last executing test programs: 2m31.672028384s ago: executing program 3 (id=3161): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001d005f80004000000000000002000000010000000000080008000100000303ff", 0x24) 2m31.39914984s ago: executing program 3 (id=3165): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="8a6490", 0x3}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m31.254550949s ago: executing program 3 (id=3166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000f907000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m30.930171778s ago: executing program 3 (id=3171): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000004c0)={[{@grpquota}, {@bsdgroups}]}, 0xfe, 0x9882, &(0x7f000001c800)="$eJzs3QW8pGXBuP+zyy4sKaAIFiAlJilhIB2KKClKCNKSAiKgdCihgiKggAIKIop0d4d0d3d3x/+zsCCsF4j/3/sKL9d1fdwzZ2aeM+ee+zv345nzHGaWnHfROQcGxh14pVdP/9kZu9687GJjL7jukTsPuWqvHRa6b8TFo75yMt7sI07nGHE658DAwKARtzPolcuGzHbEkYMHhgwM/98/G2v0MQaPNTAwxoizI25nYOZXTsbc/9XtXhopHuikw7/d9q/8e7mxh9/I8E+WXu6FtQYGBoa97uuHj2vaf7mj0pacY755/2n1mtvgEVcP+ud1L58OeeXfmPsODIy598CbPz6Gbzv0dV/732z49xx38oHFb34Hvvf/uZacY74FRvIfvhZHGXHZzMPX+Mhr0NjIj/MdFl39nhFTOGjExA153Xp5Jx73/79aco55Fxx483U8sNA8m9z90sv7zSFzDwwMmWdgYMi8AwND5nunPep/pnf0wVdVVVXvSHPMOcPw5+yDR/p5YNirP9fSz4XnPD/d7QMDQxZ65XnikOVefS5YVVVVVVVVVe/O5phzhrng+f+4b/X8f9Ljtx6v5/9VVVVVVVVV/3daYI45Zxj+XH+k5/8TvdXz/4fvPWi/V/72f/aZX/mqF9/ZO1FVVVVVVVVVb9m8C+Dz/0nf6vn/eUdMemHP/6uqqqqqqqr+77TISy+9tNnrXmdvxMVTv3o9Pf8/8a4bl3nHBlxVVVVVVVVV/3EvPnDcSf98zfeJB0Z6vfeXG/F7gUGHnHLxxe/YQN8dDfrX34ds/k6P6f+14c7DDpx0YGCtxd/podQ70P+Z16qv/5Xyd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xb3L8/7XX/z/xsBVefS/4T0w5w9XH/fMrX37v/yELLfDAFu/Q0N+J3qvH/wdWGzQwMMJ33NUGBgYWmmORxaYeGBg47uoZppxi4LXrZhl+3RfHH+XlN4h/9T8TmWc8vuHNJ3vldPgDZeADr93GIS/f/gIv7TPKoJEG8brGO2q//VZd8qkZRz6d6s3vx+DXPhv7yHtf/W9ZBo+00bA3+eJXb//V+zKy84ixTz187NOsv+Y606y30cafXW3N5VdZaZWV1pp1+pmmm3HWWWeaaZqVV1tjpWlf+fhmczbpyx/nejtzNtbIc/bAHK+fs5Hv25vN2aRvPWcv3+Iu5w77yqtzNuQ/nLO53nrOJl1txDcab/ahA8u9PDeDBgbGm3vowIbDz0w32sDAePOM2Hai4dt+afzBAwM7/fOODv9stNceg4M2H77NkvMuOucru6mBgX+e/rM3eT/7UUeMfPYRp3OMOJ3zlW8z7sA/H4pDZjviyMHD5+IN0zHW6GMMHmtgYIwRZ0fczsCsr5yMcfyr273J+6yPNNCXX2Zl+1f+vdzYAwMDYw7/ZOLlT9xm+NT/F96n/f/X////i9csg157PA4a8W/ENq94zTHfAv/8Xi9Pw/C5G2XEZTMPN/kffmv7N/Qv45102MCkbzHet3hdnJejx9cax02w5f/U6+LQeCd6i/G+xev4vul4l7h993teuan/sfGOtK9b8OWPs7+dfd3AW+/rRqEbWOmCj428r/vamw/xDbvLV+dotJE2erN93UR7TrL58Nuf/a33dQsOH/vQN+zrBg8MjDfXq/u64Tu+eYcO7DT8zPTDz8w3dOCA4WdmePnM6AOnDD/zuRXWXmPF4RfM/6+Pg6kHveEPNGGdzTvSOhv0uvs+aKS/7xzyyumY+776Hk5vst8cNOJu/dt9BT1ux32L8b7F+0/hPA+/bMVDh03wP/X+UzTeYW893jd7v+w3He+OT5548//weF9bZ0NfN13zv511Nukb19nwuzjK61bG2/05bEXY/pXPJ3rt1jbY9N7XfqYYOtLt/rufKeZ/63U27mojfd12ew8Mequ5me/tzM1H/2UftMXr5+bt/rw19eSvXD/KW8zNaLMuO9WrczPqfzg38/2nczP7wChvnJshA/MMDAxMMWL/MO/bmZuJ3npu3u7jZgzY/pXPV3rtorl3OPCsV+dm5Ln4d3Mz7386N5O+9riZ4uXrJhs8MOqoAxsuv/766073ysdXz07/yse3XoNzv525HPd/Zi4/POTN5vKfD9Wxbr9w33+zBv9ln/7q7c/9n87lwGtzObDayIul3q31+z93+bvL313+7vJ3l7+7/MW9yfH/117/f7dxv7jziF9uDL1wkgm3fafH+w73nj7+P8L3Dcf/t51wkgsHD7x23Vsen31lm3fl8dmZXzkZc/9Xtxv5+CAP9M2Pz+4968xb/5eOz/7/6tW1+jZ+D9f+313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uTY7/T/vq3wHcNd3Cj444EDr0vq2WWvidHu873Hv6+P8I3zcc/194qa3uGzzw2nVvefz/lW0cx/9vfW7eHd/Nx/9fXasd/69/U/7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5Njv/P/urfARx00O4bv/r3AJePt/1x7/R43+Heq8f/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uJGHP8fGOntLb/Z4wKD4///t3sT/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf9b+WMW/yXzxyz+384fs/h/J3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/NH7P4L5c/ZvFfPn/M4v+9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF//v5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/wf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zB/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P80fs/j/LH/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOL/y/wxi/9O+WMW/53zxyz+v8ofs/j/On/M4r9L/pjF/zf5Yxb/XfPHLP675Y9Z/HfPH7P4/zZ/zOL/u/wxi/8e+WMW/z3zxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/PvljFv9988cs/n/MH7P4/yl/7DX/QYPe0/775Y9Z1v/++WMW/z/nj1n8D8gfs/j/JX/M4n9g/pjF/6/5Yxb/v+WPWfwPyh+z+P89f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+/8gfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxif+ggfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/6H5Yxb/UfPHLP6j5Y9Z/Iflj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW//flj1n8x80fs/iPlz9m8R8/f8zi//78MYv/B/LHLP4T5I9Z/D+YP2bxnzB/zOI/Uf6Yxf9D+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/4nzxyz+k+SPWfwnzR+z+H88f8ziP9mr/sPeoXG9S7P4T976xyz+U+SPWfynzB+z+E+VP2bx/0T+mMV/6vwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/p/PH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/bPljFv+v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9q/pjF/2v5Yxb/BfPHLP5fzx+z+C+UP2bx/0b+mMX/m/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/W/ljFv8l88cs/t/OH7P4fyd/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzR+z+C+XP2bxXz5/zOL/vfwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/7+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8H+WMW/3Xzxyz+6+WPWfzXzx+z+P8wf8ziv0H+mMX/R/ljFv8N88cs/hvlj1n8N84fs/j/OH/M4v+T/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/j/NH7P4/yx/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP4/zx+z+P8if8zi/8v8MYv/TvljFv+d88cs/r/KH7P4/zp/zOK/S/6Yxf83+WMW/13zxyz+u+WPWfx3zx+z+P82f8zi/7v8MYv/HvljFv8988cs/nvlj73Rf5R3ejj/772J/+/zxyzr/w/5Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f36j/53/9XG9S7P4H9D6xyz+f8kfs/gfmD9m8f9r/pjF/2/5Yxb/g/7pv94178jA3p1Z/P/e+scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf0zi/3L5/2sS/0Hn549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj713/Qe9wf+K/LH3rv8b1/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/Jf1S60OL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4v/xp/v+axX9Q/pjFf3D+mMV/lPwxi/+Q/DGL/9D8MYv/qPljFv/R8scs/sPyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL//vyxyz+4+aPWfzHyx+z+I+fP2bxf3/+mMX/A/ljFv8J8scs/h/MH7P4T5g/ZvGfKH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4v+x/DGL/8Rv7T/0f31c79Is/pO0/jGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/yfyxyz+U+ePWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjFf5r8MYv/tPljg87YdejAwMB73n+6/DHL+p8+f8ziP0P+mMV/xvwxi//n88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP1v+mMX/K/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mj9m8f9a/pjFf8H8MYv/1/PHLP4L5Y9Z/L+RP2bx/2b+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1b+mMV/yfwxi/+388cs/t/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/d/PHLP7L5Y9Z/JfPH7P4fy9/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/fv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/Qf6YxX/d/DGL/3r5Yxb/9fPHLP4/zB+z+G+QP2bx/1H+mMV/w/wxi/9G+WMW/43zxyz+P84fs/j/JH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/9P88cs/j/LH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/z/PHLP6/yB+z+P8yf8ziv1P+mMV/5/wxi/+v8scs/r/OH7P475I/ZvH/Tf6YxX/X/DGL/275Yxb/3fPHLP6/zR+z+P8uf8ziv0f+mMV/z/wxi/9e+WMW/9/nj1n8/5A/ZvHfO3/M4r9P/pjFf9/8MYv/H/PHLP5/yh+z+O+XP2bx3z9/zOL/5/wxi/8B+WMW/7/kj1n8D8wfs/j/NX/M4v+3/DGL/0H5Yxb/v+ePWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf8f+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UPybxH2Ugf8ziPyh/zOI/OH/M4j9K/pjFf0j+mMV/aP6YxX/U/DGL/2j5Yxb/YfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMX/ffljFv9x88cs/uPlj1n8x88fs/i/P3/M4v+B/DGL/wT5Yxb/D+aPWfwnzB+z+E+UP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMV/4vwxi/8k+WMW/0nzxyz+H88fs/hPlj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/0/kj1n8p84fs/h/Mn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v/5/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4z5Y/ZvH/Sv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv+v5o9Z/L+WP2bxXzB/zOL/9fwxi/9C+WMW/2/kj1n8v5k/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v5U/ZvFfMn/M4v/t/DGL/3fyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/3fwxi/9y+WMW/+Xzxyz+38sfs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/nz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/kD9m8V83f8ziv17+mMV//fwxi/8P88cs/hvkj1n8f5Q/ZvHfMH/M4r9R/pjFf+P8MYv/j/PHLP4/yR+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/8/yxyz+2+WPWfy3zx+z+O+QP2bx3zF/zOL/8/wxi/8v8scs/r/MH7P475Q/ZvHfOX/M4v+r/DGL/6/zxyz+u+SPWfx/kz9m8d81f8ziv1v+mMV/9/wxi/9v88cs/r/LH7P475E/ZvHfM3/M4r9X/pjF//f5Yxb/P+SPWfz3zh+z+O+TP2bx3zd/zOL/x/wxi/+f8scs/vvlj1n8988fs/j/OX/M4n9A/pjF/y/5Yxb/A/PHLP5/zR+z+P8tf8zif1D+mMX/7/ljFv+DPf6j/ycbW/wP8fj/R1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8f9H/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj0n8hwzkj1n8B709/1H/18b1Ls3iP7j1j1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+L8vf8ziP27+mMV/vPwxi//4+WMW//fnj1n8P5A/ZvGfIH/M4v/B/DGL/4T5Yxb/ifLHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+cP2bxnyR/zOI/af6Yxf/j+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/ifwxi//U+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l/JH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/9X8MYv/1/LHLP4L5o9Z/L+eP2bxXyh/zOL/jfwxi/8388cs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+38scs/kvmj1n8v50/ZvH/Tv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+bP2bxXy5/zOK/fP6Yxf97+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL//fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/w+M/sP+/SYW/3WN/m8ji/96+WMW//Xzxyz+P8wfs/hvkD9m8f9R/pjFf8P8MYv/RvljFv+N88cs/j/OH7P4/yR/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP4/yx+z+G+XP2bx3z5/zOK/Q/6YxX/H/DGL/8/zxyz+v8gfs/j/Mn/M4r9T/pjFf+f8MYv/r/LHLP6/zh+z+O+SP2bx/03+mMV/1/wxi/9u+WMW/93zxyz+v80fs/j/Ln/M4r9H/pjFf8/8MYv/XvljFv/f549Z/P+QP2bx3zt/zOK/T/6YxX/f/DGL/x/zxyz+f8ofs/jvlz9m8d8/f8zi/+f8MYv/AfljFv+/5I9Z/A/MH7P4/zV/zOL/t/wxi/9B+WMW/7/nj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX/H/ljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+Vyj9B//bLSz+Vyr9/30W/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8sck/kMH8scs/oPyxyz+g/PHLP6j5I9Z/Ifkj1n8h+aPWfxHzR+z+I+WP2bxH5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n835c/ZvEfN3/M4j9e/pjFf/z8MYv/+/PHLP4fyB+z+E+QP2bx/2D+mMV/wvwxi/9E+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/4/lj1n8J84fs/hPkj9m8Z80f8zi//H8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f9E/pjFf+r8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP6fzx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/2z5Yxb/r+SPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/av6Yxf9r+WMW/wXzxyz+X88fs/gvlD9m8f9G/pjF/5su/yFvd0OL/8Iu/7edxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fyt/zOK/ZP6Yxf/b+WMW/+/kj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMX/u/ljFv/l8scs/svnj1n8v5c/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/h/P3/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/j/IH/M4r9u/pjFf738MYv/+vljFv8f5o9Z/DfIH7P4/yh/zOK/Yf6YxX+j/DGL/8b5Yxb/H+ePWfx/kj9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf+n+WMW/5/lj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/5/ljFv9f5I9Z/H+ZP2bx3yl/zOK/c/6Yxf9X+WMW/1/nj1n8d8kfs/j/Jn/M4r9r/pjFf7f8MYv/7vljFv/f5o9Z/H+XP2bx3yN/zOK/Z/6YxX+v/DGL/+/zxyz+f8gfs/jvnT9m8d8nf8ziv2/+mMX/j/ljFv8/5Y9Z/PfLH7P4758/ZvH/c/6Yxf+A/DGL/1/yxyz+B+aPWfz/mj9m8f9b/pjF/6D8MYv/3/PHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4v+P/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jzqQP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFf7T8MYv/sPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/vvwxi/+4+WMW//Hyxyz+4+ePWfzfnz9m8f9A/pjFf4L8MYv/B/PHLP4T5o9Z/CfKH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOI/cf6YxX+S/DGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/yfyxyz+U+ePWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f98/pjFf6b8MYv/zPljFv9Z8sdG9h/6Tg/o/7U38Z81f8yy/r+QP2bx/2L+mMX/S/ljFv8v549Z/GfLH7P4fyV/zOI/+7/3H+1/dVzv0iz+c7T+MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/9X88cs/l/LH7P4L5g/ZvH/ev6YxX+h/DGL/zfyxyz+38wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+38ofs/gvmT9m8f92/pjF/zv5Yxb/pfLH3qP+g0ayHnXp/LH3qP/LvX79L5M/ZvFfNn/M4v/d/DGL/3L5Yxb/5fPHLP7fyx+z+K+QPzbojEEjZua97b9i/phl/a+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+SPWfzXzR+z+K+XP2bxXz9/zOL/w/wxi/8G+WMW/x/lj1n8N8wfs/hvlD9m8d84f8zi/+P8MYv/T/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/NH/M4v+z/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/zx/zOL/i/wxi/8v88cs/jvlj1n8d84fs/j/Kn/M4v/r/DGL/y75Yxb/3+SPWfx3zR+z+O+WP2bx3z1/zOL/2/wxi//v8scs/nvkj1n898wfs/jvlT9m8f99/pjF/w/5Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f84fs/gfkD9m8f9L/pjF/8D8MYv/X/PHLP5/yx+z+B+UP2bx/3v+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfz/kT9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F/2Nv2H/G+N612axf/y1j9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+e/8DocJnF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyT+ow3kj1n8B+WPWfwH549Z/EfJH7P4D8kfs/gPzR+z+I+aP2bxHy1/zOI/LH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/i/L3/M4j9u/pjFf7z8RzTsDecs/uPnj1n8358/ZvH/QP6YxX+C/DGL/wfzxyz+E+aPWfwnyh+z+H8of8zi/+H8sfem/yuvdPZ6/4/kj703/V/p9f4fzR+z+H8sf8ziP3H+mMV/kvwxi/+k+WMW/4/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/8n8scs/lPnj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/fP6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/GfLH7P4fyV/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/V/PHLP5fyx+z+C+YP2bx/3r+mMV/ofwxi/838scs/t/MH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/KH7P4L5k/ZvH/dv6Yxf87+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bx/27+mMV/ufwxi//y+WMW/+/lj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+388fs/ivnj9m8V8jf8ziv6bKf4y3vaXFfy2V/9vP4r92/pjFf538MYv/D/LHLP7r5o9Z/NfLH7P4r58/ZvH/Yf6YxX+D/DGL/4/yxyz+G+aPWfw3yh+z+G+cP2bx/3H+mMX/J/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23Qv0eExX/btDGL/0/zxyz+P8sfs/hvlz9m8d8+f8ziv8Mr/i+89E6N612axX/H1j9m8f95/pjF/xf5Yxb/X+aPWfx3yh+z+O+cP2bx/1X+mMX/1/ljFv9d8scs/r/JH7P475o/ZvHfLX/M4r97/pjF/7f5Yxb/3+WPWfz3yB+z+O+ZP2bx3yt/zOL/+7flP/R/b1zv0iz+f2j9Yxb/vfPHLP775I9Z/PfNH7P4/zF/zOL/p/wxi/9++WMW//3zxyz+f84fs/gfkD9m8f9L/pjF/8D8MYv/X/PHLP5/yx+z+B+UP2bx/3v+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfz/kT9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMS/2ED+WMW/0H5Yxb/wfljFv9R8scs/kPyxyz+Q/PHLP6j5o9Z/EfLH7P4D8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+78sfs/iPmz9m8R8vf8ziP37+mMX//fljFv8P5I9Z/CfIH7P4fzB/zOI/Yf6YxX+i/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+H8if8ziP3X+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv/P549Z/GfKH7P4z5w/9rL/q2few/6z5I9Z1v+s+WMW/y/kj1n8v/iW/rv/74/rXZrF/0utf8zi/+X8MYv/bPljFv+v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9q/pjF/2v5Yxb/BfPHLP5fzx+z+C+UP2bx/0b+mMX/m/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/W/ljFv8l88cs/t/OH7P4fyd/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzR+z+C+XP2bxXz5/zOL/vfwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/7+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8H+WMW/3Xzxyz+6+WPWfzXfwv/of+Ncb1Ls/j/sPWPWfw3yB+z+P8of8ziv2H+mMV/o/wxi//G+WMW/x/nj1n8f5I/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/hvnT9m8d8mf8ziv23+mMX/p/ljFv+f5Y9Z/LfLH7P4b58/ZvHfIX/M4r9j/pjF/+f5Yxb/X+SPWfx/mT9m8d8pf8ziv3P+mMX/V/ljFv9f549Z/HfJH7P4/yZ/zOK/a/6YxX+3/DGL/+75Yxb/3+aPWfx/lz9m8d8jf8ziv2f+mMV/r/wxi//v88cs/n/IH7P4750/ZvHfJ3/M4r9v/pjF/4/5Yxb/P+WPWfz3yx+z+O+fP2bx/3P+mMX/gPwxi/9f8scs/gfmj1n8/5o/ZvH/W/6Yxf+g/DGL/9/zxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOL/j/wxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxv+et/Mf5L4zrXZrF/97WP2bxvy9/zOJ/f/6Yxf+B/DGD/6AhA8MezB8z+A9f/w/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9J/EcfyB+z+A/KH7P4D84fs/iPkj9m8R+SP2bxH5o/ZvEfNX/M4j9a/pjFf1j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxf1/+mMV/3Pwxi/94+WMW//Hzxyz+788fs/h/IH/M4j9B/pjF/4P5Yxb/CfPHLP4T5Y9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/D+WP2bxnzh/zOI/Sf6YxX/S/DGL/8fzxyz+k+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6Yxf8T+WMW/6nzxyz+n8wfs/h/Kn/M4v/p/DGL/2dk/tO9ze0s/p+V+b/dLP6fyx+z+E+TP2bxn3ZgYLN3akjv5iz+07X+MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l/JH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/9X8MYv/1/LHLP4L5o9Z/L+eP2bxXyh/zOL/jfwxi/8388cs/gvnj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+38scs/kvmj1n8v50/ZvH/Tv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+bP2bxXy5/zOK/fP6Yxf97+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL//fzxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/w/yxyz+6+aPWfzXyx+z+K+fP2bx/2H+mMV/g/wxi/+P8scs/hvmj1n8N8ofs/hvnD9m8f9x/pjF/yf5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8f5o/ZvH/Wf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/H+eP2bx/0X+mMX/l/ljFv+d8scs/jvnj1n8f5U/ZvH/df6YxX+X/DGL/2/yxyz+u+aPWfx3yx+z+O+eP2bx/23+mMX/d/ljFv898scs/nvmj1n898ofs/j/Pn/M4v+H/DGL/975Yxb/ffLHLP775o9Z/P+YP2bx/1P+mMV/v/wxi//++WMW/z/nj1n8D8gfs/j/JX/M4n9g/pjF/6/5Yxb/v+WPWfwPyh+z+P89f8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H54+9d/33OPd1l45+Qv7Ye9f/jev/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvH/R/6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fyxN/gPe+/6P5E/Zln/T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jzGQP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFfzSV/+hve0uL/zCV/9vP4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/i/L3/M4j9u/pjFf7z8MYv/+PljFv/3549Z/D+QP2bxnyB/zOL/wfwxi/+E+WMW/4nyxyz+H8ofs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv/J8scs/pPnj1n8p8gfey/7v64xpswfey/7v379T5U/ZvH/RP6YxX/q/DGL/yfzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+n88fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9s+WMW/6/kj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2r+mMX/a/ljFv8F88cs/l/PH7P4L5Q/ZvH/Rv6Yxf+b+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf9b+WMW/yXzxyz+384fs/h/J3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/NH7P4L5c/ZvFfPn/M4v+9/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF//v5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/wf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zB/zOK/Qf6Yxf9H+WMW/w3zxyz+G+WPWfw3zh+z+P84f8zi/5P8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+P80fs/j/LH/M4r9d/pjFf/v8MYv/DvljFv8d88cs/j/PH7P4/yJ/zOL/y/wxi/9O+WMW/53zxyz+v8ofs/j/On/M4r9L/pjF/zf5Yxb/XfPHLP675Y9Z/HfPH7P4/zZ/zOL/u/wxi/8e+WMW/z3zxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/PvljFv9988cs/n/MH7P4/yl/zOK/X/6YxX///DGL/5/zxyz+B+SPWfz/kj9m8T8wf8zi/9f8MYv/3/LHLP4H5Y9Z/P+eP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/jX+c/+J0Y17s0i/8JrX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+P8jf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/K/Qf/W1sY/F/Tuj/drL4P58/ZvF/IX/M4v9i/pjF/6X8MYn/mAP5Yxb/QfljFv/B+WMW/1Hyxyz+Q/LHLP5D88cs/qPmj1n8R8sfs/gPyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7vyx+z+I+bP2bxHy9/zOI/fv6Yxf/9+WMW/w/kj1n8J8gfs/h/MH/M4j9h/pjFf6L8