253857][ T29] audit: type=1326 audit(654.190:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.276256][ T29] audit: type=1326 audit(654.190:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.298171][ T29] audit: type=1326 audit(654.190:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.320226][ T29] audit: type=1326 audit(654.190:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.343032][ T29] audit: type=1326 audit(654.190:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.365903][ T29] audit: type=1326 audit(654.190:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.1.8059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe93c97dff9 code=0x7ffc0000 [ 695.388330][ T5296] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.399097][T23976] XFS (loop5): Ending clean mount [ 695.399534][ T5296] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.414143][ T5296] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 695.427112][ T5296] usb 5-1: config 0 interface 0 has no altsetting 0 [ 695.435264][ T5296] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 695.444669][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.562348][ T5296] usb 5-1: config 0 descriptor?? [ 695.583152][T24006] loop3: detected capacity change from 0 to 2048 [ 695.773365][T24011] UBIFS error (pid: 24011): cannot open "./bus", error -22 [ 695.891639][ T5240] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 696.166198][ T5296] hid (null): usage index exceeded [ 696.173946][ T5296] hid-generic 0003:045E:05DA.004A: ignoring exceeding usage max [ 696.183369][ T5296] hid-generic 0003:045E:05DA.004A: ignoring exceeding usage max [ 696.192296][ T5296] hid-generic 0003:045E:05DA.004A: usage index exceeded [ 696.217673][ T5296] hid-generic 0003:045E:05DA.004A: item 0 4 2 0 parsing failed [ 696.225895][ T5296] hid-generic 0003:045E:05DA.004A: probe with driver hid-generic failed with error -22 [ 696.475307][T24028] loop5: detected capacity change from 0 to 2048 [ 696.512573][ T8] usb 5-1: USB disconnect, device number 39 [ 696.526571][T24028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 696.720539][T24033] loop3: detected capacity change from 0 to 256 [ 696.740834][T24035] loop5: detected capacity change from 0 to 1764 [ 696.801233][T24035] devpts: called with bogus options [ 697.012570][T24024] loop0: detected capacity change from 0 to 32768 [ 697.045878][T24024] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 697.251936][T24024] XFS (loop0): Ending clean mount [ 697.339024][T24024] XFS (loop0): Quotacheck needed: Please wait. [ 697.556614][T24024] XFS (loop0): Quotacheck: Done. [ 697.662050][ T5235] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 697.877312][ T5296] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 698.283148][ T5296] usb 5-1: Using ep0 maxpacket: 32 [ 698.308622][ T5296] usb 5-1: config index 0 descriptor too short (expected 63268, got 36) [ 698.317038][ T5296] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 698.362629][ T5296] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 698.371595][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.433296][ T5296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.456932][ T5296] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 698.480828][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.525572][ T5296] usb 5-1: config 0 descriptor?? [ 698.779154][T24097] loop3: detected capacity change from 0 to 4096 [ 698.838356][T24100] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 698.904978][T24097] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 698.953394][T24097] Remounting filesystem read-only [ 698.985970][ T5296] hkems 0003:2006:0118.004B: bogus close delimiter [ 699.022455][ T5296] hkems 0003:2006:0118.004B: item 0 4 2 10 parsing failed [ 699.030916][ T5296] hkems 0003:2006:0118.004B: parse failed [ 699.058020][ T5296] hkems 0003:2006:0118.004B: probe with driver hkems failed with error -22 [ 699.226350][T24107] loop3: detected capacity change from 0 to 1024 [ 699.243517][ T5296] usb 5-1: USB disconnect, device number 40 [ 699.781367][T24118] program syz.2.8110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 700.073496][ T5293] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 700.088734][ T1117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.275218][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.290635][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.313305][ T5293] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.407433][ T5293] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 700.427445][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.443594][ T5293] usb 6-1: config 0 descriptor?? [ 700.609074][T24129] loop4: detected capacity change from 0 to 256 [ 700.766986][ T5248] Bluetooth: hci1: Dropping invalid advertising data [ 700.774669][ T5248] Bluetooth: hci1: Malformed LE Event: 0x02 [ 700.914066][ T1117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.922975][ T5293] hid-udraw 0003:20D6:CB17.004C: unbalanced delimiter at end of report