last executing test programs: 5m42.645445136s ago: executing program 2 (id=1261): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0xffffffff, 0x20, 0x2, 0x1, 0xfffffffc, 0x800000}}) 5m42.466411s ago: executing program 2 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a00831300000000000900000000dfff9e00000408000a"], 0x20}}, 0x0) 5m42.142800216s ago: executing program 2 (id=1267): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0, 0x12}, {&(0x7f00000005c0)='r', 0x1}], 0x1}, 0x0) 5m41.38775731s ago: executing program 2 (id=1278): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x380401a, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550dbf02d47ded539aef16b5f1cf677018ad5588131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x617f, &(0x7f0000012640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m40.137089714s ago: executing program 2 (id=1279): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0x1000000f}}) 5m38.465594865s ago: executing program 2 (id=1299): syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2b, 0x354, &(0x7f00000002c0)="$eJzs3TtsW9UbAPDPuYmdRv/+kwGpgsmwVUJVE8QAU6KqSBUZoMjitRBoyiPXVIqFpTDUyQJiBLEgwcTWAcbOiAEBGwMrRUIFxEK3SK24yL439vUDGkBuePx+g/XpnO/zOffkKL6x4uPnVmPrwlxcvHHjeszPV2J29cxq7FdiKWYiidxuAAD/JvtZFj9nudtnv7NwEFWnPC8AYHp6r/8vHh801AZhJeLkF88/fCTzAgCm5zB//ycRj03suDTNmQEA07IfI6//9w11j7zNP9v/nwAA4J/riaefeXRtPeJ8vT4f0Xyz3Wg3ovSW/9rFeDnS2IzTsRi3IvIbhfxuofv4yLn1s6frXd8vRaNb0W5ENDvtRn6nsJb06muxHIuxVNRn/fqkW7/cq69HxG6nN340K+3GXCwU43+zEJuxEotx11h9xLn1syv14gkazYP6TsRezB9cRHf+p2IxvnohLkUaF6JbO5j/5eV6/Uy2PlTfvlLr5QEAAAAAAAAAAAAAAAAAAAAAwDScqvct9c+/yZqd9hvnRxOWhs7HaeTdxflAe/n5QFnt4HSet5LR84GGz+dpN2Zj5kivHAAAAAAAAAAAAAAAAAAAAP4+WjvV2EjTze3Wzutb5aBTann1848+PRajOa8kg5aYzZ9uKKdoi1JVEv3yrF+eJUM5RZBEDJKvXO3PuJxT61/FWHk3qI11VYo5baTp8Xu/e39S1S+DliTGlmU4qBTjl7qa/8+bfqfqt4OV2+Rcy7JsYld3Iu+NV0UlYnbsB/dXgmoRfHb9pbsfaJ14sNf1SXHow8n7F5+89u6HP25tpFEsTZpWt1u3sj89aFLaP5VinXcn7ITJwd6gZW+7tbORfP3TU/e8/eVIcjJ5/2TllteGukrbOE0/Hh29mgfdFTjMlc5N2PyTg2dv9nfvH1/MEx+sbly9/O0Ph60q/ZJwUAcAAAAAAAAAAAAAAAAAANwRpc+KH0r+se6HHo+I6nRnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3zuD7/0vB3ljLYYKbnRjvqm1ut+J/Y8PO9B6PHcEFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwn/RrAAAA//+7Pncd") creat(&(0x7f0000000080)='./file0\x00', 0xc7) 5m37.986515665s ago: executing program 32 (id=1299): syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030342c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c696f636861727365743d757466382c636865636b3d72656c617865642c6e6f6e756d7461696c3d302c757466383d302c757466383d302c696f636861727365743d63703835302c726f6469722c00f7589df4827903b797bd0d41cd1096622f6861b99e643ac4a56749057e9086753fe532edff5327468e2d93feca7e33d47dd56aa048d0856d41769b48b721da9b"], 0x2b, 0x354, &(0x7f00000002c0)="$eJzs3TtsW9UbAPDPuYmdRv/+kwGpgsmwVUJVE8QAU6KqSBUZoMjitRBoyiPXVIqFpTDUyQJiBLEgwcTWAcbOiAEBGwMrRUIFxEK3SK24yL439vUDGkBuePx+g/XpnO/zOffkKL6x4uPnVmPrwlxcvHHjeszPV2J29cxq7FdiKWYiidxuAAD/JvtZFj9nudtnv7NwEFWnPC8AYHp6r/8vHh801AZhJeLkF88/fCTzAgCm5zB//ycRj03suDTNmQEA07IfI6//9w11j7zNP9v/nwAA4J/riaefeXRtPeJ8vT4f0Xyz3Wg3ovSW/9rFeDnS2IzTsRi3IvIbhfxuofv4yLn1s6frXd8vRaNb0W5ENDvtRn6nsJb06muxHIuxVNRn/fqkW7/cq69HxG6nN340K+3GXCwU43+zEJuxEotx11h9xLn1syv14gkazYP6TsRezB9cRHf+p2IxvnohLkUaF6JbO5j/5eV6/Uy2PlTfvlLr5QEAAAAAAAAAAAAAAAAAAAAAwDScqvct9c+/yZqd9hvnRxOWhs7HaeTdxflAe/n5QFnt4HSet5LR84GGz+dpN2Zj5kivHAAAAAAAAAAAAAAAAAAAAP4+WjvV2EjTze3Wzutb5aBTann1848+PRajOa8kg5aYzZ9uKKdoi1JVEv3yrF+eJUM5RZBEDJKvXO3PuJxT61/FWHk3qI11VYo5baTp8Xu/e39S1S+DliTGlmU4qBTjl7qa/8+bfqfqt4OV2+Rcy7JsYld3Iu+NV0UlYnbsB/dXgmoRfHb9pbsfaJ14sNf1SXHow8n7F5+89u6HP25tpFEsTZpWt1u3sj89aFLaP5VinXcn7ITJwd6gZW+7tbORfP3TU/e8/eVIcjJ5/2TllteGukrbOE0/Hh29mgfdFTjMlc5N2PyTg2dv9nfvH1/MEx+sbly9/O0Ph60q/ZJwUAcAAAAAAAAAAAAAAAAAANwRpc+KH0r+se6HHo+I6nRnBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3zuD7/0vB3ljLYYKbnRjvqm1ut+J/Y8PO9B6PHcEFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwn/RrAAAA//+7Pncd") creat(&(0x7f0000000080)='./file0\x00', 0xc7) 4m20.735849376s ago: executing program 4 (id=2136): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m20.55130428s ago: executing program 4 (id=2141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd7) 4m20.323902074s ago: executing program 4 (id=2144): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 4m20.134317967s ago: executing program 4 (id=2148): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1524, &(0x7f0000002280)="$eJzs3AuYTlXbOPD7XmvtMSbpaZLDsNa6N09yWCZJckiSQ5IkSZJTQtIkryQkhpyShiQkhyE5DCE5TEwa5/P5kJAkTZKE5JSs/yX8vb31fu/7fm/f67u+uX/XtS/rfva+1773cz+HvbeZ+a7zkBqNalZtQETwb8GL/yQDQCwADACA6wAgAICy8WXjL6zPKTH539sJ+3M9kna1K2BXE/c/e+P+Z2/c/+yN+5+9cf+zN+5/9sb9z964/4xlZ5umFbiel+y78P3/7Iy///8PySo15qs1pW7sAhDzz6Zw/7M37v//WcE/sxH3P3vj/mdXsVe7APa/AL//s4Mcf3cN9z974/4zlp1d7fvPV3uBSPZ+Dq72648xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWPZw2l+hAODy+GrXxRhjjDHGGGOMsT+Pz3G1K2CMMcYYY4wxxtj/PAQBEhQEEAM5IBZyQhwIALgWcsN1EIHrIR5ugDxwI+SFfJAfCkACFIRCoMGABYIQCkMRiMJNUBRuhmJQHEpASXBQChLhFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0B1ehh7QE5KhF/SGV6AP9IV+0B8GwKswEF6DQfA6pMBgGAJvwFB4E4bBWzAcRsBIeBtGwTswGsbAWBgHqTAeJsC7MBHeg0kwGabAVEiDaTAd3ocZMBNmwQcwGz6EOTAX5sF8SIePYAEshAz4GBbBJ5AJi2EJLIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbAp7ATPoNdsBv2wOewF774F/NP/U1+FwQEFChQocIYjMFYjMU4jMNcmAtzY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIDRokJCyMhTGKUSyKRbEYFsMSWAIdOkzERCyNt2IZLINlsSyWw3JYHitgBayElbAyVsYqWAWrYlWshtWwBtbAe/Fe7IW1sTbWwTpYF+tevj2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yHSZiE7bE9dsAO2BE7YifshJ2xM3bBrtg166UcgC/jy9gTq4le2Bt7Yx9MydEP+2N/fBUH4mv4Gr6OKTgYh+Ab+Aa+icPwJA7HETgSR2Jl8Q6OxjFIYhymYipOwAk4ESfiJJyMk3EqpuE0nI7TcQbOxJn4Ac7GD/FDnItzcT6mYzouwIWYgRm4CE9hJi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+iAsDPcDfuxhTci3txH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hCwjcNPy2+OgXEBUooESNiRKyIFXEiTuQSuURukVtERETEi3iRR+QReUVekV/kFwkiQRQShYQRRpAIYwBAREVUFBVFRTFRTJQQJYQTTiSKRFFalBZlRBlRVtwuyok7RHlRQbR2lUQlUVm0cVXE3aKqqCqqieqihqgpaopaopaoLWqLOqKOqCvqinriIVFf9MJ++Ii40JlGYjA2FkOwiWgq5KVPsJZiGLYSrUUb8ZQYgcOxnWjpksSzor0YjR3EX8QYfF50EuOws3hRdBFdRTfxkuguWrkeoqeYhL1EbzEV+4i+op/oL2ZgdfEBzs5ZQ7wuUsRgMUS8Iebjm2KYeEsMFyPESPG2GCXeEaPFGDFWjBOpYryYIN4VE8V7YpKYLKaIqSJNTBPTxftihpgpZokPxGzxoZgj5op5Yr5IFx+JBWKhyBAfi0XiE5EpFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iU7FTfCZ2id1ij/hc7BVfiH3iS7FffCUOiK9FlvhGHBTfikPiO3FYfC+OiB/EUXFMHBc/ihPiJ3FSnBKnxRlxVvwszolfxHnhBUiUQkqpZCBjZA4ZK3PKOHmNzCWDS8/u9TJe3iDzyBtlXplP5pcFZIIsKAtJLY20kmQoC8siMipvkkXlzbKYLC5LyJLSyVIyUd4iS8tbZRl5mywrb5fl5B2yvKwgK8pK8k5ZWd4lIXJxH9VkdVlD1pT3ymS4T9aW98s68gFZVz4o68mHZH35sGwgH5EN5aOykXxMNpaPyyayqWwmm8sW8gnZUj4pW8nWso18SraVT8t28hmZJJ+V7aW/9BJ5XnaSL8jO8kXZRXaV3eQv8rz0sofsKaEXyN7yFdlH9pX9ZH85QL4qB8rX5CD5ukyRg+UQ+YYcKt+Uw+RbcrgcIUfKt+Uo+Y4cLcfIsXKcTJXj5QT5rpwo35OT5GQ5RU6VaXKa7HdppllS/sP8d/8gf9Cve98oN8nNcovcKrfJ7XKH/FTulDvlLrlL7pF75F65V+6T++R+uV8ekAdklsySB+VBeUgekoflYXlEHpFH5TF5Rv4oT8if5El5Sp6SZ+RZeVaeu/QcgEIllFRKBSpG5VCxKqeKU9eoXOpalVtdpyLqehWvblB51I0qr8qn8qsCKkEVVIWUVkZZRSpUhVURFVU34aUXjCqhSiqnSqlEdcu/kq+KqptVMVX8N/mX60v+O/W1UC1US9VStVKtVBvVRrVVbVU71U4lqSTVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVTXVT3VV31UP1UMkqWfVWr6g+qq/qp/qrAepVNVANVIPUIJWiUtQQNUQNVUPVMDVMDVfD1Ug1Uo1So9RoNVqNVWNVqkpVE9QENVFNVJPUJDVFTVFpKk1NV9PVDDVDzVKz1Gw1W81Rc9Q8NU+lq3S1QC1QGSpDLVKLVKZarBarpWqpWq6Wq5VqpVqtVqu1aq1ar9arTLVJbVJb1Ba1TW1TO9QOtVPtVLvULrVH7VF71V61T+1T+9V+dUAdUFkqSx1UB9UhdUgdVofVEXVEHVVH1XF1XJ1QJ9RJdVKdVqfVWXVWnVPn1Hl1/sJpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4MYgb5AvyB8UCBKCgkGhQAcmsIG41PRocFNQNLg5KBYUD0oEJQMXlAoSg1uC0sGtQZngtqBscHtQLrgjKB9UCCoGlYI7g8rBXUGV4O6ganBPUC2oHtQIagb3BrWC+4Lawf1BneCBoG7wYFAveCioHzwcNAgeCRoGjwaNgseCxsHjQZOgadAsaB60+FPn9/5kviddD91TJ+teurd+RffRfXU/3V8P0K/qgfo1PUi/rlP0YD1Ev6GH6jf1MP2WHq5H6JH6bT1Kv6NH6zF6rB6nU/V4PUG/qyfq9/QkPVlP0VN1mp6mp+v39Qw9U8/SH+jZ+kM9R8/V8/R8na4/0gv0Qp2hP9aL9Cc6Uy/WS/RSvUwv1yv0Sr1Kr9Zr9Fq9Tq/XG/RGvUlv1lv0Vr1Nb9c79Kd6p/5M79K79R79ud6rv9D79Jd6v/5KH9Bf6yz9jT6ov9WH9Hf6sP5eH9E/6KP6mD6uf9Qn9E/6pD6lT+sz+qz+WZ/Tv+jz2l84ub/w9W6UUSbGxJhYE2viTJzJZXKZ3Ca3iZiIiTfxJo/JY/KavCa/yW8STIIpZAqZC8iQKWwKm6iJmqKmqClmipkSpoRxxplEk2hKm9KmjCljypqyppwpZ8qb8qaiqWjuNHeau8xd5m5zt7nH3GOqm+qmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZRqaxaWyamCammWlmWpgWpqVpaVqZVqaNaWPamramnWlnkkySaW/amw6mg+loOppOppPpbDqbLqaL6Wa6me6mu+lhephkk2x6m96mj+lj+pl+ZoAZYAaagWaQGWRSTIoZYoaYoWaoGWaGmeFmhBl54UTVvGNGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbBWaByTAZZpFZZDJNpllilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSZLHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnzUlz2pw2Z02+S9+X3sTanDbOXmNz2Wttbnud/ds4vy1gE2xBW8hqm9fm+01srLXFbHFbwpa0zpayifaW38XlbQVb0Vayd9rK9i5b5XdxLXufrW3vt3XsA7amvfc3cV37oK1nH7P1EQFsU9vQNreN7GO2sX3cNrFNbTPb3La1T9t29hmbZJ+17e1zv4sX2IV2lV1t19i1dpfdbU/bM/aQ/c6etT/bHranHWBftQPta3aQfd2m2MG/i0fat+0o+44dbcfYsXbc7+IpdqpNs9PsdPu+nWFn/i5Otx/Z2TbDzrFz7Tw7/9f4Qk0Z9mO7yH5iM20AS+xSu8wutyvsyv9f61K73m6wG+1O+5ndYrfabXa73XH5RNjutnvs53av/cIetN/a/fYre8Aetln2m1/jC8d32H5vj9gf7FF7zB63P9oT9id1OfvCsf9of7HnrbdASECSFAUUQzkolnJSHF1Duehayk3XUYSup3i6gfLQjZSX8lF+KkAJVJAKkSZDlohCKkxFKEo30eXySlBJclSKEukWKk23Uhm6jcrS7VSO7qDyVIEqUiW6kyrTXVSF7qaqdA9Vo+pUg2rSvVSL7qPadD/VoQeoLj1I9eghqk8PUwN6hBrSo9SIHqPG9Dg1oabUjJpTC3qCWtKT1IpaUxt6itrS09SOnqEkepba03PUgf5CHel56kQvUGd6kbpQV+pGL1F3epl6UE9Kpl7Um16hPtSX+lF/GkCv0kB6jQbR65RCg2kIvUFD6U0aRm/RcBpBI+ltGkXv0GgaQ2NpHKXSeJpA79JEeo8m0WSaQlMpjabRdHqfZtBMmkUf0Gz6kObQXJpH8ymdPqIFtJAy6GNaRJ9QJi2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20XbaQZ/STvqMdtFu2kOf0176gvbRl7SfvqID9DVl0Td0kL6lQ/QdHabvfU/6gY7SMTpOP9IJ+olO0ik6TWfoLP1M5+gXOk+eIMRQhDJUYRDGhDnC2DBnGBdeE+YKrw1zh9eFkfD6MD68IcwT3hjmDfOF+cMCYUJYMCwU6tCENqQwDAuHRcJoeFNYNLw5LBYWD0uEJUMXlgoTw1vC0uGtYZnwtrBseHtYLrwjLB9WCB97oFJ4Z1g5vCusEt4dVg3vCauF1cMaYc3w3rBWeF9YO7w/rBM+EJYJHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2Dh8PGwSNg2bhc3DFuETYcvwybBV2DpsEz4Vtg2fDtuFz4RJ4bNh+/C5X9c/uPDvr08Oe4W9w1fCV0Lv75fzovOj6dGPoguiC6MZ0Y+ji6KfRDOji6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohuj3tfMAQ6dcNIpF7gYl8PFupwuzl3jcrlrXW53nYu46128u8HlcTe6vC6fy+8KuARX0BVy2hlnHbnQFXZFXNTd5Iq6m10xV9yVcCWdc6VcomvuWrgWrqV70rVyrV0b95R7yj3tnnbPuGfcs669e851cH9xHd3zrpN7wb3gXnRdXFfXzb3kurvxuS++J5Ndb9fb9XF9XD/Xzw1wA9xAN9ANcoNciktxQ9wQN9QNdcPcMDfcDXcj3Ug3yo1yo91oN9aNdaku1U1wE9xEN9FNcpPcFDfFpbk0N91NdzPcDFd55sW9zHFz3Dw3z6W7dLfAXThnzHCL3CKX6TLdErfELXPL3Aq3wq1yq9wat8atc+vcBrfBbXKb3Ba3xW1z29wOt8PtdDvdLn/dxUndXrfP7XP73X53wH3tstw37qD71h1y37nD7nt3xP3gjrpj7rj70Z1wP7mT7pQ77c64s+5nd8794s4771Ij4yMTIu9GJkbei0yKTI5MiUyNpEWmRaZH3o/MiMyMzIp8EJkd+TAyJzI3Mi8yP5Ie+SiyILIwkhH5OLIo8kkkM7I4siSyNLIssjzifcEtoS/si/iov8kX9Tf7Yr64L+FLeudL+UR/iy/tb/Vl/G2+rL/dl/N3+PK+gq/oH/dNfFPfzDf3LfwTvqV/0rfyrX0b/5Rv65/27fwzPsk/69v753wH/xff0T/vO/kXfGf/ou/iu/pu/iXf3b/se/iePtn38r39K76P7+v7+f5+gH/VD/Sv+UH+dZ/iB/sh/g0/1L/ph/m3/HA/wo+MeduPunyJDON8qh/vJ/h3/UT/np/kJ/spfqpP89P8dP++n+Fn+ln+Az/bf+jn+Ll+np/v0/1HfoFf6DP8x36R/8Rn+sWXbyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+U7/Tf+Z3+d1+j//c7/Vf+H3+S7/ff+UP+K99lv/GH/Tf+kP+O3/Yf++P+B/8UX/MH/c/+hP+J3/Sn/Kn/Rl/1v/sz/lf/Hn+nTXGGGOMsX/K+CtD8ds1F2/n9/qDHPFXG/cGgGu3Fsj66/UXzijX5b047isS2kYA4NmenR+5vFSrlpycfGnbTAlBkbkAl/8n6IIYuBIvhjbwNCRBayj9h/X3FV3P0j+YP3o7QNxf5cTClfjK/F8CYPIfzP/EUyMXlAtPx/8X888FKFbkSk5OuBIvhja/3l9pDWX+Tv35Wv6D+nN+lQrQ6q9ycsGV+Er9ifAkPAdJv9mSMcYYY4wxxhi7qK+o2PHy9efln/j8o+vzBHUlJwdcif/R9TljjDHGGGOMMcauvue7dnvmiaSk1h3/9UGV/1bWPz1oDP9TM/PgDwfeA1x+RAHAvzkhwIWB/E8exeb/yL5SLr11/nbVsjM+gP8drfwzBlf5g4kxxhhjjDH2p7ty0v/bx9XVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/TuxqHyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//9IVQM5") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 4m19.741015745s ago: executing program 4 (id=2154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000000020104000000000000000002000000300001802c00018014000300fe88000000000000000000000000000114000400fe800000000000000000000000000daa240003800c00028005000100890000001400018008000100e000000108000200ffffffff2400028014000180080001"], 0x8c}, 0x1, 0x0, 0x0, 0x4c050}, 0x4) 4m19.177528766s ago: executing program 4 (id=2160): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 4m18.786534543s ago: executing program 33 (id=2160): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 4.089969423s ago: executing program 0 (id=5306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000000080012"], 0x44}, 0x1, 0x0, 0x0, 0x3d633ef5b9448d59}, 0x0) 3.743259329s ago: executing program 0 (id=5310): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x144) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.476133074s ago: executing program 0 (id=5315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)='\x00'/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x28) 3.289802948s ago: executing program 0 (id=5318): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ff1a59e117a07cd59231373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000001b00)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRES8=0x0], 0x5, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.003029533s ago: executing program 0 (id=5321): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000003c0)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@usrquota}]}, 0x4, 0x9680, &(0x7f000001c340)="$eJzs3QeUXWXBeP07CaGXEFARRaMGwYJUKYKaBEhAAZEi2AEpohQFVLBiQRQbWLAXepGmFAGlWUGkW0AREFCRIoiFFsi3JplACBvE933/H+ree62Zc++555557vM7ZQazlltO2XTyYDDvYGbjB3N21pVTp429fKNbDttm0SNXPPGOAx684YSJI8tJI8vJg8Fg1MjLQzPXjRucdPKowVwz1j/QAvPNP7TQYLDSyNOR/QxWm7lY6JJZ202fozkHOvTAt/1mfs1okeEfMfzg4AP2OWQwGIyd7f1Dg8HQ3g/5oNK2nDR1ygNW97sNW40ZeTz719wzvxY6fzBY6NQBHx+zbzv0GHyk4Z+597PPHLPRY/Cz/+PactLU9efwHz4XR4+sW234HJ/zHDQ253F+09JbrTEyhTOOt8Fg+BL3oHPlP6ItJ03ZYPDw1/nBYWueu9/0mdfNeQYzbxTzDQaD+Ueurws+1i71v2vS5JVn3LNnPR9hn3Us703HxTGvO/6+4Zv0YDBYbDAYt96se0FVVVX9ZzRp8sprw/1/3ke6/59wwpKndv+vqqr6z239SZNXHr7Xz3H/X/CR7v+7LXneB2b+t/+Jq818132P7Yeoqqqqf6kp6+P9f+wj3f9XW/uiDbr/V1VV/ee2yYYz7v8LznH/X/yR7v+vPn7NpUa2m/V7w72z7XJotv894Z7Z1o+ebf3ds60fM9t+Zt9+7tnW3znb+nmGX4Ptxw8G42b9e8FpD6weN374tZH1d822fuID/05nwjqzrZ802/ops62fPDLW4fVTZ1s/dbbt13uEqa6qqvq3aZOVp6w9mO3f2Y+sXmLW63T/P+e0q5Z7rMZbVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV/5ndd8vpZw4Gg6HBYDBqMJg2GHk8+3Iwffr06cPPTzj74osfs4H+ezR01pVTp429fKNbDttm0SNXPPGOAx6Ypf/Y/vM/Qf1vGvaf9+jxg8Eumz/WQ6nHoM5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7G/Yf/VgPoh6zOv/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uvltOP3PkGBg1GEwbjDzee9bytP1f9ZqRTdfY4sTbDnzgnRMm7jjy6Kwrp07b8TEY+2PQ0PBnHXv5Rrccts2iR6544h0H/BecPf/5n6D+N83w33FoMBg5v8cOn8sbTdpks2UHg8GBt524xaqD+19bffi1NceNHoye8dZlZ3xfdwLveO/1Zi4nDn9b/P59nDBj/+tPP2j00ByDmK0XnnXtYW/c8o5V5lwu8/CfY9SsB4dcfcrt06dPn/6glSPN+zBvnrX/WZ9lzvN8ZOzLDo99+T12fsvyu+/1zuV23HnrHbbbYbtdVlx59VVWXWnFVdd4/vLb77jTdivM/P4wczZ+xve1H82cLTjnnN0yafY5m/OzPdycjX/kOZuxx2nvHNps1pzN9S/O2dqPPGfjdxz5QRMmjhlsNWNqhgaDCeuMGew5/GTFeQaDCeuObLvE8LZrjRs1GOz/wAcdfjTP/cfg0N7D22w5ZdPJD4zsoZ/wIdfpB204YeLIctLIcvLMIY4fPHAojhucdPKo4bl40DQvMN/8QwsNBiuNPB3Zz2CNkVe/MWu76XM050CHHvi238yvGS0yvJPhB29a4fQrhs/FOd7//6L/0fX/IV6rD90/UUMjXyPbzPSaNHX9B37WjGkYnrvRI+tWGzaZc87+L3vIeMfPNRj7COOdsv7klYdXzzH/s96Cx9etS5/7rpnH1sTVZr7rvv8xCo13wUcY7/qTcLwLPtJ4j373hSfP3NX/2XjnuNZtMOP7xEdzrRs88rVuNO1guwuWmvNa99KHH+KDzuNZczTPHBs93LVuz8+vtPfw/ic+8rVug+Gxj3nQtW7UYDBh7VnXuuEL35Qxg/2Hn6w0/GTqmMGRw09WnvFkvsHZw0+e94Zdd9p2eMV6s+ZkheH9Thw3NMP93NVuXGb6Z6ZPX2dkLBPHPXisI8fH+Nnv55PGzZzMWe+dtd/hTWft94YnzHxtysh+J/0L+531XhrvbYvMfG3qyH4nz7HfMY+w31nvfcj5sOzQ/Reuh7neTJnjejPyN86sH/egr7lnfi10/mCw0KnkO8e2//SaSefvvI8w3kmTV157eHxznL/3H450/l449fLhe8VCg8FgscFg3Hqzxv4vNvRw453rkcc7GcY71yON99Kjdt7w/2C8g9nG+6DjbMtNZh4r640cZ1P/heN31nvnvI6NmfHqzMv+eo/mOjb+Idex948eNcdkz9bD/c62LWw/8/ESD/yee+VxR8ya+zFz7Pef/c4222cZguvY2Dn+nh+13jWDIZrzvY9e66Khzz7ynI8ZPPhvi1lzPuu9jzTnUx/NnD/5kef80f6evOwzZr4+Zo7xzz7nG3/8SR+bNedzz7HffzbnUx/53vHQOZ84GENzvsLdM+ftka6nDzfns947a86HP+Ka4+YarDt8zxqZ8ymPZs6X+L85zueH7Wc+3u7+VWccduIrZs35nHP8z+Z8yr865+PvP84nzHjt6aMGc8892HPrPfbYbcWZ32c9XWnmd74W3XnlzHl+pHvpwxnNeu8jnRfrPBqjsY/KaOifGS0518MZPXBqHbrrbo//n16L1vlXjQZ8Lbr8iJnz9ki/Fz3cnM96L90HF5/t/XP+HbrJhjN+715wjvvgrLfgffCM0zbYd9YuR9527xzDnHVfvWe29aNnW3/3bOvHzLaf2befe7b1d862fvgjzD3b9rNYxw//zTuyftoDm48b/uVp/Mj6u2ZbP/GB905YZ7b1k2ZbP2W29ZMfODQmTJ1t/dTZtl9v8C82679J7zjnRb4ebf33X3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLuu+X0M0eOgVGDwbTBzMdDI8vB3kMb3/zi4eVgMBiz2rHTN36sx/sYN3TWlVOnjb18o1sO22bRI1c88Y4D/gvOnv/8T1D/m2b47zg0GIyc32N3HAwGG03aZLNlB4PBxtOPXW3U4P7Xlhh+ba1xowaD/YcetIN57t9maO/hbbacsunkwWDekS3GP+SHPuQ8etCGEyaOLCeNLCfPvD6NHzxwvI4bnHTyqMFcM9Y/0ALzzT+00GCw0sjTkf0MVpu5WOiSWdtNn6M5Bzr0wLf9Zn7NaJHhHzH8YM8dpj5leK7meP+/TbOu1TuO+qebdv67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83f1r/h0t/20l6i5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eWvbmjm/7trWev8d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd/c/9d5/r/3Qg9ZjU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MXdd8vpZ44cA6MGg2mDmY+H9h5ZDoaOP+lZI4fImL0uO/ygx3q8j3FDZ105ddrYyze65bBtFj1yxRPvOOC/4Oz5z/8E9b9phv+OQ4PByPk9dsfBYLDRpE02W3YwGBx0+GV7jRrc/9oSw6+tNW7UYLD/0IN2MM/92wztPbzNllM2nTwYzDuyxfiH/NCHnEcP2nDCxJHlpJHl5JnXp/GDB47XcYOTTh41mGvG+gdaYL75hxYaDFYaeTqyn8FqMxcLXTJru+lzNOdAhx74tt/MrxktMvwjhh/ss+CVxw/P1Rzv/7dp1rV6x1H/dNPOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hd33y2nnzlyDIwaDKYNZj4eNbIc2vv669672fBy+Pmi6+175WM93se4obOunDpt7OUb3XLYNoseueKJdxzwX3D2/Od/gvrfNOw/79HjB4NdNn+sh1KPQZ3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+6+W04/c+ThqAfWjtq74wIbOuvKqdPGXr7RLYdts+iRK554xwGP9YD+tz2M//vzxyz+H8gfs/h/MH/M4v+h/DGL/z75Yxb/D+ePWfz3zR+z+H8kf8zi/9H8MYv/fvljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/PfPH7P4H5A/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvE/MH/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4fzN/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/L+VP2bx/3b+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfy/kz9m8T81f8zif1r+mMX/9Pwxi/9388cs/t/LH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv/v549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bxPzd/zOJ/Xv6Yxf+n+WMW//Pzxyz+P8sfs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfwvzx+z+F+RP2bx/3X+mMX/N/ljFv8r88cs/r/NH7P4X5U/ZvG/On/M4n9N/pjF/3f5Yxb/a/PHLP7X5Y9Z/K/PH7P4/z5/zOL/h/wxi/8f88cs/jfkj1n8/5Q/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv8/549Z/G/NH7P435Y/ZvH/S/6Yxf/2/DGL/1/zxyz+f8sfs/j/PX/M4v+P/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvGflj9m8b83f8zif1/+mMV/ev6YxH/0IH/M4j+UP2bxH5U/ZvEfnT9m8Z8rf8ziPyZ/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/2Pwxi/+i+WMW/3H5Yxb/xfLHLP6L549Z/B+XP2bxf3z+mMX/CfljFv8l8scs/k/MH7P4L5k/ZvF/Uv6Yxf/J+WMW/6Xyxyz+T8kfs/g/NX/M4j8+f8zi/7T8MYv/0/N/SHONLA3+z8gfs5z/E/LHLP5L549Z/J+ZP2bxXyZ/zOK/bP6Yxf9Z+WMW/2fnj1n8n5M/ZvF/bv6YxX+5/DGL//Pyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL//Pzxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOL/gvwxi/+a+WMW/7Xyxyz+L8wfs/i/KH/M4v/i/DGL/8T8MYv/pPwxi//k/DGL/9r5Yxb/dfLHLP7r5o9Z/Kfkj1n8p6r8Rz/qLS3+66n8H30W//Xzxyz+L8kfs/i/NH/M4r9B/pjFf8P8MYv/RvljFv+X5Y9Z/DfOH7P4vzx/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP6vyB+z+G+RP2bx3zJ/zOL/yvwxi/+r8scs/q/OH7P4vyZ/zOL/2vwxi//r8scs/q/PH7P4b5U/ZvHfOn/M4r9N/pjF/w35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/Y/6YxX/H/DGL/5vyxyz+b84fs/jvlD9m8d85f8ziv0v+mMV/1/wxi/9b8scs/m/NH7P475Y/ZvHfPX/M4r9H/pjF/235Yxb/t+ePWfzfkT9m8d8zf8ziv1f+mMX/nfljFv935Y9Z/N+dP2bxf0/+mMX/vfljFv/35Y9Z/PfOH7P4vz9/zOL/gfwxi/8H88cs/h/KH7P475M/ZvH/cP6YxX/f/DGL/0fyxyz+H80fs/jvlz9m8f9Y/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf//8MYv/AfljFv9P549Z/D+TP2bx/2z+mMX/c/ljFv8D88cs/p/PH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/N/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/1v5Yxb/b+ePWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf87+WMW/1Pzxyz+p+WPWfxPzx+z+H83f8zi/738MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/c/PHLP7n5Y9Z/H+aP2bxPz9/zOL/s/wxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/y/DGL/xX5Yxb/X+ePWfx/kz9m8b8yf8zi/9v8MYv/VfljFv+r88cs/tfkj1n8f5c/ZvG/Nn/M4n9d/pjF//r8MYv/7/PHLP5/yB+z+P8xf8zif0P+mMX/T/ljFv8b88cs/jflj1n8b84fs/jfkj9m8f9z/pjF/9b8MYv/bfljFv+/5I9Z/G/PH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9p+WMW/3vzxyz+9+WPWfyn549J/Oca5I9Z/Ifyxyz+o/LHLP6j88cs/nPlj1n8x+SPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvEfmz9m8V80f8ziPy5/zOK/WP6YxX/x/DGL/+Pyxyz+j88fs/g/IX/M4r9E/pjF/4n5Yxb/JfPHLP5Pyh+z+D85f8ziv1T+mMX/KfljFv+n5o9Z/Mfnj1n8n5Y/ZvF/ev6Yxf8Z+WMW/wn5Yxb/pfPHLP7PzB+z+C+TP2bxXzZ/zOL/rPwxi/+z88cs/s/JH7P4Pzd/zOK/XP6Yxf95+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6Yxf/5+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxf0H+mMV/zfwxi/9a+WMW/xfmj1n8X5Q/ZvF/cf6YxX9i/pjFf1L+mMV/cv6YxX/t/DGL/zr5Yxb/dfPHLP5T8scs/lPzxyz+6+WPWfzXzx+z+L8kf8zi/9L8MYv/BvljFv8N88cs/hvlj1n8X5Y/ZvHfOH/M4v/ywcX5Qxb/TTr/MYv/pvljFv/N8scs/pvnj1n8X5E/ZvHfIn/M4r9l/pjF/5X5Yxb/V+WPWfxfnT9m8X9N/pjF/7X5Yxb/1+WPWfxfnz9m8d8qf8ziv3X+mMV/m/wxi/8b8scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/8b8MYv/jvljFv835Y9Z/N+cP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/t+SPWfzfmj9m8d8tf8ziv3v+mMV/j/wxi//b8scs/m/PH7P4vyN/zOK/Z/6YxX+v/DGL/zvzxyz+78ofs/i/O3/M4v+e/DGL/3vzxyz+78sfs/jvnT9m8X9//pjF/wP5Yxb/D+aPWfw/lD9m8d8nf8zi/+H8MYv/vvljFv+P5I9Z/D+aP2bx3y9/zOL/sfwxi//H88cs/p/IH7P4fzJ/zOL/qfwxi//++WMW/wPyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+B+aPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2/mj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+38scs/t/OH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/d/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf97+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/ufmj1n8z8sfs/j/NH/M4n9+/pjF/2f5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/5fljFv8r8scs/r/OH7P4/yZ/zOJ/Zf7DTR89xwqL/2/zxyz+V+WPWfyvzh+z+F+TP2bx/13+mMX/2vwxi/91+WMW/+vzxyz+v88fs/j/IX/M4v/H/DGL/w35Yxb/P+WPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/P+WMW/1vzxyz+t+WPWfz/kj9m8b89f8zi/9f8MYv/3/LHLP5/zx+z+P8jf8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfyn5Y9Z/O/NH7P435c/ZvGfnj8m8R8zyB+z+A/lj1n8R+WPWfxH549Z/OfKH7P4j8kfs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOI/Nn/M4r9o/pjFf1z+mMV/sfwxi//i+WMW/8flj1n8H58/ZvF/Qv6YxX+J/DGL/xPzxyz+S+aPWfyflD9m8X9y/pjFf6n8MYv/U/LHLP5PzR+z+I/PH7P4Py1/zOL/9Pwxi/8z8scs/hPyxyz+S+ePWfyfmT9m8V8mf8ziv2z+mMX/WfljFv9n549Z/J+TP2bxf27+mMV/ufwxi//z8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi//z88cs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/4L8MYv/mvljFv+18scs/i/MH7P4vyh/zOL/4vwxi//E/DGL/6T8MYv/5Pwxi//a+WMW/3Xyxyz+6+aPWfyn5I9Z/Kfmj1n818sfs/ivnz9m8X9J/pjF/6X5Yxb/DfLHLP4b5o9Z/DfKH7P4vyx/zOK/cf6Yxf/l+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bxf0X+mMV/i/wxi/+W+WMW/1fmj1n8X5U/ZvF/df6Yxf81+WMW/9fmj1n8X5c/ZvF/ff6YxX+r/DGL/9b5Yxb/bfLHLP5vyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/xvzxyz+O+aPWfzflD9m8X9z/pjFf6f8MYv/zvljFv9d8scs/rvmj1n835I/ZvF/a/6YxX+3/DGL/+75Yxb/PfLHLP5vyx+z+L89f8zi/478MYv/nvljFv+98scs/u/MH7P4vyt/zOL/7vwxi/978scs/u/NH7P4vy9/zOK/d/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX+f/DGL/4fzxyz+++aPWfw/kj9m8f9o/pjFf7/8MYv/x/LHLP4fzx+z+H8if8zi/8n8MYv/p/LHLP77549Z/A/IH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4H5g/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/L+ZP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fyh+z+H87f8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+38kfs/ifmj9m8T8tf8zif3r+mMX/u/ljFv/v5Y9Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+J+bP2bxPy9/zOL/0/wxi//5+WMW/5/lj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+P88fs/j/In/M4v/L/DGL/6/yxyz+l+ePWfyvyB+z+P86f8zi/5v8MYv/lfljFv/f5o9Z/K/KH7P4X50/ZvG/Jn/M4v+7/DGL/7X5Yxb/6/LHLP7X549Z/H+fP2bx/0P+mMX/j/ljFv8b8scs/n/KH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/n/PHLP635o9Z/G/LH7P4/yV/zOJ/e/6Yxf+v+WMW/7/lj1n8/54/ZvH/R/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P4T8sfs/jfmz9m8b8vf8ziPz1/TOI/9yB/zOI/lD9m8R+VP2bxH50/ZvGfK3/M4j8mf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/9j8MYv/ovljFv9x+WMW/8Xyxyz+i+ePWfwflz9m8X98/pjF/wn5Yxb/JfLHLP5PzB+z+C+ZP2bxf1L+mMX/yfljFv+l8scs/k/JH7P4PzV/zOI/Pn/M4v+0/DGL/9Pzxyz+z8gfs/hPyB+z+C+dP2bxf2b+mMV/mfwxi/+y+WMW/2flj1n8n50/ZvF/Tv6Yxf+5+WMW/+Xyxyz+z8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+z88fs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/8L8scs/mvmj1n818ofs/i/MH/M4v+i/DGL/4vzxyz+E/PHLP6T8scs/pPzxyz+a+ePWfzXyR+z+K+bP2bxn5I/ZvGfmj9m8V8vf8ziv37+mMX/JfljFv+X5o9Z/DfIH7P4b5g/ZvHfKH/M4v+y/DGL/8b5Yxb/l+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6Yxf8V+WMW/y3yxyz+W+aPWfxfmT9m8X9V/pjF/9X5Yxb/1+SPWfxfmz9m8X9d/pjF//X5Yxb/rfLHLP5b549Z/LfJH7P4vyF/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP5vzB+z+O+YP2bxf1P+mMX/zfljFv+d8scs/jvnj1n8d8kfs/jvmj9m8X9L/pjF/635Yxb/3fLHLP67549Z/PfIH7P4vy1/zOL/9vwxi/878scs/nvmj1n898ofs/i/M3/M4v+u/DGL/7vzxyz+78kfs/i/N3/M4v++/DGL/975Yxb/9+ePWfw/kD9m8f9g/pjF/0P5Yxb/ffLHLP4fzh+z+O+bP2bx/0j+mMX/o/ljFv/98scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4758/ZvE/IH/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4n9g/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvH/Zv6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4fyt/zOL/7fwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8nf8zif2r+mMX/tPwxi//p+WMW/+/mj1n8v5c/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/bv6Yxf+8/DGL/0/zxyz+5+ePWfx/lj9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+eP2bxvyJ/zOL/6/wxi/9v8scs/lfmj1n8f5s/ZvG/Kn/M4n91/pjF/5r8MYv/7/LHLP7X5o9Z/K/LH7P4X58/ZvH/vcp/zKPe0uL/B5X/o8/i/8f8MYv/DfljFv8/5Y9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/8/5Yxb/W/PHLP635Y9Z/P+SP2bxvz1/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/Kflj1n8780fs/jflz9m8Z+ePybxn2eQP2bxH8ofs/iPyh+z+I/OH7P4z5U/ZvEfkz9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX9s/pjFf9H8MYv/uPwxi/9i+WMW/8Xzxyz+j8sfs/g/Pn/M4v+E/DGL/xL5Yxb/J+aPWfyXzB+z+D8pf8zi/+T8MYv/UvljFv+n5I9Z/J+aP2bxH58/ZvF/Wv6Yxf/p+WMW/2fkj1n8J+SPWfyXzh+z+D8zf8ziv0z+mMV/2fwxi/+z8scs/s/OH7P4Pyd/zOL/3Pwxhf+EwTzL5Y8p/AeDeZ6XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/J+fP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/F+SPWfzXzB+z+K+VP2bxf2H+mMX/RfljFv8X549Z/Cfmj1n8J+WPWfwn549Z/NfOH7P4r5M/ZvFfN3/M4j8lf8ziPzV/zOK/Xv6YxX/9/DGL/0vyxyz+L80fs/hvkD9m8d8wf8ziv1H+mMX/ZfljFv+N88cs/i/PH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/K/LHLP5b5I9Z/LfMH7P4vzJ/zOL/qvwxi/+r88cs/q/J/6ENT4jE/7X5Y5bz/3X5Yxb/1+ePWfy3yh+z+G+dP2bx3yZ/zOL/hvwxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+L8xf8ziv2P+mMX/TfljFv83549Z/HfKH7P475w/ZvHfJX/M4r9r/pjF/y35Yxb/t+aPWfx3yx+z+O+eP2bx3yN/zOL/tvwxi//b88cs/u/IH7P475k/ZvHfK3/M4v/O/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+e+ePWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfz3yR+z+H84f8ziv2/+mMX/I/ljFv+P5o9Z/PfLH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOK/f/6Yxf+A/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/4H5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+b+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOL/rfwxi/+388cs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/538MYv/qfljFv/T8scs/qfnj1n8v5s/ZvH/Xv6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+5+WMW//Pyxyz+P80fs/ifnz9m8f9Z/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3n+mMX/ivwxi/+v88cs/r/JH7P4X5k/ZvH/bf6Yxf+q/DGL/9X5Yxb/a/LHLP6/yx+z+F+bP2bxvy5/zOJ/ff6Yxf/3+WMW/z/kj1n8/5g/ZvG/IX/M4v+n/DGL/435Yxb/m/LHLP43549Z/G/JH7P4/zl/zOJ/a/6Yxf+2/DGL/1/yxyz+t+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/7T8MYv/vfljFv/78scs/tPzxyT+8w7yxyz+Q/ljFv9R+WMW/9H5Yxb/ufLHLP5j8scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+I/NH7P4L5o/ZvEflz9m8V8sf8ziv3j+mMX/cfljFv/H549Z/J+QP2bxXyJ/7H0S/yfmj1nO/yXzxyz+T8ofs/g/OX/M4r9U/pjF/yn5Yxb/p+aPWfzH549Z/J+WP2bxf3r+mMX/GfljFv8J+WMW/6Xzxyz+z8wfs/gvkz9m8V82f8zi/6z8MYv/s/PHLP7PyR+z+D83f8ziv1z+mMX/efljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMX/+fljFv9V88cs/qvlj1n8V88fs/ivkT9m8X9B/pjFf838MYv/WvljFv8X5o9Z/F+UP2bxf3H+mMV/Yv6YxX9S/pjFf3L+mMV/7fwxi/86+WMW/3Xzxyz+U/LHLP5T88cs/uvlj1n8188fs/i/JH/M4v/S/DGL/wb5Yxb/DfPHLP4b5Y9Z/F+WP2bx3zh/zOL/8vwf0rwi/03yxyz+m+aPWfw3yx+z+G+eP2bxf0X+mMV/i/wxi/+W+WMW/1fmj1n8X5U/ZvF/df6Yxf81+WMW/9fmj1n8X5c/ZvF/ff6YxX+r/DGL/9b5Yxb/bfLHLP5vyB+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/xvzxyz+O+aPWfzflD9m8X9z/pjFf6f8MYv/zvljFv9d8scs/rvmj1n835I/ZvF/a/6YxX+3/DGL/+75Yxb/PfLHLP5vyx+z+L89f8zi/478MYv/nvljFv+98scs/u/MH7P4vyt/zOL/7vwxi/978scs/u/NH7P4vy9/zOK/d/6Yxf/9+WMW/w/kj1n8P5g/ZvH/UP6YxX+f/DGL/4fzxyz+++aPWfw/kj9m8f9o/pjFf7/8MYv/x/LHLP4fzx+z+H8if8zi/8n8MYv/p/LHLP77549Z/A/IH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4H5g/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/L+ZP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP7fyh+z+H87f8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+38kfs/ifmj9m8T8tf8zif3r+mMX/u/ljFv/v5Y9Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+J+bP2bxP+9R+F++8P/Lgf17ZvH/aec/ZvE/P3/M4v+z/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF/+f5Yxb/X+SPWfx/mT9m8f9V/pjF//L8MYv/FfljFv9f549Z/H+TP2bxvzJ/zOL/2/wxi/9V+WMW/6vzxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/n/IH7P4/zF/zOJ/Q/6Yxf9P+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bx/3P+mMX/1vwxi/9t+WMW/7/kj1n8b88fs/j/NX/M4v+3/DGL/9/zxyz+/8gfs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/2n5Yxb/e/PHLP735Y9Z/Kfnj0n85xvkj1n8h/LHLP6j8scs/qPzxyz+c+WPWfzH5I9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8R+bP2bxXzR/zOI/Ln/M4r9Y/pjFf/H8MYv/4/LHLP6Pzx+z+D8hf8ziv0T+mMX/ifljFv8l88cs/k/KH7P4Pzl/zOK/VP6Yxf8p+WMW/6fmj1n8x+ePWfyflj9m8X96/pjF/xn5Yxb/CfljFv+l88cs/s/MH7P4L5M/ZvFfNn/M4v+s/DGL/7Pzxyz+z8kfs/g/N3/M4r9c/pjF/3n5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjF//n5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvF/Qf6YxX/N/DGL/1r5Yxb/F+aPWfxflD9m8X9x/pjFf2L+mMV/Uv6YxX9y/pjFf+38MYv/OvljFv9188cs/lPyxyz+U/PHLP7r5Y9Z/NfPH7P4vyR/zOL/0vwxi/8G+WMW/w3zxyz+G+WPWfxflj9m8d84f8zi//L8MYv/JvljFv9N88cs/pvlj1n8N88fs/i/In/M4r9F/pjFf8v8MYv/K/PHLP6vyh+z+L86f8zi/5r8MYv/a/PHLP6vyx+z+L8+f8ziv1X+mMV/6/wxi/82+WMW/zfkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMX/jfljFv8d88cs/m/KH7P4vzl/zOK/U/6YxX/n/DGL/y75Yxb/XfPHLP5vyR+z+L81f8ziv1v+mMV/9/wxi/8e+WMW/7flj1n8354/ZvF/R/6YxX/P/DGL/175Yxb/d+aPWfzflT9m8X93/pjF/z35Yxb/9+aPWfzflz9m8d87f8zi//78MYv/B/LHLP4fzB+z+H8of8ziv0/+mMX/w/ljFv9988cs/h/JH7P4fzR/zOK/X/6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW//3zxyz+B+SPWfw/nT9m8f9M/pjF/7P5Yxb/z+WPWfwPzB+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+38wfs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/2/lj1n8v50/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv/v5I9Z/E/NH7P4n5Y/ZvE/PX/M4v/d/DGL//fyxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/7+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8z80fs/iflz9m8f9p/pjF//z8MYv/z/LHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv/L88cs/lfkj1n8f50/ZvH/Tf6Yxf/K/DGL/2/zxx7sP+axHs7/vofxvyp/zHL+X50/ZvG/Jn/M4v+7/DGL/7X5Yxb/6/LHLP7X549Z/H+fP2bx/0P+mMX/j/ljFv8b8scs/n/KH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/n/PHLP635o9Z/G/LH7P4/yV/zOJ/e/6Yxf+v+WMW/7/lj1n8/54/ZvH/R/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P4T8sfs/jfmz9m8b8vf8ziPz1/TOI//yB/zOI/lD9m8R+VP2bxH50/ZvGfK3/M4j8mf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+eP/ff7z3v/S/k/tP9+/xnNv2D+mMV/ofwxi//C+WMW/0Xyxyz+Y/PHLP6L5o9Z/Mflj1n8F8sfs/gvnj9m8X9c/pjF//H5Yxb/J+SPWfyXyB+z+D8xf8ziv2T+mMX/SfljFv8n549Z/JfKH7P4PyV/zOL/1Pwxi//4/DGL/9Pyxyz+T88fs/g/I3/M4j8hf8ziv3T+mMX/mfljFv9l8scs/svmj1n8n5U/ZvF/dv6Yxf85+WMW/+fmj1n8l8sfs/g/L3/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/g/P3/M4r9q/pjFf7X8MYv/6vljFv818scs/i/IH7P4r5k/ZvFfK3/M4v/C/DGL/4vyxyz+L84fs/hPzB+z+E/KH7P4T84fs/ivnT9m8V8nf8ziv27+mMV/Sv6YxX9q/pjFf738MYv/+vljFv+X5I9Z/F+aP2bx3yB/zOK/Yf6YxX+j/DGL/8vyxyz+G+ePWfxfnj9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/1fkj1n8t8gfs/hvmT9m8X9l/pjF/1X5Yxb/V+ePWfxfkz9m8X9t/pjF/3X5Yxb/1+ePWfy3yh+z+G+dP2bx3yZ/zOL/hvwxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+L8xf8ziv2P+mMX/TfljFv83549Z/HfKH7P475w/ZvHfJX/M4r9r/pjF/y35Yxb/t+aPWfx3yx+z+O+eP2bx3yN/zOL/tvwxi//b88cs/u/IH7P475k/ZvHfK3/M4v/O/DGL/7vyxyz+784fs/i/J3/M4v/e/DGL//vyxyz+e+ePWfzfnz9m8f9A/pjF/4P5Yxb/D+WPWfz3yR+z+H84f8ziv2/+mMX/I/ljFv+P5o9Z/PfLH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOK/f/6Yxf+A/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/4H5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+b+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOL/rfwxi/+388cs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/538MYv/qfljFv/T8scs/qfnj1n8v5s/ZvH/Xv6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+5+WMW//Pyxyz+P80fs/ifnz9m8f9Z/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3n+mMX/ivwxi/+v88cs/r/JH7P4X5k/ZvH/bf6Yxf+q/DGL/9X5Yxb/a/LHLP6/yx+z+F+bP2bxvy5/zOJ/ff6Yxf/3+WMW/z/kj1n8/5g/ZvG/IX/M4v+n/DGL/435Yxb/m/LHLP43549Z/G/JH7P4/zl/zOJ/a/6Yxf+2/DGL/1/yxyz+t+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/7T8MYv/vfljFv/78scs/tPzxyT+Cwzyxyz+Q/ljFv9R+WMW/9H5Yxb/ufLHLP5j8scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+I/NH7P4L5o/ZvEflz9m8V8sf8ziv3j+mMX/cfljFv/H549Z/J+QP2bxXyJ/zOL/xPwxi/+S+WMW/yflj1n8n5w/ZvFfKn/M4v+U/DGL/1Pzxyz+4/PHLP5Pyx+z+D89f8zi/4z8MYv/hPwxi//S+WMW/2fmj1n8l8kfs/gvmz9m8X9W/pjF/9n5Yxb/5+SPWfyfmz9m8V8uf8zi/7z8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8zi//z8MYv/qvljFv/V8scs/qvnj1n818gfs/i/IH/M4r9m/pjFf638MYv/C/PHLP4vyh+z+L84f8ziPzF/zOI/KX/M4j85f8ziv3b+mMV/nfwxi/+6+WMW/yn5Yxb/qfljFv/18scs/uvnj1n8X5I/ZvF/af6YxX+D/DGL/4b5Yxb/jfLHLP4vyx+z+G+cP2bxf3n+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfxfkT9m8d8if8ziv2X+mMX/lfljFv9X5Y9Z/F+dP2bxf03+mMX/tfljFv/X5Y9Z/F+fP2bx3yp/zOK/df6YxX+b/DGL/xvyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/xvwxi/+O+WMW/zflj1n835w/ZvHfKX/M4r9z/pjFf5f8MYv/rvljFv+35I9Z/N+aP2bx3y1/zOK/e/6YxX+P/DGL/9vyxyz+b88fs/i/I3/M4r9n/pjFf6/8MYv/O/PHLP7vyh+z+L87f8zi/578MYv/e/PHLP7vyx+z+O+dP2bxf3/+mMX/A/ljFv8P5o9Z/D+UP2bx3yd/zOL/4fwxi/+++WMW/4/kj1n8P5o/ZvHfL3/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4v+p/DGL//75Yxb/A/LHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP4H5o9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/b+aPWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/7fyxyz+384fs/ifmD9m8T8pf8zif3L+mMX/lPwxi/938scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/3v5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+5+aPWfzPyx+z+P80f8zif37+mMX/Z/ljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//l+WMW/yvyxyz+v84fs/j/Jn/M4n9l/pjF/7f5Yxb/q/LHLP5X549Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfz/kD9m8f9j/pjF/4b8MYv/n/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4v/n/DGL/635Yxb/2/LHLP5/yR+z+N+eP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP7T8scs/vfmj1n878sfs/hPzx+T+C84yB+z+A/lj1n8R+WPWfxH549Z/OfKH7P4j8kfs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOI/Nn/M4r9o/pjFf1z+mMV/sfwxi//i+WMW/8flj1n8H58/ZvF/Qv6YxX+J/DGL/xPzxyz+S+aPWfyflD9m8X9y/pjFf6n8MYv/U/LHLP5PzR+z+I/PH7P4Py1/zOL/9Pwxi/8z8scs/hPyxyz+S+ePWfyfmT9m8V8mf8ziv2z+mMX/WfljFv9n549Z/J+TP2bxf27+mMV/ufwxi//z8scs/svnj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi//z88cs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/4L8MYv/mvljFv+18scs/i/MH7P4vyh/zOL/4vwxi//E/DGL/6T8MYv/5PxndMf06dNnf27xXzt/zOK/Tv6YxX/d/DGL/5T8MYv/1Pwxi/96+WMW//Xzxyz+L8kfs/i/NH/M4r9B/pjFf8P8MYv/RvljFv+X5Y9Z/DfOH7P4vzx/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP6vyB+z+G+RP2bx3zJ/zOL/yvwxi/+r8scs/q/OH7P4vyZ/zOL/2vwxi//r8scs/q/PH7P4b5U/ZvHfOn/M4r9N/pjF/w35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/Y/6YxX/H/DGL/5vyxyz+b84fs/jvlD9m8d85f8ziv0v+mMV/1/yx+/23P/6/2v8t+WOW8/+t+WMW/93yxyz+u+ePWfz3yB+z+L8tf8zi//b8MYv/O/LHLP575o9Z/PfKH7P4vzN/zOL/rvwxi/+788cs/u/JH7P4vzd/zOL/vvwxi//e+WMW//fnj1n8P5A/ZvH/YP6Yxf9D+WMW/33yxyz+H84fs/jvmz9m8f9I/pjF/6P5Yxb//fLHLP4fyx+z+H88f8zi/4n8MYv/J/PHLP6fyh+z+O+fP2bxPyB/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOJ/YP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//hSv+5/+kWFv8jlP7/PIv/kfljFv+j8scs/kfnj1n8v5k/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/t/KH7P4fzt/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP7fyR+z+J+aP2bxPy1/zOJ/ev6Yxf+7+WMW/+/lj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5s/ZvE/L3/M4v/T/DGL//n5Yxb/n+WPWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP4/zx+z+P8if8zi/8v8MYv/r/LHLP6X549Z/K/IH7P4/zp/zOL/m/wxi/+V+WMW/9/mj1n8r8ofs/hfnT9m8b8mf8zi/7v8MYv/tfljFv/r8scs/tfnj1n8f58/ZvH/Q/6Yxf+P+WMW/xvyxyz+f8ofs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+f88cs/rfmj1n8b8sfs/j/JX/M4n97/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/hPyx+z+N+bP2bxvy9/zOI/PX9M4r/Q4BH83/f/w7D+XbP4D3X+Yxb/UfljFv/R+WMW/7nyxyz+Y/LHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/iPzR+z+C+aP2bxH5c/ZvFfLH/M4r94/pjF/3H5Yxb/x+ePWfyfkD9m8V8if8zi/8T8MYv/kvljFv8n5Y9Z/J+cP2bxXyp/zOL/lPwxi/9T88cs/uPzxyz+T8sfs/g/PX/M4v+M/DGL/4T8MYv/0vljFv9n5o9Z/JfJH7P4L5s/ZvF/Vv6Yxf/Z+WMW/+fkj1n8n5s/ZvFfLn/M4v+8/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4v/8/DGL/6r5P7hZkyHxXy1/zHL+r54/ZvFfI3/M4v+C/DGL/5r5Yxb/tfLHLP4vzB+z+L8of8zi/+L8MYv/xPwxi/+k/DGL/+T8MYv/2vljFv918scs/uvmj1n8p+SPWfyn5o9Z/NfLH7P4r58/ZvF/Sf6Yxf+l+WMW/w3yxyz+G+aPWfw3yh+z+L8sf8ziv3H+mMX/5fljFv9N8scs/pvmj1n8N8sfs/hvnj9m8X9F/pjFf4t/4j/6//W4/k2z+G/Z+Y9Z/F+ZP2bxf1X+mMX/1fljFv/X5I9Z/F+bP2bxf13+mMX/9fljFv+t8scs/lvnj1n8t8kfs/i/IX/M4r9t/pjFf7v8MYv/9vljFv8d8scs/m/MH7P475g/ZvF/U/6Yxf/N+WMW/53yxyz+O+ePWfx3yR+z+O+aP2bxf0v+mMX/rfljFv/d8scs/rvnj1n898gfs/i/LX/M4v/2/DGL/zvyxyz+e+aPWfz3yh+z+L8zf8zi/678MYv/u/PHLP7vyR+z+L83f8zi/778MYv/3vljFv/3549Z/D+QP2bx/2D+mMX/Q/ljFv998scs/h/OH7P475s/ZvH/SP6Yxf+j+WMW//3yxyz+H8sfs/h/PH/M4v+J/DGL/yfzxyz+n8ofs/jvnz9m8T8gf8zi/+n8MYv/Z/LHLP6fndN/7v+fx/VvmsX/c53/mMX/wPwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zi/838MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8f9W/pjF/9v5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/Tv6Yxf/U/DGL/2n5Yxb/0/PHLP7fzR+z+H8vf8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPDZ115fC8/Nf7/zh/zHL+/yR/zOJ/bv6Yxf+8/DGL/0/zxyz+5+ePWfx/lj9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+eP2bxvyJ/zOL/6/wxi/9v8scs/lfmj1n8f5s/ZvG/Kn/M4n91/pjF/5r8MYv/7/LHLP7X5o9Z/K/LH7P4X58/ZvH/ff6Yxf8P+WMW/z/mj1n8b8gfs/j/KX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/n/OH7P435o/ZvG/LX/M4v+X/DGL/+35Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4j8tf8zif2/+mMX/vvwxi//0/DGJ/8KD/DGL/1D+mMV/VP6YxX90/pjFf678MYv/mPwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP5j88cs/ovmj1n8x+WPWfwXyx+z+C+eP2bxf1z+mMX/8fljFv8n5I9Z/JfIH7P4PzF/zOK/ZP6Yxf9J+WMW/yfnj1n8l8ofs/g/JX/M4v/U/DGL//j8MYv/0/LHLP5Pzx+z+D8jf8ziPyF/zOK/dP6Yxf+Z+WMW/2Xyxyz+y+aPWfyflT9m8X92/pjF/zn5Yxb/5+aPWfyXyx+z+D8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+D8/f8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+L8gfs/ivmT9m8V8rf8zi/8L8MYv/i/LHLP4vzh+z+E/MH7P4T8ofs/hPzh+z+K+dP2bxX0fkP++/sK3Ff12R/7+SxX9K/pjFf2r+mMV/vfwxi//6+WMW/5fkj1n8X5o/ZvHfIH/M4r9h/pjFf6P8MYv/y/LHLP4b549Z/F+eP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/V+SPWfy3yB+z+G+ZP2bxf2X+mMX/VfljFv9X549Z/F+TP2bxf23+mMX/dfljFv/X549Z/LfKH7P4b50/ZvHfJn/M4v+G/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4vzF/zOK/Y/6Yxf9N+WMW/zfnj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMX/LfljFv+35o9Z/HfLH7P4754/ZvHfI3/M4v+2/DGL/9vzxyz+78gfs/jvmT9m8d8rf8zi/878MYv/u/LHLP7vzh+z+L8nf8zi/978MYv/+/LHLP57549Z/N+fP2bx/0D+mMX/g/ljFv8P5Y9Z/PfJH7P4fzh/zOK/b/6Yxf8j+WMW/4/mj1n898sfs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4r9//pjF/4D8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/gfljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5v5Yxb/Y/LHLP7H5o9Z/I/LH7P4H6/zf3Sf1uJ/gs7/0WXx/1b+mMX/2/ljFv8T88cs/iflj1n8T84fs/ifkj9m8f9O/pjF/9T8MYv/afljFv/T88cs/t/NH7P4fy9/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/3Pwxi/95+WMW/5/mj1n8z88fs/j/LH/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8b88f8zif0X+mMX/1/ljFv/f5I9Z/K/MH7P4/zZ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8f8scs/n/MH7P435A/ZvH/U/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/P+cP2bxvzV/zOJ/W/6Yxf8v+WMW/9vzxyz+f80fs/j/LX/M4v/3/DGL/z/yxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6YxX9a/pjF/978MYv/ffljFv/p+WMS/0UG+WMW/6H8MYv/qPwxi//o/B/cvCNLif9c+T+o0SNLy/k/Jn/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi//Y/DGL/6L5Yxb/cfljFv/F8scs/ovnj1n8H5c/ZvF/fP6Yxf8J+WMW/yXyxyz+T8wfs/gvmT9m8X9S/pjF/8n5Yxb/pfLHLP5PyR+z+D81f8ziPz5/zOL/tPwxi//T88cs/s/IH7P4T8gfs/gvnT9m8X9m/pjFf5n8MYv/svljFv9n5Y9Z/J+dP2bxf07+mMX/ufljFv/l8scs/s/LH7P4L58/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/s/PH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/C/LHLP5r5o9Z/NfKH7P4vzB/zOL/ovwxi/+L88cs/hPzxyz+k/LHLP6T88cs/mvnj1n818kfs/ivmz9m8Z+SP2bxn5o/ZvFfL3/M4r9+/pjF/yX5Yxb/l+aPWfw3yB+z+G+YP2bx3yh/zOL/svwxi//G+WMW/5fnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/FfljFv8t8scs/lvmj1n8X5k/ZvF/Vf6Yxf/V+WMW/9fkj1n8X5s/ZvF/Xf6Yxf/1+WMW/63yxyz+W+ePWfy3yR+z+L8hf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+b8wfs/jvmD9m8X9T/pjF/835Yxb/nfLHLP47549Z/HfJH7P475o/ZvF/S/6Yxf+t+WMW/93yxyz+u+ePWfz3yB+z+L8tf8zi//b8MYv/O/LHLP7/H3v0YACIgQAB8G3cM7Zt27Zt2+eLbdu2bdu2bTtpYCvIzrQwA/1HLf+D/Ect/4P9Ry3/Q/xHLf9D/Uct/8P8Ry3/w/1HLf8j/Ect/zv7j1r+d/Eftfzv6j9q+d/Nf9Tyv7v/qOV/D/9Ry/+e/qOW/738Ry3/e/uPWv738R+1/O/rP2r5389/1PK/v/+o5f8A/1HL/4H+o5b/g/xHLf8H+49a/g/xH7X8H+o/avk/zH/U8n+4/6jl/wj/Ucv/kf6jlv+j/Ect/0f7j1r+j/Eftfwf6z9q+T/Of9Tyf7z/qOX/BP9Ry/+J/qOW/5P8Ry3/J/uPWv5P8R+1/J/qP2r5P81/1PJ/uv+o5f8M/1HL/5n+o5b/s/xHLf9n+49a/s/xH7X8n+s/avk/z3/U8n++/6jl/wL/Ucv/hf6jlv+L/Ect/xf7j1r+L/Eftfxf6j9q+b/Mf9Tyf7n/qOX/Cv9Ry/+V/qOW/6v8Ry3/V/uPWv6v8R+1/F/rP2r5v85/1PJ/vf+o5f8G/1HL/43+o5b/m/xHLf83+49a/m/xH7X83+o/avm/zX/U8n+7/6jl/w7/Ucv/nf6jlv+7/Ect/3f7j1r+7/Eftfzf6z9q+b/Pf9Tyf7//qOX/Af9Ry/+D/qOW/4f8Ry3/D/uPWv4f8R+1/D/qP2r5f8x/1PL/uP+o5f8J/1HL/5P+o5b