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/x/LHLP4T549Z/CfJH7P4T5o/ZvH/eP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fyJ/zOI/df6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/8/nj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/C/ljFv+5h+VPWfy/1PrHLP5fzh+z+M+WP2bx/0r+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/r+aPWfy/lj9m8V8wf8zi//X8MYv/QvljFv9v5I9Z/L+ZP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/L+VP2bxXzJ/zOL/7fwxi/938scs/kvlj1n8l84fs/gvkz9m8V82f8zi/938MYv/cvljFv/l88cs/t/LH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8v58/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8f5A/ZvFfN3/M4r9e/pjFf/38MYv/D/PHLP4b5I9Z/H+UP2bx3zB/zOK/Uf6YxX/j/DGL/4/zxyz+P8kfs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOL/0/wxi//P8scs/tvlj1n8t88fs/jvkD9m8d8xf8zi//P8MYv/L/LHLP6/zB97z/m/Dvn1/jvlj73n/N9k/e+cP2bx/1X+mMX/1/ljFv9d8scs/r/JH7P475o/ZvHfLX/M4r97/pjF/7f5Yxb/3+WPWfz3yB+z+O+ZP2bx3yt/zOL/+/wxi/8f8scs/nvnj1n898kfs/jvmz9m8f9j/pjF/0/5Yxb//fLHLP77549Z/P+cP2bxPyB/zOL/l/wxi/+B+WMW/7/mj1n8/5Y/ZvE/KH/M4v/3/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz/2qv/AsIGB97L/CfljlvV/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/j/I3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfc/gn/2Y5/AfGvK9HAWbxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMS/7EG8scs/oPyxyz+g63+K7z11Rb/Uaz+/yaL/5D8MYv/0Pwxi/+o+WMW/9Hyxyz+w/LHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/+/LHLP7j5o9Z/MfLH7P4j58/ZvF/f/6Yxf8D+WMW/wnyxyz+H8wfs/hPmD9m8Z8of8zi/6H8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/xPljFv9J8scs/pPmj1n8P54/ZvGfLH/M4j95/tgI/9EHv8f9p8gfs6z/KfPHLP5T5Y9Z/D+RP2bxnzp/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//n88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/4X8MYv/F/PHLP5fyh+z+H85f8ziP1v+mMX/K/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mj9m8f9a/pjFf8H8MYv/1/PHLP4L5Y9Z/L+RP2bx/2b+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1b+mMV/yfwxi/+388cs/t/JH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/d/PHLP7L5Y9Z/JfPH7P4fy9/zOK/Qv6YxX9Fo//buMMW/5WM/m8ji//K+WMW/1Xyxyz+q+aPWfxXyx+z+H8/f8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+P8gf8ziv27+mMV/vfwxi//6+WMW/x/mj1n8N8gfs/j/KH/M4r9h/pjFf6P8MYv/xvljFv8f549Z/H+SP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjF/6f5Yxb/n+WPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf/n+WMW/1/kj1n8f5k/ZvHfKX/M4r9z/pjF/1f5Yxb/X+ePWfx3yR+z+P8mf8ziv2v+mMV/t/wxi//u+WMW/9/mj1n8f5c/ZvHfI3/M4r9n/pjFf6/8MYv/7/PHLP5/yB+z+O+dP2bx3yd/zOK/b/6Yxf+P+WMW/z/lj1n898sfs/jvnz9m8f9z/pjF/4D8MYv/X/LHLP4H5o9Z/P+aP2bx/1v+mMX/oPwxi//f88cs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zi/4/8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G8B/3P/muN6lvbf9b3710rFubP1j723/1xrrpvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/7Ye9R/ypEuHeuu/LH3qP/LvX79350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH5P4jz2QP2bxH5Q/ZvEfnD9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFf7T8MYv/sPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOL/vvwxi/+4+WMW//Hyxyz+4+ePWfzfnz9m8f9A/pjFf4L8MYv/B/PHLP4T5o9Z/CfKH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOI/cf6YxX+S/DGL/6T5Yxb/j+ePWfwnyx+z+E+eP2bxnyL/gTvgMov/lPljFv+p8scs/p/IH7P4T50/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf/z+WMW/5nyxyz+M+ePWfxnyR97g/+Iy8Z9h8f0/9Sb+M+aP2ZZ/1/IH7P4fzF/zOL/pfwxi/+X88cs/rPlj1n8v5I/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/q/ljFv+v5Y9Z/BfMH7P4fz1/zOK/UP6Yxf8b+WMW/2/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/2/lj1n8l8wfs/h/O3/M4v+d/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzd/zOK/XP6YxX/5/DGL//fyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+ePWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/H+SPWfzXzR+z+K+XP2bxXz9/zOL/w/wxi/8G+WMW/x/lj1n8N8wfs/hvlD9m8d84f8zi/+P8MYv/T/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/j/NH/M4v+z/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4/zx/zOL/i/wxi/8v88cs/jvlj1n8d84fe6/6DxvJ/1f5Y+9V/4GR/H+dP2bx3yV/zOL/m/wxi/+u+WMW/93yxyz+u+ePWfx/mz9m8f9d/pjFf4/8MYv/nvljFv+98scs/r/PH7P4/yF/zOK/d/6YxX+f/DGL/775Yxb/P+aPWfz/lD9m8d8vf8ziv3/+mMX/z/ljFv8D8scs/n/JH7P4H5g/ZvH/a/6Yxf9v+WMW/4Pyxyz+f88fs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi/8/8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b9rZP/N/8vjepdm8b+79Y9Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHJP7jDOSPWfwH5Y9Z/Afnj1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+L8vf8ziP27+mMV/vPwxi//4+WMW//fnj1n8P5A/ZvGfIH/M4v/B/DGL/4T5Yxb/ifLHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP4fyx+z+E+cP2bxnyR/zOI/af6Yxf/j+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/ifwxi//U+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P58/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv/Z8scs/l9R+y835ptdY/GfXe3/5ln858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H81f8zi/7X8MYv/gvljFv+v549Z/BfKH7P4fyN/zOL/zfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/rfwxi/+S+WMW/2/nj1n8v5M/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/v5o9Z/JfLH7P4L58/ZvH/Xv6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/9/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4v+D/DGL/7r5Yxb/9fLHLP7r549Z/H+YP2bx3yB/zOL/o/wxi/+G+WMW/43yxyz+G+ePWfx/nP/AwMDo/3KJxf8n+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/H+aP2bx/1n+mMV/u/wxi//2+WMW/x3yxyz+O+aPWfx/nj9m8f9F/pjF/5f5Yxb/nfLHLP47549Z/H+VP2bx/3X+mMV/l/wxi/9v8scs/rvmj1n8d8sfs/jvnj9m8f9t/pjF/3f5Yxb/PfLHLP575o9Z/PfKH7P4/z5/zOL/h/wxi//e+WMW/33yxyz+++aPWfz/mD9m8f9T/pjFf7/8MYv//vljFv8/549Z/A/IH7P4/yV/zOJ/YP6Yxf+v+WMW/7/lj1n8D8ofs/j/PX/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/v/IH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYn/+wbyxyz+g/LHLP6D88cs/qPkj1n8h+SPWfyH5o9Z/EfNH7P4j5Y/ZvEflj9m8R89f8ziP0b+mMV/zPyx/4+d+w/Xuq7vOH7z4wCZpB/b1KUNh8Zcm5HIaNRCVBSPP06ZaOZv1COQIPJDEkzFjVbq2HSpmyWbWjjmbNUSh5vr14qGZc3WiK1VTnEtjDEHi8wZuw6cg3D29lw7X/b9uvl+PP7gnPs+vu+U5/Xyvr24rrL031v/UJb+w/UPZen/Kv1DWfrvo38oS/999Q9l6V/0D2Xpv5/+oSz9X61/KEv/n9I/lKX/T+sfytJ/f/1DWfofoH8oS/8D9Q9l6f8z+oey9H+N/qEs/Q/SP5Sl/8H6h7L0f63+oSz9f1b/UJb+I/QPZel/iP6hLP1/Tv9Qlv4j9Q9l6X+o/qEs/Q/TP5Sl/+v0D2XpP0r/UJb+P69/KEv/w/UPZen/C/qHsvR/vf6hLP1/Uf9Qlv6/pH8oS/8j9A9l6f8G/UNZ+o/WP5Sl/xv1D2Xpf6T+oSz9x+gfytL/KP1DWfqP1T+Upf8v6x/K0n+c/qEs/d+kfyhL/1/RP5Sl/3j9Q1n6v1n/UJb+b9E/lKX/r+ofytL/rfqHsvSfoH8oS/+j9Q9l6T9R/1CW/sfoH8rS/1j9Q1n6H6d/KEv/SfqHsvQ/Xv9Qlv4n6B/K0n+y/qEs/U/UP5Slf7v+oSz9T9I/lKX/yfqHsvQ/Rf9Qlv6n6h/K0r9D/1CW/m/TP5Sl/9v1D2Xpf5r+oSz936F/KEv/0/UPZek/Rf9Qlv5n6B/K0v9M/UNZ+r9T/1CW/mfpH8rS/136h7L0P1v/UJb+5+gfytL/XP1DWfqfp38oS//z9Q9l6X+B/qEs/S/UP5Sl/1T9Q1n6X6R/KEv/i/UPZel/if6hLP079Q9l6X+p/qEs/afpH8rSf7r+oSz9Z+gfytL/3fqHsvS/TP9Qlv4z9Q9l6T9L/1CW/pfrH8rSf7b+oSz9r9A/lKX/HP1DWfrP1T+Upf88/UNZ+s/XP5Sl/5X6h7L0X6B/KEv/9+gfytL/Kv1DWfov1D+Upf8i/UNZ+l+tfyhL//fqH8rS/xr9Q1n6X6t/KEv/6/QPZem/WP9Qlv7X6x/K0v/X9A9l6f/r+oey9F+ifyhL//fpH8rS/zf0D7R1f33593+//qEs+/+A/qEs/W/QP5Sl/436h7L0v0n/UJb+v6l/KEv/pfqHsvT/Lf1DWfr/tv6hLP1v1j+Upf8t+oey9P8d/UNZ+n9Q/1CW/rfqH8rS/zb9Q1n6365/KEv/39U/lKX/7+kfytL/Dv1DWfp/SP9Qlv4f1j+Upf+d+oey9F+mfyhL/9/XP5Sl/x/oH8rS/y79Q1n6361/KEv/e/QPZen/Ef1DWfp/VP9Qlv7L9Q9l6X+v/qEs/f9Q/1CW/iv0D2Xp/0f6h7L0v0//UJb+f6x/KEv/+/UPZen/Mf1DWfr/if6hLP0/rn8oS/9P6B/K0v+T+oey9P9T/UNZ+n9K/1CW/g/oH8rSf6X+oSz9H9Q/lKX/n+kfytJ/lf6hLP0f0j+Upf+f6x/K0v8v9A9l6f+w/qEs/f9S/1CW/p/WP5Sl/2f0D2Xp/1n9Q1n6f07/UJb+n9c/lKX/X+kfytL/C/qHsvT/ov6hLP1X6x/K0v9L+oey9P9r/UNZ+q/RP5Sl/yP6h7L0/7L+oSz9v6J/KEv/R/UPZen/Vf1DWfp/Tf9Qlv5/o38oS//H9A9l6f91/UNZ+v+t/qEs/b+hfyhL/7/TP5Sl/1r9Q1n6f1P/UJb+6/QPZen/9/qHsvT/B/1DWfp/S/9Qlv7/qH8oS/9v6x/K0v87+oey9P+u/qEs/R/XP5Sl/z/pH8rS/wn9Q1n6P6l/KEv/9fqHsvR/Sv9Qlv7/rH8oS//v6R/K0v9f9A9l6f99/UNZ+m/QP5Sl/9P6h7L0/4H+oSz9N+ofytL/X/UPZem/Sf9Qlv7/pn8oS/9n9A9l6f/v+oey9N+sfyhL/y36h7L0/w/9Q1n6/1D/UJb+W/UPZen/I/1DWfo/q38oS/8f6x/K0v85/UNZ+v+n/qEs/Z/XP5Sl/0/0D2Xpv03/UJL++7b0D2XpP0D/UJb+A/UPZek/SP9Qlv6D9Q9l6d+mfyhL/yH6h7L0H6p/KEv/YfqHsvR/hf6hLP330j+Upf8r9Q9l6b+3/qEs/YfrH8rS/1X6h7L030f/0MuuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP818xYuumzqzJmdc33jG9/4Zuc3L/W/mQAAgP9tL3zof6n/TgAAAAAAAAAAAAAAAAAAACCvJv7vxF7qf0YAAAAAAAAAAAAAAPj/rr3jmI2DBuz21KBdH7z20c7tX8duPWv68uUPlp6v3T8+OXjJgbs+2LZt27Zlz0yY1P1waKvV6vpf27f78bDex12vv3jEnQfueFQmfuH2x8+fMvyUuStvGfzNZTd1PN22/dm21oWXzpjZ+caBrVY5rq11VdeDIwe0WuWEttbNXQ/GdD2Y3NZa0fXgqO0PXtH6bNeDN1w8e+YlXU+cWPn3DF4u2jsWtwbtttjWbv822HX/i0c8Mb3nax8v2fNqg1vd+x+58ssH9PpZjxfZf8/rl2N677/f/4DAi+rf/p9d1/O1j5f8b+//H1mzdVH0sxfff8/rl2PtH+oTfP7fbaO9P/f3+vx/SPCSO++PHrbm1q79t59x38HdTw3+n3z+f+H1y3G99z9wt8//XZ/jJ/V8/h/aapXj9/C3A1Jp77h+Y1/v/33vf/Bret0M2HX/93x1/d5d+7/3udaS7qfa+rn/SX29/9/Q6+8V6J/2jru39Xr/78f+W6OCl9y5/w0rh2///L/+/ov33+Vn/dn/8b33P3r+rCtGz1u46IgZs6ZO65zWefn4MeOOHDt+/Lhxo7d/Itjx6x7+pkASe/b+39qr182AVqtz5/3q+26a1LX/TQ8t+Wj3U8P6uf8T+nz/P8T7P4RGDmwNGdK6aur8+XOP3PFrz8MxO37d8ZcF++/Hf/8fenj3X9bzZ4YDWq0Dd96POn/80K79Xz2nrOp+akg/9z+5z/1P3P3PKoH+2cP3/0t63ey2/6M3XLuga/+H/XC/9d1P9fe//0/sc/93ef+HPdHe0ar1TbRr/0cNvf6katel3Z//QX2a2P+IzTdvqXZdTrJ/qE8T+5+y9C0XVbsuJ9s/1KeJ/T8464Kl1a7LKfYP9Wli/8+/estB1a7LqfYP9Wli/49976nl1a5Lh/1DfZrY/4fu6Diq2nV5m/1DfZrY/xFX/mhCtevydvuH+jSx/0tfefqKatflNPuH+jSx/5O2Hbt/tevyDvuH+jSx/wHXf39xtetyuv1DfZrY/5NTl86udl2m2D/Up4n9rxgx6tlq1+UM+4f6NLH/JU+/aXK163Km/UN9mtj/126787Fq1+Wd9g/1aWL/nzx3vzurXZez7B/q08T+fzzyob2qXZd32T/Up4n9r1274oFq1+Vs+4f6NLH/ZSsGjax2Xc6xf6hPE/u/7sRpj1a7LufaP9Snif2PHfeVc6pdl/PsH+rTxP4P/Py3n6p2Xc63f6hPE/s//eEF86pdlwvsH+rTxP4XHPSJn1S7LhfaP9Snif2/tfOg6dWuy1T7h/o0sf9yy15rq12Xi+wf6tPE/s/edPfEatflYvuH+jSx/1X7fPHj1a7LJfYP9Wli/5vnXD6+2nXptH+oTxP7/+77rnt/tetyqf1DfZrY/63PfaNUuy7T7B/q08T+N4w5+9xq12W6/UN9mtj/3ac880i16zLD/qE+Tex/6arH51e7Lu+2f6hPE/tfvfrkJ6pdl8vsH+rTxP4PGzV6eLXrMtP+oT5N7H/2WUs+XO26zLJ/qE8T+z/u/tteV+26XG7/UJ8m9j/s6xM+Ve26zLZ/qE8T+//MhA98utp1ucL+oT5N7H/LxEMPr3Zd5tg/1KeJ/a97YMzt1a7LXPuH+jSx/w8+ckfF6zLP/qE+Tex/zuuf31Ttusy3f6hPE/t/85QzF1a7LlfaP9Snif3vf9fkL1W7LgvsH+rTxP7P+84PTqt2Xd5j/1CfJvZ/6AEXHVztulxl/1CfJvY/fcaaG6tdl4X2D/VpYv+Tlq0bW+26LLJ/qE8T+9/nyXn3VLsuV9s/1KeJ/W8cdMCp1a7Le+0f6tPE/u+95uFvVbsu19g/1KeJ/d94w8c6q12Xa+0f6tPE/j+3dcjmatflOvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA//8xA+DQ") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m29.5267171s ago: executing program 3 (id=3183): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m26.755415861s ago: executing program 3 (id=3218): r0 = socket(0x2a, 0x2, 0xfffffffe) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x4}}, 0x10) 2m18.696981411s ago: executing program 1 (id=3324): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffca, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m18.608056466s ago: executing program 1 (id=3326): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x101600) ioctl$EVIOCGABS20(r0, 0x80184520, 0x0) 2m18.523492451s ago: executing program 1 (id=3327): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x600, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) 2m18.452931235s ago: executing program 1 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x5c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 2m18.332996002s ago: executing program 1 (id=3329): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m17.434776175s ago: executing program 1 (id=3335): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m11.596315765s ago: executing program 32 (id=3218): r0 = socket(0x2a, 0x2, 0xfffffffe) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x4}}, 0x10) 2m2.284991888s ago: executing program 33 (id=3335): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.532114412s ago: executing program 0 (id=4961): setfsgid(0xee01) setresgid(0x0, 0x0, 0x0) 2.358637532s ago: executing program 0 (id=4964): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000b80)=""/165, 0xa2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffffe1}, {0x0}], 0x9, 0x3, 0x37, 0x2) 2.172417413s ago: executing program 0 (id=4968): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x124, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x4000880) 1.978646094s ago: executing program 0 (id=4972): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.681429372s ago: executing program 4 (id=4977): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000580)="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", 0x551}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @empty}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@local, 0x2cb9}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) 1.611190386s ago: executing program 5 (id=4978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0xb0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x34eaaa04}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}]}]}, 0xb0}}, 0x0) 1.521984471s ago: executing program 4 (id=4980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 1.475824634s ago: executing program 5 (id=4981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x40, r0}, 0x38) 1.231204178s ago: executing program 5 (id=4983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@ipv6_delroute={0x28, 0x19, 0x1, 0x800, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0xff, 0x1, 0x0, 0xb, 0x800}, [@RTA_MULTIPATH={0xc, 0x9, {0x6569, 0x11}}]}, 0x28}, 0x1, 0x0, 0x0, 0x30008001}, 0x20040800) 1.160392902s ago: executing program 4 (id=4985): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000440)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 1.066040698s ago: executing program 5 (id=4986): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) 928.194866ms ago: executing program 4 (id=4988): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000200)=0xfffffff2) 908.322277ms ago: executing program 2 (id=4989): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x100b, 0x3, @discrete={0x8, 0x7}}) 755.045056ms ago: executing program 5 (id=4990): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@bsdgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1691}}, {@auto_da_alloc}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0x5ac, &(0x7f0000000d80)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x5) 634.699903ms ago: executing program 2 (id=4991): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000000)="1a00000002000000", 0x8) 526.859419ms ago: executing program 2 (id=4992): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 453.963683ms ago: executing program 4 (id=4993): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) 378.677528ms ago: executing program 2 (id=4994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x8}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 334.386761ms ago: executing program 4 (id=4995): syz_read_part_table(0x5c1, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) 248.052796ms ago: executing program 2 (id=4996): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f00000000c0)) 191.538749ms ago: executing program 0 (id=4997): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x2, "50e1046e0dffda611f117e88f8b2068bda55c85613a3fe0200"}}) 161.15628ms ago: executing program 5 (id=4998): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb9) 94.658775ms ago: executing program 2 (id=4999): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4) 0s ago: executing program 0 (id=5000): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.580881][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.594295][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.612900][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.623121][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.645597][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.662455][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.672231][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.682193][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.692414][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 364.894671][T15466] x_tables: unsorted entry at hook 3 [ 364.900256][ T786] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 365.031654][T15044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.087783][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 365.104115][ T786] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 365.123962][ T786] usb 1-1: config 0 has no interface number 0 [ 365.147074][ T786] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 365.157398][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.165518][ T786] usb 1-1: Product: syz [ 365.180993][ T786] usb 1-1: Manufacturer: syz [ 365.185684][ T786] usb 1-1: SerialNumber: syz [ 365.190808][ T5785] Bluetooth: hci4: command tx timeout [ 365.210508][ T786] usb 1-1: config 0 descriptor?? [ 365.226284][ T786] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 365.235179][ T786] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 365.453144][ T786] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 365.648621][T15044] veth0_vlan: entered promiscuous mode [ 365.663940][ T786] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 365.674159][T15044] veth1_vlan: entered promiscuous mode [ 365.703831][ T786] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 365.735608][ T786] usb 1-1: USB disconnect, device number 31 [ 365.745525][ T786] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 365.795660][T15044] veth0_macvtap: entered promiscuous mode [ 365.861200][T15044] veth1_macvtap: entered promiscuous mode [ 365.909000][T15044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.930894][T15044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.944299][T15044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.962899][T15044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.979996][T15044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.991339][T15044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.003849][T15044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.022042][T15044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.062333][T15044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.081609][T15044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.092776][T15044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.102953][T15044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.113776][T15044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.126244][T15044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.142897][T15044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.159589][T15044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.174172][T15044] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.191868][T15044] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.203594][T15044] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.216195][T15044] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.471294][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.496593][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.600372][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.617893][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.907638][T15545] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.274748][ T5785] Bluetooth: hci4: command tx timeout [ 367.951588][T15583] loop2: detected capacity change from 0 to 8192 [ 368.862257][T15635] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 368.869583][T15635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 368.917895][T15635] vhci_hcd vhci_hcd.0: Device attached [ 368.934580][T15637] vhci_hcd: connection closed [ 368.964905][ T791] vhci_hcd: stop threads [ 368.985158][ T791] vhci_hcd: release socket [ 368.996407][ T791] vhci_hcd: disconnect device [ 369.199074][T15654] loop2: detected capacity change from 0 to 64 [ 369.248825][T15659] loop4: detected capacity change from 0 to 16 [ 369.277170][T15659] erofs: (device loop4): mounted with root inode @ nid 36. [ 369.347130][ T5785] Bluetooth: hci4: command tx timeout [ 369.750877][T15679] ptrace attach of "./syz-executor exec"[5768] was attempted by ""[15679] [ 370.080813][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.099004][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.112208][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.125637][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.133847][ T5776] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 370.161499][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.204264][T15700] netlink: 'syz.2.3510': attribute type 30 has an invalid length. [ 370.477605][T15728] xt_hashlimit: overflow, try lower: 17592186044416/11 [ 370.751539][T15748] loop2: detected capacity change from 0 to 4096 [ 370.908369][T15773] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 371.123369][T15690] chnl_net:caif_netlink_parms(): no params data found [ 371.316822][ T5817] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 371.450404][T15690] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.458434][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.465791][T15690] bridge_slave_0: entered allmulticast mode [ 371.482214][T15690] bridge_slave_0: entered promiscuous mode [ 371.493541][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.502078][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.510726][T15690] bridge_slave_1: entered allmulticast mode [ 371.517639][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 371.524903][ T5817] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 371.543414][T15690] bridge_slave_1: entered promiscuous mode [ 371.549867][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.575322][ T5817] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.614611][ T5817] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 371.644689][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.663912][ T5817] usb 1-1: Product: syz [ 371.689497][T15690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.702185][ T5817] usb 1-1: Manufacturer: syz [ 371.713518][T15690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.718398][ T5817] usb 1-1: SerialNumber: syz [ 371.857293][T15690] team0: Port device team_slave_0 added [ 371.878048][T15690] team0: Port device team_slave_1 added [ 371.985335][ T5817] usb 1-1: 0:2 : does not exist [ 372.029718][ T5817] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 372.075071][T15690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.089191][T15933] overlayfs: unescaped trailing colons in lowerdir mount option. [ 372.103722][ T5817] usb 1-1: USB disconnect, device number 32 [ 372.120128][T15690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.228527][T15690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.272131][T15690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.286411][T15690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.316540][ T5785] Bluetooth: hci5: command tx timeout [ 372.338139][T15690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.353267][T15954] __nla_validate_parse: 23 callbacks suppressed [ 372.353286][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3531'. [ 372.365905][T15956] netlink: 'syz.4.3532': attribute type 1 has an invalid length. [ 372.377239][T15956] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3532'. [ 372.523898][T15690] hsr_slave_0: entered promiscuous mode [ 372.551913][T15690] hsr_slave_1: entered promiscuous mode [ 372.576404][T15690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.584055][T15690] Cannot create hsr debugfs directory [ 372.900932][T16031] tmpfs: Bad value for 'mpol' [ 373.099460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 373.352191][T16076] loop0: detected capacity change from 0 to 64 [ 373.371865][T15690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.439825][T15690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.497190][T15690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.523153][T15690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.824334][T16102] loop4: detected capacity change from 0 to 4096 [ 373.885079][T15690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.891896][T16102] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 373.966486][T16102] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 374.030718][T15690] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.114467][ T791] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.122868][ T791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.176088][ T791] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.183330][ T791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.229922][T15044] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 374.386362][ T5785] Bluetooth: hci5: command tx timeout [ 374.809790][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3554'. [ 374.951314][T15690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.005791][T16147] loop2: detected capacity change from 0 to 128 [ 375.202531][T16154] loop0: detected capacity change from 0 to 8 [ 376.040071][T15690] veth0_vlan: entered promiscuous mode [ 376.119422][T15690] veth1_vlan: entered promiscuous mode [ 376.222196][T15690] veth0_macvtap: entered promiscuous mode [ 376.275032][T15690] veth1_macvtap: entered promiscuous mode [ 376.348657][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.383351][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.403486][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.410374][T16210] loop4: detected capacity change from 0 to 4096 [ 376.431560][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.449985][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.466003][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.477406][ T5785] Bluetooth: hci5: command tx timeout [ 376.477595][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.494882][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.507993][T16210] ntfs3: loop4: ino=3, Correct links count -> 2. [ 376.524700][T15690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.551511][T16215] netlink: 'syz.0.3577': attribute type 2 has an invalid length. [ 376.560864][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3577'. [ 376.601787][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.663849][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.688084][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.698864][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.709383][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.720267][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.730923][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.743665][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.767679][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.797578][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.851497][T15690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.911642][T15690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.957274][T15690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.982346][T15690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.003019][T15690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.098563][T16232] netlink: 'syz.2.3580': attribute type 2 has an invalid length. [ 377.448508][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.495120][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.607887][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.615884][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.697309][ T5899] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 377.887638][T16276] loop2: detected capacity change from 0 to 8 [ 377.934050][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.935774][T16276] SQUASHFS error: Unknown inode type 257 in squashfs_iget! [ 377.967309][ T5899] usb 5-1: not running at top speed; connect to a high speed hub [ 378.003309][ T5899] usb 5-1: config 1 has an invalid interface number: 138 but max is 0 [ 378.023128][ T5899] usb 5-1: config 1 has an invalid descriptor of length 158, skipping remainder of the config [ 378.041439][ T5899] usb 5-1: config 1 has no interface number 0 [ 378.050562][ T5899] usb 5-1: config 1 interface 138 altsetting 252 endpoint 0xC has invalid maxpacket 52651, setting to 64 [ 378.087949][ T5899] usb 5-1: config 1 interface 138 has no altsetting 0 [ 378.111837][ T5899] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 378.144612][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.176434][ T5899] usb 5-1: Product: syz [ 378.180706][ T5899] usb 5-1: Manufacturer: syz [ 378.185344][ T5899] usb 5-1: SerialNumber: syz [ 378.245025][T16250] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.518684][ T5899] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 378.546534][ T5785] Bluetooth: hci5: command tx timeout [ 378.587302][ T5899] usb 5-1: USB disconnect, device number 2 [ 378.653860][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.670459][ T6090] udevd[6090]: setting mode of /dev/dmmidi3 to 020660 failed: No such file or directory [ 378.709737][T16327] loop2: detected capacity change from 0 to 128 [ 378.720880][ T6090] udevd[6090]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory [ 378.839581][T16327] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 378.877936][T16327] FAT-fs (loop2): Filesystem has been set read-only [ 379.040979][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.048963][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.071829][T16347] loop0: detected capacity change from 0 to 64 [ 379.381710][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3602'. [ 379.396608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 379.926380][T16381] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.974588][T16385] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 380.662803][T16416] loop2: detected capacity change from 0 to 4096 [ 380.736334][T16416] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 381.014355][T16416] ntfs3: loop2: ino=1e, "file1" failed to parse mft record [ 381.057085][T16416] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 381.090121][T16416] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 381.291660][T16446] macsec0: entered promiscuous mode [ 381.312050][T16446] macsec0: entered allmulticast mode [ 381.321902][T16446] veth1_macvtap: entered allmulticast mode [ 381.404257][T16453] loop2: detected capacity change from 0 to 256 [ 381.456378][T16453] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 381.887387][T16470] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3638'. [ 382.112237][T16486] ip6tnl1: entered allmulticast mode [ 382.492132][T16507] x_tables: duplicate underflow at hook 2 [ 382.897940][T16493] loop4: detected capacity change from 0 to 32768 [ 382.911393][T16493] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 383.165565][T16535] netlink: 'syz.5.3657': attribute type 4 has an invalid length. [ 383.265263][ T5958] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 383.348034][T16542] netlink: 412 bytes leftover after parsing attributes in process `syz.2.3660'. [ 383.486273][T16550] libceph: resolve '0.' (ret=-3): failed [ 383.906613][ T5774] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 383.933914][T16576] netlink: 'syz.0.3670': attribute type 3 has an invalid length. [ 384.101208][ T5774] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 384.126195][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.150571][ T5774] usb 6-1: Product: syz [ 384.154867][ T5774] usb 6-1: Manufacturer: syz [ 384.167847][ T5774] usb 6-1: SerialNumber: syz [ 384.194324][ T5774] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 384.223521][ T5899] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 384.309696][T16593] loop0: detected capacity change from 0 to 16 [ 384.354954][T16593] erofs: (device loop0): mounted with root inode @ nid 36. [ 384.391163][T16599] netlink: 'syz.4.3675': attribute type 21 has an invalid length. [ 384.415865][T16593] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 384.665806][T16607] loop4: detected capacity change from 0 to 256 [ 384.687246][T16607] exfat: Deprecated parameter 'utf8' [ 384.698866][T16607] exfat: Deprecated parameter 'namecase' [ 384.747970][T16607] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 384.800751][ T1199] usb 6-1: USB disconnect, device number 2 [ 384.825859][T16609] loop0: detected capacity change from 0 to 4096 [ 384.849755][T16609] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 385.021533][T16609] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 385.173228][T16628] xt_ipcomp: unknown flags 12 [ 385.366263][ T5899] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 385.396560][ T5899] ath9k_htc: Failed to initialize the device [ 385.439802][ T1199] usb 6-1: ath9k_htc: USB layer deinitialized [ 386.202165][T16673] x_tables: duplicate underflow at hook 4 [ 386.700538][T16636] loop0: detected capacity change from 0 to 32768 [ 386.717901][T16652] loop4: detected capacity change from 0 to 32768 [ 386.786798][T16636] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 386.795850][T16636] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 386.865730][T16636] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 386.902807][T16652] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 386.902807][T16652] [ 387.142969][T16636] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 387.186815][T16705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3703'. [ 387.197411][T16705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3703'. [ 387.245722][T16636] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 387.277786][T16636] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 387.277786][T16636] inode = 12 2341 [ 387.277786][T16636] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 387.326367][T16636] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 387.356255][T16636] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:16636 [syz.0.3683] __gfs2_lookup+0xad/0x2a0 [ 387.410381][T16636] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 387.470717][T16636] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 387.501005][T16636] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 387.526329][T16636] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 387.573449][T16636] gfs2: fsid=syz:syz.s: File system withdrawn [ 387.589397][T16636] CPU: 0 PID: 16636 Comm: syz.0.3683 Not tainted syzkaller #0 [ 387.596959][T16636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.607103][T16636] Call Trace: [ 387.610465][T16636] [ 387.613505][T16636] dump_stack_lvl+0x18c/0x250 [ 387.618390][T16636] ? kobject_uevent_env+0x359/0x8b0 [ 387.623739][T16636] ? show_regs_print_info+0x20/0x20 [ 387.629019][T16636] ? load_image+0x400/0x400 [ 387.633779][T16636] ? kobject_uevent_env+0x363/0x8b0 [ 387.639056][T16636] gfs2_withdraw+0xb24/0x13d0 [ 387.643855][T16636] ? gfs2_lm+0x240/0x240 [ 387.648181][T16636] ? load_image+0x400/0x400 [ 387.652855][T16636] ? gfs2_consist_inode_i+0xf5/0x110 [ 387.658225][T16636] gfs2_dirent_scan+0x525/0x650 [ 387.663232][T16636] ? gfs2_dirent_search+0x7f0/0x7f0 [ 387.668497][T16636] gfs2_dirent_search+0x2ed/0x7f0 [ 387.673686][T16636] ? gfs2_dirent_search+0x7f0/0x7f0 [ 387.678948][T16636] ? gfs2_permission+0x384/0x460 [ 387.683958][T16636] ? __might_sleep+0xe0/0xe0 [ 387.688608][T16636] ? gfs2_dir_search+0x220/0x220 [ 387.693622][T16636] ? gfs2_lookupi+0x640/0x640 [ 387.698374][T16636] ? do_raw_spin_lock+0x11f/0x2c0 [ 387.703481][T16636] gfs2_dir_search+0x4d/0x220 [ 387.708234][T16636] gfs2_lookupi+0x45c/0x640 [ 387.713094][T16636] ? gfs2_lookup_meta+0x180/0x180 [ 387.718192][T16636] ? __gfs2_lookup+0xad/0x2a0 [ 387.722934][T16636] ? d_alloc_parallel+0x13f6/0x1530 [ 387.728233][T16636] ? lockdep_hardirqs_on+0x98/0x150 [ 387.733519][T16636] __gfs2_lookup+0xad/0x2a0 [ 387.738104][T16636] ? d_alloc_parallel+0x33e/0x1530 [ 387.743404][T16636] ? gfs2_atomic_open+0x220/0x220 [ 387.748505][T16636] ? __d_lookup+0x8f/0x7c0 [ 387.752979][T16636] ? d_hash_and_lookup+0x1b0/0x1b0 [ 387.758189][T16636] gfs2_atomic_open+0x92/0x220 [ 387.763041][T16636] ? gfs2_rename2+0x1f50/0x1f50 [ 387.768152][T16636] path_openat+0xf49/0x3230 [ 387.772744][T16636] ? do_filp_open+0x430/0x430 [ 387.777491][T16636] ? __virt_addr_valid+0x18c/0x540 [ 387.782682][T16636] do_filp_open+0x1f5/0x430 [ 387.787264][T16636] ? vfs_tmpfile+0x490/0x490 [ 387.792032][T16636] ? _raw_spin_unlock+0x28/0x40 [ 387.796963][T16636] ? alloc_fd+0x58f/0x630 [ 387.801397][T16636] do_sys_openat2+0x134/0x1d0 [ 387.806144][T16636] ? do_sys_open+0xe0/0xe0 [ 387.810628][T16636] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 387.816681][T16636] ? lock_chain_count+0x20/0x20 [ 387.821620][T16636] __x64_sys_openat+0x139/0x160 [ 387.826538][T16636] do_syscall_64+0x55/0xa0 [ 387.831109][T16636] ? clear_bhb_loop+0x40/0x90 [ 387.835842][T16636] ? clear_bhb_loop+0x40/0x90 [ 387.840596][T16636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.846556][T16636] RIP: 0033:0x7fa5cf79bf79 [ 387.851041][T16636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.870977][T16636] RSP: 002b:00007fa5d070b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.879462][T16636] RAX: ffffffffffffffda RBX: 00007fa5cfa15fa0 RCX: 00007fa5cf79bf79 [ 387.887502][T16636] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 387.895536][T16636] RBP: 00007fa5cf8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 387.903577][T16636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.911613][T16636] R13: 00007fa5cfa16038 R14: 00007fa5cfa15fa0 R15: 00007ffcb1632838 [ 387.919760][T16636] [ 388.508212][T16703] loop2: detected capacity change from 0 to 32768 [ 388.539114][T16703] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3704 (16703) [ 388.609043][T16703] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 