last executing test programs: 2m46.235787668s ago: executing program 2 (id=805): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000180)=0x80000000, 0x4) 2m46.171481519s ago: executing program 2 (id=806): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f000000cbc0)={0x2020}, 0x2020) 2m46.012625302s ago: executing program 2 (id=810): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x201c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") unlink(&(0x7f0000001a80)='./file2\x00') 2m45.467439502s ago: executing program 2 (id=821): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc33, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qzrPwA8Vq769z8AAAAAAAAAAAAAABx0KYp4MlLMXVlL49Xzjvrldt+t22NDw9tXO5Kqmoeq8uVX/czZc+e/9MLghW5ebs98QP377bPx2ujVS42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291sjoAjZuv35q8fn2hcfb5c5tevj3wfv8TxwcuDj576plu2bGh4eHRjSL13vK1e25Ix04zPA5HEacixXPf+2lqRUQRez8W9Qc79lsdqTpxsurE2NBw1ZHpdmtmsXxxpHsgiohGT6Vm9xhtPxZR63ugfdhZM2KpbH7Z4JNl90bnWvOta9NTjZHW/GJ7sT07M5I6rS3704giLqSI5YhY7b97d31RRC1SfOfYWroWEYe6x+GL1cTgndtR7GMfd6FsZ6MvYrl4BMbsAOuPIl6NFD9750RM5PNMda75QsSrZf4g4q0yX4pI5QfjfMR723yOeDTVooi/LMf/4lqarM4H3fPK5a81vjJzfbanbPe88hGvD3edKR7S9eHIlnwwDvi5qR5FtKoz/lq69292AAAAAAAAAAAAAAAAALjfjkQRn4kUr/zHn1TziqOal37s4uAfDvxq75zxpz9kP2XZ5yNiqdjdnNzDeWLgSBpJ6SHPJX6c1aOIP83z/771sBsDAAAAAAAAAAAAAAAAAADwWCviJ5HixXdPpOXoXVO8PXOjcbV1bbqzKmx37d/umunr6+vrjdTJZs7xnEs5l3Ou5FzNGUWun7OZczznUs7lnCs5V3PGoVw/ZzPneM6lnMs5V3Ku5oxarp+zmXM851LO5ZwrOVdzxgFZuxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OOkiCJ+ESm+/Y21FCkimhHj0cmV/ofdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1J+K+H6kaPxR8862WkSk6v+OE+Uf56N5uMxPRnOwzJeieSlnq8pa81sPof3sTV8q4seRor/+9p0Bz+Pf13l252MQb31z49lna5081H1x4P3+J44fuzg4/BtP7/Q4bdeAk5fbM7duN8aGhodHezbX8rt/smfbQH7f4v50nYhYeOPN11vT01Pz9/6g/Ajsofoj9CDVHpeeelA9iNqBaMbD6TuPgfL6/16k+N13/7N7we9c/+vxK51nd67w8fM/27j+v7h1R7u8/te21svX//Kavt31/8mebS/m70b6ahH1xZtzfccj6gtvvHmqfbN1Y+rG1Mz506e/PDj45XOn+w5H1K+3p6d6Ht2XwwUAAAAAAAAAAAAAAADw4KQifj9StH68lhoRcbuarzVwcfDZU88cikPVfKtN87ZfG716qfHy7M25+amFhanJxthMe2J2cmq3b1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2rx+tX7q2sDjfmtj+5TgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVr5nSkX8PFL8zl89HZ+v2nk07jpmudzfRYqTFz6Xy8Xhsly3DZ37CnRmBpZl/y9S/NMvNpftzod8cqPsmV0f2EdEOf7HIsX3/+K78Zt52+b7P2w//ke37mifxv+pnm1HN92vYM9dJ4//qUjx0pNvx2/lbR90/4/uvTdO5MJ37s+xT+P/qZ5tA/l9f/v+dB0AAAAAAAAAAOCR1peK+PtI8cPhWnohb9vN7/9Nbt3RPv3+16d7tk3en/WKPvTBng8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLa8Wv2c79eq+wbcz5//9RrI7zu+924DAAAAAAAAAAAAAAAAAADAgZJSES/k9dTHq/n8kzuup74SKV75n+dyuXS8LNddB36g+rN+ZXbm1KXp6dmJ1mLr2vRUY3SuNTFV1n0qUqz97edy3aJaX7273nxnjfeNtdjnI8XwP3TLdtZi765N/tRG2TNl2U9Eiv/+x81lu+tYf2qj7Nmy7N9Eiq//y/Zlj2+UPVeW/W6k+NHXG92yR8uy3fujfnqj7PMTs8U+jAoAAAAAAAAAAAAAAAAAAACPm75UxJ9Hiv+9uXxnLn9e/7+v52nlrW/2rPe/xe1qnf+Bav3/nR7fy/r/1X0FlnZ6VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S+fd9Qvt2du3R4bGt6+2pFU1TxUlS+/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UBaNx8/dbk9esLjbPPn9v08u2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3zu98l7bD9cBTx15Hiue/9NP2wP6KIvR+LD/ns7LcjVSdOVp0YGxquOjLdbs0sli+OdA9EEdHoqdTsHqMHMBZ70oxYKptfNvhk2b3RudZ869r0VGOkNb/YXmzPzoykTmvL/jSiiAspYjkiVvvv3l1fFPF6pPjOsbX0r/0Rh7rH4YtXRr96+uzO7Sj2sY+7ULaz0RexXDwCY3aA9UcR/xwpfvbOifi3/ohadL7iCxGvlvmDiLeiM96p/GCcj3hvm88Rj6ZaFPH/5fhfXEvv9Jfng+555fLXGl+ZuT7bU7Z7XuleH8q/eo/k9eFBOuDnpnoU8aPqjL+W/t3fawAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD78wpbs/caFxtXZvuTOvrzv3rzpleX19fb6RONnOO51zKuZxzJedqzihy/ZzNMuvr6+P5+VLO5ZwrOVdzxqFcP2cz53jOpZzLOVdyruaMWq6fs5lzPOdSzuWcKzlXc8YBmbsHAAAAAAAAAAAAAAAAAAB8vBTVfym+/Y21tN7fWV96PDq5Yj3Qj71fBgAA//8Ntfb5") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m44.862009711s ago: executing program 2 (id=842): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m44.098318474s ago: executing program 2 (id=847): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@link_local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@generic={0x0, 0xe, "768a37c66a04532ffdec1aef"}, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x4}, @nop, @exp_fastopen={0xfe, 0x13, 0xf989, "ff4974c0420835abbba6f69403c439"}, @nop, @fastopen={0x22, 0xc, "7075776d8df0f6234ca4"}, @generic={0xfe, 0x4, "0aa4"}]}}}}}}}}, 0x0) 2m43.881969318s ago: executing program 32 (id=847): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@link_local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@generic={0x0, 0xe, "768a37c66a04532ffdec1aef"}, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x4}, @nop, @exp_fastopen={0xfe, 0x13, 0xf989, "ff4974c0420835abbba6f69403c439"}, @nop, @fastopen={0x22, 0xc, "7075776d8df0f6234ca4"}, @generic={0xfe, 0x4, "0aa4"}]}}}}}}}}, 0x0) 5.088623345s ago: executing program 0 (id=3907): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xdd, 0xad80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x10000, 0x800}) 4.997227287s ago: executing program 0 (id=3910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x4}]}, 0x24}}, 0x0) 4.852545989s ago: executing program 0 (id=3913): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 4.693656861s ago: executing program 0 (id=3916): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file1\x00', 0x40, &(0x7f0000000100)={[{@dax_never}, {@noquota}, {@usrquota}, {@quota}, {@ikeep}, {@prjquota}, {@noikeep}]}, 0x1, 