/p/xHLf9P+49a/p/xH7X8P+s/avl/zn/U8v+8/6jl/wX/Ucv/i/6jlv+X/Ect/y/7j1r+X/Eftfy/6j9q+X/Nf9Ty/7r/qOX/Df9Ry/+b/qOW/7f8Ry3/b/uPWv7f8R+1/L/rP2r5f89/1PL/vv+o5f8D/1HL/4f+o5b/j/xHLf8f+49a/j/xH7X8f+o/avn/zH/U8v+5/6jl/wv/Ucv/l/6jlv+v/Ect/1/7j1r+v/Eftfx/6z9q+f/Of9Ty/73/qOX/B/9Ry/+P/qOW/5/8RyX/A37lP2r5/7X/qOX/N/6jlv/f+o9a/n/nP2r5/73/qOX/D/6jlv8/+o9a/v/kP2r5/7P/qOX/L/6jlv+/+o9a/v/mP2r5/7v/qOX/H/6jlv9/+o9a/gf4j1r+/+U/avn/t/+o5f8//qOW///6j1r+/+c/avn/v/+o5X8k/1HL/8j+o5b/UfxHLf+j+o9a/kfzH7X8j+4/avkfw3/U8j+m/6jlfyz/Ucv/2P6jlv9x/Ect/+P6j1r+x/MftfyP7z9q+Z/Af9TyP6H/qOV/Iv9Ry//E/qOW/0n8Ry3/k/qPWv4n8x+1/E/uP2r5n8J/1PI/pf+o5X8q/1HL/9T+o5b/afxHLf/T+o9a/qfzH7X8T+8/avmfwX/U8j+j/6jlfyb/Ucv/zP6jlv9Z/Ect/7P6j1r+Z/MftfzP7j9q+Z/Df9TyP6f/qOV/Lv9Ry//c/qOW/3n8Ry3/8/qPWv7n8x+1/M/vP2r5X8B/1PK/oP+o5X8h/1HL/8L+o5b/RfxHLf+L+o9a/hfzH7X8L+4/avlfwn/U8r+k/6jlfyn/Ucv/0v6jlv9l/Ect/8v6j1r+l/Mftfwv7z9q+V/Bf9Tyv6L/qOV/Jf9Ry//K/qOW/1X8Ry3/q/qPWv5X8x+1/K/uP2r5X8N/1PK/pv+o5X8t/1HL/9r+o5b/dfxHLf/r+o9a/tfzH7X8r+8/avnfwH/U8r+h/6jlfyP/Ucv/xv6jlv9N/Ect/5v6j1r+N/Mftfxv7j9q+d/Cf9Tyv6X/qOV/K/9Ry//W/qOW/238Ry3/2/qPWv638x+1/G/vP2r538F/1PK/o/+o5X8n/1HL/0D/Ucv/IP9Ry/9g/1HL/xD/Ucv/UP9Ry/8w/1HL/3D/Ucv/CP/RL+4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Jl9u42tsyz8OH53W8fYn38y4oLL0GSTC4VEmO0eMl4QNhnb6qAbz2OAo1u7sdFus+uwK+AeXkwihAdJJlmiRNkylDATGomBYAURDbqoiQYfAFGIonEiBN0SF2tOe1raY9d4rnpdi/L5vOg59332u7c1+e6+FxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf6+GxoVHxtcMOzV+6MEHD7f0vc45uvLmA7/tuXDgtfzxshEuOW7oQW9vb++c52bvKB+eUhRF6WfbWT6eVDkuXX9n/Rc6+4/Cgp6Xlhyf8vPGIwfWnP5IXffR+2v7ztYWN63b0NrysXFFES6uLTpLB3U1RREW1xb3lQ7qSwdLaotHSgez+w5OLb5dOjh/7ebW5tKJpdHfM/hf0dC4sxg/rNhi2J8GQ/vfWf+tOwdeR7nkwNUmFOX+r+j6/lsVnw04Qf8D1w8LK/uv+jcInFB1/b+wYOB1lEv+y/1/8lOrXhnpsxP3P3D98HH9QzojPP8Pa7Tyub/i+X/GCJcc3F9V03W81P+ltz07s3xqwr/z/P/u9cPFlf2PG/b8X3qOXzTw/H9KUYRLxvjtgPeUhsZdR0a7/4/e/4TpFZuaof2f0b55f6n/x5d874nyqdoq+180yv1/3NKKXytQnYbGL/dW3P+r6L/4yAiXHOz/7Sd+/XCp/8d+/8CZQz6rpv9LKvuf1dG2ZdbW7V3nbWhrWt+yvmVT3ez5c+bV1827YO6svkeC/q9j/K7Ae8PY7v/F5IpNTVG0DO6v6T7wdKn/uQ8+OKd8alKV/S8e9f4/w/0fRvShccXEiUVnU0dHe13/14HD+v6v/T9shP6r+Pv/WeeUf1ht+bWmKKYN7u868+4Vpf7fOfTs7vKpiVX2v2TU/hcM/rxAhDHe/5srNsP6P3jopb7n/2X3HjyjfKrav/8vHbX/V93/YSwaGiv+h5//sFL/u4rLIjsNDf77H6STo//H3rmhJ24dPqF/SCdH/7/73NFz49Zhmf4hnRz9T9j4wPNx63Cp/iGdHP0vnzp/Rdw6XKZ/SCdH/2tfPffPcevQqH9IJ0f/53xpd2fcOizXP6STo/+H2udsi1uHFfqHdHL0/9PTHnotbh0u1z+kk6P/Y8fuuTFuHa7QP6STo//uPWf/IG4drtQ/pJOj/8vXLQxx63CV/iGdHP1Pn/bHx+PW4Wr9Qzo5+p/3p7+fFrcO1+gf0snR/x2fX7Evbh2u1T+kk6P/8de/8mLcOqzUP6STo/+lZ29bGLcO1+kf0snRf/NPmnvj1mGV/iGdHP3P+vqPNsStw/X6h3Ry9H94+aN74tbhBv1DOjn631NXTIlbhxv1D+nk6P9r3z39UNw6fFL/kE6O/n/z1JPz49Zhtf4hnRz9P/eB278Rtw436R/SydH/vWtePCtuHZr0D+nk6P/hvc9/MW4d1ugf0snR/xtvtP1f3Dqs1T+kk6P/yZNOfT1uHZr1D+nk6H/hrV9pj1uHFv1DOjn6b9vd/cO4dVinf0gnR/8fPj5tVdw6rNc/pJOj/5Vz974/bh1u1j+kk6P/9y27cFfcOmzQP6STo/+Lej56Udw6bNQ/pJOj/45nPvvVuHW4Rf+QTo7+9858bXHcOrTqH9LJ0f/Lq5f+OG4d2vQP6eTo/61Hr9sUtw6b9A/p5Oj/yZ+9fSxuHTbrH9LJ0f//X7Dor3HrsEX/kE6O/hcveXNt3Dp8Sv+QTo7+N3b/4+W4dWjXP6STo/+Zh69eFrcOW/UP6eTo/zvn1e2PW4cO/UM6Ofq/88p99XHrsE3/kE6O/vcfvOvuuHW4Vf+QTo7+3/zFjOlx6/Bp/UM6Ofq/f8qha+PWoVP/kE6O/n+5qfaZuHXYrn9IJ0f/f9s3dUfcOnTpH9LJ0f/Tr/f8IW4dbtM/pJOj/9UTfjUxbh1u1z+kk6P/qV1b7otbhzv0D+nk6H/+PU3nx63DZ/QP6eTof+tfXvhm3Drs0D+ks3V71y1Nra0t7d544403g29O9p9MQGrvRn+yfyUAAAAAAAAAAAAAAMCJ5PjnRCf79wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjztw6idwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgKAAD//w+Q5jk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x0, 0x0, 0xfffffffd}) 2.250059157s ago: executing program 5 (id=5327): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) listen(r0, 0x5) 1.978652213s ago: executing program 5 (id=5330): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'bond0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000008c0)={@remote, @broadcast, r1}, 0xc) 1.952239363s ago: executing program 3 (id=5331): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000000000000007000000071814"], 0x28}}], 0x1, 0x40) 1.848910885s ago: executing program 1 (id=5332): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 1.751228337s ago: executing program 3 (id=5333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) 1.698420468s ago: executing program 5 (id=5334): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 1.513673341s ago: executing program 5 (id=5335): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001600)={{r0}, 0x0, 0x4, @inherit={0x48, 0x0}, @subvolid=0x6}) 1.326584425s ago: executing program 1 (id=5336): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 1.082352169s ago: executing program 1 (id=5337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 1.082246949s ago: executing program 3 (id=5338): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81009431, 0xfffffffffffffffe) 780.636586ms ago: executing program 1 (id=5339): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 649.547388ms ago: executing program 0 (id=5340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad56", 0x2) 603.863899ms ago: executing program 3 (id=5341): mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x4, 0x9, 0x1) 505.630391ms ago: executing program 1 (id=5342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000002100110829bd7000fcdbdf250a0010020c000004040000001400020020010000000000000000000200010002050016003a000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) 266.604285ms ago: executing program 1 (id=5343): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000cc0)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)="27050200000000000600002fb96d02000000000000008100", 0x18}], 0x1}, 0x20000000) 266.523505ms ago: executing program 5 (id=5344): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0) ioprio_get$pid(0x2, 0x0) 235.516636ms ago: executing program 3 (id=5345): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) iopl(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) 39.499689ms ago: executing program 5 (id=5346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 0s ago: executing program 3 (id=5347): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0xffe, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001bc0)="ec000900062b3325fe80000000000000dc8b852303848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a3c12", 0x2a}], 0x1}, 0x800) kernel console output (not intermixed with test programs): werdir [ 377.769119][T16242] block device autoloading is deprecated and will be removed. [ 379.101341][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.478507][T16337] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.3425'. [ 379.673914][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 379.772297][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 379.882707][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 379.891319][ T23] usb 6-1: unable to get BOS descriptor or descriptor too short [ 379.901637][ T23] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 379.910467][ T23] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 379.932293][ T23] usb 6-1: config 7 has no interface number 0 [ 379.942943][ T23] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 379.963886][ T23] usb 6-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.006228][ T27] usb 2-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 380.032236][ T23] usb 6-1: config 7 interface 187 has no altsetting 0 [ 380.060685][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.071805][ T23] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 380.090550][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.099161][ T27] usb 2-1: Product: syz [ 380.109325][ T27] usb 2-1: Manufacturer: syz [ 380.119491][ T23] usb 6-1: Product: syz [ 380.129656][ T27] usb 2-1: SerialNumber: syz [ 380.136442][ T23] usb 6-1: Manufacturer: syz [ 380.147390][ T27] usb 2-1: config 0 descriptor?? [ 380.154190][ T23] usb 6-1: SerialNumber: syz [ 380.171044][ T27] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 380.423104][ T23] usb 6-1: Limiting number of CPorts to U8_MAX [ 380.454898][ T23] usb 6-1: Unknown endpoint type found, address 0x07 [ 380.458326][T16348] loop3: detected capacity change from 0 to 32768 [ 380.472319][ T23] usb 6-1: Not enough endpoints found in device, aborting! [ 380.613441][ T27] sonixb 2-1:0.0: Error writing register 01: -71 [ 380.627920][ T27] sonixb: probe of 2-1:0.0 failed with error -71 [ 380.643325][ T27] usb 2-1: USB disconnect, device number 9 [ 380.653902][T16348] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 380.688481][ T8661] hfsplus: b-tree write err: -5, ino 4 [ 380.769966][ T8] usb 6-1: USB disconnect, device number 5 [ 380.863567][T16348] XFS (loop3): Ending clean mount [ 380.937714][T16348] XFS (loop3): Quotacheck needed: Please wait. [ 381.067830][T16368] loop0: detected capacity change from 0 to 32768 [ 381.112581][T16348] XFS (loop3): Quotacheck: Done. [ 381.357497][ T5790] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.495748][T16461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3444'. [ 382.576435][T16461] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3444'. [ 382.612701][T16461] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3444'. [ 382.816090][T16478] netlink: zone id is out of range [ 382.821988][T16478] netlink: zone id is out of range [ 382.830901][T16478] netlink: zone id is out of range [ 382.836862][T16478] netlink: zone id is out of range [ 382.848112][T16478] netlink: zone id is out of range [ 382.861094][T16478] netlink: zone id is out of range [ 382.870699][T16478] netlink: zone id is out of range [ 382.912217][T16478] netlink: zone id is out of range [ 382.942206][T16478] netlink: zone id is out of range [ 382.957823][T16478] netlink: zone id is out of range [ 384.202438][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.592941][T16565] xt_TPROXY: Can be used only with -p tcp or -p udp [ 384.642418][T16568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3479'. [ 384.787512][T16527] loop0: detected capacity change from 0 to 32768 [ 384.858038][T16527] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 384.968462][T16527] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 385.072431][T16527] (syz.0.3466,16527,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 385.114799][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'. [ 385.127635][T16527] (syz.0.3466,16527,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 385.182285][T16527] (syz.0.3466,16527,0):ocfs2_mknod:298 ERROR: status = -2 [ 385.212660][T16527] (syz.0.3466,16527,0):ocfs2_mknod:502 ERROR: status = -2 [ 385.243000][T16527] (syz.0.3466,16527,0):ocfs2_mkdir:659 ERROR: status = -2 [ 385.364499][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 385.642597][T16610] netlink: 'syz.1.3491': attribute type 46 has an invalid length. [ 385.650556][T16610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3491'. [ 386.457029][T16649] comedi comedi0: Cannot bond this driver to itself! [ 386.581701][T16656] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.622608][T16656] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3505'. [ 387.029335][T16680] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 388.682458][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 389.046312][T16783] loop3: detected capacity change from 0 to 256 [ 389.053670][T16782] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 389.103025][T16783] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 389.164080][T16783] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 389.185877][T16783] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 389.186283][T16788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3548'. [ 389.232579][T16788] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3548'. [ 389.241969][T16788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3548'. [ 389.459491][T16797] kAFS: No cell specified [ 390.266187][T16838] netlink: 'syz.1.3563': attribute type 6 has an invalid length. [ 390.455952][T16848] netlink: 'syz.5.3567': attribute type 27 has an invalid length. [ 390.455978][T16848] netlink: 'syz.5.3567': attribute type 3 has an invalid length. [ 390.455992][T16848] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3567'. [ 391.196416][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3574'. [ 391.494697][T16844] loop0: detected capacity change from 0 to 32768 [ 391.571521][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'. [ 391.573490][T16844] [ 391.573490][T16844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.573490][T16844] [ 391.603427][T16844] [ 391.603427][T16844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.603427][T16844] [ 391.603524][T16844] [ 391.603524][T16844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.603524][T16844] [ 391.603546][T16844] [ 391.603546][T16844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.603546][T16844] [ 391.603564][T16844] [ 391.603564][T16844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.603564][T16844] [ 391.603580][T16844] [ 391.603580][T16844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.603580][T16844] [ 391.611897][ T111] [ 391.611897][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.611897][ T111] [ 391.776986][ T8657] [ 391.776986][ T8657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.776986][ T8657] [ 391.777081][ T8657] [ 391.777081][ T8657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.777081][ T8657] [ 391.780967][ T110] [ 391.780967][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.780967][ T110] [ 391.781078][ T5789] [ 391.781078][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.781078][ T5789] [ 391.781264][ T5789] [ 391.781264][ T5789] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.781264][ T5789] [ 391.831140][T16888] net_ratelimit: 334 callbacks suppressed [ 391.831162][T16888] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 392.640098][T16919] PM: Enabling pm_trace changes system date and time during resume. [ 392.640098][T16919] PM: Correct system time has to be restored manually after resume. [ 392.664442][T16921] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3587'. [ 392.816335][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3588'. [ 392.842309][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 393.109403][T16945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3595'. [ 393.156908][T16945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3595'. [ 393.368634][T16956] netlink: 'syz.1.3597': attribute type 1 has an invalid length. [ 393.391543][T16956] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3597'. [ 393.653133][ T28] audit: type=1326 audit(2000000000.300:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16971 comm="syz.3.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 393.722642][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3602'. [ 393.728668][ T28] audit: type=1326 audit(2000000000.320:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16971 comm="syz.3.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 393.771793][ T28] audit: type=1326 audit(2000000000.330:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16971 comm="syz.3.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 393.916999][ T28] audit: type=1326 audit(2000000000.330:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16971 comm="syz.3.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 393.996248][ T28] audit: type=1326 audit(2000000000.330:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16971 comm="syz.3.3603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 394.299272][T16990] loop3: detected capacity change from 0 to 8192 [ 394.358534][T16990] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 394.372676][T16990] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 394.383361][T16990] REISERFS (device loop3): using ordered data mode [ 394.390670][T16990] reiserfs: using flush barriers [ 394.424155][T16990] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 394.467177][T16990] REISERFS (device loop3): checking transaction log (loop3) [ 394.507389][T16990] REISERFS (device loop3): Using r5 hash to sort names [ 394.545063][T16990] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 395.270079][T16988] loop1: detected capacity change from 0 to 32768 [ 395.389435][T16988] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 395.437404][T16988] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 395.470790][T16988] BTRFS info (device loop1): force clearing of disk cache [ 395.518025][T16988] BTRFS info (device loop1): metadata ratio 0 [ 395.525454][T17031] batadv0: entered promiscuous mode [ 395.553499][T16988] BTRFS info (device loop1): enabling ssd optimizations [ 395.561106][T16988] BTRFS info (device loop1): using spread ssd allocation scheme [ 395.621256][T16988] BTRFS info (device loop1): using free space tree [ 395.860644][T16988] BTRFS info (device loop1): auto enabling async discard [ 395.902585][T16988] BTRFS info (device loop1): rebuilding free space tree [ 396.093773][ T28] audit: type=1326 audit(2000000002.720:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 396.212264][ T28] audit: type=1326 audit(2000000002.720:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 396.223807][T17067] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3625'. [ 396.318267][ T28] audit: type=1326 audit(2000000002.740:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 396.430953][ T28] audit: type=1326 audit(2000000002.740:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 396.455423][ T28] audit: type=1326 audit(2000000002.740:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17063 comm="syz.3.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 396.777316][ T5788] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.349173][T17150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3651'. [ 398.603031][T17165] netlink: 'syz.3.3655': attribute type 2 has an invalid length. [ 399.131768][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3665'. [ 399.162305][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3665'. [ 400.123102][T17244] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 400.384393][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 400.384411][ T28] audit: type=1400 audit(2000000007.020:2333): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":=~" pid=17252 comm="syz.3.3685" [ 400.593431][T17254] loop0: detected capacity change from 0 to 4096 [ 400.669076][T17254] ntfs: volume version 3.1. [ 401.830246][T17318] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3705'. [ 401.862343][T17318] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3705'. [ 402.126589][T17329] x_tables: duplicate underflow at hook 3 [ 402.155637][T17281] loop3: detected capacity change from 0 to 40427 [ 402.200156][T17281] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 402.229458][T17281] F2FS-fs (loop3): invalid crc value [ 402.269075][T17281] F2FS-fs (loop3): Found nat_bits in checkpoint [ 402.493764][T17281] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 402.742000][T17358] netlink: 372 bytes leftover after parsing attributes in process `syz.0.3717'. [ 403.562446][T17390] netlink: 'syz.0.3726': attribute type 21 has an invalid length. [ 403.602202][T17390] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3726'. [ 403.631095][T17390] netlink: 'syz.0.3726': attribute type 4 has an invalid length. [ 403.650025][T17390] netlink: 'syz.0.3726': attribute type 5 has an invalid length. [ 403.662763][T17390] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3726'. [ 405.208819][ T23] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 405.424490][ T23] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 405.439950][ T23] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 405.472451][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 405.503243][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 405.552204][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 405.578803][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 405.619585][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 405.653787][ T23] usb 4-1: string descriptor 0 read error: -22 [ 405.660175][ T23] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 405.679695][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.701107][ T23] usb 4-1: config 0 descriptor?? [ 405.727048][ T23] hub 4-1:0.0: bad descriptor, ignoring hub [ 405.741735][ T23] hub: probe of 4-1:0.0 failed with error -5 [ 405.791039][ T23] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 406.133835][ T23] usb 4-1: USB disconnect, device number 14 [ 406.433506][ T5851] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 406.630473][T17536] loop0: detected capacity change from 0 to 4096 [ 406.673815][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 406.703123][T17536] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 406.715822][ T5851] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 406.735831][ T5851] usb 6-1: config 179 has no interface number 0 [ 406.750397][T17536] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 406.765322][ T5851] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 406.780651][T17536] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 406.793350][ T5851] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 406.815347][ T5851] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.829544][T17536] ntfs: volume version 3.1. [ 406.852362][ T5851] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 406.890096][ T5851] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 406.963049][ T5851] usb 6-1: config 179 interface 65 has no altsetting 0 [ 406.985033][ T5851] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 407.027788][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.161486][ T5851] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14 [ 407.778721][T17589] netlink: 'syz.3.3778': attribute type 29 has an invalid length. [ 407.785486][ T8] usb 6-1: USB disconnect, device number 6 [ 407.787611][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 407.809491][ T8] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 407.833957][T17589] netlink: 'syz.3.3778': attribute type 29 has an invalid length. [ 407.911673][T17598] batadv2: entered allmulticast mode [ 407.991895][T17598] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 408.052010][T17614] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 409.115162][T17620] loop3: detected capacity change from 0 to 32768 [ 409.480820][T17671] IPv6: Can't replace route, no match found [ 409.890073][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3806'. [ 410.432075][T17718] netlink: 'syz.3.3816': attribute type 1 has an invalid length. [ 410.440174][T17718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3816'. [ 410.703943][T17734] block nbd1: NBD_DISCONNECT [ 410.774262][T17737] loop3: detected capacity change from 0 to 8 [ 410.973735][T17747] xt_hashlimit: size too large, truncated to 1048576 [ 410.980593][T17747] xt_hashlimit: max too large, truncated to 1048576 [ 411.167244][ T28] audit: type=1326 audit(2000000017.800:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17756 comm="syz.3.