388.652214][T16703] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 388.689688][T16703] BTRFS info (device loop2): using free space tree [ 388.963632][T16703] BTRFS info (device loop2): enabling ssd optimizations [ 388.970997][T16703] BTRFS info (device loop2): auto enabling async discard [ 388.983054][T16771] ./file0: Can't lookup blockdev [ 389.152870][ T5769] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.237347][T16778] loop0: detected capacity change from 0 to 32768 [ 390.334569][T16817] binder: 16815:16817 ioctl c018620c 200000000000 returned -1 [ 390.478863][T16813] loop2: detected capacity change from 0 to 4096 [ 390.518388][T16813] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 390.606001][T16792] loop4: detected capacity change from 0 to 32768 [ 390.608542][T16813] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 390.675017][T16792] JBD2: Ignoring recovery information on journal [ 390.823126][T16792] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 390.849389][T16813] ntfs3: loop2: failed to convert "c46c" to cp874 [ 391.135747][T16792] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923141632 [ 391.227512][T16792] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 391.303275][T16792] OCFS2: File system is now read-only. [ 391.336145][T16792] (syz.4.3724,16792,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 391.345066][T16792] (syz.4.3724,16792,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 391.388166][T16792] (syz.4.3724,16792,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 391.416150][T16792] (syz.4.3724,16792,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 391.424853][T16792] (syz.4.3724,16792,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 391.456271][T16792] (syz.4.3724,16792,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 391.519511][T16792] (syz.4.3724,16792,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 391.546982][T16792] (syz.4.3724,16792,1):ocfs2_mknod:385 ERROR: status = -30 [ 391.569318][T16792] (syz.4.3724,16792,1):ocfs2_mknod:502 ERROR: status = -30 [ 391.596880][T16792] (syz.4.3724,16792,1):ocfs2_mkdir:659 ERROR: status = -30 [ 391.799248][T16860] loop2: detected capacity change from 0 to 256 [ 391.807106][T15044] ocfs2: Unmounting device (7,4) on (node local) [ 391.902518][T16860] FAT-fs (loop2): Directory bread(block 64) failed [ 391.947009][T16860] FAT-fs (loop2): Directory bread(block 65) failed [ 391.964320][T16860] FAT-fs (loop2): Directory bread(block 66) failed [ 392.016165][T16860] FAT-fs (loop2): Directory bread(block 67) failed [ 392.023071][T16860] FAT-fs (loop2): Directory bread(block 68) failed [ 392.057395][T16860] FAT-fs (loop2): Directory bread(block 69) failed [ 392.067476][T16860] FAT-fs (loop2): Directory bread(block 70) failed [ 392.074090][T16860] FAT-fs (loop2): Directory bread(block 71) failed [ 392.110087][T16860] FAT-fs (loop2): Directory bread(block 72) failed [ 392.136401][T16860] FAT-fs (loop2): Directory bread(block 73) failed [ 392.609328][T16892] netlink: 'syz.5.3750': attribute type 1 has an invalid length. [ 392.752109][T16898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.805737][T16904] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.3754'. [ 393.040284][T16915] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3757'. [ 393.056307][T16914] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3758'. [ 393.081946][T16915] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3757'. [ 393.106334][T16915] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3757'. [ 393.151547][T16915] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3757'. [ 393.355497][T16932] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3764'. [ 393.466899][ C1] sd 0:0:1:0: [sda] tag#873 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 393.477466][ C1] sd 0:0:1:0: [sda] tag#873 CDB: Read(6) 08 00 9f d1 fe de [ 393.566261][ T1199] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 393.630951][T16947] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3768'. [ 393.640175][T16947] 0·: renamed from hsr0 (while UP) [ 393.653464][T16947] 0·: entered allmulticast mode [ 393.658696][T16947] hsr_slave_0: entered allmulticast mode [ 393.664384][T16947] hsr_slave_1: entered allmulticast mode [ 393.677279][T16947] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 393.766759][ T1199] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 393.775527][ T1199] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 393.816195][ T1199] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 393.855833][ T1199] usb 5-1: config 220 has no interface number 2 [ 393.884415][ T1199] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 393.918556][ T1199] usb 5-1: config 220 interface 0 has no altsetting 0 [ 393.925444][ T1199] usb 5-1: config 220 interface 76 has no altsetting 0 [ 393.973679][ T1199] usb 5-1: config 220 interface 1 has no altsetting 0 [ 393.987710][ T1199] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 393.997391][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.005971][ T1199] usb 5-1: Product: syz [ 394.024425][ T1199] usb 5-1: Manufacturer: syz [ 394.030924][ T1199] usb 5-1: SerialNumber: syz [ 394.149932][T16967] loop0: detected capacity change from 0 to 256 [ 394.202904][T16967] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 394.288690][ T1199] usb 5-1: selecting invalid altsetting 0 [ 394.295118][ T1199] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 394.334359][ T1199] usb 5-1: No valid video chain found. [ 394.365704][ T1199] usb 5-1: selecting invalid altsetting 0 [ 394.383317][ T1199] usbtest: probe of 5-1:220.1 failed with error -22 [ 394.431056][ T1199] usb 5-1: USB disconnect, device number 3 [ 394.866359][ T786] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 395.033591][T17006] loop0: detected capacity change from 0 to 512 [ 395.076415][ T786] usb 6-1: Using ep0 maxpacket: 8 [ 395.091708][T17012] loop2: detected capacity change from 0 to 736 [ 395.109998][ T786] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 395.165721][T17006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.179203][ T786] usb 6-1: config 179 has no interface number 0 [ 395.185585][ T786] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 395.202312][T17006] ext4 filesystem being mounted at /1016/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.213648][ T786] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 395.235675][ T786] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 395.251620][ T786] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 395.264980][ T786] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 395.289121][ T786] usb 6-1: config 179 interface 65 has no altsetting 0 [ 395.297270][ T786] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 395.326195][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.420449][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.447921][ T786] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input18 [ 395.776692][ T23] usb 6-1: USB disconnect, device number 3 [ 395.798736][ T23] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 396.062044][T17057] loop0: detected capacity change from 0 to 128 [ 396.084778][T17057] FAT-fs (loop0): Directory bread(block 524322) failed [ 396.103025][T17057] FAT-fs (loop0): Directory bread(block 524323) failed [ 396.127016][T17057] FAT-fs (loop0): Directory bread(block 524324) failed [ 396.150744][T17057] FAT-fs (loop0): Directory bread(block 524325) failed [ 396.177582][T17057] FAT-fs (loop0): Directory bread(block 524326) failed [ 396.184572][T17057] FAT-fs (loop0): Directory bread(block 524327) failed [ 396.232670][T17057] FAT-fs (loop0): Directory bread(block 524328) failed [ 396.256971][T17057] FAT-fs (loop0): Directory bread(block 524329) failed [ 396.289331][T17057] FAT-fs (loop0): Directory bread(block 524322) failed [ 396.303258][T17057] FAT-fs (loop0): Directory bread(block 524323) failed [ 396.783867][T17089] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 396.811381][T17089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 397.060575][T17105] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.670957][T17139] loop4: detected capacity change from 0 to 256 [ 397.835383][T17139] FAT-fs (loop4): Directory bread(block 64) failed [ 397.858456][T17139] FAT-fs (loop4): Directory bread(block 65) failed [ 397.865243][T17139] FAT-fs (loop4): Directory bread(block 66) failed [ 397.907049][T17139] FAT-fs (loop4): Directory bread(block 67) failed [ 397.928654][T17139] FAT-fs (loop4): Directory bread(block 68) failed [ 397.935588][T17139] FAT-fs (loop4): Directory bread(block 69) failed [ 397.982325][T17139] FAT-fs (loop4): Directory bread(block 70) failed [ 397.998382][T17139] FAT-fs (loop4): Directory bread(block 71) failed [ 398.045010][T17139] FAT-fs (loop4): Directory bread(block 72) failed [ 398.062485][T17139] FAT-fs (loop4): Directory bread(block 73) failed [ 398.376576][ T5862] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 398.543641][T17180] loop4: detected capacity change from 0 to 256 [ 398.591636][ T5862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.634214][ T5862] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 398.676619][ T5862] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 398.714473][ T5862] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.729994][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 398.784337][ T5862] usb 3-1: SerialNumber: syz [ 398.823405][T17155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 398.865624][T17193] loop4: detected capacity change from 0 to 128 [ 398.939260][T17193] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 398.974203][T17193] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.044819][T17155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 399.076366][T17193] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.3828: No space for directory leaf checksum. Please run e2fsck -D. [ 399.175564][T17193] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.3828: checksumming directory block 0 [ 399.303394][ T5862] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 399.340905][ T5862] usb 3-1: USB disconnect, device number 15 [ 399.382950][T15044] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.401068][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3833'. [ 399.415231][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3833'. [ 399.457556][T17217] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3833'. [ 400.462600][T17272] loop5: detected capacity change from 0 to 512 [ 400.562441][T17272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.614448][T17283] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3853'. [ 400.641206][T17272] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.867520][T15690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.888835][T17296] loop2: detected capacity change from 0 to 1764 [ 401.056209][ T5862] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 401.258627][ T5862] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 401.276130][ T5862] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 401.310779][ T5862] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 401.317021][ T5899] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 401.345030][ T5862] usb 1-1: config 220 has no interface number 2 [ 401.364816][ T5862] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 401.387283][ T5862] usb 1-1: config 220 interface 0 has no altsetting 0 [ 401.394797][ T5862] usb 1-1: config 220 interface 76 has no altsetting 0 [ 401.436424][ T5862] usb 1-1: config 220 interface 1 has no altsetting 0 [ 401.460084][ T5862] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 401.475144][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.486066][ T5862] usb 1-1: Product: syz [ 401.490307][ T5862] usb 1-1: Manufacturer: syz [ 401.495256][ T5862] usb 1-1: SerialNumber: syz [ 401.537322][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 401.567523][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 401.586905][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 401.597235][T17325] loop4: detected capacity change from 0 to 4096 [ 401.604680][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 401.616728][ T5899] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 401.637442][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.645534][ T5899] usb 6-1: Product: syz [ 401.666238][ T5899] usb 6-1: Manufacturer: syz [ 401.680816][ T5899] usb 6-1: SerialNumber: syz [ 401.702047][ T5899] usb 6-1: config 0 descriptor?? [ 401.735426][ T5899] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 401.776666][ T5862] usb 1-1: selecting invalid altsetting 0 [ 401.819711][ T5862] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 401.834954][T17325] ntfs: (device loop4): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 401.847554][ T5862] usb 1-1: No valid video chain found. [ 401.865612][T17325] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 401.878412][ T5862] usb 1-1: selecting invalid altsetting 0 [ 401.884233][ T5862] usbtest: probe of 1-1:220.1 failed with error -22 [ 401.935904][ T5862] usb 1-1: USB disconnect, device number 33 [ 401.972789][ T5899] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 401.989846][ T8253] udevd[8253]: setting mode of /dev/bus/usb/001/033 to 020664 failed: No such file or directory [ 402.012721][ T5899] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 402.031701][T17325] ntfs: volume version 3.1. [ 402.039463][ T5899] snd_usb_toneport: probe of 6-1:0.0 failed with error -22 [ 402.055994][ T8253] udevd[8253]: setting owner of /dev/bus/usb/001/033 to uid=0, gid=0 failed: No such file or directory [ 402.078204][T17325] ntfs: (device loop4): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 402.095040][T17325] ntfs: (device loop4): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 402.122083][T17325] ntfs: (device loop4): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 402.135754][T17325] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 402.159589][T17325] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 402.171787][T17325] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 402.247920][ T5817] usb 6-1: USB disconnect, device number 4 [ 402.589482][T17372] loop0: detected capacity change from 0 to 128 [ 402.822271][T17385] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3873'. [ 402.833200][T17385] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 402.842046][T17385] netlink: 'syz.2.3873': attribute type 2 has an invalid length. [ 402.851346][T17385] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3873'. [ 403.005069][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3875'. [ 403.044242][T17391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3875'. [ 403.338333][T17415] loop5: detected capacity change from 0 to 16 [ 403.386278][T17415] erofs: (device loop5): mounted with root inode @ nid 36. [ 403.814144][T17437] loop5: detected capacity change from 0 to 4096 [ 403.861121][T17437] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 403.891066][T17437] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 403.951918][T17437] ntfs: volume version 3.1. [ 403.975639][T17450] loop2: detected capacity change from 0 to 64 [ 403.987789][ T786] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 404.216377][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 404.244769][ T786] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 404.263795][ T786] usb 1-1: config 254 has no interface number 0 [ 404.293652][ T786] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 404.326184][ T786] usb 1-1: config 254 interface 235 has no altsetting 0 [ 404.338327][ T786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 404.357276][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 404.386750][ T786] usb 1-1: Product: syz [ 404.391109][ T786] usb 1-1: Manufacturer: syz [ 404.395761][ T786] usb 1-1: SerialNumber: syz [ 404.467228][T17436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 404.704825][ T786] usbtest 1-1:254.235: couldn't get endpoints, -71 [ 404.715562][ T786] usbtest: probe of 1-1:254.235 failed with error -71 [ 404.728767][ T786] usb 1-1: USB disconnect, device number 34 [ 405.891578][T17531] loop5: detected capacity change from 0 to 2048 [ 405.907780][T17534] ptrace attach of "./syz-executor exec"[5768] was attempted by "./syz-executor exec"[17534] [ 405.943493][T17531] ext2: Unknown parameter 'uid<00000000000000000000' [ 406.536327][T17565] C: renamed from team_slave_0 (while UP) [ 406.554085][T17565] netlink: 'syz.2.3922': attribute type 1 has an invalid length. [ 406.593282][T17565] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3922'. [ 406.625885][T17565] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 406.851952][T17581] loop0: detected capacity change from 0 to 64 [ 407.337297][ T5817] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 407.398934][T17603] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 407.405744][T17603] [U] J"—e:ÀÆ" [ 407.559226][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.576393][ T5817] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.619885][ T5817] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 407.650058][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.686965][ T5817] usb 6-1: config 0 descriptor?? [ 407.838351][T17597] loop0: detected capacity change from 0 to 32768 [ 407.904735][ T5817] usb 6-1: string descriptor 0 read error: -71 [ 407.919331][ T5817] qmi_wwan: probe of 6-1:0.0 failed with error -22 [ 407.940423][ T5817] usb 6-1: USB disconnect, device number 5 [ 407.955453][T17597] JBD2: Ignoring recovery information on journal [ 408.049124][T17597] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 408.098767][T17631] loop4: detected capacity change from 0 to 512 [ 408.215100][T17597] OCFS2: ERROR (device loop0): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 408.215249][T17597] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 408.243641][T17597] OCFS2: File system is now read-only. [ 408.250301][T17631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.263648][T17597] (syz.0.3931,17597,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 408.272757][T17597] (syz.0.3931,17597,0):ocfs2_mknod:334 ERROR: status = -117 [ 408.280680][T17597] (syz.0.3931,17597,0):ocfs2_mknod:502 ERROR: status = -117 [ 408.288105][T17597] (syz.0.3931,17597,0):ocfs2_mkdir:659 ERROR: status = -117 [ 408.324776][T17597] syz.0.3931 (17597) used greatest stack depth: 18768 bytes left [ 