0x98d4, &(0x7f0000013140)="$eJzs3QW4ZXXhcP87w9CNhYEMjUU3BqEggoCElBLSkgJKGIAIAqKApKAIKFIiSIkoSHd3d3d3/J9hZmQcF6j/9/f+8GWt9Tx3zjn77LPvPt/P3vvew76cs+Iiyy40MDDJwPBGXr7ZoS98/OgtX1hop2OvOeL5RQ9f/OgRk8cafjFk6IjLqUZcTj0wMDBoxHIGDZ82eMiJJw0eGGdgYPCoy51g3PEHTTAwsNaImwuMuJx7+MWEV46c7/XR4hUdthqDdh3+NfybDgwMjDvsypMDM68w6nJGrNcs//REpa244KKLvGn1d7dh4zdkxPVRv8Ya/jXhxQMDE140wNvHoHf2Gb3x/SfZ+9yVVn6H1+P/iVZccNHFRvMfti+OMWLa3MP28dH3QWOjb+dD57515DFoEB44/x9pxQUXWWLgrY/zA6u+dtDmr79x3Bw83sDA4PEHBgZPMDAweMKBgcETDQwMnviddqn/s97Rja+qqqrekRZcaPaFhr3eG+33gXFG/l5Lvxeu8upStw4MDIw5fJ7Bc418LVhVVVVVVVVV/50tuNDsC8Pr/0ne7vX/Cae+NGOv/6uqqqqqqqr+32mxBReafdjr+NFe/0/+dq//t7v3uQ1H/O3/3MMf9do7+ySqqqqqqqqq6m1b5stvvP4ff7TX/0Pf7vX/A/Pvct+I+Ub+d4NXR1nkoFH+nuDlUaaPMcr8L40yfcgo00edf6yBgcFDRkx/5c3Jg8cbdt8/zz94kmHrPWL6i6NMn+XN/795yLSjTJ91lOnTjzJ9thHrOmz6DKNMn3OU+Wf8d8a2qqqqqqqqqqqqqqqqqqrqf6vXHj319Dff8/2jA6O8f/vf38d9xN8FDDrujCuueMdW9L+jQf/89xDbvdPr9H/aMOdxjho6MLDx8u/0qtQ70Dv9eQ31zpa/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7i/P/f3///ykOX2vk/zM/96G7TznRqI9df5Tr4/yvrvU71rv1/P/A+oMGBkb4TjLMdckFl1luxoGBgYmm3P3QOQb+ft88w+6bf7IxRrxBwvC3QZhuCC94uxGfir7diFlHLOO4N5a/2OuHjDFotJUYpUlPPuyw9VZ8fo7RL6d/6+cxeOSV91241cIj38ti8GgzvdV2OnL5I5/L6M4j1n3GYes+8xYbbTrz5ltv86n1N1pj3bXXXXvjeeeee545555r3tlmXmf9DdeeZfi/bzVmQ9/4d5p/Z8wmH33MHl1w1DEb/bm91ZgNffsxe2OJY++12gYjx2z0VftXYzbN24/Z0PVHfKMhQ8ccWP2NsRk0MDBk2jEHthp2Y9axBwaGTDdi3smHzfvpyQYPDOzx5hMddm3sv2+Dg7YbNs+Kiyy70Jsfu//PH7//Fp9nP9bwiyEjhmTIVCMupx7+bSYZeHNTHDzkxJMGD3vu/zDME4w7/qAJBgbWGnFzgRGX846497KR873F56yPtqJvvM3KrsO//u4x7rArxyw98fWjLuctCP4n+v/18/+fvOYZ9PeBGjTia8Q8w70WXHSxN7/XG8OwwMj3hBn2s2WYyf/Bx9j/y/5pfYeO88ab3L7V+r7N++IOf/6wfU3/8NlD/6feF5ePHUu88e/Qf+fYMfD2x44x3rz65tS1L51i9GPH4m+9iv+wX4wco7FHm+mtjh0z7r/gtm8cm97+2LHE+iM+aOjNY8fggYEh04w8dgw7kEw/5sAew27MNuzGDGMOHDHsxuxv3Bh34IxhN2Zac5MN1xr0xtv2jFjuLMOWu8Bkg9548lfMvODRY+z9+uvTjliXWUY7sI7YPoaO+vNxwcmGD9vIx9Jy79hi+H3Tj1jurP/Bckc+lpY7z2bD75thxHJnG225Y7zNckc+duT+MGzWN/aHGQf9wx9+wv67yGj776CRh/VRHjLya6zhXxNePPKzoWB/+Y+OO7T/TvI26/s2n2uF29uwaTsseemp/1Ofa0XrO87br+9bfQ73W67vBuNutdT/wPoOGmV9/2E723S+4dvKjCO2szn/g+135GNHP46N+ca9wxlm/HeOYwv803Fs+zEGj7byo/RWvwOtBfMPvz7535c275FjTDxy7Mccbbn/6negGd/+ODbJ+qM9bpGDBwbRmD/wyGHrjf0vxnzMgX/8XX3kmI987NuN+Qz/POaD/mnM53n7Mf93f++ccZrh94/xNmM+eOfNlxw55mP9h2M+w3865gsMjEFjvscBw8ft7Y6nbzXmIx/7j2M+ZOALAwMD044Y8+n/ne18lv+Z7Xw8mH/49Xv/PunCKU7bbZRjzKD/ZMyn/0/HfOjft/Np37hv6sEDY401sNUaW2yx2azD/x15c7bh//Kx6Il7ho/z2/0sfSujkY99u/1i2n/HaOj/jNGHhvzz/CNfdIy8vfwZx0z6//dYNO1/ZjRokQE+Fp1y/vBxe7vfi95qzEc+ln4ODh3l8aO/rnub96PE5zRs2n7773PLyEWOeFjvR/nv9w+b7cj/xrf+6Af5erfWf/93l7+7/N3l7y5/cW9x/v/v7///wCTLPjziRfKYe8637prv9Pq+w72rz/+P8P2H8/9rrjvfnsNeCo64723Pzw6f57/y/Ozcwy8mvHLkfKOfH+QVfevzszPsNdMyA/8752f/fzVyX/03Xsd3/HeXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe4vz/yP/Rnnoga/es92IE6Fj7rvPmq++0+v7DveuPv8/wvcfzv+/uuY++w4e+Pt9b3v+f/g8jvP/Sx2490kD/8Xn/0fuq53/r39R/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7i3O/y8w8u8A5lptnV1H/j3AxrN+bsd3en3f4d6t5//7/H9vHf/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4kac/x8Y7WMdl267wOD8///bvYX/V/LHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v/V/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvH/Wv6Yxf/r+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bx/0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/zfwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/rfwxi/9m+WMW/83zxyz+W+SPWfy/nT9m8f9O/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8v5s/ZvH/Xv6Yxf/7o/uvuPn/7nr9l2bx/0H7P2bx3zZ/zOK/Xf6YxX/7/DGL/w/zxyz+O+SPWfx/lD9m8d8xf8ziv1P+mMX/x/ljFv+d88cs/rvkj1n8d80fs/j/JH/M4r9b/pjF/6f5Yxb/n+WPWfx3zx+z+O+RP2bx3zN/zOL/8/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/i/wxi/8B+WMW/wPzxyz+v8wfs/j/Kn/M4n9Q/pjF/9f5Yxb/g/PHLP6H5I9Z/A/NH7P4/yZ/zOL/2/wxi/9h+WMW/9/lj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi//v88cs/sfkj1n8/5A/ZvE/Nn/M4n9c/pjF/4/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v+n/DGL/yn5Yxb/P+ePWfxPzR+z+P8lf8zi/9f8MYv/afljFv/T88cs/n/LH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+2Lvdf6wR1+/OH3u3+4/snvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePSfwHDeSPWfwHWf3HePu7Lf6Drf7/Iov/GPljFv8h+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjF/z35Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/yfPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP5T5I9Z/D+aP2bxnzJ/zOI/NH/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6fzx+z+H8hf8ziv0j+mMV/0fwxi/8X88cs/ovlj1n8v5Q/ZvFfPH/M4r9E/pjF/8v5Yxb/JfPHLP5L5Y9Z/JfOH7P4fyV/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP5fzR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/r+WPWfy/nj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/2/kj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+38wfs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+38ofs/hvlj9m8d88f8ziv0X+mMX/2/ljFv/v5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjF/7v5Yxb/7+WPWfy/nz9m8f9B/pjFf9v8MYv/dvljFv/t88cs/j/MH7P475A/ZvH/Uf6YxX/H/DGL/075Yxb/H+ePWfx3zh+z+O+SP2bx3zV/zOL/k/wxi/9u+WMW/5/mj1n8f5Y/ZvHfPX/M4r9H/pjFf8/8MYv/z/PHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/L/LHLP4H5I9Z/A/MH7P4/zJ/zOL/q/wxi/9B+WMW/1/nj1n8D84fs/gfkj9m8T80f8zi/5v8MYv/b/PHLP6H5Y9Z/H+XP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP6/zx+z+B+TP2bx/0P+mMX/2Pwxi/9x+WMW/z/mj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/+f8scs/qfkj1n8/5w/ZvE/NX/M4v+X/DGL/1/zxyz+p+WPWfxPzx+z+P8tf8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX9M4v/G1fz/OYv/oPwxi//g/DGL/xj5Yxb/IfljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6Yxf89+WMW//fmj1n835c/ZvF/f/6Yxf8D+WMW/8nzxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+U+SPWfw/mj9m8Z8yf8ziPzR/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4v+p/DGL/0z5Yxb/mfP/515/XeM/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/p/OH7P4fyZ/zOL/2fwxi//n8scs/gvkj1n8F8wfs/gvlD9m8V84f8zi//n8MYv/F/LHLP6L5I9Z/BfNH7P4fzF/zOK/WP6Yxf9L+WMW/8Xzxyz+S+SPWfy/nD9m8V8yf8ziv1T+mMV/6fwxi/9X8scs/svkj1n8l80fs/gvlz9m8V8+f8zi/9X8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8f9a/pjF/+v5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvH/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/N/DGL/wb5Yxb/DfPHLP4b5Y9Z/Dd+w3/IO7VW/7VZ/Ddp/8cs/pvmj1n8v5U/ZvHfLH/M4r95/pjFf4v8MYv/t/PHLP7fyR+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/3fzxyz+38sfs/h/P3/M4v+D/DGL/7b5Yxb/7fLHLP7b549Z/H+YP2bx3yF/zOL/o/wxi/+O+WMW/53yxyz+P84fs/jvnD9m8d8lf8ziv2v+mMX/J/ljFv/d8scs/j/NH7P4/yx/zOK/e/6YxX+P/DGL/575Yxb/n+ePWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+SPWfwPyB+z+B+YP2bx/2X+mMX/V/ljFv+D8scs/r/OH7P4H5w/ZvE/JH/M4n9o/pjF/zf5Yxb/3+aPWfwPyx+z+P8uf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfx/nz9m8T8mf8zi/4f8MYv/sfljFv/j8scs/n/MH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv8/5Y9Z/E/JH7P4/zl/zOJ/av6Yxf8v+WMW/7/mj1n8T8sfs/ifnj9m8f9b/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6YxH+Mgfwxi/+g/DGL/+D8MYv/GPljFv8h+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjF/z35Yxb/9+b/9157/c3rFv/35Y9Z/N+fP2bx/0D+mMV/8vwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/8U+WMW/4/mj1n8p8wfs/gPzR+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/gvkD9m8V8wf8ziv1D+mMV/4fwxi//n88cs/l/IH7P4L5I/ZvFfNH/M4v/F/DGL/2L5Yxb/L+WPWfwXzx+z+C+RP2bx/3L+mMV/yfwxi/9S+WMW/6Xzxyz+X3nT/6XXh/eOrN5/Wxb/Zdr/MYv/svljFv/l8scs/svnj1n8v5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/l/LH7P4fz1/zOK/av6YxX+1/DGL/+r5Yxb/NfLHLP7fyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/L+ZP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/L+VP2bx3yx/zOK/ef6YxX+L/DGL/7fzxyz+38kfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/9388cs/t/LH7P4fz9/zOL/g/wxi/+2+WMW/+3yxyz+2+ePWfx/mD9m8d8hf8zi/6P8MYv/jvljFv+d8scs/j/OH7P475w/ZvHfJX/M4r9r/pjF/yf5Yxb/3fLHLP4/zR+z+P8sf8ziv3v+mMV/j/wxi/+e+WMW/5/nj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/1/kj1n8D8gfs/gfmD9m8f9l/pjF/1f5Yxb/g/LHLP6/zh+z+B+cP2bxPyR/zOJ/aP6Yxf83+WMW/9/mj1n8D8sfs/j/Ln/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8f58/ZvE/Jn/M4v+H/DGL/7H5Yxb/4/LHLP5/zB+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/P+WPWfxPyR+z+P85f8zif2r+mMX/L/ljFv+/5o9Z/E/LH7P4n