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 411.232233][ T28] audit: type=1326 audit(2000000017.800:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17756 comm="syz.3.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 411.325744][ T28] audit: type=1326 audit(2000000017.810:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17756 comm="syz.3.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 411.357028][T17768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3830'. [ 411.366812][T17768] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3830'. [ 411.438207][ T28] audit: type=1326 audit(2000000017.810:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17756 comm="syz.3.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 411.502275][ T28] audit: type=1326 audit(2000000017.810:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17756 comm="syz.3.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 411.847024][T17789] loop1: detected capacity change from 0 to 1024 [ 412.412531][T17820] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.3844'. [ 412.611014][T17829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3848'. [ 412.644763][T17829] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3848'. [ 412.675313][T17829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3848'. [ 412.853962][T17838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3851'. [ 412.959561][T17847] Cannot find del_set index 2 as target [ 413.192324][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3857'. [ 413.582257][ T5844] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 413.749115][T17887] netlink: 'syz.5.3867': attribute type 2 has an invalid length. [ 413.816513][ T5844] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 413.836385][ T5844] usb 2-1: config 0 has no interface number 0 [ 413.850227][ T5844] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 413.890607][ T5844] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.913578][ T5844] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 413.941545][ T5844] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 413.962413][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.984648][ T5844] usb 2-1: config 0 descriptor?? [ 414.004689][ T5844] gspca_main: spca561-2.14.0 probing abcd:cdee [ 414.234398][ T5844] spca561: probe of 2-1:0.156 failed with error -22 [ 414.269700][ T5844] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 414.303079][ T5844] usb 2-1: MIDIStreaming interface descriptor not found [ 414.554011][ T5844] usb 2-1: USB disconnect, device number 10 [ 415.512324][ T5899] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 415.596860][T17991] __nla_validate_parse: 1 callbacks suppressed [ 415.596879][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3891'. [ 415.613440][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3891'. [ 415.722679][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 415.748774][ T5899] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 415.772521][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.781574][ T5899] usb 1-1: Product: syz [ 415.791732][T17998] loop1: detected capacity change from 0 to 512 [ 415.822204][ T5899] usb 1-1: Manufacturer: syz [ 415.837194][ T5899] usb 1-1: SerialNumber: syz [ 415.861167][ T5899] r8152-cfgselector 1-1: config 0 descriptor?? [ 415.897622][T17998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.910624][T17998] ext4 filesystem being mounted at /1051/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.064316][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.101137][ T5899] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 416.115690][T18011] overlayfs: missing 'lowerdir' [ 416.312730][ T23] usb 1-1: USB disconnect, device number 13 [ 416.348258][T18021] netlink: 'syz.3.3900': attribute type 1 has an invalid length. [ 416.380978][T18021] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3900'. [ 416.680919][T18042] loop3: detected capacity change from 0 to 8 [ 416.740798][T18044] i2c i2c-0: Invalid block write size 252 [ 416.828147][T18048] tmpfs: Bad value for 'mpol' [ 417.090565][T18060] loop1: detected capacity change from 0 to 512 [ 417.156275][T18060] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.3910: bad orphan inode 15 [ 417.178143][T18060] ext4_test_bit(bit=14, block=5) = 0 [ 417.186085][T18060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.425818][T18060] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 417.475542][T18060] EXT4-fs error (device loop1): ext4_free_inode:356: comm syz.1.3910: bit already cleared for inode 13 [ 417.487650][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 417.586608][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 417.598392][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.892439][T18093] netlink: 'syz.0.3920': attribute type 10 has an invalid length. [ 417.941347][T18093] team0: Device hsr_slave_0 failed to register rx_handler [ 417.982995][T18091] loop3: detected capacity change from 0 to 4096 [ 418.010599][T18091] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 418.148293][T18091] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 418.178150][T18091] ntfs3: loop3: mft corrupted [ 418.194793][T18091] ntfs3: loop3: Failed to load $Extend (-22). [ 418.221573][T18091] ntfs3: loop3: Failed to initialize $Extend. [ 418.832403][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 419.045671][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.049090][T18140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3934'. [ 419.072567][ T27] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 419.105814][ T27] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 419.142269][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.197960][ T27] usb 2-1: config 0 descriptor?? [ 419.226263][ T27] gspca_main: spca501-2.14.0 probing 0000:0000 [ 419.657335][ T27] gspca_spca501: reg write: error -71 [ 419.682436][ T27] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 419.690252][ T27] spca501: probe of 2-1:0.0 failed with error -22 [ 419.731350][ T27] usb 2-1: USB disconnect, device number 11 [ 420.106059][T18187] loop3: detected capacity change from 0 to 64 [ 420.562210][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 420.674737][T18177] loop0: detected capacity change from 0 to 32768 [ 420.693901][T18177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3942 (18177) [ 420.728421][T18177] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 420.754725][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 420.760132][T18177] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 420.777209][ T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 420.796121][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 420.806788][T18177] BTRFS info (device loop0): force clearing of disk cache [ 420.824703][T18177] BTRFS info (device loop0): metadata ratio 0 [ 420.831067][ T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 420.851416][T18177] BTRFS info (device loop0): enabling ssd optimizations [ 420.864607][ T27] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 420.883340][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.891590][T18177] BTRFS info (device loop0): using spread ssd allocation scheme [ 420.901711][T18177] BTRFS info (device loop0): using free space tree [ 420.908635][ T27] usb 6-1: Product: syz [ 420.922155][ T27] usb 6-1: Manufacturer: syz [ 420.927626][ T27] usb 6-1: SerialNumber: syz [ 420.952243][ T27] usb 6-1: config 0 descriptor?? [ 420.958267][T18194] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 420.979342][ T27] mceusb 6-1:0.0: mceusb_dev_probe: device setup failed! [ 420.991915][ T27] mceusb: probe of 6-1:0.0 failed with error -12 [ 421.079586][T18177] BTRFS info (device loop0): auto enabling async discard [ 421.115186][T18177] BTRFS info (device loop0): rebuilding free space tree [ 421.160737][T18200] loop1: detected capacity change from 0 to 32768 [ 421.225485][ T27] usb 6-1: USB disconnect, device number 7 [ 421.276913][T18200] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 421.276913][T18200] [ 421.302615][T18200] ERROR: (device loop1): remounting filesystem as read-only [ 421.311430][T18200] ialloc: diAlloc returned -5! [ 421.450959][ T5789] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.668992][T18246] netlink: 'syz.3.3954': attribute type 10 has an invalid length. [ 421.735752][T18246] team0: Device hsr_slave_0 failed to register rx_handler [ 422.278124][T18266] loop0: detected capacity change from 0 to 256 [ 422.403039][T18266] FAT-fs (loop0): Directory bread(block 64) failed [ 422.412289][T18266] FAT-fs (loop0): Directory bread(block 65) failed [ 422.462304][T18266] FAT-fs (loop0): Directory bread(block 66) failed [ 422.474376][T18266] FAT-fs (loop0): Directory bread(block 67) failed [ 422.481295][T18266] FAT-fs (loop0): Directory bread(block 68) failed [ 422.586990][T18266] FAT-fs (loop0): Directory bread(block 69) failed [ 422.604774][T18266] FAT-fs (loop0): Directory bread(block 70) failed [ 422.611576][T18266] FAT-fs (loop0): Directory bread(block 71) failed [ 422.629213][T18266] FAT-fs (loop0): Directory bread(block 72) failed [ 422.636517][T18266] FAT-fs (loop0): Directory bread(block 73) failed [ 422.653728][T18281] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 422.793290][T18266] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 422.832510][T18266] FAT-fs (loop0): Filesystem has been set read-only [ 423.429169][T18308] netlink: 'syz.5.3972': attribute type 10 has an invalid length. [ 423.525881][T18308] team0: Device hsr_slave_0 failed to register rx_handler [ 423.611769][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3976'. [ 423.787806][T18328] loop0: detected capacity change from 0 to 164 [ 423.903438][T18328] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 424.540882][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3990'. [ 424.791614][T18384] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.3996'. [ 424.974278][T18390] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 425.235622][ T28] audit: type=1400 audit(2000000031.880:2339): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":=~" pid=18402 comm="syz.1.4003" [ 425.255132][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.304980][T18408] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 425.471414][T18414] usb usb3: usbfs: process 18414 (syz.3.4006) did not claim interface 0 before use [ 425.570393][T18420] netlink: 'syz.0.4008': attribute type 10 has an invalid length. [ 425.609738][T18420] batman_adv: batadv0: Adding interface: wlan0 [ 425.620939][T18420] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.658693][T18420] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 426.253001][T18455] usb usb3: usbfs: process 18455 (syz.1.4020) did not claim interface 0 before use [ 426.608572][T18474] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4025'. [ 426.650155][T18474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4025'. [ 426.678912][T18480] x_tables: duplicate underflow at hook 3 [ 426.839426][T18485] loop0: detected capacity change from 0 to 8 [ 426.907672][T18485] SQUASHFS error: Failed to read block 0xdfa: -5 [ 426.940127][T18485] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 427.179325][T18502] loop3: detected capacity change from 0 to 256 [ 427.285688][T18502] FAT-fs (loop3): Directory bread(block 64) failed [ 427.313388][T18502] FAT-fs (loop3): Directory bread(block 65) failed [ 427.320292][T18502] FAT-fs (loop3): Directory bread(block 66) failed [ 427.383826][T18502] FAT-fs (loop3): Directory bread(block 67) failed [ 427.391065][T18502] FAT-fs (loop3): Directory bread(block 68) failed [ 427.450124][T18502] FAT-fs (loop3): Directory bread(block 69) failed [ 427.467758][T18518] overlayfs: unescaped trailing colons in lowerdir mount option. [ 427.482656][T18502] FAT-fs (loop3): Directory bread(block 70) failed [ 427.499669][T18502] FAT-fs (loop3): Directory bread(block 71) failed [ 427.522628][T18502] FAT-fs (loop3): Directory bread(block 72) failed [ 427.536139][T18502] FAT-fs (loop3): Directory bread(block 73) failed [ 427.650903][T18524] netlink: 372 bytes leftover after parsing attributes in process `syz.5.4038'. [ 427.917613][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 427.953623][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 427.992759][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 428.018824][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 428.861545][T18583] loop1: detected capacity change from 0 to 8 [ 428.960532][T18583] SQUASHFS error: Failed to read block 0xdfa: -5 [ 428.978592][T18583] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 430.801416][T18673] loop1: detected capacity change from 0 to 4096 [ 430.858080][T18686] gretap1: entered allmulticast mode [ 430.865966][T18673] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 430.894209][T18673] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 430.917113][T18673] ntfs3: loop1: volume is dirty and "force" flag is not set! [ 431.712352][T18725] __nla_validate_parse: 48 callbacks suppressed [ 431.712370][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4099'. [ 431.766158][T18725] bridge3: entered allmulticast mode [ 432.133845][T18746] loop0: detected capacity change from 0 to 512 [ 432.141303][T18746] EXT4-fs: Ignoring removed oldalloc option [ 432.161636][T18746] EXT4-fs: inline encryption not supported [ 432.192222][T18746] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.223849][T18746] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.331425][T18746] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.4107: bg 0: block 64: padding at end of block bitmap is not set [ 432.423921][T18746] Quota error (device loop0): write_blk: dquota write failed [ 432.442550][T18746] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 432.453799][T18746] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.4107: Failed to acquire dquot type 0 [ 432.496227][T18768] loop3: detected capacity change from 0 to 128 [ 432.504719][T18746] EXT4-fs (loop0): 1 truncate cleaned up [ 432.533143][T18746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.553395][T18768] EXT4-fs: Ignoring removed nobh option [ 432.645593][T18768] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.676799][T18768] ext4 filesystem being mounted at /1003/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.728589][T18746] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5 [ 432.761358][T18768] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.4112: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 432.791515][T18778] gretap2: entered allmulticast mode [ 432.844165][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.970542][ T5790] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.188573][T18788] loop1: detected capacity change from 0 to 4096 [ 433.254835][T18788] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 433.285131][T18788] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 433.302429][T18788] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 433.350668][T18788] ntfs: volume version 3.1. [ 434.156979][T18843] ip6t_srh: unknown srh invflags 4449 [ 434.298006][T18848] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 434.549276][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 434.835996][T18868] loop0: detected capacity change from 0 to 4096 [ 434.864415][T18868] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 434.895000][T18878] loop1: detected capacity change from 0 to 16 [ 434.914673][T18868] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 434.923706][T18878] erofs: (device loop1): mounted with root inode @ nid 36. [ 434.951750][T18868] ntfs3: loop0: volume is dirty and "force" flag is not set! [ 435.004539][T18882] netlink: 'syz.3.4140': attribute type 1 has an invalid length. [ 435.863259][ T5851] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 436.082485][ T5851] usb 1-1: Using ep0 maxpacket: 8 [ 436.090140][ T5851] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.113337][ T5851] usb 1-1: config 179 has no interface number 0 [ 436.119720][ T5851] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 436.177850][T18938] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 436.198242][ T5851] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 436.203616][T18945] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 436.217572][ T5851] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.245811][ T5851] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 436.272263][ T5851] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 436.286124][ T5851] usb 1-1: config 179 interface 65 has no altsetting 0 [ 436.302566][ T5851] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 436.320657][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.361332][ T5851] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 436.507147][T18958] netlink: 'syz.3.4161': attribute type 10 has an invalid length. [ 436.522494][T18963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4162'. [ 436.554210][T18958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4161'. [ 436.748119][T18967] comedi comedi0: rti802: I/O port conflict (0x4,4) [ 436.752838][T18958] team0: Port device geneve0 added [ 436.943237][ T27] usb 1-1: USB disconnect, device number 14 [ 436.949605][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 436.994241][ T27] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 437.289256][T19006] ax25_connect(): syz.5.4169 uses autobind, please contact jreuter@yaina.de [ 437.302617][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 437.392706][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4170'. [ 437.523389][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 437.583645][ T23] usb 4-1: config 0 has an invalid interface number: 66 but max is 1 [ 437.591848][ T23] usb 4-1: config 0 has no interface number 1 [ 437.629895][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 437.699886][ T23] usb 4-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 437.732729][ T23] usb 4-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 437.754544][ T23] usb 4-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 437.783543][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 437.790441][ T23] usb 4-1: config 0 interface 66 has no altsetting 0 [ 437.814922][ T23] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 437.848390][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.869643][ T23] usb 4-1: SerialNumber: syz [ 437.891687][ T23] usb 4-1: config 0 descriptor?? [ 437.945010][ T23] usb-storage 4-1:0.0: USB Mass Storage device detected [ 437.978066][ T23] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 438.177908][ T23] usb-storage 4-1:0.66: USB Mass Storage device detected [ 438.232639][ T23] usb-storage 4-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 438.398134][ T23] usb 4-1: USB disconnect, device number 15 [ 438.592505][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4188'. [ 439.037650][T19103] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 439.223394][ T28] audit: type=1326 audit(2000000045.870:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19111 comm="syz.0.