408.550328][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 408.618571][T15044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.634315][T17644] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 408.989025][T17662] loop0: detected capacity change from 0 to 8 [ 409.040183][T17662] SQUASHFS error: Failed to read block 0x285: -5 [ 409.076279][T17662] SQUASHFS error: Unable to read metadata cache entry [283] [ 409.084153][T17662] SQUASHFS error: Unable to read symlink [8f:60] [ 409.735164][T17697] --map-set only usable from mangle table [ 409.846504][T17700] loop4: detected capacity change from 0 to 16 [ 409.854084][T17700] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 409.900227][T17700] cramfs: empty filesystem [ 410.112425][T17711] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 410.333283][T17726] netlink: 'syz.2.3964': attribute type 1 has an invalid length. [ 410.356208][ T5862] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 410.571477][T17736] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3966'. [ 410.592555][ T5862] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 410.626249][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 410.665552][ T5862] usb 6-1: Product: syz [ 410.675746][ T5862] usb 6-1: SerialNumber: syz [ 410.697477][ T5862] usb 6-1: config 0 descriptor?? [ 410.930663][ T5862] hso 6-1:0.0: Failed to find BULK IN ep [ 411.182860][ T23] usb 6-1: USB disconnect, device number 6 [ 411.290536][T17764] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 411.356264][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 411.566474][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 411.609894][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.636890][ T5899] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 411.662941][ T5899] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 411.696394][ T5899] usb 5-1: config 4 has no interface number 0 [ 411.764135][ T5899] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 411.786371][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.805191][ T5899] usb 5-1: Product: syz [ 411.824221][ T5899] usb 5-1: Manufacturer: syz [ 411.849387][ T5899] usb 5-1: SerialNumber: syz [ 412.204547][ T5899] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 412.226946][ T5899] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 412.233525][ T5899] usb 5-1: No valid video chain found. [ 412.280404][ T5899] usb 5-1: USB disconnect, device number 4 [ 412.308109][T17751] loop2: detected capacity change from 0 to 32768 [ 412.340889][T17751] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 412.364453][T17793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3979'. [ 412.620643][ T6090] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 412.857455][T17810] loop0: detected capacity change from 0 to 2048 [ 413.012000][T17810] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255 [ 413.607801][T17831] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 413.737352][T17844] QAT: failed to copy from user. [ 413.826587][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 413.826604][ T28] audit: type=1400 audit(2000000525.833:2512): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17846 comm="syz.0.3995" [ 413.936735][T17851] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 414.584099][T17885] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 414.616394][T17885] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 415.940096][T17948] loop0: detected capacity change from 0 to 8192 [ 415.967197][T17948] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.149246][ T28] audit: type=1400 audit(2000000528.153:2513): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=17967 comm="syz.5.4033" [ 416.626457][ T786] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 416.817076][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 416.832212][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 416.863663][ T786] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 416.903185][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.940855][ T786] usb 3-1: config 0 descriptor?? [ 416.964492][ T786] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 416.979581][T18015] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 417.063556][T18022] program syz.5.4049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.231622][ T786] usb 3-1: USB disconnect, device number 16 [ 417.354871][T18040] loop5: detected capacity change from 0 to 512 [ 417.372431][T18021] loop4: detected capacity change from 0 to 8192 [ 417.448014][T18040] EXT4-fs (loop5): 1 truncate cleaned up [ 417.455126][T18040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.494872][T18021] syz.4.4048: attempt to access beyond end of device [ 417.494872][T18021] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 417.609068][T18021] Buffer I/O error on dev loop4, logical block 57847, async page read [ 417.646298][ T28] audit: type=1800 audit(2000000529.653:2514): pid=18040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4053" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 417.682358][T18021] syz.4.4048: attempt to access beyond end of device [ 417.682358][T18021] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 417.731028][T15690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.740400][T18021] Buffer I/O error on dev loop4, logical block 57847, async page read [ 417.788068][ T28] audit: type=1800 audit(2000000529.793:2515): pid=18021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4048" name="file2" dev="loop4" ino=1048651 res=0 errno=0 [ 417.808300][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.860003][T18021] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 417.906558][T18021] FAT-fs (loop4): Filesystem has been set read-only [ 418.446484][ T786] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 418.666270][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 418.679402][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.722532][ T786] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 418.743006][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.767146][ T786] usb 1-1: Product: syz [ 418.786935][ T786] usb 1-1: Manufacturer: syz [ 418.787122][T18113] xt_cgroup: xt_cgroup: no path or classid specified [ 418.791653][ T786] usb 1-1: SerialNumber: syz [ 418.834846][ T786] usb 1-1: config 0 descriptor?? [ 418.848032][ T786] usb 1-1: bad CDC descriptors [ 418.856789][ T786] usb 1-1: unsupported MDLM descriptors [ 419.065670][T18129] netlink: 'syz.4.4075': attribute type 29 has an invalid length. [ 419.128829][ T786] usb 1-1: USB disconnect, device number 35 [ 419.279519][T18144] loop5: detected capacity change from 0 to 256 [ 419.385056][T18144] FAT-fs (loop5): Directory bread(block 64) failed [ 419.415208][T18144] FAT-fs (loop5): Directory bread(block 65) failed [ 419.431401][T18144] FAT-fs (loop5): Directory bread(block 66) failed [ 419.438974][T18144] FAT-fs (loop5): Directory bread(block 67) failed [ 419.445737][T18144] FAT-fs (loop5): Directory bread(block 68) failed [ 419.452629][T18144] FAT-fs (loop5): Directory bread(block 69) failed [ 419.459460][T18144] FAT-fs (loop5): Directory bread(block 70) failed [ 419.466364][T18144] FAT-fs (loop5): Directory bread(block 71) failed [ 419.473302][T18144] FAT-fs (loop5): Directory bread(block 72) failed [ 419.480362][T18144] FAT-fs (loop5): Directory bread(block 73) failed [ 420.536512][ T5862] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 420.771178][ T5862] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 420.797362][ T5862] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 420.812154][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.843276][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 420.858569][ T5862] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 421.050347][ T5899] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 421.074241][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.093792][ T5899] usb 3-1: Product: syz [ 421.106970][ T5899] usb 3-1: Manufacturer: syz [ 421.111733][ T5899] usb 3-1: SerialNumber: syz [ 421.157421][ T5899] usb 3-1: config 0 descriptor?? [ 421.397072][ T5899] hso 3-1:0.0: Failed to find BULK IN ep [ 421.433861][ T5899] usb-storage 3-1:0.0: USB Mass Storage device detected [ 421.659487][ T786] usb 3-1: USB disconnect, device number 17 [ 421.926857][ T5862] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 421.946172][ T5862] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 421.971842][ T5862] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 421.990311][T18295] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4118'. [ 422.017442][ T5862] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 422.030600][ T5862] usb 5-1: USB disconnect, device number 5 [ 422.810855][T18340] loop0: detected capacity change from 0 to 256 [ 422.904439][T18340] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 422.945247][T18340] FAT-fs (loop0): Filesystem has been set read-only [ 423.065560][T18345] loop2: detected capacity change from 0 to 4096 [ 423.073572][ T5768] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196) [ 423.152707][T18355] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.256620][ T28] audit: type=1326 audit(2000000535.263:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18360 comm="syz.0.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 423.279787][T18345] NILFS error (device loop2): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 423.336426][T18345] Remounting filesystem read-only [ 423.344538][ T28] audit: type=1326 audit(2000000535.263:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18360 comm="syz.0.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 423.442280][ T28] audit: type=1326 audit(2000000535.273:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18360 comm="syz.0.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 423.542954][ T28] audit: type=1326 audit(2000000535.273:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18360 comm="syz.0.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 423.653952][ T28] audit: type=1326 audit(2000000535.273:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18360 comm="syz.0.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 423.786341][T18381] kAFS: unparsable volume name [ 424.486408][ T1199] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 424.660478][T18434] loop5: detected capacity change from 0 to 128 [ 424.706310][ T1199] usb 3-1: Using ep0 maxpacket: 32 [ 424.725556][ T1199] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 424.749623][ T1199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.788785][ T1199] usb 3-1: config 0 descriptor?? [ 424.812716][ T1199] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 425.244201][ T1199] gspca_nw80x: reg_r err -71 [ 425.263954][ T1199] nw80x: probe of 3-1:0.0 failed with error -71 [ 425.282774][ T1199] usb 3-1: USB disconnect, device number 18 [ 425.798250][T18448] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 426.494074][T18522] loop0: detected capacity change from 0 to 2048 [ 426.512832][T18518] loop4: detected capacity change from 0 to 4096 [ 426.557136][T18522] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 426.578552][T18518] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 426.598016][T18528] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.742838][T18518] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 426.980384][T18537] loop0: detected capacity change from 0 to 512 [ 427.014643][T18537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.031532][T18537] EXT4-fs: Ignoring removed i_version option [ 427.088417][T18537] EXT4-fs (loop0): 1 orphan inode deleted [ 427.106632][T18537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.173504][T18498] loop2: detected capacity change from 0 to 32768 [ 427.303591][T18498] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 427.335052][T18555] netlink: 'syz.4.4191': attribute type 2 has an invalid length. [ 427.416309][ T5817] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 427.613728][T18567] openvswitch: netlink: IP tunnel dst address not specified [ 427.635692][ T5817] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 427.663261][ T5817] usb 1-1: config 0 has no interface number 0 [ 427.686401][ T5817] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 12349, setting to 64 [ 427.723434][ T5817] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 427.766134][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.799288][ T5817] usb 1-1: config 0 descriptor?? [ 427.805297][T18537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 427.861556][ T5817] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input21 [ 427.997816][ C1] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 428.140330][ C1] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 428.202515][ T5817] usb 1-1: USB disconnect, device number 36 [ 428.202732][ C1] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 428.774949][T18618] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.801424][T18618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.877528][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.992221][T18584] loop4: detected capacity change from 0 to 32768 [ 429.126362][T18630] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4207'. [ 429.292640][T18637] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 429.300232][T18637] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 430.042915][T18671] loop0: detected capacity change from 0 to 512 [ 430.130266][T18671] EXT4-fs (loop0): 1 truncate cleaned up [ 430.147712][T18671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.308706][T18671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.4222: bg 0: block 465: padding at end of block bitmap is not set [ 430.373268][T18671] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 430.400373][T18671] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4222: invalid indirect mapped block 234881024 (level 0) [ 430.545347][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.819585][T18697] bond1: entered allmulticast mode [ 431.140203][T18751] loop2: detected capacity change from 0 to 764 [ 431.201414][T18751] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 431.314537][T18751] Symlink component flag not implemented [ 431.335784][T18751] Symlink component flag not implemented (7) [ 431.608807][T18778] loop5: detected capacity change from 0 to 8 [ 431.697497][T18778] SQUASHFS error: lzo decompression failed, data probably corrupt [ 431.707594][T18778] SQUASHFS error: Failed to read block 0x144: -5 [ 431.714072][T18778] SQUASHFS error: Unable to read metadata cache entry [142] [ 431.739819][T18778] SQUASHFS error: Unable to read directory block [142:26] [ 431.816429][ T1199] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 431.824164][T18713] loop0: detected capacity change from 0 to 40427 [ 431.841660][T18713] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 431.857218][T18713] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 431.900131][T18713] F2FS-fs (loop0): invalid crc value [ 431.945641][T18713] F2FS-fs (loop0): Found nat_bits in checkpoint [ 432.031520][ T1199] usb 3-1: Using ep0 maxpacket: 32 [ 432.065284][ T1199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.099385][ T1199] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 432.116875][ T1199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.136332][ T1199] usb 3-1: Product: syz [ 432.140675][ T1199] usb 3-1: Manufacturer: syz [ 432.145320][ T1199] usb 3-1: SerialNumber: syz [ 432.192546][T18713] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 432.200704][T18713] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 432.203225][T18801] loop5: detected capacity change from 0 to 164 [ 432.237825][ T1199] usb 3-1: config 0 descriptor?? [ 432.255605][ T1199] cdc_ether: probe of 3-1:0.0 failed with error -22 [ 432.279181][ T1199] usb 3-1: unsupported MDLM descriptors [ 432.366676][ T5774] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 432.521475][ T5899] usb 3-1: USB disconnect, device number 19 [ 432.568404][ T5774] usb 5-1: config index 0 descriptor too short (expected 1316, got 36) [ 432.589560][T18812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.605254][ T5774] usb 5-1: config 7 has an invalid interface number: 204 but max is -1 [ 432.605287][ T5774] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 432.605311][ T5774] usb 5-1: config 7 has no interface number 0 [ 432.605386][ T5774] usb 5-1: config 7 interface 204 has no altsetting 0 [ 432.620808][ T5774] usb 5-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 432.696532][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.706483][ T5774] usb 5-1: Product: syz [ 432.710951][ T5774] usb 5-1: Manufacturer: syz [ 432.715737][ T5774] usb 5-1: SerialNumber: syz [ 432.950152][ T5774] smsc95xx v2.0.0 [ 432.957508][ T5774] smsc95xx 5-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 432.990388][T18833] loop0: detected capacity change from 0 to 1024 [ 432.997193][ T5774] smsc95xx: probe of 5-1:7.204 failed with error -22 [ 433.002088][ T5774] usbhid 5-1:7.204: couldn't find an input interrupt endpoint [ 433.023766][ T5774] usb 5-1: USB disconnect, device number 6 [ 433.165990][ T65] hfsplus: b-tree write err: -5, ino 4 [ 433.356788][ T5899] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 433.560931][ T5899] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 433.600474][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.639798][ T5899] usb 6-1: Product: syz [ 433.644093][ T5899] usb 6-1: Manufacturer: syz [ 433.655328][ T5899] usb 6-1: SerialNumber: syz [ 433.678050][ T5899] usb 6-1: config 0 descriptor?? [ 433.842386][T18879] loop0: detected capacity change from 0 to 164 [ 433.913871][ T5899] hso 6-1:0.0: Failed to find BULK IN ep [ 433.938271][ T5899] usb-storage 6-1:0.0: USB Mass Storage device detected [ 434.196664][ T5817] usb 6-1: USB disconnect, device number 7 [ 434.351019][T18912] netlink: 'syz.4.4266': attribute type 1 has an invalid length. [ 434.363681][T18912] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4266'. [ 434.788771][T18927] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4272'. [ 435.032251][T18943] loop0: detected capacity change from 0 to 16 [ 435.136935][T18943] erofs: (device loop0): mounted with root inode @ nid 36. [ 435.430559][T18963] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 435.478832][T18969] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 435.823186][T18986] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4286'. [ 435.868521][T18987] netlink: 