description [ 700.936816][ T5293] hid-udraw 0003:20D6:CB17.004C: parse failed [ 700.945449][ T5293] hid-udraw 0003:20D6:CB17.004C: probe with driver hid-udraw failed with error -22 [ 701.097711][ T1117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.168892][ T5293] usb 6-1: USB disconnect, device number 43 [ 701.272940][ T1117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.274020][T24127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 701.299644][T24127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 701.330160][T24127] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 701.397669][T24127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 701.417359][T24127] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 701.441980][T24127] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 701.483658][T24127] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 701.586230][T24127] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 701.593203][T24127] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 701.603144][ T1117] bridge_slave_1: left allmulticast mode [ 701.611945][ T1117] bridge_slave_1: left promiscuous mode [ 701.622866][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.695611][ T1117] bridge_slave_0: left allmulticast mode [ 701.704167][T24127] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 701.712852][ T1117] bridge_slave_0: left promiscuous mode [ 701.721941][T24127] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 701.731929][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.844550][T24127] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 701.915853][T24127] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 701.947056][T24127] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 702.064487][T24127] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 702.103357][T20977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 702.120168][T20977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 702.140094][T20977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 702.156918][T20977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 702.173622][T20977] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 702.181346][T20977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 702.298861][T24167] loop4: detected capacity change from 0 to 256 [ 702.616866][T24177] usb usb8: usbfs: process 24177 (syz.2.8137) did not claim interface 13 before use [ 703.016981][ T1117] dvmrp0 (unregistering): left allmulticast mode [ 703.120047][ T1117] team0: Port device geneve1 removed [ 703.498299][ T5248] Bluetooth: hci2: command 0x0406 tx timeout [ 703.508567][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.530718][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.584164][ T5248] Bluetooth: hci1: command 0x0c1a tx timeout [ 703.584893][ T1117] bond0 (unregistering): Released all slaves [ 703.655506][ T1117] bond1 (unregistering): Released all slaves [ 703.670414][ T5248] Bluetooth: hci6: command 0x0406 tx timeout [ 703.672643][T20977] Bluetooth: hci5: command 0x0406 tx timeout [ 703.757152][T20977] Bluetooth: hci7: command 0x0406 tx timeout [ 703.838093][T24134] lo speed is unknown, defaulting to 1000 [ 703.909744][ T1117] : left promiscuous mode [ 703.930586][T20977] Bluetooth: hci8: command 0x0405 tx timeout [ 703.993209][T24196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8146'. [ 704.114920][T20977] Bluetooth: hci9: command 0x0c1a tx timeout [ 704.293342][T24134] lo speed is unknown, defaulting to 1000 [ 704.366043][ T1117] tipc: Disabling bearer [ 704.377677][ T1117] tipc: Left network mode [ 704.464765][T20977] Bluetooth: hci3: command tx timeout [ 704.574922][ T1117] IPVS: stopping backup sync thread 9916 ... [ 704.888479][T24232] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 704.916260][T24134] chnl_net:caif_netlink_parms(): no params data found [ 704.955512][T24237] dvmrp5: entered allmulticast mode [ 704.981277][T24241] dvmrp0: left allmulticast mode [ 704.986372][T24241] dvmrp1: left allmulticast mode [ 705.019129][T24241] dvmrp5: left allmulticast mode [ 705.675278][ T5292] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 705.760947][T20977] Bluetooth: hci2: command 0x0406 tx timeout [ 705.924997][T20977] Bluetooth: hci5: command 0x0406 tx timeout [ 705.967256][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.980964][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.000011][ T5292] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 706.009092][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.020456][T20977] Bluetooth: hci7: command 0x0406 tx timeout [ 706.033962][ T5292] usb 3-1: config 0 descriptor?? [ 706.120532][T24240] loop4: detected capacity change from 0 to 40427 [ 706.151314][T24240] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 706.158374][T24240] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 706.184018][T20977] Bluetooth: hci8: command 0x0405 tx timeout [ 706.184343][T24240] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1fffff [ 