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 439.318200][ T28] audit: type=1326 audit(2000000045.890:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19111 comm="syz.0.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 439.388853][ T28] audit: type=1326 audit(2000000045.910:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19111 comm="syz.0.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 439.512550][ T28] audit: type=1326 audit(2000000045.910:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19111 comm="syz.0.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 439.607209][ T28] audit: type=1326 audit(2000000045.910:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19111 comm="syz.0.4198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 440.127806][T19147] loop3: detected capacity change from 0 to 4096 [ 440.163776][T19147] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 440.332906][ T28] audit: type=1326 audit(2000000046.980:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.5.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 440.435103][ T28] audit: type=1326 audit(2000000046.980:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.5.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 440.485249][ T28] audit: type=1326 audit(2000000047.040:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.5.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 440.541237][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.602386][ T28] audit: type=1326 audit(2000000047.040:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.5.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 440.633085][ T5844] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 440.681425][T19181] netlink: 'syz.1.4217': attribute type 10 has an invalid length. [ 440.685913][ T28] audit: type=1326 audit(2000000047.040:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.5.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 440.711383][T19181] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4217'. [ 440.819243][T19181] team0: Port device geneve0 added [ 440.876582][ T5844] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 440.892186][ T5844] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 440.910185][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.929714][ T5844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 440.939984][ T5844] usb 1-1: config 0 has no interface number 0 [ 440.947554][ T5844] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 440.993221][ T5844] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 441.027639][ T5844] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 441.050493][ T5844] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.078921][ T5844] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 441.099349][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.122477][ T5844] usb 1-1: config 0 descriptor?? [ 441.162773][ T5844] gspca_main: spca561-2.14.0 probing abcd:cdee [ 441.357940][ T5844] spca561: probe of 1-1:0.156 failed with error -22 [ 441.373828][ T5844] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 441.391922][ T5844] usb 1-1: MIDIStreaming interface descriptor not found [ 441.553377][ T5844] usb 1-1: USB disconnect, device number 15 [ 441.610033][T19204] loop1: detected capacity change from 0 to 4096 [ 441.662392][T19204] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 442.187625][T19250] delete_channel: no stack [ 442.420096][T19264] loop3: detected capacity change from 0 to 1024 [ 442.615288][T19275] loop0: detected capacity change from 0 to 1024 [ 442.679577][T19264] hfsplus: xattr searching failed [ 443.055599][T19286] loop0: detected capacity change from 0 to 2048 [ 443.091445][T19286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.501013][T19314] binder: 19312:19314 ioctl c0046209 0 returned -22 [ 443.632828][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4251'. [ 444.315799][T19355] loop1: detected capacity change from 0 to 1024 [ 444.434812][T19355] hfsplus: xattr searching failed [ 444.928015][T19390] xt_TCPMSS: Only works on TCP SYN packets [ 445.412810][T19410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4277'. [ 445.535768][ T28] audit: type=1326 audit(2000000052.170:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.5.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 445.602837][ T28] audit: type=1326 audit(2000000052.180:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.5.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 445.704583][ T28] audit: type=1326 audit(2000000052.180:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.5.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcad438ef03 code=0x7ffc0000 [ 445.793513][ T28] audit: type=1326 audit(2000000052.190:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.5.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcad438ef03 code=0x7ffc0000 [ 445.798152][T19441] xt_TCPMSS: Only works on TCP SYN packets [ 445.816809][ T28] audit: type=1326 audit(2000000052.220:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.5.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 445.938968][ T28] audit: type=1326 audit(2000000052.220:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.5.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 446.075395][T19450] ipip0: entered allmulticast mode [ 446.309727][T19467] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4289'. [ 446.472259][ T5899] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 446.569560][ T28] audit: type=1326 audit(2000000053.210:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19478 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 446.642254][ T28] audit: type=1326 audit(2000000053.210:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19478 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 446.658259][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 446.713667][ T28] audit: type=1326 audit(2000000053.210:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19478 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 446.720959][ T5899] usb 2-1: config 0 has an invalid interface number: 66 but max is 1 [ 446.776844][T19487] netlink: 'syz.5.4296': attribute type 2 has an invalid length. [ 446.782428][ T28] audit: type=1326 audit(2000000053.210:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19478 comm="syz.3.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c818eec9 code=0x7ffc0000 [ 446.804108][T19487] netlink: 'syz.5.4296': attribute type 1 has an invalid length. [ 446.815776][ T5899] usb 2-1: config 0 has no interface number 1 [ 446.829905][ T5899] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 446.857132][ T5899] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 446.912236][ T5899] usb 2-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 446.952212][ T5899] usb 2-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 446.982267][ T5899] usb 2-1: config 0 interface 0 has no altsetting 0 [ 446.988979][ T5899] usb 2-1: config 0 interface 66 has no altsetting 0 [ 447.003857][ T5899] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 447.022150][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.032385][ T5899] usb 2-1: SerialNumber: syz [ 447.053487][ T5899] usb 2-1: config 0 descriptor?? [ 447.061296][ T5899] usb-storage 2-1:0.0: USB Mass Storage device detected [ 447.115195][ T5899] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 447.179212][T19494] C: renamed from team_slave_0 (while UP) [ 447.196033][T19494] netlink: 'syz.5.4298': attribute type 1 has an invalid length. [ 447.246428][T19494] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4298'. [ 447.275784][ T5899] usb-storage 2-1:0.66: USB Mass Storage device detected [ 447.310135][T19494] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.342983][ T5899] usb-storage 2-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 447.482793][ T5899] usb 2-1: USB disconnect, device number 12 [ 447.932833][T19540] netlink: 'syz.3.4306': attribute type 2 has an invalid length. [ 447.981808][T19540] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 448.313539][T19559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.520348][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4317'. [ 448.551073][T19569] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 448.662541][T19577] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 448.982566][T19593] netlink: 'syz.5.4323': attribute type 64 has an invalid length. [ 448.990485][T19593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4323'. [ 449.050666][T19593] netlink: 'syz.5.4323': attribute type 64 has an invalid length. [ 449.069201][T19593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4323'. [ 450.609771][T19680] netlink: 'syz.1.4352': attribute type 64 has an invalid length. [ 450.647686][T19680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4352'. [ 450.678964][T19680] netlink: 'syz.1.4352': attribute type 64 has an invalid length. [ 450.718099][T19680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4352'. [ 450.762695][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 451.318873][T19709] loop3: detected capacity change from 0 to 256 [ 451.357346][T19716] netlink: 'syz.0.4363': attribute type 64 has an invalid length. [ 451.396663][T19716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4363'. [ 451.429155][T19716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4363'. [ 451.836163][T19734] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4369'. [ 452.095419][T19752] validate_nla: 1 callbacks suppressed [ 452.095437][T19752] netlink: 'syz.3.4374': attribute type 64 has an invalid length. [ 452.167402][T19752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4374'. [ 452.245436][T19752] netlink: 'syz.3.4374': attribute type 64 has an invalid length. [ 452.262242][T19752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4374'. [ 452.279139][T19762] loop1: detected capacity change from 0 to 128 [ 452.339301][T19762] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 452.380906][T19762] hpfs: filesystem error: improperly stopped [ 452.405667][T19762] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 452.462690][T19762] hpfs: You really don't want any checks? You are crazy... [ 452.492467][T19762] hpfs: hpfs_map_sector(): read error [ 452.509464][T19762] hpfs: code page support is disabled [ 452.526984][T19762] hpfs: hpfs_map_4sectors(): unaligned read [ 452.552783][T19762] hpfs: hpfs_map_4sectors(): unaligned read [ 452.558978][T19762] hpfs: filesystem error: unable to find root dir [ 452.921063][T19794] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 452.959472][T19798] 9pnet_fd: p9_fd_create_tcp (19798): problem connecting socket to 127.0.0.1 [ 453.022385][ T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 453.221940][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 453.244741][ T23] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 453.265436][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.287801][ T23] usb 6-1: config 0 has no interface number 0 [ 453.311750][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 453.329859][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.348760][ T23] usb 6-1: Product: syz [ 453.354139][ T23] usb 6-1: Manufacturer: syz [ 453.358876][ T23] usb 6-1: SerialNumber: syz [ 453.374182][ T23] usb 6-1: config 0 descriptor?? [ 453.481745][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4393'. [ 453.629839][ T23] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 453.662239][ T23] usb 6-1: No valid video chain found. [ 453.872069][ T8] usb 6-1: USB disconnect, device number 8 [ 454.135061][T19807] loop1: detected capacity change from 0 to 40427 [ 454.174027][T19807] F2FS-fs (loop1): invalid crc value [ 454.419942][T19807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 454.963681][T19883] loop0: detected capacity change from 0 to 512 [ 455.039653][T19883] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.4410: error while reading EA inode 32 err=-116 [ 455.075108][T19883] EXT4-fs (loop0): Remounting filesystem read-only [ 455.122514][T19883] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 455.182532][T19883] EXT4-fs (loop0): 1 orphan inode deleted [ 455.189834][T19883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.353980][T19883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.286246][T19939] loop0: detected capacity change from 0 to 32768 [ 457.380412][T19939] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 457.437256][T19983] kernel profiling enabled (shift: 17) [ 457.451061][T19939] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 457.914046][ T5789] ocfs2: Unmounting device (7,0) on (node local) [ 458.651348][T20034] __nla_validate_parse: 1 callbacks suppressed [ 458.651369][T20034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4455'. [ 458.678889][T20034] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4455'. [ 458.717036][T20034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4455'. [ 458.750318][T20034] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4455'. [ 458.761473][T20035] libceph: resolve '. [ 458.761473][T20035] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 458.761473][T20035] ' (ret=-3): failed [ 458.786404][T20034] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4455'. [ 459.577068][T20080] libceph: resolve '. [ 459.577068][T20080] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 459.577068][T20080] ' (ret=-3): failed [ 461.028431][T20152] loop3: detected capacity change from 0 to 1024 [ 461.058197][T20152] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 461.125812][T20152] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.4494: Invalid block bitmap block 0 in block_group 0 [ 461.216900][T20152] __quota_error: 1 callbacks suppressed [ 461.216918][T20152] Quota error (device loop3): write_blk: dquota write failed [ 461.268540][T20152] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 461.290235][T20152] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.4494: Failed to acquire dquot type 0 [ 461.311902][T20152] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.4494: Freeing blocks not in datazone - block = 0, count = 4096 [ 461.312404][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 461.341353][T20152] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.4494: Invalid inode bitmap blk 0 in block_group 0 [ 461.362342][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 461.362328][ T8664] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 461.387608][T20152] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 461.407153][ T8664] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:17: Failed to release dquot type 0 [ 461.428368][T20152] EXT4-fs (loop3): 1 orphan inode deleted [ 461.443536][T20152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.592254][T20167] netlink: 'syz.1.4499': attribute type 8 has an invalid length. [ 461.610185][T20152] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.4494: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 461.785559][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.691021][T20216] netlink: 22 bytes leftover after parsing attributes in process `syz.5.4514'. [ 462.952360][ T27] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 462.975097][ T28] audit: type=1326 audit(2000000069.620:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20231 comm="syz.1.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff223f8eec9 code=0x7ffc0000 [ 463.052739][ T28] audit: type=1326 audit(2000000069.620:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20231 comm="syz.1.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff223f8eec9 code=0x7ffc0000 [ 463.154681][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 463.175232][ T27] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 463.192606][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.212572][ T27] usb 1-1: Product: syz [ 463.222328][ T27] usb 1-1: Manufacturer: syz [ 463.227032][ T27] usb 1-1: SerialNumber: syz [ 463.254854][ T27] usb 1-1: config 0 descriptor?? [ 463.272401][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 463.290353][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 463.317011][ T27] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 464.754541][T20317] SET target dimension over the limit! [ 465.388691][ T8] usb 1-1: USB disconnect, device number 16 [ 465.546128][T20360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4553'. [ 465.602278][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 465.630630][T20365] SET target dimension over the limit! [ 465.781322][T20373] IPv6: Can't replace route, no match found [ 465.824517][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 465.845912][ T8] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 465.865188][ T8] usb 1-1: config 135 has an invalid descriptor of length 183, skipping remainder of the config [ 465.912408][ T8] usb 1-1: config 135 has no interface number 0 [ 465.929559][ T8] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 465.977779][ T8] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 466.012537][ T8] usb 1-1: config 135 interface 230 has no altsetting 0 [ 466.043314][ T8] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 466.062594][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.088861][ T8] usb 1-1: Product: syz [ 466.112169][ T8] usb 1-1: Manufacturer: syz [ 466.137550][ T8] usb 1-1: SerialNumber: syz [ 466.369781][ T8] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 466.384849][ T8] usb 1-1: No valid video chain found. [ 466.419553][ T8] usb 1-1: USB disconnect, device number 17 [ 466.468671][T20403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4565'. [ 466.750426][T20421] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4569'. [ 467.432284][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 467.573528][T20462] --map-set only usable from mangle table [ 467.642345][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 467.650515][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.674231][ T23] usb 6-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=cc.40 [ 467.692201][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.715815][ T23] usb 6-1: Product: syz [ 467.752482][ T23] usb 6-1: Manufacturer: syz [ 467.760041][ T23] usb 6-1: SerialNumber: syz [ 467.780302][ T23] usb 6-1: config 0 descriptor?? [ 467.829275][ T23] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 468.044316][T20483] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4597'. [ 468.257158][ T23] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 468.267660][ T23] pac7311: probe of 6-1:0.0 failed with error -71 [ 468.318985][ T23] usb 6-1: USB disconnect, device number 9 [ 468.339539][T20501] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4593'. [ 468.658825][T20521] loop1: detected capacity change from 0 to 128 [ 468.688386][T20521] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 468.755611][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.813492][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 468.871483][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'. [ 469.023623][T20536] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.4602'. [ 469.028719][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 469.060781][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.107503][ T9] usb 4-1: config 0 descriptor?? [ 469.340335][T20546] loop0: detected capacity change from 0 to 4096 [ 469.371492][ T9] [drm] vendor descriptor length:6 data:06 5f 01 ff 00 00 00 00 00 00 00 [ 469.399559][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 