'syz.5.4288': attribute type 1 has an invalid length. [ 435.896203][T18987] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4288'. [ 436.057927][T18998] loop4: detected capacity change from 0 to 2048 [ 436.096650][T18998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.739120][T19037] loop0: detected capacity change from 0 to 736 [ 436.913464][T19037] rock: directory entry would overflow storage [ 436.946649][T19037] rock: sig=0x3b10, size=4, remaining=3 [ 436.978088][T19046] loop2: detected capacity change from 0 to 1024 [ 437.251281][T19060] wg1: entered promiscuous mode [ 437.268590][T19060] wg1: entered allmulticast mode [ 437.525863][T19076] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.762937][T19088] kAFS: unable to lookup cell '.,' [ 438.271929][ T786] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 438.338653][T19127] netlink: 'syz.4.4327': attribute type 75 has an invalid length. [ 438.366200][ T5817] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 438.413082][T19129] ipt_REJECT: TCP_RESET invalid for non-tcp [ 438.450113][ T28] audit: type=1326 audit(2000000550.463:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19131 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 438.478707][ T786] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 438.496116][ T786] usb 6-1: config 0 has no interface number 0 [ 438.518429][ T28] audit: type=1326 audit(2000000550.463:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19131 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 438.565454][ T786] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 438.589967][ T5817] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 438.599791][ T28] audit: type=1326 audit(2000000550.463:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19131 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 438.608140][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.636852][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.671764][ T28] audit: type=1326 audit(2000000550.463:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19131 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 438.675072][ T5817] usb 1-1: config 0 descriptor?? [ 438.704183][ T786] usb 6-1: Product: syz [ 438.716562][ T786] usb 6-1: Manufacturer: syz [ 438.739556][ T786] usb 6-1: SerialNumber: syz [ 438.747136][ T28] audit: type=1326 audit(2000000550.463:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19131 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 438.776533][ T786] usb 6-1: config 0 descriptor?? [ 439.006968][ T786] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 439.024147][ T786] usb 6-1: No valid video chain found. [ 439.046726][ T786] usb 6-1: USB disconnect, device number 8 [ 439.204297][ T5817] ath6kl: Failed to submit usb control message: -71 [ 439.222026][ T5817] ath6kl: unable to send the bmi data to the device: -71 [ 439.241286][ T5817] ath6kl: Unable to send get target info: -71 [ 439.256226][ T5817] ath6kl: Failed to init ath6kl core: -71 [ 439.273838][ T5817] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 439.308421][ T5817] usb 1-1: USB disconnect, device number 37 [ 439.521384][T19184] netlink: 'syz.2.4339': attribute type 1 has an invalid length. [ 439.926954][T19202] netlink: 'syz.2.4345': attribute type 1 has an invalid length. [ 439.934784][T19202] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4345'. [ 440.316796][ T5817] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 440.351648][T19227] loop0: detected capacity change from 0 to 512 [ 440.400408][T19233] Cannot find add_set index 2 as target [ 440.419425][T19227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.448552][T19227] ext4 filesystem being mounted at /1163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.477332][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.483907][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.518769][T19227] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.4353: corrupted xattr block 33: invalid ea_ino [ 440.536359][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 440.545384][ T5817] usb 6-1: config 1 has an invalid interface number: 209 but max is 0 [ 440.553927][ T5817] usb 6-1: config 1 has no interface number 0 [ 440.560416][ T5817] usb 6-1: config 1 interface 209 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 440.573481][ T5817] usb 6-1: config 1 interface 209 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 440.594598][T19227] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 440.615883][ T5817] usb 6-1: config 1 interface 209 has no altsetting 0 [ 440.645025][ T5817] usb 6-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=7e.e9 [ 440.672482][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.686830][ T5817] usb 6-1: Product: syz [ 440.704035][ T5817] usb 6-1: Manufacturer: syz [ 440.712830][ T5817] usb 6-1: SerialNumber: syz [ 440.722996][T19209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.744744][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.764173][T19209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.905677][T19253] loop0: detected capacity change from 0 to 16 [ 440.918384][T19253] erofs: (device loop0): mounted with root inode @ nid 36. [ 440.953616][ T5785] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 440.979217][T19253] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 441.005748][ T28] audit: type=1800 audit(2000000553.013:2526): pid=19253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4358" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 441.046883][T19209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 441.086590][T19209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 441.170479][ T5817] cdc_subset 6-1:1.209 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Boot Loader OBject, 62:e7:96:ea:01:d1 [ 441.412393][ T5899] usb 6-1: USB disconnect, device number 9 [ 441.438713][ T5899] cdc_subset 6-1:1.209 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Boot Loader OBject [ 442.936832][T19369] netlink: 'syz.0.4387': attribute type 10 has an invalid length. [ 442.952506][T19361] loop5: detected capacity change from 0 to 4096 [ 443.023814][T19361] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 443.074758][T19361] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 443.126837][T19361] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 443.180661][T19361] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 443.220759][T19361] ntfs: volume version 3.1. [ 443.757065][T19403] bridge_slave_1: left allmulticast mode [ 443.799672][T19403] bridge_slave_1: left promiscuous mode [ 443.805688][T19403] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.841537][T19393] loop0: detected capacity change from 0 to 8192 [ 443.921899][T19403] netlink: 'syz.2.4394': attribute type 3 has an invalid length. [ 443.957766][T19403] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 444.155767][T19417] bond0: (slave netdevsim0): Releasing backup interface [ 444.199780][T19417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 444.230036][T19419] loop4: detected capacity change from 0 to 1024 [ 444.349477][T19419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.382217][T19421] bond2: entered allmulticast mode [ 444.595950][T19419] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 444.807409][T15044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.915576][T19483] loop0: detected capacity change from 0 to 2048 [ 444.983795][T19493] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.667113][T19511] loop5: detected capacity change from 0 to 4096 [ 445.732080][T19511] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 445.784037][T19511] ntfs3: loop5: It is recommened to use chkdsk. [ 445.924904][T19511] ntfs3: loop5: Failed to initialize $Secure::$SII (-22). [ 445.936580][T19511] ntfs3: loop5: Failed to initialize $Secure (-22). [ 446.606768][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 446.606785][ T28] audit: type=1326 audit(2000000558.613:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 446.675538][ T28] audit: type=1326 audit(2000000558.613:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 446.698060][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.772558][ T28] audit: type=1326 audit(2000000558.653:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 446.867087][ T28] audit: type=1326 audit(2000000558.653:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 446.936140][ T28] audit: type=1326 audit(2000000558.653:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19555 comm="syz.0.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cf79bf79 code=0x7ffc0000 [ 447.128656][T19587] loop4: detected capacity change from 0 to 2048 [ 447.187492][T19587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.726208][T19637] sock: sock_timestamping_bind_phc: sock not bind to device [ 448.571036][T19689] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 448.577662][T19689] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 448.602788][T19689] vhci_hcd vhci_hcd.0: Device attached [ 448.624437][T19695] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 448.631048][T19695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.636650][ T27] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 448.648653][T19695] vhci_hcd vhci_hcd.0: Device attached [ 448.663307][T19696] vhci_hcd: connection closed [ 448.663557][T19690] vhci_hcd: connection closed [ 448.668773][ T34] vhci_hcd: stop threads [ 448.680027][ T34] vhci_hcd: release socket [ 448.684524][ T34] vhci_hcd: disconnect device [ 448.700135][ T34] vhci_hcd: stop threads [ 448.704800][ T34] vhci_hcd: release socket [ 448.711227][ T34] vhci_hcd: disconnect device [ 448.766380][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 448.848820][ T27] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 448.867408][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.886592][ T27] usb 6-1: config 0 descriptor?? [ 448.909979][ T27] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 448.957634][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 448.966993][ T5899] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 448.985693][ T5899] usb 3-1: config 0 has no interface number 0 [ 449.004778][ T5899] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 449.023841][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.033275][ T5899] usb 3-1: Product: syz [ 449.043479][ T5899] usb 3-1: Manufacturer: syz [ 449.053650][ T5899] usb 3-1: SerialNumber: syz [ 449.071834][ T5899] usb 3-1: config 0 descriptor?? [ 449.085236][ T5899] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 449.140649][T19700] loop4: detected capacity change from 0 to 32768 [ 449.174922][T19700] (syz.4.4459,19700,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.201300][T19700] (syz.4.4459,19700,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 449.264423][T19700] JBD2: Ignoring recovery information on journal [ 449.327109][ T27] gp8psk: usb in 128 operation failed. [ 449.342881][ T27] gp8psk: usb in 137 operation failed. [ 449.359506][ T27] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 449.376615][ T27] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 449.390993][T19700] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 449.397473][ T27] usb 6-1: USB disconnect, device number 10 [ 449.489248][ T5899] gspca_sn9c2028: read1 error -71 [ 449.497624][ T5899] gspca_sn9c2028: read1 error -71 [ 449.507921][ T5899] sn9c2028: probe of 3-1:0.119 failed with error -71 [ 449.524347][ T5899] usb 3-1: USB disconnect, device number 20 [ 449.646554][T15044] ocfs2: Unmounting device (7,4) on (node local) [ 449.941758][T19709] loop0: detected capacity change from 0 to 32768 [ 450.081975][T19709] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 450.218389][T19709] (syz.0.4460,19709,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 450.256492][T19709] (syz.0.4460,19709,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 450.276487][T19709] (syz.0.4460,19709,0):ocfs2_mknod:298 ERROR: status = -2 [ 450.291100][T19709] (syz.0.4460,19709,0):ocfs2_mknod:502 ERROR: status = -2 [ 450.325653][T19709] (syz.0.4460,19709,0):ocfs2_mkdir:659 ERROR: status = -2 [ 450.567517][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 450.732363][T19758] loop4: detected capacity change from 0 to 4096 [ 450.765423][T19758] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 450.979003][T19758] ntfs3: loop4: failed to convert "c46c" to cp861 [ 451.381297][T19790] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4480'. [ 452.051644][T19818] block device autoloading is deprecated and will be removed. [ 452.105018][T19817] loop0: detected capacity change from 0 to 4096 [ 452.144962][T19817] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 452.359413][T19817] ntfs3: loop0: failed to convert "c46c" to macroman [ 453.014166][T19854] loop4: detected capacity change from 0 to 4096 [ 453.037577][T19854] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 453.177288][T19854] ntfs: volume version 3.1. [ 454.020062][T19890] xt_hashlimit: size too large, truncated to 1048576 [ 454.281089][T19871] loop5: detected capacity change from 0 to 32768 [ 454.331200][T19904] xt_TCPMSS: Only works on TCP SYN packets [ 454.458013][ T12] read_mapping_page failed! [ 454.463307][ T12] ERROR: (device loop5): txCommit: [ 454.463307][ T12] [ 454.482216][T19909] xt_limit: Overflow, try lower: 2147483649/3300 [ 454.517985][ T12] jfs_write_inode: jfs_commit_inode failed! [ 455.224744][ T5817] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 455.456526][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 455.475691][ T5817] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 455.485219][ T5817] usb 6-1: config 0 has no interface number 0 [ 455.516674][ T5817] usb 6-1: config 0 interface 48 has no altsetting 0 [ 455.546656][ T5817] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 455.555859][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.586227][ T5817] usb 6-1: Product: syz [ 455.596468][ T5817] usb 6-1: Manufacturer: syz [ 455.601639][ T5817] usb 6-1: SerialNumber: syz [ 455.619445][ T5817] usb 6-1: config 0 descriptor?? [ 455.766152][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 455.903626][ T5785] Bluetooth: hci5: Unknown advertising packet type: 0x35 [ 455.903739][ T5785] Bluetooth: hci5: Malformed LE Event: 0x0d [ 455.926542][ T5899] usb 6-1: USB disconnect, device number 11 [ 455.991238][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.026682][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 456.056415][ T9] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 456.078556][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.109097][ T9] usb 5-1: config 0 descriptor?? [ 456.255650][T19970] loop0: detected capacity change from 0 to 32768 [ 456.333351][T19970] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 456.372277][T19962] loop4: detected capacity change from 0 to 1024 [ 456.438091][ T1199] usb 5-1: USB disconnect, device number 7 [ 456.466165][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 456.494244][T19970] XFS (loop0): Ending clean mount [ 456.681247][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 456.708360][ T9] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 456.733826][ T9] usb 3-1: config 0 has no interface number 0 [ 456.761198][ T9] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 456.804220][ T9] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 456.817424][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 456.843520][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.878484][ T9] usb 3-1: config 0 descriptor?? [ 456.896762][ T9] ttusbir 3-1:0.83: cannot find expected altsetting [ 457.068916][ T65] hfsplus: b-tree write err: -5, ino 4 [ 457.124136][ T786] usb 3-1: USB disconnect, device number 21 [ 457.540087][T20046] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4551'. [ 457.995945][T20062] loop5: detected capacity change from 0 to 8192 [ 458.060197][T20062] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 458.086246][T20062] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 458.136787][T20062] REISERFS (device loop5): using ordered data mode [ 458.166286][T20062] reiserfs: using flush barriers [ 458.220295][T20062] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 458.277593][T20062] REISERFS (device loop5): checking transaction log (loop5) [ 458.329646][T20062] REISERFS (device loop5): Using rupasov hash to sort names [ 458.796819][T20098] netlink: 'syz.2.4569': attribute type 3 has an invalid length. [ 459.027570][T20103] netlink: 'syz.5.4570': attribute type 7 has an invalid length. [ 459.408867][ T5817] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 459.571474][T20133] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4580'. [ 459.816297][ T5817] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 459.825715][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.836695][ T5817] usb 1-1: Product: syz [ 459.840925][ T5817] usb 1-1: Manufacturer: syz [ 459.845580][ T5817] usb 1-1: SerialNumber: syz [ 459.865964][ T5817] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 459.891787][ T786] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 459.926865][T20143] netlink: 'syz.5.4583': attribute type 5 has an invalid length. [ 460.653328][T20167] loop5: detected capacity change from 0 to 4096 [ 460.719343][T20167] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 460.867352][T20175] netlink: 'syz.2.4593': attribute type 3 has an invalid length. [ 461.119359][ T9] usb 1-1: USB disconnect, device number 38 [ 461.149720][ T786] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 461.158443][ T786] ath9k_htc: Failed to initialize the device [ 461.167885][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 461.329560][T20167] ntfs3: loop5: failed to convert "c46c" to macroman [ 461.586132][ T5817] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 461.789669][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 461.808711][ T5817] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 461.850355][ T5817] usb 3-1: config 179 has no interface number 0 [ 461.877663][ T5817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 461.899510][ T5817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 461.926204][ T5817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 461.963030][ T5817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 462.006165][ T5817] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 462.046171][ T5817] usb 3-1: config 179 interface 65 has no altsetting 0 [ 462.071366][ T5817] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 462.106167][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.205429][ T5817] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input25 [ 462.323659][ T5123] input input25: unable to receive magic message: -110 [ 462.365903][ T5123] input input25: unable to receive magic message: -32 [ 462.476334][T20243] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 462.491879][ T5958] input input25: unable to receive magic message: -32 [ 462.610110][ T5123] input input25: unable to receive magic message: -32 [ 462.650947][T20248] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4613'. [ 462.687595][ T1199] usb 3-1: USB disconnect, device number 22 [ 462.687595][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 462.726487][ T1199] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 463.096539][T20280] sctp: [Deprecated]: syz.4.4618 (pid 20280) Use of int in max_burst socket option. [ 463.096539][T20280] Use struct sctp_assoc_value instead [ 463.724507][T20312] program syz.5.4630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.009154][T20321] loop5: detected capacity change from 0 to 2048 [ 464.068719][T20321] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.365733][T20334] tmpfs: Bad value for 'mpol' [ 465.341762][T20384] netlink: 'syz.0.4654': attribute type 15 has an invalid length. [ 465.364887][T20384] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4654'. [ 465.376984][ T5774] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 465.455968][T20338] loop5: detected capacity change from 0 to 40427 [ 465.486790][T20338] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 465.507393][T20338] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 465.544280][T20338] F2FS-fs (loop5): Found nat_bits in checkpoint [ 465.589325][ T5774] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 465.633801][ T5774] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 465.656541][ T5774] usb 3-1: config 220 has no interface number 2 [ 465.662973][ T5774] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 465.741339][ T5774] usb 3-1: config 220 interface 0 has no altsetting 0 [ 465.750913][ T5774] usb 3-1: config 220 interface 76 has no altsetting 0 [ 465.758509][T20338] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 465.765700][T20338] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 465.775277][ T5774] usb 3-1: config 220 interface 1 has no altsetting 0 [ 465.794619][ T5774] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 465.805093][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.813831][ T5774] usb 3-1: Product: syz [ 465.818531][ T5774] usb 3-1: Manufacturer: syz [ 465.823836][ T5774] usb 3-1: SerialNumber: syz [ 465.851142][T20338] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 466.060299][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4660'. [ 466.095804][ T5774] usb 3-1: selecting invalid altsetting 0 [ 466.128242][ T5774] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 466.135580][ T5774] usb 3-1: No valid video chain found. [ 466.204407][ T5774] usb 3-1: selecting invalid altsetting 0 [ 466.230726][ T5774] usbtest: probe of 3-1:220.1 failed with error -22 [ 466.264331][ T5774] usb 3-1: USB disconnect, device number 23 [ 466.333399][T20422] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 466.676097][T20438] loop4: detected capacity change from 0 to 4096 [ 466.779829][T20438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.911304][T15044] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.976306][T20456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4672'. [ 467.027143][T20456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.321152][T20471] syz.2.4675: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 467.376510][T20471] CPU: 0 PID: 20471 Comm: syz.2.4675 Not tainted syzkaller #0 [ 467.384168][T20471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.394291][T20471] Call Trace: [ 467.397628][T20471] [ 467.400620][T20471] dump_stack_lvl+0x18c/0x250 [ 467.405392][T20471] ? show_regs_print_info+0x20/0x20 [ 467.410754][T20471] ? load_image+0x400/0x400 [ 467.415419][T20471] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 467.421909][T20471] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 467.428503][T20471] warn_alloc+0x246/0x340 [ 467.433007][T20471] ? stack_trace_save+0xaa/0x100 [ 467.438018][T20471] ? zone_watermark_ok_safe+0x230/0x230 [ 467.443701][T20471] ? kasan_set_track+0x5f/0x70 [ 467.448537][T20471] ? kasan_set_track+0x4e/0x70 [ 467.453366][T20471] ? __kasan_kmalloc+0x8f/0xa0 [ 467.458190][T20471] ? xsk_init_queue+0xad/0x100 [ 467.463112][T20471] ? xsk_setsockopt+0x42e/0x760 [ 467.468031][T20471] ? do_sock_setsockopt+0x175/0x1a0 [ 467.473388][T20471] ? __x64_sys_setsockopt+0x182/0x200 [ 467.478841][T20471] __vmalloc_node_range+0x126/0x1330 [ 467.484232][T20471] ? free_vm_area+0x50/0x50 [ 467.488814][T20471] vmalloc_user+0x74/0x80 [ 467.493219][T20471] ? xskq_create+0xbf/0x170 [ 467.497808][T20471] xskq_create+0xbf/0x170 [ 467.502250][T20471] xsk_init_queue+0xad/0x100 [ 467.506925][T20471] xsk_setsockopt+0x42e/0x760 [ 467.511832][T20471] ? xsk_poll+0x680/0x680 [ 467.516244][T20471] ? __fget_files+0x28/0x4b0 [ 467.520908][T20471] ? __fget_files+0x28/0x4b0 [ 467.525584][T20471] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 467.531207][T20471] ? security_socket_setsockopt+0x7e/0xa0 [ 467.536998][T20471] ? xsk_poll+0x680/0x680 [ 467.541406][T20471] do_sock_setsockopt+0x175/0x1a0 [ 467.546560][T20471] ? __fdget+0x180/0x210 [ 467.550891][T20471] __x64_sys_setsockopt+0x182/0x200 [ 467.556174][T20471] do_syscall_64+0x55/0xa0 [ 467.560663][T20471] ? clear_bhb_loop+0x40/0x90 [ 467.565408][T20471] ? clear_bhb_loop+0x40/0x90 [ 467.570144][T20471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.576099][T20471] RIP: 0033:0x7f9ca919bf79 [ 467.580575][T20471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.600332][T20471] RSP: 002b:00007f9ca9f73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 467.608840][T20471] RAX: ffffffffffffffda RBX: 00007f9ca9415fa0 RCX: 00007f9ca919bf79 [ 467.616886][T20471] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 467.624935][T20471] RBP: 00007f9ca92327e0 R08: 0000000000000004 R09: 0000000000000000 [ 467.632977][T20471] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.641024][T20471] R13: 00007f9ca9416038 R14: 00007f9ca9415fa0 R15: 00007ffc5eacb308 [ 467.649267][T20471] [ 467.653818][ T28] audit: type=1326 audit(2000000579.663:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20484 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 467.689899][T20471] Mem-Info: [ 467.693115][T20471] active_anon:6362 inactive_anon:0 isolated_anon:0 [ 467.693115][T20471] active_file:11087 inactive_file:40951 isolated_file:0 [ 467.693115][T20471] unevictable:768 dirty:419 writeback:0 [ 467.693115][T20471] slab_reclaimable:11017 slab_unreclaimable:100963 [ 467.693115][T20471] mapped:35312 shmem:1363 pagetables:683 [ 467.693115][T20471] sec_pagetables:0 bounce:0 [ 467.693115][T20471] kernel_misc_reclaimable:0 [ 467.693115][T20471] free:1303361 free_pcp:16215 free_cma:0 [ 467.750485][ T28] audit: type=1326 audit(2000000579.753:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20484 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 467.784236][T20471] Node 0 active_anon:25448kB inactive_anon:0kB active_file:44348kB inactive_file:163604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141248kB dirty:1676kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12128kB pagetables:2732kB sec_pagetables:0kB all_unreclaimable? no [ 467.826548][ T28] audit: type=1326 audit(2000000579.753:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20484 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 467.849326][ T5817] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 467.882757][T20471] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 467.935136][ T28] audit: type=1326 audit(2000000579.753:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20484 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 467.974358][T20471] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.006139][ T28] audit: type=1326 audit(2000000579.753:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20484 comm="syz.4.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce359bf79 code=0x7ffc0000 [ 468.040943][T20471] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 468.054195][T20471] Node 0 DMA32 free:1300596kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25512kB inactive_anon:0kB active_file:44348kB inactive_file:162768kB unevictable:1536kB writepending:1676kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:38908kB local_pcp:19568kB free_cma:0kB [ 468.085759][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 468.093682][T20471] lowmem_reserve[]: 0 0 0 0 0 [ 468.098969][ T5817] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 468.107571][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.119319][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.129616][T20471] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.176209][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.207910][ T5817] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 468.224214][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.236115][T20471] lowmem_reserve[]: 0 0 0 0 0 [ 468.241414][T20471] Node 1 Normal free:3897488kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25240kB local_pcp:15872kB free_cma:0kB [ 468.287859][ T5817] usb 1-1: config 0 descriptor?? [ 468.321271][T20471] lowmem_reserve[]: 0 0 0 0 0 [ 468.333051][ T5817] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 468.346091][T20471] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.377741][T20471] Node 0 DMA32: 967*4kB (UME) 779*8kB (UME) 38*16kB (UME) 265*32kB (UME) 206*64kB (UME) 40*128kB (UME) 40*256kB (UM) 21*512kB (UME) 7*1024kB (UE) 3*2048kB (UME) 300*4096kB (M) = 1300596kB [ 468.390452][ T5123] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 468.417052][T20501] loop4: detected capacity change from 0 to 64 [ 468.436840][ T5123] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 468.452623][T20471] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.466693][ T5123] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 468.516774][T20477] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 468.525904][T20471] Node 1 Normal: 176*4kB (UME) 74*8kB (UE) 38*16kB (UE) 79*32kB (UE) 27*64kB (UME) 7*128kB (UME) 1*256kB (U) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897488kB [ 468.595972][ T5123] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 468.598879][T20471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.626309][ T5817] usb 1-1: USB disconnect, device number 39 [ 468.669052][T20471] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 468.682371][T20514] loop5: detected capacity change from 0 to 64 [ 468.689235][T20471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.750403][ T28] audit: type=1800 audit(2000000580.763:2537): pid=20514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4684" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 468.784775][T20471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 468.819960][T20471] 52821 total pagecache pages [ 468.824763][T20471] 0 pages in swap cache [ 468.885565][T20471] Free swap = 124472kB [ 468.902573][T20471] Total swap = 124996kB [ 468.918565][T20471] 2097051 pages RAM [ 468.929026][T20471] 0 pages HighMem/MovableOnly [ 468.934772][T20471] 416922 pages reserved [ 468.940659][T20471] 0 pages cma reserved [ 468.955312][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4685'. [ 470.377166][T20604] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 470.486246][T20612] mmap: syz.0.4713 (20612) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 470.517452][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 470.585841][T20615] Unsupported ieee802154 address type: 0 [ 470.678879][T20621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4715'. [ 470.766454][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.786347][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 470.832702][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 470.876788][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.898205][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.936121][ T9] usb 3-1: SerialNumber: syz [ 470.959846][T20594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 470.978988][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 470.990953][ T9] hub: probe of 3-1:1.0 failed with error -5 [ 471.011912][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 471.232147][ T9] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 471.292844][T20652] overlayfs: missing 'lowerdir' [ 471.307323][ T9] usb 3-1: USB disconnect, device number 24 [ 471.655059][T20676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.834133][ T5774] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 471.945850][T20685] loop0: detected capacity change from 0 to 4096 [ 471.995579][T20685] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 472.008256][ T28] audit: type=1326 audit(2000000584.023:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20691 comm="syz.2.4735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca919bf79 code=0x7ffc0000 [ 472.020230][T20685] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 472.078761][ T5774] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 472.080590][T20685] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 472.106286][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.136443][ T5774] usb 6-1: config 0 descriptor?? [ 472.214923][T20685] ntfs: volume version 3.1. [ 472.271949][T20701] netlink: 'syz.4.4737': attribute type 30 has an invalid length. [ 472.366799][ T5774] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 472.408109][ T5774] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 472.579412][ T5774] [drm:udl_init] *ERROR* Selecting channel failed [ 472.706182][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 472.714861][ T5774] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 472.746499][ T5774] [drm] Initialized udl on minor 2 [ 472.779730][ T5774] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 472.840439][ T5774] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 472.870609][ T5774] usb 6-1: USB disconnect, device number 12 [ 472.892970][ T1199] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 472.925007][ T5899] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 472.940764][ T1199] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 472.950480][ T5899] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 472.978092][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4745'. [ 472.989068][ T5899] usb 5-1: config 0 has no interface number 0 [ 473.005886][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 473.040534][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.065824][T20736] loop0: detected capacity change from 0 to 1024 [ 473.067605][ T5899] usb 5-1: Product: syz [ 473.086444][ T5899] usb 5-1: Manufacturer: syz [ 473.094944][ T5899] usb 5-1: SerialNumber: syz [ 473.117148][T20736] EXT4-fs: Ignoring removed orlov option [ 473.135931][ T5899] usb 5-1: config 0 descriptor?? [ 473.159077][T20736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 473.186624][T20736] ext4 filesystem being mounted at /1272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.267380][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.353926][T20751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4748'. [ 473.605855][ T5899] usb 5-1: Found UVC 0.00 device syz (046d:0823) [ 473.645551][ T5899] usb 5-1: No valid video chain found. [ 473.668394][ T5899] usb 5-1: USB disconnect, device number 8 [ 473.896601][ T786] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 474.110517][ T786] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 474.146397][ T786] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 474.166176][ T786] usb 1-1: config 220 has no interface number 2 [ 474.179028][ T786] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 474.226907][ T786] usb 1-1: config 220 interface 0 has no altsetting 0 [ 474.233799][ T786] usb 1-1: config 220 interface 76 has no altsetting 0 [ 474.266489][ T786] usb 1-1: config 220 interface 1 has no altsetting 0 [ 474.289330][ T786] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 474.314418][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.343361][ T786] usb 1-1: Product: syz [ 474.356188][ T786] usb 1-1: Manufacturer: syz [ 474.377569][ T786] usb 1-1: SerialNumber: syz [ 474.628352][ T786] usb 1-1: selecting invalid altsetting 0 [ 474.646508][ T786] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 474.652958][ T786] usb 1-1: No valid video chain found. [ 474.696948][ T786] usb 1-1: selecting invalid altsetting 0 [ 474.715851][ T786] usbtest: probe of 1-1:220.1 failed with error -22 [ 474.753792][ T786] usb 1-1: USB disconnect, device number 40 [ 475.175946][T20850] loop4: detected capacity change from 0 to 1764 [ 475.615445][T20871] loop4: detected capacity change from 0 to 8 [ 475.677672][T20871] cramfs: Error -3 while decompressing! [ 475.688075][ T8253] udevd[8253]: incorrect cramfs checksum on /dev/loop4 [ 475.696230][T20871] cramfs: ffffffff973f8368(26)->ffff88804bc82000(4096) [ 475.703317][T20871] cramfs: Error -3 while decompressing! [ 475.733800][T20871] cramfs: ffffffff973f8368(26)->ffff88804bc82000(4096) [ 475.772881][ T8253] udevd[8253]: incorrect cramfs checksum on /dev/loop4 [ 476.286271][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4792'. [ 476.920777][T20941] netlink: 'syz.5.4805': attribute type 1 has an invalid length. [ 476.949288][T20941] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4805'. [ 477.639545][T20987] binder: 20986:20987 ioctl c00c6211 ffffffffffffffff returned -14 [ 477.646146][ T5774] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 477.805899][T20990] loop0: detected capacity change from 0 to 4096 [ 477.826735][ T5774] usb 5-1: Using ep0 maxpacket: 16 [ 477.835982][T20990] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 477.870072][ T5774] usb 5-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 477.889537][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 125, changing to 7 [ 477.933878][ T5774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 42438, setting to 1024 [ 477.965301][ T5774] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.967692][T20990] ntfs3: loop0: failed to convert "c46c" to iso8859-5 [ 478.032486][ T5774] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 478.053131][ T5774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.077567][ T5774] usb 5-1: Product: syz [ 478.081828][ T5774] usb 5-1: Manufacturer: syz [ 478.106101][ T5774] usb 5-1: SerialNumber: syz [ 478.128380][ T5774] usb 5-1: config 0 descriptor?? [ 478.195611][ T5774] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 478.217936][ T5774] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 478.233996][T21009] netlink: 'syz.0.4826': attribute type 6 has an invalid length. [ 478.358331][ T5774] peak_usb: probe of 5-1:0.0 failed with error -22 [ 478.397290][T21022] loop5: detected capacity change from 0 to 128 [ 478.411279][ T5774] usb 5-1: USB disconnect, device number 9 [ 478.951718][T21050] netlink: 'syz.0.4836': attribute type 10 has an invalid length. [ 479.029407][T21050] bond0: (slave team0): Releasing backup interface [ 479.126505][T21050] team0 (unregistering): Port device team_slave_0 removed [ 479.156590][T21050] team0 (unregistering): Port device team_slave_1 removed [ 479.189882][T21050] team0 (unregistering): Port device syz_tun removed [ 479.384057][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 479.384073][ T28] audit: type=1326 audit(2000000591.393:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.2.