706.199263][T24240] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 706.248761][T24240] F2FS-fs (loop4): invalid crc value [ 706.357547][T20977] Bluetooth: hci9: command 0x0c1a tx timeout [ 706.379102][T24240] F2FS-fs (loop4): Found nat_bits in checkpoint [ 706.457301][T24134] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.464653][T24134] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.472170][T24134] bridge_slave_0: entered allmulticast mode [ 706.508970][T24240] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 706.516157][T24240] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 706.541866][ T5292] logitech-djreceiver 0003:046D:C534.004D: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input0 [ 706.568067][T24134] bridge_slave_0: entered promiscuous mode [ 706.639898][T24134] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.646615][ T5227] syz-executor: attempt to access beyond end of device [ 706.646615][ T5227] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 706.646996][T24134] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.690910][ T5227] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 706.700386][T24273] random: crng reseeded on system resumption [ 706.704065][T24134] bridge_slave_1: entered allmulticast mode [ 706.707378][T20977] Bluetooth: hci3: command tx timeout [ 706.718483][T24134] bridge_slave_1: entered promiscuous mode [ 706.855533][ T5292] usb 3-1: USB disconnect, device number 34 [ 707.136549][T24134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.176435][T24134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.534189][T24134] team0: Port device team_slave_0 added [ 707.586647][T24134] team0: Port device team_slave_1 added [ 707.732022][ T1117] hsr_slave_0: left promiscuous mode [ 707.744459][ T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 707.785469][ T1117] hsr_slave_1: left promiscuous mode [ 707.796790][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.817850][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.862255][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.880881][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.900522][T24278] loop5: detected capacity change from 0 to 32768 [ 707.917704][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 707.929475][ T8] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 707.931068][T24278] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 707.959794][ T8] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 707.962739][T24278] JBD2: Ignoring recovery information on journal [ 708.027204][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 708.067884][ T8] usb 2-1: config 1 has no interface number 0 [ 708.072510][ T1117] veth1_macvtap: left promiscuous mode [ 708.080189][ T1117] veth0_macvtap: left promiscuous mode [ 708.086997][ T1117] veth1_vlan: left promiscuous mode [ 708.100593][ T8] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 708.138238][ T8] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 708.199889][T24278] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 708.220863][ T8] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 708.224282][T24287] loop3: detected capacity change from 0 to 32768 [ 708.240928][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.319098][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 708.385539][ T5240] ocfs2: Unmounting device (7,5) on (node local) [ 708.410923][T24287] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 708.437508][T20977] Bluetooth: hci8: command 0x0405 tx timeout [ 708.557108][T24287] XFS (loop3): Ending clean mount [ 708.611473][T20977] Bluetooth: hci9: command 0x0c1a tx timeout [ 708.708889][T22969] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 708.930374][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 708.972528][T20977] Bluetooth: hci3: command tx timeout [ 709.199342][ T5293] usb 2-1: USB disconnect, device number 52 [ 709.218212][ T5293] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 709.333463][T24295] loop4: detected capacity change from 0 to 32768 [ 709.407203][T24295] syz.4.8187: attempt to access beyond end of device [ 709.407203][T24295] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 709.451104][T24295] lbmIODone: I/O error in JFS log [ 709.482858][T24295] *** Log Format Error ! *** [ 709.506815][T24295] lmLogInit: exit(-22) [ 709.517414][T24295] lmLogOpen: exit(-22) [ 710.677484][T24319] loop4: detected capacity change from 0 to 32768 [ 710.700113][T24319] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8192 (24319) [ 710.757742][T24319] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 710.768386][T24319] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 710.778194][T24319] BTRFS info (device loop4): using free-space-tree [ 710.917563][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 711.052262][T24319] BTRFS error (device loop4): unable to set label with more than 255 bytes [ 711.105714][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 711.171585][ T5227] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 