469.564801][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 469.689076][ T9] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 469.724398][ T9] [drm] Initialized udl on minor 2 [ 469.748559][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.805760][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 469.848423][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.876936][ T9] usb 4-1: USB disconnect, device number 16 [ 469.903191][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 470.760751][T20611] loop1: detected capacity change from 0 to 4096 [ 471.306392][T20639] netlink: 800 bytes leftover after parsing attributes in process `syz.5.4629'. [ 471.329988][T20639] netlink: 1301 bytes leftover after parsing attributes in process `syz.5.4629'. [ 471.368029][T20640] loop0: detected capacity change from 0 to 736 [ 472.237735][T20670] loop3: detected capacity change from 0 to 4096 [ 472.298931][T20680] netlink: 800 bytes leftover after parsing attributes in process `syz.1.4640'. [ 472.335893][T20680] netlink: 1301 bytes leftover after parsing attributes in process `syz.1.4640'. [ 473.204124][T20721] loop0: detected capacity change from 0 to 64 [ 473.224012][T20717] loop1: detected capacity change from 0 to 736 [ 473.537912][T20731] ip6gre1: entered allmulticast mode [ 474.443685][T20770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4666'. [ 474.477265][T20770] tc_dump_action: action bad kind [ 475.026093][T20801] loop1: detected capacity change from 0 to 256 [ 475.121659][T20801] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 475.175322][T20800] loop3: detected capacity change from 0 to 4096 [ 475.200338][T20800] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 475.341143][T20800] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 475.467315][T20822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4682'. [ 475.472874][ T28] audit: type=1800 audit(2000000082.110:2363): pid=20800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4679" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 475.478189][T20822] tc_dump_action: action bad kind [ 475.664800][ T5851] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 475.901012][ T5851] usb 2-1: config index 0 descriptor too short (expected 133, got 72) [ 475.913774][ T5851] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 475.932331][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.962355][ T5851] usb 2-1: Product: syz [ 475.966607][ T5851] usb 2-1: Manufacturer: syz [ 475.993104][ T5851] usb 2-1: SerialNumber: syz [ 476.022697][ T5851] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 476.113308][ T5844] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 476.362397][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 476.438669][ C1] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 476.763471][ T5851] usb 2-1: USB disconnect, device number 13 [ 476.877495][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4700'. [ 477.252199][ T5844] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 477.259430][ T5844] ath9k_htc: Failed to initialize the device [ 477.303068][ T5851] usb 2-1: ath9k_htc: USB layer deinitialized [ 477.545774][T20913] loop1: detected capacity change from 0 to 256 [ 477.962461][ T50] Bluetooth: hci3: command tx timeout [ 477.982411][T20936] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4716'. [ 478.554174][T20970] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4725'. [ 478.718269][T20979] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4730'. [ 479.125412][T20999] loop3: detected capacity change from 0 to 256 [ 479.660362][T21027] ubi31: attaching mtd0 [ 479.731123][T21027] ubi31: scanning is finished [ 479.746811][T21027] ubi31: empty MTD device detected [ 479.999713][T21027] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 480.032708][T21027] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 480.040122][T21027] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 480.111825][T21027] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 480.134696][T21027] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 480.163108][T21027] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 480.171286][T21027] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 866069393 [ 480.262419][T21027] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 480.308276][T21043] ubi31: background thread "ubi_bgt31d" started, PID 21043 [ 481.024947][ T5844] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 481.178889][T21089] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 481.192748][T21089] bridge5: entered promiscuous mode [ 481.198044][T21089] bridge5: entered allmulticast mode [ 481.241692][ T5844] usb 1-1: config index 0 descriptor too short (expected 133, got 72) [ 481.254703][ T5844] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 481.282406][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.300897][ T5844] usb 1-1: Product: syz [ 481.311047][ T5844] usb 1-1: Manufacturer: syz [ 481.321195][ T5844] usb 1-1: SerialNumber: syz [ 481.350725][ T5844] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.376522][ T5851] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 481.431794][T21067] loop3: detected capacity change from 0 to 32768 [ 481.542621][T21067] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 481.542621][T21067] [ 481.580570][T21067] ERROR: (device loop3): remounting filesystem as read-only [ 481.600662][T21067] jfs_create: dtInsert returned -EIO [ 481.606455][T21067] ERROR: (device loop3): jfs_create: [ 481.606455][T21067] [ 481.710642][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 481.856353][T21107] loop3: detected capacity change from 0 to 164 [ 481.897473][T21107] Unable to read rock-ridge attributes [ 481.914258][ T8] usb 1-1: USB disconnect, device number 18 [ 481.962479][T21107] Unable to read rock-ridge attributes [ 481.990149][T21107] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 482.024170][T21116] ipvlan0: entered promiscuous mode [ 482.444783][ T5851] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 482.489904][ T5851] ath9k_htc: Failed to initialize the device [ 482.527718][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 482.882709][T21148] sctp: [Deprecated]: syz.3.4775 (pid 21148) Use of int in maxseg socket option. [ 482.882709][T21148] Use struct sctp_assoc_value instead [ 483.783754][T21183] sctp: [Deprecated]: syz.5.4785 (pid 21183) Use of int in maxseg socket option. [ 483.783754][T21183] Use struct sctp_assoc_value instead [ 483.899411][T21181] loop3: detected capacity change from 0 to 4096 [ 484.016778][T21181] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 484.101002][T21181] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 484.109985][T21181] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 484.186709][T21196] loop1: detected capacity change from 0 to 164 [ 484.213985][T21195] netlink: 'syz.0.4790': attribute type 32 has an invalid length. [ 484.228493][T21196] Unable to read rock-ridge attributes [ 484.312777][T21196] Unable to read rock-ridge attributes [ 484.352425][T21196] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 484.438736][T21206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.709440][T21217] netlink: 'syz.1.4795': attribute type 3 has an invalid length. [ 484.971162][T21229] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 485.027979][T21229] bridge2: entered promiscuous mode [ 485.043747][T21229] bridge2: entered allmulticast mode [ 485.263124][T21246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.971315][T21278] loop3: detected capacity change from 0 to 1024 [ 486.159830][T21285] PKCS8: Unsupported PKCS#8 version [ 486.795272][T21254] loop1: detected capacity change from 0 to 40427 [ 486.834310][T21254] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 486.872216][T21254] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 486.977235][T21313] netlink: 'syz.5.4826': attribute type 3 has an invalid length. [ 486.991416][T21254] F2FS-fs (loop1): Found nat_bits in checkpoint [ 487.024821][T21314] loop3: detected capacity change from 0 to 2048 [ 487.201165][T21254] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 487.222397][T21254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 487.877357][T21343] PKCS8: Unsupported PKCS#8 version [ 488.141777][T21351] loop3: detected capacity change from 0 to 1024 [ 489.106993][T21388] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 489.375463][T21395] loop3: detected capacity change from 0 to 2048 [ 489.404283][T21395] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504 [ 489.445839][T21395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.510772][T21364] loop1: detected capacity change from 0 to 32768 [ 489.568301][T21364] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 489.568301][T21364] [ 489.618203][T21364] ERROR: (device loop1): remounting filesystem as read-only [ 489.653822][T21364] jfs_create: dtInsert returned -EIO [ 489.694589][T21364] ERROR: (device loop1): jfs_create: [ 489.694589][T21364] [ 490.000088][T21415] vlan0: entered promiscuous mode [ 491.384741][T21477] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 491.415626][T21477] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 491.429415][T21477] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 491.719457][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4882'. [ 491.739126][T21494] netlink: 540 bytes leftover after parsing attributes in process `syz.3.4882'. [ 491.755139][T21494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4882'. [ 492.140284][T21515] x_tables: unsorted underflow at hook 2 [ 492.268828][ T5899] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 492.441313][T21529] netlink: 'syz.0.4894': attribute type 1 has an invalid length. [ 492.494308][ T5899] usb 6-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 492.523371][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.553496][ T5899] usb 6-1: config 0 descriptor?? [ 492.823328][ T5899] snd-usb-hiface: probe of 6-1:0.0 failed with error -22 [ 493.033887][ T9] usb 6-1: USB disconnect, device number 10 [ 493.229250][T21578] autofs4:pid:21578:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 493.244575][T21578] autofs4:pid:21578:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 493.412323][ T5851] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 493.507427][T21569] loop3: detected capacity change from 0 to 32768 [ 493.546250][T21569] JBD2: Ignoring recovery information on journal [ 493.657187][ T5851] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 493.677159][T21569] (syz.3.4905,21569,1):ocfs2_clear_journal_error:1147 ERROR: File system error 251658240 recorded in journal 0. [ 493.702784][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.711318][ T5851] usb 2-1: Product: syz [ 493.734666][T21569] (syz.3.4905,21569,1):ocfs2_clear_journal_error:1149 ERROR: File system on device loop3 needs checking. [ 493.762569][ T5851] usb 2-1: Manufacturer: syz [ 493.767703][ T5851] usb 2-1: SerialNumber: syz [ 493.780305][T21569] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 493.823662][ T5851] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 493.887064][ T5844] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 493.979938][T21569] (syz.3.4905,21569,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=142 [ 494.028694][T21569] (syz.3.4905,21569,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 494.072304][T21569] (syz.3.4905,21569,0):ocfs2_mknod:298 ERROR: status = -2 [ 494.092985][T21569] (syz.3.4905,21569,0):ocfs2_mknod:502 ERROR: status = -2 [ 494.168872][ C1] usb 2-1: ath: unknown panic pattern! [ 494.201945][T21569] (syz.3.4905,21569,1):ocfs2_create:676 ERROR: status = -2 [ 494.327028][ T5790] (syz-executor,5790,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 494.384923][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 494.406027][ T5851] usb 2-1: USB disconnect, device number 14 [ 494.678681][T21623] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 494.694512][T21623] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 494.707125][T21623] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 495.010318][ T5844] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 495.027757][ T5844] ath9k_htc: Failed to initialize the device [ 495.041059][T21637] batadv0: entered promiscuous mode [ 495.052937][ T5851] usb 2-1: ath9k_htc: USB layer deinitialized [ 495.089627][T21637] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 495.722390][T21670] netlink: 'syz.0.4934': attribute type 1 has an invalid length. [ 495.980691][T21679] netlink: 'syz.0.4938': attribute type 32 has an invalid length. [ 496.002513][T21682] program syz.3.4939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.011931][T21679] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4938'. [ 496.062811][T21651] loop1: detected capacity change from 0 to 32768 [ 496.205741][T21651] JBD2: Ignoring recovery information on journal [ 496.341136][T21696] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 496.353456][T21696] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 496.369430][T21696] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 496.387635][T21651] (syz.1.4928,21651,1):ocfs2_clear_journal_error:1147 ERROR: File system error 251658240 recorded in journal 0. [ 496.412823][T21651] (syz.1.4928,21651,1):ocfs2_clear_journal_error:1149 ERROR: File system on device loop1 needs checking. [ 496.446405][T21651] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 496.670290][T21651] (syz.1.4928,21651,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=142 [ 496.708516][T21710] loop3: detected capacity change from 0 to 256 [ 496.715212][T21651] (syz.1.4928,21651,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 496.725315][T21651] (syz.1.4928,21651,1):ocfs2_mknod:298 ERROR: status = -2 [ 496.767741][T21651] (syz.1.4928,21651,1):ocfs2_mknod:502 ERROR: status = -2 [ 496.789963][T21651] (syz.1.4928,21651,1):ocfs2_create:676 ERROR: status = -2 [ 496.855467][T21710] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 496.880662][T21710] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 496.894267][T21710] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 496.949366][ T5788] (syz-executor,5788,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 497.007091][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 497.526073][T21738] loop3: detected capacity change from 0 to 256 [ 497.588991][T21747] netlink: 'syz.1.4950': attribute type 32 has an invalid length. [ 497.599936][T21747] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4950'. [ 497.640999][T21738] FAT-fs (loop3): Directory bread(block 64) failed [ 497.678840][T21738] FAT-fs (loop3): Directory bread(block 65) failed [ 497.693505][T21738] FAT-fs (loop3): Directory bread(block 66) failed [ 497.727562][T21738] FAT-fs (loop3): Directory bread(block 67) failed [ 497.738996][T21738] FAT-fs (loop3): Directory bread(block 68) failed [ 497.750734][T21738] FAT-fs (loop3): Directory bread(block 69) failed [ 497.761879][T21738] FAT-fs (loop3): Directory bread(block 70) failed [ 497.781528][T21738] FAT-fs (loop3): Directory bread(block 71) failed [ 497.788404][T21752] comedi comedi4: bad chanlist[0]=0x000040e3 chan=16611 range length=2 [ 497.817809][T21738] FAT-fs (loop3): Directory bread(block 72) failed [ 497.836097][T21738] FAT-fs (loop3): Directory bread(block 73) failed [ 498.791217][T21796] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4972'. [ 499.597099][T21835] loop3: detected capacity change from 0 to 256 [ 499.619989][T21835] exfat: Deprecated parameter 'namecase' [ 499.637032][T21835] exfat: Deprecated parameter 'utf8' [ 499.704520][T21835] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 500.462604][T21864] tipc: Started in network mode [ 500.488264][T21864] tipc: Node identity 9a0ca3c941e4, cluster identity 4711 [ 500.525214][T21864] tipc: Enabled bearer , priority 15 [ 500.727460][ T5844] kernel write not supported for file /1332/gid_map (pid: 5844 comm: kworker/1:4) [ 501.072674][T21884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.274423][T21887] loop1: detected capacity change from 0 to 4096 [ 501.330444][T21867] loop3: detected capacity change from 0 to 32768 [ 501.355419][T21887] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 501.406511][T21867] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 501.462686][T21887] ntfs3: loop1: Failed to load $Extend (-22). [ 501.506814][T21887] ntfs3: loop1: Failed to initialize $Extend. [ 501.552027][T21867] (syz.3.4996,21867,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=1048, name_len=0 [ 501.602205][T21867] (syz.3.4996,21867,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 501.642137][T21867] (syz.3.4996,21867,1):ocfs2_mknod:298 ERROR: status = -2 [ 501.646147][ T9] tipc: Node number set to 3689456585 [ 501.649325][T21867] (syz.3.4996,21867,1):ocfs2_mknod:502 ERROR: status = -2 [ 501.815653][T21867] (syz.3.4996,21867,0):ocfs2_create:676 ERROR: status = -2 [ 501.971820][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.006059][ T5790] ocfs2: Unmounting device (7,3) on (node local) [ 502.511728][T21925] loop3: detected capacity change from 0 to 128 [ 502.623972][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 502.812263][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 502.820515][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.839150][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.862163][ T23] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 502.909088][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.933295][ T23] usb 6-1: config 0 descriptor?? [ 503.125893][T21945] loop3: detected capacity change from 0 to 256 [ 503.246633][T21945] FAT-fs (loop3): Directory bread(block 64) failed [ 503.270961][T21945] FAT-fs (loop3): Directory bread(block 65) failed [ 503.293122][T21945] FAT-fs (loop3): Directory bread(block 66) failed [ 503.318226][T21945] FAT-fs (loop3): Directory bread(block 67) failed [ 503.345771][T21945] FAT-fs (loop3): Directory bread(block 68) failed [ 503.386162][T21945] FAT-fs (loop3): Directory bread(block 69) failed [ 503.430600][T21945] FAT-fs (loop3): Directory bread(block 70) failed [ 503.444458][ T23] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 503.462528][T21945] FAT-fs (loop3): Directory bread(block 71) failed [ 503.469454][T21945] FAT-fs (loop3): Directory bread(block 72) failed [ 503.502515][T21945] FAT-fs (loop3): Directory bread(block 73) failed [ 503.569147][ T23] kone 0003:1E7D:2CED.0001: couldn't init struct kone_device [ 503.592299][ T23] kone 0003:1E7D:2CED.0001: couldn't install mouse [ 503.665571][ T23] kone: probe of 0003:1E7D:2CED.0001 failed with error -5 [ 503.716391][T21936] loop1: detected capacity change from 0 to 32768 [ 503.724509][ T23] usb 6-1: USB disconnect, device number 11 [ 503.836128][T21936] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 503.932256][T21936] XFS (loop1): Ending clean mount [ 503.965409][T21936] XFS (loop1): Quotacheck needed: Please wait. [ 504.112267][T21936] XFS (loop1): Quotacheck: Done. [ 504.348711][ T5788] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 506.059020][ T28] audit: type=1326 audit(2000000112.700:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 506.112366][ T28] audit: type=1326 audit(2000000112.700:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 506.193212][ T28] audit: type=1326 audit(2000000112.700:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="syz.0.5049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 506.270600][ T28] audit: type=1326 audit(2000000112.700:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 506.360700][ T28] audit: type=1326 audit(2000000112.700:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 506.412218][ T28] audit: type=1326 audit(2000000112.700:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 506.498702][ T28] audit: type=1326 audit(2000000112.700:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb170f8ef03 code=0x7ffc0000 [ 506.569324][ T28] audit: type=1326 audit(2000000112.700:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb170f8d97f code=0x7ffc0000 [ 506.644784][ T28] audit: type=1326 audit(2000000112.700:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb170f8ef57 code=0x7ffc0000 [ 506.701384][ T28] audit: type=1326 audit(2000000112.700:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22066 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb170f8d710 code=0x7ffc0000 [ 506.822578][ T5899] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 507.002458][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 507.016224][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.028538][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.068213][ T5899] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 507.087758][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.092400][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 507.124091][ T5899] usb 4-1: config 0 descriptor?? [ 507.209461][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.248404][ T9] usb 1-1: config 0 has no interface number 0 [ 507.276686][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.329108][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.364917][ T9] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 507.398839][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.425217][ T9] usb 1-1: config 0 descriptor?? [ 507.560198][T22116] can0: slcan on ptm0. [ 507.587626][ T5899] wacom 0003:056A:0325.0002: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 507.777027][ T5899] usb 4-1: USB disconnect, device number 17 [ 507.806915][T22115] can0 (unregistered): slcan off ptm0. [ 507.906235][T22129] fido_id[22129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 507.940500][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.0003/input/input20 [ 508.115559][T22156] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 508.150430][T22156] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 508.158805][T22156] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 508.185498][T22156] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 508.222527][T22156] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 508.231621][ T9] holtek_kbd 0003:04D9:A055.