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca919bf79 code=0x7ffc0000 [ 479.476651][ T28] audit: type=1326 audit(2000000591.393:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.2.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca919bf79 code=0x7ffc0000 [ 479.547163][ T28] audit: type=1326 audit(2000000591.433:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.2.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9ca919bf79 code=0x7ffc0000 [ 479.612777][ T28] audit: type=1326 audit(2000000591.433:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.2.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca919bf79 code=0x7ffc0000 [ 479.669474][ T28] audit: type=1326 audit(2000000591.433:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21065 comm="syz.2.4841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ca919bf79 code=0x7ffc0000 [ 479.876441][T21087] sctp: [Deprecated]: syz.0.4847 (pid 21087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.876441][T21087] Use struct sctp_sack_info instead [ 480.100105][T21099] netlink: 'syz.2.4850': attribute type 21 has an invalid length. [ 480.144457][T21099] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4850'. [ 481.276292][ T786] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 481.498539][ T786] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 481.498570][ T786] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 481.498593][ T786] usb 1-1: config 0 has no interface number 0 [ 481.498634][ T786] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 481.498657][ T786] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.498698][ T786] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 481.498724][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.513396][ T786] usb 1-1: config 0 descriptor?? [ 481.612955][T21163] xt_addrtype: ipv6 does not support BROADCAST matching [ 481.945079][ T786] usb 1-1: USB disconnect, device number 41 [ 482.144905][T21185] can0: slcan on ttyS3. [ 482.388482][T21184] can0 (unregistered): slcan off ttyS3. [ 482.981452][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4888'. [ 483.135836][T21239] gretap2: entered allmulticast mode [ 483.466966][T21257] sit0: entered promiscuous mode [ 483.503777][T21257] netlink: 'syz.5.4895': attribute type 1 has an invalid length. [ 483.526705][T21156] Bluetooth: hci4: command 0x0406 tx timeout [ 483.563311][T21257] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4895'. [ 484.905320][T21324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.346663][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 485.548535][ T23] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 485.563307][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.624129][ T23] usb 5-1: config 0 descriptor?? [ 485.680359][T21351] loop5: detected capacity change from 0 to 128 [ 485.735647][T21351] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 485.853587][ T23] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 485.866359][ T786] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 485.873787][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 486.055564][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 486.066509][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 486.082879][ T786] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 486.093100][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.101780][ T786] usb 1-1: Product: syz [ 486.107865][ T786] usb 1-1: Manufacturer: syz [ 486.112556][ T786] usb 1-1: SerialNumber: syz [ 486.128225][ T786] usb 1-1: config 0 descriptor?? [ 486.156171][ T23] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 486.163814][ T23] [drm] Initialized udl on minor 2 [ 486.178936][ T23] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 486.201592][ T23] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 486.220459][T21263] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 486.241981][ T23] usb 5-1: USB disconnect, device number 10 [ 486.250988][T21263] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 486.346990][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 486.355146][ T786] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 486.375683][ T786] eb 9a 47 80 9b f8 7a f0 [ 486.381492][ T786] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 486.492430][T21390] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 486.560252][ T5817] usb 1-1: USB disconnect, device number 42 [ 486.576931][ T9] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 486.597707][ T9] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 486.606080][ T9] usb 6-1: Product: syz [ 486.611523][ T9] usb 6-1: Manufacturer: syz [ 486.620910][ T9] usb 6-1: SerialNumber: syz [ 486.647839][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 486.748196][T21403] sock: sock_timestamping_bind_phc: sock not bind to device [ 486.848775][T21405] QAT: failed to copy from user cfg_data. [ 486.988010][T21407] loop4: detected capacity change from 0 to 2048 [ 487.032494][T21407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.069631][ T9] vp7045: USB control message 'in' went wrong. [ 487.095821][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 487.125381][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 487.188802][ T9] usb 6-1: USB disconnect, device number 13 [ 487.866207][T21263] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 488.094750][T21263] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 488.112177][T21263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.135438][T21263] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 488.145388][T21263] usb 3-1: config 1 has no interface number 0 [ 488.152662][T21263] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 488.163965][T21263] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 488.188532][T21263] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.202025][T21263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.211463][T21263] usb 3-1: Product: syz [ 488.215968][T21263] usb 3-1: Manufacturer: syz [ 488.220818][T21263] usb 3-1: SerialNumber: syz [ 488.257244][T21465] sp0: Synchronizing with TNC [ 488.714866][ T786] usb 3-1: USB disconnect, device number 25 [ 489.014265][T21515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4957'. [ 489.911300][T21572] cgroup: Invalid name [ 490.006400][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 490.225714][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 490.248350][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.287329][ T9] usb 1-1: config 0 descriptor?? [ 490.519369][ T9] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 490.536142][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 490.736222][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 490.777389][ T9] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 490.785615][ T9] [drm] Initialized udl on minor 2 [ 490.794460][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 490.812710][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 490.858612][ T9] usb 1-1: USB disconnect, device number 43 [ 490.864801][ T5817] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 490.889633][ T5817] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 491.042562][T21628] loop5: detected capacity change from 0 to 1024 [ 491.138311][T21628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 491.158009][T21628] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.287930][T21628] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.4990: bg 0: block 112: padding at end of block bitmap is not set [ 491.362374][T21628] EXT4-fs (loop5): Remounting filesystem read-only [ 491.434819][T21645] loop4: detected capacity change from 0 to 2048 [ 491.493040][T21645] loop4: p1 p3 < > p4 < p5 > [ 491.518870][T21645] loop4: partition table partially beyond EOD, truncated [ 491.529359][T15690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 491.560158][T21645] loop4: p1 size 33024 extends beyond EOD, truncated [ 491.607098][T21645] loop4: p3 start 4284289 is beyond EOD, truncated [ 491.646893][T21645] loop4: p5 size 33024 extends beyond EOD, truncated [ 491.668464][ T29] INFO: task syz-executor:5771 blocked for more than 143 seconds. [ 491.703392][ T29] Not tainted syzkaller #0 [ 491.750742][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.759765][ T29] task:syz-executor state:D stack:21704 pid:5771 ppid:1 flags:0x00004004 [ 491.769223][ T29] Call Trace: [ 491.772749][ T29] [ 491.775826][ T29] __schedule+0x1553/0x45a0 [ 491.788483][ T29] ? asan.module_dtor+0x20/0x20 [ 491.798655][ T29] ? mark_lock+0x94/0x320 [ 491.819653][ T29] ? lock_chain_count+0x20/0x20 [ 491.835460][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 491.856919][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 491.874768][ T29] schedule+0xbd/0x170 [ 491.888077][ T29] io_schedule+0x80/0xd0 [ 491.915474][ T29] folio_wait_bit_common+0x714/0xfa0 [ 491.942191][ T29] ? folio_wait_bit+0x30/0x30 [ 491.965734][ T29] ? filemap_get_entry+0x379/0x3f0 [ 491.975315][ T29] ? _compound_head+0x120/0x120 [ 491.985189][ T29] ? find_lock_entries+0xc3e/0xfe0 [ 491.997456][ T29] __filemap_get_folio+0xbc/0xbb0 [ 492.007893][ T29] truncate_inode_pages_range+0x46b/0xfb0 [ 492.014130][ T29] ? mapping_evict_folio+0x510/0x510 [ 492.021881][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 492.027503][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.032920][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 492.039662][ T29] evict+0x4dd/0x8d0 [ 492.043771][ T29] ? proc_nr_inodes+0x230/0x230 [ 492.050510][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 492.056490][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 492.062174][ T29] evict_inodes+0x606/0x6a0 [ 492.069008][ T29] ? clear_inode+0x150/0x150 [ 492.073778][ T29] generic_shutdown_super+0x97/0x2b0 [ 492.100952][ T29] kill_block_super+0x44/0x90 [ 492.117094][ T29] deactivate_locked_super+0x97/0x100 [ 492.132178][ T29] cleanup_mnt+0x43b/0x4d0 [ 492.142095][ T29] task_work_run+0x1d4/0x260 [ 492.149112][ T29] ? task_work_cancel+0x220/0x220 [ 492.154356][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 492.160541][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 492.174738][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 492.181004][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 492.187032][ T29] do_syscall_64+0x61/0xa0 [ 492.191636][ T29] ? clear_bhb_loop+0x40/0x90 [ 492.199982][ T29] ? clear_bhb_loop+0x40/0x90 [ 492.205047][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.211744][ T29] RIP: 0033:0x7f71b3b9d1d7 [ 492.216775][ T29] RSP: 002b:00007ffe457e6628 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 492.225699][ T29] RAX: 0000000000000000 RBX: 00007f71b3c31c3b RCX: 00007f71b3b9d1d7 [ 492.240307][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe457e66e0 [ 492.252770][ T8253] udevd[8253]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 492.255485][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 492.273060][ T29] RBP: 00007ffe457e66e0 R08: 00007ffe457e76e0 R09: 00000000ffffffff [ 492.281997][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe457e7770 [ 492.290707][ T29] R13: 00007f71b3c31c3b R14: 00000000000542ec R15: 00007ffe457e77b0 [ 492.299215][ T29] [ 492.302483][ T29] [ 492.302483][ T29] Showing all locks held in the system: [ 492.313680][ T29] 1 lock held by khungtaskd/29: [ 492.319123][ T29] #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 492.335657][ T29] 2 locks held by getty/5532: [ 492.345579][ T8253] udevd[8253]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 492.364521][ T29] #0: ffff88814c8e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.374797][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 492.385556][ T29] 1 lock held by syz-executor/5770: [ 492.401703][ T29] #0: ffff888020d620e0 (&type->s_umount_key#63){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 492.413407][ T29] 1 lock held by syz-executor/5771: [ 492.418992][ T29] #0: ffff88807a5460e0 (&type->s_umount_key#63){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 492.429354][ T29] 3 locks held by kworker/u5:7/5785: [ 492.434718][ T29] #0: ffff888054fc1538 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 492.445678][ T29] #1: ffffc9000455fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 492.458816][ T29] #2: ffff88807ab70e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 492.469445][ T29] [ 492.471849][ T29] ============================================= [ 492.471849][ T29] [ 492.489209][ T29] NMI backtrace for cpu 1 [ 492.493627][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 492.500854][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.511101][ T29] Call Trace: [ 492.514397][ T29] [ 492.517347][ T29] dump_stack_lvl+0x18c/0x250 [ 492.522138][ T29] ? show_regs_print_info+0x20/0x20 [ 492.527358][ T29] ? load_image+0x400/0x400 [ 492.531885][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 492.536968][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 492.543203][ T29] ? _printk+0xde/0x130 [ 492.547406][ T29] ? load_image+0x400/0x400 [ 492.551995][ T29] ? load_image+0x400/0x400 [ 492.556605][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 492.562694][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 492.568798][ T29] watchdog+0xf3d/0xf80 [ 492.572981][ T29] ? watchdog+0x1e1/0xf80 [ 492.577327][ T29] kthread+0x2fa/0x390 [ 492.581419][ T29] ? hungtask_pm_notify+0x90/0x90 [ 492.586473][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.591116][ T29] ret_from_fork+0x48/0x80 [ 492.595586][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.600216][ T29] ret_from_fork_asm+0x11/0x20 [ 492.605013][ T29] [ 492.608087][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.615195][ T29] Sending NMI from CPU 1 to CPUs 0: [ 492.620645][ C0] NMI backtrace for cpu 0 [ 492.620657][ C0] CPU: 0 PID: 5127 Comm: klogd Not tainted syzkaller #0 [ 492.620673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.620682][ C0] RIP: 0010:tomoyo_socket_sendmsg_permission+0x0/0x2f0 [ 492.620708][ C0] Code: ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 59 ff ff ff 4c 89 ff e8 f1 75 f9 fd e9 4c ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 48 89 f5 49 [ 492.620722][ C0] RSP: 0018:ffffc90003247ca0 EFLAGS: 00000293 [ 492.620737][ C0] RAX: ffffffff83e60556 RBX: 000000000000006a RCX: ffff88807ef3bc00 [ 492.620750][ C0] RDX: 000000000000006a RSI: ffffc90003247dc0 RDI: ffff88802e5f2400 [ 492.620762][ C0] RBP: dffffc0000000000 R08: ffff88802feecf03 R09: 1ffff11005fdd9e0 [ 492.620774][ C0] R10: dffffc0000000000 R11: ffffed1005fdd9e1 R12: ffffffff8ca74570 [ 492.620787][ C0] R13: ffffffff8ca74588 R14: ffffc90003247dc0 R15: ffff88802e5f2400 [ 492.620800][ C0] FS: 00007fe414e39c80(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 492.620814][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.620826][ C0] CR2: 0000563c837aade0 CR3: 000000002fa09000 CR4: 00000000003506f0 [ 492.620842][ C0] Call Trace: [ 492.620848][ C0] [ 492.620853][ C0] security_socket_sendmsg+0x70/0xa0 [ 492.620875][ C0] __sys_sendto+0x443/0x6b0 [ 492.620902][ C0] ? __ia32_sys_getpeername+0x90/0x90 [ 492.620934][ C0] ? log_buf_vmcoreinfo_setup+0x450/0x450 [ 492.620960][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 492.620981][ C0] ? lock_chain_count+0x20/0x20 [ 492.621010][ C0] __x64_sys_sendto+0xde/0xf0 [ 492.621037][ C0] do_syscall_64+0x55/0xa0 [ 492.621062][ C0] ? clear_bhb_loop+0x40/0x90 [ 492.621079][ C0] ? clear_bhb_loop+0x40/0x90 [ 492.621098][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.621116][ C0] RIP: 0033:0x7fe414f89407 [ 492.621129][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 492.621143][ C0] RSP: 002b:00007ffe11654210 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 492.621159][ C0] RAX: ffffffffffffffda RBX: 00007fe414e39c80 RCX: 00007fe414f89407 [ 492.621171][ C0] RDX: 000000000000006a RSI: 00007ffe11654350 RDI: 0000000000000003 [ 492.621181][ C0] RBP: 00007ffe11654780 R08: 0000000000000000 R09: 0000000000000000 [ 492.621191][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe11654798 [ 492.621202][ C0] R13: 00007ffe11654350 R14: 000000000000004f R15: 00007ffe11654350 [ 492.621221][ C0] [ 492.637686][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 492.637727][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 492.637789][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.637821][ T29] Call Trace: [ 492.637841][ T29] [ 492.637862][ T29] dump_stack_lvl+0x18c/0x250 [ 492.637956][ T29] ? show_regs_print_info+0x20/0x20 [ 492.638023][ T29] ? load_image+0x400/0x400 [ 492.638108][ T29] panic+0x2dc/0x730 [ 492.638167][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 492.638250][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 492.638302][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 492.638389][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 492.638510][ T29] watchdog+0xf7c/0xf80 [ 492.638580][ T29] ? watchdog+0x1e1/0xf80 [ 492.638666][ T29] kthread+0x2fa/0x390 [ 492.638734][ T29] ? hungtask_pm_notify+0x90/0x90 [ 492.638807][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.638861][ T29] ret_from_fork+0x48/0x80 [ 492.638926][ T29] ? kthread_blkcg+0xd0/0xd0 [ 492.638978][ T29] ret_from_fork_asm+0x11/0x20 [ 492.639081][ T29] [ 492.643379][ T29] Kernel Offset: disabled [ 492.992623][ T29] Rebooting in 86400 seconds..