711.212224][T20977] Bluetooth: hci3: command tx timeout [ 712.507614][T24134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.516231][T24134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.570871][T24134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.591266][T24314] tipc: Enabling of bearer rejected, failed to enable media [ 712.644425][T24349] loop4: detected capacity change from 0 to 32768 [ 712.651618][T24349] XFS: attr2 mount option is deprecated. [ 712.688136][T24134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.730855][T24134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.755616][T24349] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 712.807683][T24134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.945100][T24134] hsr_slave_0: entered promiscuous mode [ 712.980666][T24134] hsr_slave_1: entered promiscuous mode [ 712.998602][T24134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.037234][T24134] Cannot create hsr debugfs directory [ 713.042899][ T5296] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 713.057856][T24349] XFS (loop4): Ending clean mount [ 713.065735][T24349] XFS (loop4): Quotacheck needed: Please wait. [ 713.179885][T24349] XFS (loop4): Quotacheck: Done. [ 713.227079][ T5296] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 713.270354][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.296698][ T5296] usb 4-1: config 0 descriptor?? [ 713.358978][ T5227] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 713.551444][ T30] INFO: task syz.1.6850:20891 blocked for more than 143 seconds. [ 713.560819][ T30] Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 713.594399][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.627339][ T30] task:syz.1.6850 state:D stack:26240 pid:20891 tgid:20890 ppid:5226 flags:0x00004004 [ 713.670772][ T30] Call Trace: [ 713.683737][ T30] [ 713.691969][ T30] __schedule+0x1895/0x4b30 [ 713.700231][ T30] ? __pfx___schedule+0x10/0x10 [ 713.706281][T24385] loop4: detected capacity change from 0 to 1024 [ 713.712721][ T30] ? __pfx_lock_release+0x10/0x10 [ 713.720471][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 713.727928][ T30] ? schedule+0x90/0x320 [ 713.732343][ T30] schedule+0x14b/0x320 [ 713.739491][ T30] schedule_preempt_disabled+0x13/0x30 [ 713.755886][ T30] __mutex_lock+0x6a7/0xd70 [ 713.768076][ T30] ? __mutex_lock+0x52a/0xd70 [ 713.775311][ T30] ? exfat_sync_fs+0xb0/0x160 [ 713.787542][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 713.795538][ T30] ? super_lock+0x2d6/0x400 [ 713.800212][ T30] ? __pfx_super_lock+0x10/0x10 [ 713.805565][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.811716][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 713.817052][ T30] exfat_sync_fs+0xb0/0x160 [ 713.821658][ T30] iterate_supers+0xc8/0x190 [ 713.828884][ T30] ? __pfx_sync_fs_one_sb+0x10/0x10 [ 713.836662][ T30] ksys_sync+0xdb/0x1c0 [ 713.843315][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 713.861059][ T30] ? do_syscall_64+0x100/0x230 [ 713.881889][ T30] ? do_syscall_64+0xb6/0x230 [ 713.886683][ T30] __do_sys_sync+0xe/0x20 [ 713.898122][ T30] do_syscall_64+0xf3/0x230 [ 713.908649][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.914593][ T30] RIP: 0033:0x7fda6b57dff9 [ 713.919044][ T30] RSP: 002b:00007fda6c409038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 713.938550][ T30] RAX: ffffffffffffffda RBX: 00007fda6b735f80 RCX: 00007fda6b57dff9 [ 713.946710][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 713.954925][ T30] RBP: 00007fda6b5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 713.963407][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.971410][ T30] R13: 0000000000000000 R14: 00007fda6b735f80 R15: 00007ffc7b073be8 [ 713.977728][ T5296] usb 4-1: Cannot set autoneg [ 713.979901][ T30] [ 713.985580][ T5296] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 713.987475][ T30] [ 713.987475][ T30] Showing all locks held in the system: [ 714.007239][ T30] 1 lock held by khungtaskd/30: [ 714.012111][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 714.022938][ T30] 6 locks held by kworker/u8:5/1117: [ 714.028433][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 714.035964][ T5296] usb 4-1: USB disconnect, device number 46 [ 714.039624][ T30] #1: ffffc90004287d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 714.056263][ T30] #2: ffffffff8fcc5990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 714.065974][ T30] #3: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: caif_exit_net+0x6f/0x4a0 [ 714.075260][ T30] #4: ffff8880273ff580 (&caifn->caifdevs.lock){+.+.