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 508.250734][T22156] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 508.311069][ T9] usb 1-1: USB disconnect, device number 19 [ 508.556349][T22178] fido_id[22178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 509.188468][T22227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5076'. [ 509.713944][T22251] netlink: 'syz.3.5084': attribute type 1 has an invalid length. [ 510.186120][T22273] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5090'. [ 510.347725][T22281] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 510.392962][T22281] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 510.399530][T22281] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 510.400908][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5094'. [ 510.458775][T22281] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 510.474683][T22281] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 510.501443][T22281] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 510.518651][T22281] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 510.543639][T22281] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 510.550400][T22281] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 510.582215][T22281] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 510.588772][T22281] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 510.635321][T22297] loop1: detected capacity change from 0 to 64 [ 510.642389][T22281] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 510.660288][T22281] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 510.671553][T22281] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 510.705967][T22281] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 510.722319][T22281] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 510.749716][T22281] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 510.762467][T22281] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 510.769139][T22281] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 510.793376][T22281] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 510.818642][T22281] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 510.831823][T22281] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 510.871357][T22281] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 511.352362][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 511.552257][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 511.568238][ T5899] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 511.595063][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 511.642488][ T9] usb 2-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 511.651667][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.695886][ T9] usb 2-1: config 0 descriptor?? [ 511.804810][ T5899] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.818240][ T5899] usb 6-1: config 0 has no interface number 0 [ 511.824770][ T5899] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.836132][ T5899] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.846200][ T5899] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 511.855375][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.873938][ T5899] usb 6-1: config 0 descriptor?? [ 512.140641][ T5851] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 512.191166][ T9] smartjoyplus 0003:6666:8802.0005: hidraw0: USB HID v0.03 Device [HID 6666:8802] on usb-dummy_hcd.1-1/input0 [ 512.229075][ T5851] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 512.237491][ T9] smartjoyplus 0003:6666:8802.0005: no output reports found [ 512.327183][ T5899] prodikeys 0003:041E:2801.0006: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 512.388157][ T5899] hid_prodikeys: hid-prodikeys: failed to find output report [ 512.388157][ T5899] [ 512.439145][ T8] usb 2-1: USB disconnect, device number 15 [ 512.505236][T22374] fido_id[22374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 512.617394][ T5899] usb 6-1: USB disconnect, device number 12 [ 512.719297][T22415] loop3: detected capacity change from 0 to 512 [ 512.735113][T22408] fido_id[22408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 512.748522][T22415] EXT4-fs: Ignoring removed nobh option [ 512.791593][T22415] EXT4-fs (loop3): Test dummy encryption mode enabled [ 512.819929][T22415] EXT4-fs error (device loop3): __ext4_iget:5053: inode #11: block 1: comm syz.3.5121: invalid block [ 512.869711][T22415] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5121: couldn't read orphan inode 11 (err -117) [ 512.908120][T22415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.980745][T22415] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #2: comm syz.3.5121: Directory hole found for htree leaf block 0 [ 513.072920][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.172476][T22431] netlink: 'syz.1.5125': attribute type 10 has an invalid length. [ 513.263622][T22431] team0: Port device dummy0 added [ 513.336335][T22436] netlink: 'syz.1.5125': attribute type 10 has an invalid length. [ 513.509710][T22436] team0: Port device dummy0 removed [ 513.544998][T22436] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 513.901099][T22459] loop1: detected capacity change from 0 to 4096 [ 513.982270][T22469] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 514.142872][T22459] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 514.179294][T22459] Remounting filesystem read-only [ 514.187384][T22475] loop3: detected capacity change from 0 to 256 [ 514.301527][T22475] FAT-fs (loop3): Directory bread(block 64) failed [ 514.329834][T22475] FAT-fs (loop3): Directory bread(block 65) failed [ 514.361457][T22475] FAT-fs (loop3): Directory bread(block 66) failed [ 514.384889][T22475] FAT-fs (loop3): Directory bread(block 67) failed [ 514.407782][T22475] FAT-fs (loop3): Directory bread(block 68) failed [ 514.434216][T22475] FAT-fs (loop3): Directory bread(block 69) failed [ 514.445533][T22475] FAT-fs (loop3): Directory bread(block 70) failed [ 514.467878][T22475] FAT-fs (loop3): Directory bread(block 71) failed [ 514.470200][T22484] Bluetooth: MGMT ver 1.22 [ 514.475325][T22475] FAT-fs (loop3): Directory bread(block 72) failed [ 514.501018][T22475] FAT-fs (loop3): Directory bread(block 73) failed [ 514.639353][T22490] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 514.664766][T22490] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 514.692375][T22490] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 514.704951][T22490] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 515.068139][T22518] ipvlan2: entered promiscuous mode [ 515.262600][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 515.305113][T22531] loop3: detected capacity change from 0 to 1024 [ 515.305559][T22528] loop1: detected capacity change from 0 to 512 [ 515.356288][T22528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.449954][T22528] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5151: invalid indirect mapped block 4294967295 (level 1) [ 515.462215][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 515.478974][T22528] EXT4-fs (loop1): Remounting filesystem read-only [ 515.486444][T22528] EXT4-fs (loop1): 2 truncates cleaned up [ 515.494310][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.518647][T22528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.531736][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 515.565117][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 515.602414][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.687534][T22546] loop3: detected capacity change from 0 to 128 [ 515.696553][ T9] usb 1-1: config 0 descriptor?? [ 515.781110][T22546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 515.804890][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.808752][T22546] System zones: 1-3, 19-19, 35-36 [ 515.823121][T22546] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 515.859512][T22546] ext4 filesystem being mounted at /1292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 515.983482][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 516.042693][ T50] Bluetooth: hci3: command tx timeout [ 516.090577][ T5790] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 516.145361][ T9] ryos 0003:1E7D:3138.0007: unknown main item tag 0x0 [ 516.169699][ T9] ryos 0003:1E7D:3138.0007: unknown main item tag 0x0 [ 516.192184][ T9] ryos 0003:1E7D:3138.0007: unknown main item tag 0x0 [ 516.210840][ T8] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 516.222939][ T9] ryos 0003:1E7D:3138.0007: unknown main item tag 0x0 [ 516.229829][ T9] ryos 0003:1E7D:3138.0007: unknown main item tag 0x0 [ 516.242926][ T8] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 516.251893][ T8] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 516.293272][ T9] ryos 0003:1E7D:3138.0007: hidraw0: USB HID v0.05 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 516.316032][ T8] usb 6-1: config 220 has no interface number 2 [ 516.341452][ T8] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 516.372873][ T8] usb 6-1: config 220 interface 0 has no altsetting 0 [ 516.379837][ T8] usb 6-1: config 220 interface 76 has no altsetting 0 [ 516.397760][ T8] usb 6-1: config 220 interface 1 has no altsetting 0 [ 516.422773][ T8] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 516.432424][ T5851] usb 1-1: USB disconnect, device number 20 [ 516.432579][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.491600][ T8] usb 6-1: Product: syz [ 516.515038][ T8] usb 6-1: Manufacturer: syz [ 516.520080][ T8] usb 6-1: SerialNumber: syz [ 516.556404][T22578] fido_id[22578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 516.632350][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 516.789075][ T8] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 516.798584][ T8] usb 6-1: No valid video chain found. [ 516.805200][ T8] usb 6-1: selecting invalid altsetting 0 [ 516.836748][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 516.863866][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.886771][ T8] usb 6-1: selecting invalid altsetting 0 [ 516.900758][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.912637][ T8] usbtest: probe of 6-1:220.1 failed with error -22 [ 516.920425][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 516.936871][ T8] usb 6-1: USB disconnect, device number 13 [ 516.947080][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 517.022337][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.056189][ T9] usb 2-1: config 0 descriptor?? [ 517.188721][T22622] loop3: detected capacity change from 0 to 4096 [ 517.252625][T22622] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 517.270049][T22632] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 517.298625][T22622] NILFS (loop3): mounting fs with errors [ 517.508568][ T9] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 517.557424][ T9] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 517.617374][ T9] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 517.676395][ T9] microsoft 0003:045E:07DA.0008: no inputs found [ 517.722917][ T9] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 517.807316][ T9] usb 2-1: USB disconnect, device number 16 [ 517.987302][T22641] fido_id[22641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 518.998171][T22697] loop1: detected capacity change from 0 to 512 [ 519.081501][T22697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.105724][T22697] ext4 filesystem being mounted at /1346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.316262][T22697] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.5176: invalid size [ 519.331978][T22701] loop3: detected capacity change from 0 to 4096 [ 519.340583][T22697] EXT4-fs (loop1): Remounting filesystem read-only [ 519.436317][T22710] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 519.463715][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.475124][ T8661] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 519.510269][T22701] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 519.530982][ T8661] __quota_error: 4 callbacks suppressed [ 519.531001][ T8661] Quota error (device loop1): write_blk: dquota write failed [ 519.574479][T22701] Remounting filesystem read-only [ 519.579884][ T8661] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 520.031947][T22734] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 520.054927][T22729] loop1: detected capacity change from 0 to 4096 [ 520.073556][T22734] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 520.092898][T22729] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 520.114429][T22734] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 520.131200][T22734] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 520.172962][T22734] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 520.179535][T22734] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 520.235961][T22734] comedi comedi3: 8255: I/O port conflict (0x11,4) [ 520.262388][T22734] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 520.289746][T22734] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 520.312271][T22734] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 520.318865][T22734] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 520.372774][T22734] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 520.388703][T22734] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 520.419940][T22734] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 520.434812][T22734] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 520.441959][T22734] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 520.450966][T22734] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 520.458822][T22734] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 520.465973][T22734] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 520.473165][T22734] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 520.479753][T22734] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 520.487425][T22734] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 520.502416][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 520.502496][T22734] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 520.637933][T22753] loop1: detected capacity change from 0 to 2048 [ 520.696866][T22753] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.731686][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.752227][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.811151][ T28] audit: type=1326 audit(2000000127.450:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.5.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 520.840772][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 520.873491][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.914410][ T9] usb 1-1: config 0 descriptor?? [ 520.914472][ T28] audit: type=1326 audit(2000000127.450:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.5.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 521.000594][ T28] audit: type=1326 audit(2000000127.450:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.5.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 521.082553][ T28] audit: type=1326 audit(2000000127.450:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.5.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 521.182736][ T28] audit: type=1326 audit(2000000127.450:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.5.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 521.206129][ T28] audit: type=1326 audit(2000000127.450:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.5.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 521.230623][ T28] audit: type=1326 audit(2000000127.450:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22758 comm="syz.5.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 521.315251][ T28] audit: type=1326 audit(2000000127.730:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22768 comm="syz.5.5195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad438eec9 code=0x7ffc0000 [ 521.360471][ T9] lenovo 0003:17EF:6067.0009: unknown main item tag 0xd [ 521.423115][ T9] lenovo 0003:17EF:6067.0009: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 521.631921][ T9] usb 1-1: USB disconnect, device number 21 [ 521.852405][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 521.923750][ T8] IPVS: starting estimator thread 0... [ 521.930001][T22818] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 522.022489][T22819] IPVS: using max 17 ests per chain, 40800 per kthread [ 522.044793][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.061614][ T23] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 522.078140][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.093555][ T23] usb 4-1: config 0 descriptor?? [ 522.170963][T22830] netlink: 'syz.5.5205': attribute type 10 has an invalid length. [ 522.543242][ T23] hid_mf 0003:0079:1846.000A: item fetching failed at offset 5/7 [ 522.579880][ T23] hid_mf 0003:0079:1846.000A: HID parse failed. [ 522.604100][ T23] hid_mf: probe of 0003:0079:1846.000A failed with error -22 [ 522.776248][ T8] usb 4-1: USB disconnect, device number 18 [ 523.537904][T22875] loop3: detected capacity change from 0 to 2048 [ 523.582524][T22875] NILFS (loop3): invalid segment: Inconsistency found [ 523.604347][T22875] NILFS (loop3): trying rollback from an earlier position [ 523.643255][T22875] NILFS (loop3): recovery complete [ 523.660426][T22882] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.705486][T22877] loop1: detected capacity change from 0 to 4096 [ 524.124373][ T50] Bluetooth: hci3: command tx timeout [ 524.157554][T22895] vcan0: MTU too low for tipc bearer [ 524.163278][T22895] tipc: Enabling of bearer rejected, failed to enable media [ 524.496843][ T8] IPVS: starting estimator thread 0... [ 524.502571][T22909] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 524.618122][T22910] IPVS: using max 17 ests per chain, 40800 per kthread [ 524.925245][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 524.925262][ T28] audit: type=1326 audit(2000000131.560:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.0.5242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 524.977708][ T28] audit: type=1326 audit(2000000131.560:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.0.5242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 525.005407][ T28] audit: type=1326 audit(2000000131.580:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.0.5242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 525.056723][ T28] audit: type=1326 audit(2000000131.580:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.0.5242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 525.091341][ T28] audit: type=1326 audit(2000000131.580:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.0.5242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 525.124940][ T28] audit: type=1326 audit(2000000131.590:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.0.5242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 525.165267][ T28] audit: type=1326 