54/ZvH/W/6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D9q9R/37e+2+D9m9f8XWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fk/gPGcgfs/gPyh+z+A/OH7P4j5E/ZvEfkj9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/N+TP2bxf2/+mMX/ffljFv/3549Z/D+QP2bxnzx/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOI/Rf6Yxf+j+WMW/ynzxyz+Q/PHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOL/+fwxi/8X8scs/ovkj1n8F80fs/h/MX/M4r9Y/pjF/0v5Yxb/xfPHLP5L5I9Z/L+cP2bxXzJ/zOK/VP6YxX/p/DGL/1fyxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOL/1fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bx/1r+mMX/6/ljFv9V88cs/qvlj1n8V88fs/ivkT9m8f9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/838MYv/BvljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8zi/638MYv/ZvljFv/N88cs/lvkj1n8v50/ZvH/Tv6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/L+bP2bx/17+mMX/+/ljFv8f5I9Z/LfNH7P4b5c/ZvHfPn/M4v/D/DGL/w75Yxb/H+WPWfx3zB+z+O+UP2bx/3H+mMV/5/wxi/8u+WMW/13zxyz+P8kfs/jvlj9m8f9p/pjF/2f5Yxb/3fPHLP575I9Z/PfMH7P4/zx/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4/yJ/zOJ/QP6Yxf/A/DGL/y/zxyz+v8ofs/gflD9m8f91/pjF/+D8MYv/IfljFv9D88cs/r/JH7P4/zZ/zOJ/WP6Yxf93+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOL/+/wxi/8x+WMW/z/kj1n8j80fs/gflz9m8f9j/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/j/KX/M4n9K/pjF/8/5Yxb/U/PHLP5/yR+z+P81f8zif1r+mMX/9Pwxi//f8scs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHJP5jDuSPWfwH5Y9Z/Afnj1n8x8gfs/gPyR+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/u/JH7P4vzd/zOL/vvwxi//788cs/h/IH7P4T54/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfIn/M4v/R/DGL/5T5Yxb/ofljFv+p8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvH/fP6Yxf8L+WMW/0Xyxyz+i+aPWfy/mD9m8V8sf8zi/6X8MYv/4vljFv8l8scs/l/OH7P4L5k/ZvFfKn/M4r90/pjF/yv5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvH/av6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4fy1/zOL/9fwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/2b+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/1b+mMV/s/wxi//m+WMW/y3yxyz+384fs/h/J3/M4r9l/pjFf6v8MYv/1vljFv9t8scs/t/NH7P4fy9/zOL//fwxi/8P8scs/tvmj1n8t8sfs/hvnz9m8f9h/pjFf4f8MYv/j/LHLP475o9Z/HfKH7P4/zh/zOK/c/6YxX+X/DGL/675Yxb/n+SPWfx3yx+z+P80f8zi/7P8MYv/7vljFv898scs/nvmj1n8f54/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8f5E/ZvE/IH/M4n9g/pjF/5f5Yxb/X+WPWfwPyh+z+P86f8zif3D+mMX/kPwxi/+h+WMW/9/kj1n8f5s/ZvE/LH/M4v+7/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvH/ff6Yxf+Y/DGL/x/yxyz+x+aPWfyPyx+z+P8xf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfz/lD9m8T8lf8zi/+f8MYv/qfljFv+/5I9Z/P+aP2bxPy1/zOJ/ev6Yxf9v+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljEv+xBvLHLP6D8scs