}-{3:3}, at: caif_exit_net+0x82/0x4a0 [ 714.085982][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 714.097449][ T30] 2 locks held by getty/4983: [ 714.102149][ T30] #0: ffff88814ce980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 714.112612][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 714.123446][ T30] 3 locks held by syz-executor/5230: [ 714.128843][ T30] 3 locks held by kworker/1:5/5296: [ 714.134066][ T30] #0: ffff8880202f4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 714.145529][ T30] #1: ffffc90004fffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 714.157574][ T30] #2: ffff8880282d7190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 714.166787][ T30] 2 locks held by syz.1.6850/20891: [ 714.172064][ T30] #0: ffff88807c67c0e0 (&type->s_umount_key#75){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 714.182059][ T30] #1: ffff888052d680e8 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160 [ 714.192368][ T30] 3 locks held by kworker/u8:9/21269: [ 714.197762][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 714.209643][ T30] #1: ffffc9001ad17d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 714.220877][ T30] #2: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 714.230605][ T30] 2 locks held by syz.1.7045/21392: [ 714.236541][ T30] #0: ffff88807c67c0e0 (&type->s_umount_key#75){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 714.246647][ T30] #1: ffff888052d680e8 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160 [ 714.256150][ T30] 2 locks held by syz.3.7560/22722: [ 714.261369][ T30] #0: ffff88807c67c0e0 (&type->s_umount_key#75){++++}-{3:3}, at: super_lock+0x27c/0x400 [ 714.271360][ T30] #1: ffff888052d680e8 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0xb0/0x160 [ 714.280881][ T30] 1 lock held by syz-executor/24134: [ 714.286182][ T30] #0: ffffffff8fcd2488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 714.296106][ T30] 2 locks held by syz.2.8210/24379: [ 714.301759][ T30] 1 lock held by syz.1.8212/24383: [ 714.306889][ T30] #0: ffff88805dc990c8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x32/0x100 [ 714.317801][ T30] [ 714.320157][ T30] ============================================= [ 714.320157][ T30] [ 714.328672][ T30] NMI backtrace for cpu 0 [ 714.333015][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 714.343532][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 714.353605][ T30] Call Trace: [ 714.356898][ T30] [ 714.359841][ T30] dump_stack_lvl+0x241/0x360 [ 714.364302][ T11] hfsplus: b-tree write err: -5, ino 4 [ 714.364525][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.375188][ T30] ? __pfx__printk+0x10/0x10 [ 714.379834][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 714.384807][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 714.390286][ T30] ? _printk+0xd5/0x120 [ 714.394480][ T30] ? __pfx__printk+0x10/0x10 [ 714.399113][ T30] ? __wake_up_klogd+0xcc/0x110 [ 714.404001][ T30] ? __pfx__printk+0x10/0x10 [ 714.408635][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.414294][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 714.419360][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 714.425378][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 714.431392][ T30] watchdog+0xff4/0x1040 [ 714.435673][ T30] ? watchdog+0x1ea/0x1040 [ 714.440130][ T30] ? __pfx_watchdog+0x10/0x10 [ 714.444842][ T30] kthread+0x2f2/0x390 [ 714.448938][ T30] ? __pfx_watchdog+0x10/0x10 [ 714.453647][ T30] ? __pfx_kthread+0x10/0x10 [ 714.458260][ T30] ret_from_fork+0x4d/0x80 [ 714.462711][ T30] ? __pfx_kthread+0x10/0x10 [ 714.467325][ T30] ret_from_fork_asm+0x1a/0x30 [ 714.472139][ T30] [ 714.476556][ T30] Sending NMI from CPU 0 to CPUs 1: [ 714.481799][ C1] NMI backtrace for cpu 1 [ 714.481814][ C1] CPU: 1 UID: 0 PID: 5230 Comm: syz-executor Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 714.481841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 714.481855][ C1] RIP: 0010:check_preemption_disabled+0x5d/0x120 [ 714.481886][ C1] Code: 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f e9 a7 6b 2a 00 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c5 49 89 f6 49 89 ff 65 4c 8b 24 [ 714.481906][ C1] RSP: 0018:ffffc900051ff340 EFLAGS: 00000046 [ 714.481928][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff817056d4 [ 714.481945][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ad7a0 RDI: ffffffff8c60fca0 [ 714.481963][ C1] RBP: ffffc900051ff4d0 R08: ffffffff901cf6ef R09: 1ffffffff2039edd [ 714.481981][ C1] R10: dffffc0000000000 R11: fffffbfff2039ede R12: 1ffff92000a3fe78 [ 714.481999][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 714.482019][ C1] FS: 000055558cdb7500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 714.482040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.482057][ C1] CR2: 00007f946a508178 CR3: 0000000011c0c000 CR4: 0000000000350ef0 [ 714.482076][ C1] Call Trace: [ 714.482085][ C1] [ 714.482095][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 714.482125][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 714.482165][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 714.482197][ C1] ? nmi_handle+0x2a/0x5a0 [ 714.482236][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 714.482276][ C1] ? nmi_handle+0x151/0x5a0 [ 714.482304][ C1] ? nmi_handle+0x2a/0x5a0 [ 714.482332][ C1] ? check_preemption_disabled+0x5d/0x120 [ 714.482360][ C1] ? default_do_nmi+0x63/0x160 [ 714.482394][ C1] ? exc_nmi+0x123/0x1f0 [ 714.482425][ C1] ? end_repeat_nmi+0xf/0x53 [ 714.482457][ C1] ? lock_acquire+0xd4/0x550 [ 714.482496][ C1] ? check_preemption_disabled+0x5d/0x120 [ 714.482525][ C1] ? check_preemption_disabled+0x5d/0x120 [ 714.482555][ C1] ? check_preemption_disabled+0x5d/0x120 [ 714.482584][ C1] [ 714.482593][ C1] [ 714.482607][ C1] lock_acquire+0x1b0/0x550 [ 714.482647][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.482680][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 714.482721][ C1] ? __pfx___find_get_block+0x10/0x10 [ 714.482750][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.482782][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.482819][ C1] ? fs_reclaim_acquire+0x93/0x130 [ 714.482847][ C1] fs_reclaim_acquire+0xaf/0x130 [ 714.482872][ C1] ? fs_reclaim_acquire+0x93/0x130 [ 714.482897][ C1] bdev_getblk+0x3d/0x550 [ 714.482925][ C1] ? __pfx_exfat_find_location+0x10/0x10 [ 714.482957][ C1] __bread_gfp+0x86/0x400 [ 714.482984][ C1] exfat_get_dentry+0x53b/0x730 [ 714.483010][ C1] ? bdev_getblk+0x6e/0x550 [ 714.483036][ C1] ? irqentry_exit+0x63/0x90 [ 714.483058][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 714.483099][ C1] ? __pfx_exfat_get_dentry+0x10/0x10 [ 714.483129][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.483162][ C1] exfat_iterate+0xb69/0x3390 [ 714.483219][ C1] ? __pfx_exfat_iterate+0x10/0x10 [ 714.483251][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.483312][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 714.483350][ C1] ? __pfx___might_resched+0x10/0x10 [ 714.483384][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.483421][ C1] ? __pfx_down_write+0x10/0x10 [ 714.483449][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 714.483472][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.483502][ C1] ? __pfx_exfat_iterate+0x10/0x10 [ 714.483527][ C1] wrap_directory_iterator+0x93/0xd0 [ 714.483553][ C1] iterate_dir+0x573/0x800 [ 714.483576][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.483605][ C1] __se_sys_getdents64+0x1d3/0x4a0 [ 714.483635][ C1] ? __pfx___se_sys_getdents64+0x10/0x10 [ 714.483659][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 714.483693][ C1] ? __pfx_filldir64+0x10/0x10 [ 714.483719][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 714.483756][ C1] ? exc_page_fault+0x590/0x8c0 [ 714.483797][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.483826][ C1] ? do_syscall_64+0xb6/0x230 [ 714.483851][ C1] do_syscall_64+0xf3/0x230 [ 714.483878][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.483914][ C1] RIP: 0033:0x7fcbc5db0193 [ 714.483933][ C1] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 714.483953][ C1] RSP: 002b:00007ffe00d74d28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 714.483977][ C1] RAX: ffffffffffffffda RBX: 000055558cdd2600 RCX: 00007fcbc5db0193 [ 714.483995][ C1] RDX: 0000000000008000 RSI: 000055558cdd2600 RDI: 0000000000000005 [ 714.484011][ C1] RBP: 000055558cdd25d4 R08: 0000000000000000 R09: 0000000000000000 [ 714.484027][ C1] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 714.484043][ C1] R13: 0000000000000010 R14: 000055558cdd25d0 R15: 00007ffe00d76fd0 [ 714.484071][ C1] [ 714.484222][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 714.484238][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00013-geca631b8fe80 #0 [ 714.484267][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 714.484284][ T30] Call Trace: [ 714.484295][ T30] [ 714.484306][ T30] dump_stack_lvl+0x241/0x360 [ 714.484338][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.484367][ T30] ? __pfx__printk+0x10/0x10 [ 714.484406][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 714.484454][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.484483][ T30] ? vscnprintf+0x5d/0x90 [ 714.484517][ T30] panic+0x349/0x880 [ 714.484556][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.484587][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 714.484623][ T30] ? __pfx_panic+0x10/0x10 [ 714.484660][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 714.484691][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.484720][ T30] ? __irq_work_queue_local+0x137/0x410 [ 714.484757][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.484787][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 714.484816][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 714.484849][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 714.484885][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 714.484915][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 714.484952][ T30] watchdog+0x1033/0x1040 [ 714.484990][ T30] ? watchdog+0x1ea/0x1040 [ 714.485034][ T30] ? __pfx_watchdog+0x10/0x10 [ 714.485075][ T30] kthread+0x2f2/0x390 [ 714.485102][ T30] ? __pfx_watchdog+0x10/0x10 [ 714.485137][ T30] ? __pfx_kthread+0x10/0x10 [ 714.485166][ T30] ret_from_fork+0x4d/0x80 [ 714.485205][ T30] ? __pfx_kthread+0x10/0x10 [ 714.485233][ T30] ret_from_fork_asm+0x1a/0x30 [ 714.485286][ T30] [ 715.155470][ T30] Kernel Offset: disabled [ 715.159794][ T30] Rebooting in 86400 seconds..