audit(2000000131.590:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22927 comm="syz.0.5242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb170f8eec9 code=0x7ffc0000 [ 525.205347][ T27] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 525.402803][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 525.427441][ T27] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.439633][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 525.453704][ T27] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 525.473312][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.477265][T22939] block device autoloading is deprecated and will be removed. [ 525.502792][ T27] usb 4-1: config 0 descriptor?? [ 525.833573][T22922] loop1: detected capacity change from 0 to 40427 [ 525.867048][T22922] F2FS-fs (loop1): invalid crc value [ 525.946108][T22922] F2FS-fs (loop1): Found nat_bits in checkpoint [ 525.965391][ T27] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 526.012759][ T27] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 526.019635][ T27] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 526.052283][ T27] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 526.059166][ T27] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 526.108723][ T27] ryos 0003:1E7D:3138.000B: hidraw0: USB HID v0.05 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 526.136157][T22922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 526.275006][ T23] usb 4-1: USB disconnect, device number 19 [ 526.416317][T22966] fido_id[22966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 526.874686][T22999] loop0: detected capacity change from 0 to 256 [ 527.072189][ T28] audit: type=1800 audit(2000000133.710:2399): pid=22999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5245" name="file1" dev="loop0" ino=1048681 res=0 errno=0 [ 527.405838][T23026] loop0: detected capacity change from 0 to 512 [ 527.465091][T23026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.599081][T23026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.612330][T23026] ext4 filesystem being mounted at /1353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.858427][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.121017][T23055] loop0: detected capacity change from 0 to 2048 [ 528.175628][T23064] sctp: [Deprecated]: syz.3.5259 (pid 23064) Use of int in maxseg socket option. [ 528.175628][T23064] Use struct sctp_assoc_value instead [ 528.267122][T23069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 528.290187][ T8] kernel write not supported for file /sg0 (pid: 8 comm: kworker/0:0) [ 528.835971][T23093] loop3: detected capacity change from 0 to 8 [ 529.045710][T23102] loop0: detected capacity change from 0 to 256 [ 529.070189][T23093] SQUASHFS error: xz decompression failed, data probably corrupt [ 529.127499][T23093] SQUASHFS error: Failed to read block 0xa8: -5 [ 529.196650][T23093] SQUASHFS error: xz decompression failed, data probably corrupt [ 529.226967][T23093] SQUASHFS error: Failed to read block 0xa8: -5 [ 529.272325][ T28] audit: type=1800 audit(2000000135.900:2400): pid=23093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5266" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 529.616246][T23127] usb usb9: usbfs: process 23127 (syz.5.5273) did not claim interface 3 before use [ 529.705235][T23130] loop1: detected capacity change from 0 to 1024 [ 529.855791][T23130] hfsplus: request for non-existent node 33423360 in B*Tree [ 529.901275][T23130] hfsplus: request for non-existent node 33423360 in B*Tree [ 530.170374][T23155] loop1: detected capacity change from 0 to 128 [ 530.203868][T23155] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 530.232145][T23155] hpfs: filesystem error: improperly stopped [ 530.238412][T23155] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 530.289395][T23155] hpfs: You really don't want any checks? You are crazy... [ 530.338872][T23155] hpfs: hpfs_map_sector(): read error [ 530.355019][T23155] hpfs: code page support is disabled [ 530.368432][T23162] netlink: 'syz.3.5282': attribute type 4 has an invalid length. [ 530.382339][T23155] hpfs: hpfs_map_4sectors(): unaligned read [ 530.388484][T23155] hpfs: hpfs_map_4sectors(): unaligned read [ 530.407013][T23162] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5282'. [ 530.432285][T23155] hpfs: filesystem error: unable to find root dir [ 530.929526][T23179] loop0: detected capacity change from 0 to 4096 [ 530.980736][T23179] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 531.210734][ T1191] kernel write not supported for file /sg0 (pid: 1191 comm: kworker/0:2) [ 531.482517][T23205] netlink: 'syz.5.5295': attribute type 4 has an invalid length. [ 531.490339][T23205] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5295'. [ 531.536869][T23209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5294'. [ 531.911798][T23187] loop1: detected capacity change from 0 to 32768 [ 531.934312][T23187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5290 (23187) [ 531.949320][T23224] loop0: detected capacity change from 0 to 512 [ 531.988375][T23187] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.023855][T23187] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 532.037982][T23187] BTRFS info (device loop1): using free space tree [ 532.166226][T23187] BTRFS info (device loop1): enabling ssd optimizations [ 532.192308][T23187] BTRFS info (device loop1): auto enabling async discard [ 532.261306][T23224] loop0: detected capacity change from 0 to 4096 [ 532.303574][T23224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.322295][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 532.387916][T23224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 532.414217][T23224] EXT4-fs (loop0): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 532.430780][T23224] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 532.538903][ T23] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 532.549926][ T5788] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.565612][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.571988][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.584388][ T23] usb 4-1: Product: syz [ 532.588683][ T23] usb 4-1: Manufacturer: syz [ 532.600471][ T23] usb 4-1: SerialNumber: syz [ 532.625551][ T23] usb 4-1: config 0 descriptor?? [ 533.002675][ T23] usb 4-1: USB disconnect, device number 20 [ 533.783067][T23311] tipc: Started in network mode [ 533.788033][T23311] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 533.848264][T23311] tipc: Enabled bearer , priority 0 [ 533.915667][T23315] overlayfs: workdir and upperdir must be separate subtrees [ 534.294345][T23334] vivid-000: ================= START STATUS ================= [ 534.311554][T23339] loop0: detected capacity change from 0 to 128 [ 534.332687][T23334] vivid-000: Radio HW Seek Mode: Bounded [ 534.368216][T23334] vivid-000: Radio Programmable HW Seek: false [ 534.414841][T23334] vivid-000: RDS Rx I/O Mode: Block I/O [ 534.421340][T23334] vivid-000: Generate RBDS Instead of RDS: false [ 534.477357][T23334] vivid-000: RDS Reception: true [ 534.487792][T23334] vivid-000: RDS Program Type: 0 inactive [ 534.499102][T23334] vivid-000: RDS PS Name: inactive [ 534.562232][T23334] vivid-000: RDS Radio Text: inactive [ 534.575853][T23334] vivid-000: RDS Traffic Announcement: false inactive [ 534.601177][T23334] vivid-000: RDS Traffic Program: false inactive [ 534.652604][T23334] vivid-000: RDS Music: false inactive [ 534.658205][T23334] vivid-000: ================== END STATUS ================== [ 534.772554][T23356] sp0: Synchronizing with TNC [ 534.968912][T23363] loop3: detected capacity change from 0 to 4096 [ 534.982442][ T27] tipc: Node number set to 11578026 [ 535.871678][T23353] loop0: detected capacity change from 0 to 32768 [ 535.888697][T23401] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 535.945308][T23353] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 536.304048][T23353] XFS (loop0): Ending clean mount [ 536.327921][T23353] XFS (loop0): Quotacheck needed: Please wait. [ 536.515420][T23353] XFS (loop0): Quotacheck: Done. [ 536.531389][T23432] loop3: detected capacity change from 0 to 512 [ 536.636514][T23432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 536.682389][T23432] ext4 filesystem being mounted at /1337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.853543][ T5789] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 536.902803][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 537.651962][T23470] ================================================================== [ 537.660127][T23470] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 537.660357][T23472] Dead loop on virtual device ip6_vti0, fix it urgently! [ 537.667881][T23470] Read of size 4 at addr ffff88805b75cca0 by task syz.5.5346/23470 [ 537.667906][T23470] [ 537.667924][T23470] CPU: 0 PID: 23470 Comm: syz.5.5346 Not tainted syzkaller #0 [ 537.667944][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 537.667960][T23470] Call Trace: [ 537.667970][T23470] [ 537.667983][T23470] dump_stack_lvl+0x16c/0x230 [ 537.668015][T23470] ? __lock_acquire+0x7c80/0x7c80 [ 537.668037][T23470] ? show_regs_print_info+0x20/0x20 [ 537.668059][T23470] ? load_image+0x3b0/0x3b0 [ 537.668086][T23470] ? __virt_addr_valid+0x469/0x540 [ 537.734727][T23470] print_report+0xac/0x220 [ 537.739260][T23470] ? xfrm_alloc_spi+0x598/0x11f0 [ 537.744224][T23470] kasan_report+0x117/0x150 [ 537.748951][T23470] ? xfrm_alloc_spi+0x598/0x11f0 [ 537.753920][T23470] xfrm_alloc_spi+0x598/0x11f0 [ 537.758715][T23470] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 537.763772][T23470] ? verify_spi_info+0x120/0x120 [ 537.768731][T23470] ? xfrm_find_acq+0x79/0x90 [ 537.773342][T23470] xfrm_alloc_userspi+0x5d1/0xa90 [ 537.778383][T23470] ? end_current_label_crit_section+0x170/0x170 [ 537.784651][T23470] ? apparmor_capable+0x137/0x1a0 [ 537.789691][T23470] ? xfrm_dump_policy_done+0x90/0x90 [ 537.794993][T23470] ? __nla_parse+0x40/0x50 [ 537.799429][T23470] xfrm_user_rcv_msg+0x596/0x870 [ 537.804388][T23470] ? lockdep_hardirqs_on+0x98/0x150 [ 537.809619][T23470] ? xfrm_netlink_rcv+0x90/0x90 [ 537.814491][T23470] ? __local_bh_enable_ip+0x12e/0x1c0 [ 537.819896][T23470] ? __dev_queue_xmit+0x245/0x35a0 [ 537.825031][T23470] ? __mutex_trylock_common+0x153/0x250 [ 537.830609][T23470] netlink_rcv_skb+0x216/0x480 [ 537.835416][T23470] ? xfrm_netlink_rcv+0x90/0x90 [ 537.840282][T23470] ? netlink_ack+0x1110/0x1110 [ 537.845084][T23470] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.850307][T23470] ? __lock_acquire+0x7c80/0x7c80 [ 537.855360][T23470] xfrm_netlink_rcv+0x79/0x90 [ 537.860059][T23470] netlink_unicast+0x751/0x8d0 [ 537.864855][T23470] netlink_sendmsg+0x8c1/0xbe0 [ 537.869645][T23470] ? netlink_getsockopt+0x580/0x580 [ 537.874866][T23470] ? aa_sock_msg_perm+0x94/0x150 [ 537.879860][T23470] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 537.885169][T23470] ? security_socket_sendmsg+0x80/0xa0 [ 537.890643][T23470] ? netlink_getsockopt+0x580/0x580 [ 537.895872][T23470] ____sys_sendmsg+0x5bf/0x950 [ 537.900665][T23470] ? __asan_memset+0x22/0x40 [ 537.905451][T23470] ? __sys_sendmsg_sock+0x30/0x30 [ 537.910590][T23470] ? __import_iovec+0x5f2/0x860 [ 537.915831][T23470] ? import_iovec+0x73/0xa0 [ 537.920357][T23470] ___sys_sendmsg+0x220/0x290 [ 537.925065][T23470] ? __sys_sendmsg+0x270/0x270 [ 537.929869][T23470] __se_sys_sendmsg+0x1a5/0x270 [ 537.934828][T23470] ? __x64_sys_sendmsg+0x80/0x80 [ 537.939796][T23470] ? lockdep_hardirqs_on+0x98/0x150 [ 537.945626][T23470] do_syscall_64+0x55/0xb0 [ 537.950079][T23470] ? clear_bhb_loop+0x40/0x90 [ 537.954856][T23470] ? clear_bhb_loop+0x40/0x90 [ 537.959560][T23470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.965481][T23470] RIP: 0033:0x7fcad438eec9 [ 537.970009][T23470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.989724][T23470] RSP: 002b:00007fcad52af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.998160][T23470] RAX: ffffffffffffffda RBX: 00007fcad45e5fa0 RCX: 00007fcad438eec9 [ 538.006414][T23470] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 538.014667][T23470] RBP: 00007fcad4411f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.022778][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.030879][T23470] R13: 00007fcad45e6038 R14: 00007fcad45e5fa0 R15: 00007ffe47eda538 [ 538.038890][T23470] [ 538.041929][T23470] [ 538.044261][T23470] Allocated by task 20488: [ 538.048686][T23470] kasan_set_track+0x4e/0x70 [ 538.053381][T23470] __kasan_slab_alloc+0x6c/0x80 [ 538.058247][T23470] slab_post_alloc_hook+0x6e/0x4d0 [ 538.063448][T23470] kmem_cache_alloc+0x11e/0x2e0 [ 538.068322][T23470] xfrm_state_alloc+0x22/0x2a0 [ 538.073102][T23470] xfrm_add_acquire+0x105/0xaf0 [ 538.077982][T23470] xfrm_user_rcv_msg+0x596/0x870 [ 538.082952][T23470] netlink_rcv_skb+0x216/0x480 [ 538.088037][T23470] xfrm_netlink_rcv+0x79/0x90 [ 538.092763][T23470] netlink_unicast+0x751/0x8d0 [ 538.097581][T23470] netlink_sendmsg+0x8c1/0xbe0 [ 538.102451][T23470] ____sys_sendmsg+0x5bf/0x950 [ 538.107245][T23470] ___sys_sendmsg+0x220/0x290 [ 538.111938][T23470] __se_sys_sendmsg+0x1a5/0x270 [ 538.116814][T23470] do_syscall_64+0x55/0xb0 [ 538.121251][T23470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.127604][T23470] [ 538.129935][T23470] The buggy address belongs to the object at ffff88805b75cc00 [ 538.129935][T23470] which belongs to the cache xfrm_state of size 848 [ 538.143915][T23470] The buggy address is located 160 bytes inside of [ 538.143915][T23470] freed 848-byte region [ffff88805b75cc00, ffff88805b75cf50) [ 538.157729][T23470] [ 538.160064][T23470] The buggy address belongs to the physical page: [ 538.166586][T23470] page:ffffea00016dd700 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805b75d800 pfn:0x5b75c [ 538.178151][T23470] head:ffffea00016dd700 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 538.187545][T23470] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 538.195564][T23470] page_type: 0xffffffff() [ 538.199915][T23470] raw: 00fff00000000840 ffff888141a5adc0 dead000000000122 0000000000000000 [ 538.208517][T23470] raw: ffff88805b75d800 0000000080100007 00000001ffffffff 0000000000000000 [ 538.217135][T23470] page dumped because: kasan: bad access detected [ 538.223655][T23470] page_owner tracks the page as allocated [ 538.229485][T23470] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6453, tgid 6452 (syz.2.257), ts 115661098608, free_ts 102216742092 [ 538.250112][T23470] post_alloc_hook+0x1cd/0x210 [ 538.254919][T23470] get_page_from_freelist+0x195c/0x19f0 [ 538.260750][T23470] __alloc_pages+0x1e3/0x460 [ 538.265369][T23470] alloc_slab_page+0x5d/0x170 [ 538.270069][T23470] new_slab+0x87/0x2e0 [ 538.274162][T23470] ___slab_alloc+0xc6d/0x1300 [ 538.278885][T23470] kmem_cache_alloc+0x1b7/0x2e0 [ 538.283826][T23470] xfrm_state_alloc+0x22/0x2a0 [ 538.288705][T23470] xfrm_add_sa+0xfe5/0x30a0 [ 538.293239][T23470] xfrm_user_rcv_msg+0x596/0x870 [ 538.298325][T23470] netlink_rcv_skb+0x216/0x480 [ 538.303181][T23470] xfrm_netlink_rcv+0x79/0x90 [ 538.307878][T23470] netlink_unicast+0x751/0x8d0 [ 538.312663][T23470] netlink_sendmsg+0x8c1/0xbe0 [ 538.317446][T23470] ____sys_sendmsg+0x5bf/0x950 [ 538.322229][T23470] ___sys_sendmsg+0x220/0x290 [ 538.326928][T23470] page last free stack trace: [ 538.331615][T23470] free_unref_page_prepare+0x7ce/0x8e0 [ 538.337096][T23470] free_unref_page+0x32/0x2e0 [ 538.341793][T23470] __slab_free+0x35e/0x410 [ 538.346228][T23470] qlist_free_all+0x75/0xe0 [ 538.350763][T23470] kasan_quarantine_reduce+0x143/0x160 [ 538.356243][T23470] __kasan_slab_alloc+0x22/0x80 [ 538.361134][T23470] slab_post_alloc_hook+0x6e/0x4d0 [ 538.366356][T23470] kmem_cache_alloc+0x11e/0x2e0 [ 538.371225][T23470] getname_flags+0xbb/0x500 [ 538.375751][T23470] user_path_at_empty+0x2c/0x60 [ 538.380626][T23470] do_readlinkat+0xd8/0x480 [ 538.385143][T23470] __x64_sys_readlink+0x7f/0x90 [ 538.390020][T23470] do_syscall_64+0x55/0xb0 [ 538.394549][T23470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.400487][T23470] [ 538.402825][T23470] Memory state around the buggy address: [ 538.408560][T23470] ffff88805b75cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.416769][T23470] ffff88805b75cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.424877][T23470] >ffff88805b75cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.433057][T23470] ^ [ 538.438186][T23470] ffff88805b75cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.446389][T23470] ffff88805b75cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.454573][T23470] ================================================================== [ 538.462872][T23470] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 538.470103][T23470] CPU: 0 PID: 23470 Comm: syz.5.5346 Not tainted syzkaller #0 [ 538.477691][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.487792][T23470] Call Trace: [ 538.491106][T23470] [ 538.494072][T23470] dump_stack_lvl+0x16c/0x230 [ 538.498817][T23470] ? show_regs_print_info+0x20/0x20 [ 538.504230][T23470] ? load_image+0x3b0/0x3b0 [ 538.508792][T23470] panic+0x2c0/0x710 [ 538.513242][T23470] ? bpf_jit_dump+0xd0/0xd0 [ 538.517795][T23470] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 538.523839][T23470] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 538.529766][T23470] ? _raw_spin_unlock+0x40/0x40 [ 538.534626][T23470] ? print_memory_metadata+0x314/0x400 [ 538.540105][T23470] ? xfrm_alloc_spi+0x598/0x11f0 [ 538.545154][T23470] check_panic_on_warn+0x84/0xa0 [ 538.550288][T23470] ? xfrm_alloc_spi+0x598/0x11f0 [ 538.555246][T23470] end_report+0x6f/0x140 [ 538.559504][T23470] kasan_report+0x128/0x150 [ 538.564287][T23470] ? xfrm_alloc_spi+0x598/0x11f0 [ 538.569269][T23470] xfrm_alloc_spi+0x598/0x11f0 [ 538.574064][T23470] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 538.579026][T23470] ? verify_spi_info+0x120/0x120 [ 538.584067][T23470] ? xfrm_find_acq+0x79/0x90 [ 538.588682][T23470] xfrm_alloc_userspi+0x5d1/0xa90 [ 538.593870][T23470] ? end_current_label_crit_section+0x170/0x170 [ 538.600135][T23470] ? apparmor_capable+0x137/0x1a0 [ 538.605245][T23470] ? xfrm_dump_policy_done+0x90/0x90 [ 538.610547][T23470] ? __nla_parse+0x40/0x50 [ 538.614991][T23470] xfrm_user_rcv_msg+0x596/0x870 [ 538.619965][T23470] ? lockdep_hardirqs_on+0x98/0x150 [ 538.625215][T23470] ? xfrm_netlink_rcv+0x90/0x90 [ 538.630180][T23470] ? __local_bh_enable_ip+0x12e/0x1c0 [ 538.635670][T23470] ? __dev_queue_xmit+0x245/0x35a0 [ 538.640806][T23470] ? __mutex_trylock_common+0x153/0x250 [ 538.646490][T23470] netlink_rcv_skb+0x216/0x480 [ 538.651307][T23470] ? xfrm_netlink_rcv+0x90/0x90 [ 538.656178][T23470] ? netlink_ack+0x1110/0x1110 [ 538.660967][T23470] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.666189][T23470] ? __lock_acquire+0x7c80/0x7c80 [ 538.671328][T23470] xfrm_netlink_rcv+0x79/0x90 [ 538.676031][T23470] netlink_unicast+0x751/0x8d0 [ 538.680850][T23470] netlink_sendmsg+0x8c1/0xbe0 [ 538.685653][T23470] ? netlink_getsockopt+0x580/0x580 [ 538.690898][T23470] ? aa_sock_msg_perm+0x94/0x150 [ 538.695876][T23470] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 538.701180][T23470] ? security_socket_sendmsg+0x80/0xa0 [ 538.706658][T23470] ? netlink_getsockopt+0x580/0x580 [ 538.711919][T23470] ____sys_sendmsg+0x5bf/0x950 [ 538.716717][T23470] ? __asan_memset+0x22/0x40 [ 538.721333][T23470] ? __sys_sendmsg_sock+0x30/0x30 [ 538.726380][T23470] ? __import_iovec+0x5f2/0x860 [ 538.731264][T23470] ? import_iovec+0x73/0xa0 [ 538.735798][T23470] ___sys_sendmsg+0x220/0x290 [ 538.740517][T23470] ? __sys_sendmsg+0x270/0x270 [ 538.745344][T23470] __se_sys_sendmsg+0x1a5/0x270 [ 538.750240][T23470] ? __x64_sys_sendmsg+0x80/0x80 [ 538.755206][T23470] ? lockdep_hardirqs_on+0x98/0x150 [ 538.760523][T23470] do_syscall_64+0x55/0xb0 [ 538.764965][T23470] ? clear_bhb_loop+0x40/0x90 [ 538.769664][T23470] ? clear_bhb_loop+0x40/0x90 [ 538.774359][T23470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.780281][T23470] RIP: 0033:0x7fcad438eec9 [ 538.784748][T23470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.804404][T23470] RSP: 002b:00007fcad52af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.813363][T23470] RAX: ffffffffffffffda RBX: 00007fcad45e5fa0 RCX: 00007fcad438eec9 [ 538.821450][T23470] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 538.829564][T23470] RBP: 00007fcad4411f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.838015][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.846183][T23470] R13: 00007fcad45e6038 R14: 00007fcad45e5fa0 R15: 00007ffe47eda538 [ 538.854178][T23470] [ 538.857469][T23470] Kernel Offset: disabled [ 538.861898][T23470] Rebooting in 86400 seconds..