/oPzxyz+Y+SPWfyH5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW//fkj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8J88fs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/hPkT9m8f9o/pjFf8r8MYv/0Pwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/8fyxyz+H88fs/h/In/M4v/J/DGL/6fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/AvljFv8F88cs/gvlj1n8F84fs/h/Pn/M4v+F/DGL/yL5Yxb/RfPHLP5fzB+z+C+WP2bx/1L+mMV/8fwxi/8S+WMW/y/nj1n8l8wfs/gvlT9m8V86f8zi/5X8MYv/MvljFv9l88cs/svlj1n8l88fs/h/NX/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8v5Y/ZvH/ev6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/L+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4fzN/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4fyt/zOK/Wf6YxX/z/DGL/xb5Yxb/b+ePWfy/kz9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/+/mj1n8v5c/ZvH/fv6Yxf8H+WMW/23zxyz+2+WPWfy3zx+z+P8wf8ziv0P+mMX/R/ljFv8d88cs/jvlj1n8f5w/ZvHfOX/M4r9L/pjFf9f8MYv/T/LHLP675Y9Z/H+aP2bx/1n+mMV/9/wxi/8e+WMW/z3zxyz+P88fs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+v8gfs/gfkD9m8T8wf8zi/8v8MYv/r/LHLP4H5Y9Z/H+dP2bxPzh/zOJ/SP6Yxf/Q/DGL/2/yxyz+v80fs/gflj9m8f9d/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/j/Pn/M4n9M/pjF/w/5Yxb/Y/PHLP7H5Y9Z/P+YP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP5/yh+z+J+SP2bx/3P+mMX/1Pwxi/9f8scs/n/NH7P4n5Y/ZvE/PX/M4v+3/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxif/YA/ljFv9B+WMW/8H5Yxb/MfLHLP5D8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL/3vyxyz+780fs/i/L3/M4v/+/DGL/wfyxyz+k+ePWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfynyB+z+H80f8ziP2X+mMV/aP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/2P5Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/0/ljFv/P5I9Z/D+bP2bx/1z+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfw/nz9m8f9C/pjFf5H8MYv/ovljFv8v5o9Z/BfLH7P4fyl/zOK/eP6YxX+J/DGL/5fzxyz+S+aPWfyXyh+z+C+dP2bx/0r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+X8sfs/h/PX/M4r9q/pjFf7X8MYv/6vljFv818scs/t/IH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v5k/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5U/ZvHfLH/M4r95/pjFf4v8MYv/t/PHLP7fyR+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/3fzxyz+38sfs/h/P3/M4v+D/KEvjm/x3zZ/zOK/Xf6YxX/7/DGL/w/zxyz+O+SPWfx/lD9m8d8xf8ziv1P+mMX/x/ljFv+d88cs/rvkj1n8d80fs/j/JH/M4r9b/pjF/6f5Yxb/n+WPWfx3zx+z+O+RP2bx3zN/zOL/8/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOL/i/wxi/8B+WMW/wPzxyz+v8wfs/j/Kn/M4n9Q/pjF/9f5Yxb/g/PHLP6H5I9Z/A/NH7P4/yZ/zOL/2/wxi/9h+WMW/9/lj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi//v88cs/sfkj1n8/5A/ZvE/Nn/M4n9c/pjF/4/5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4v+n/DGL/yn5Yxb/P+ePWfxPzR+z+P8lf8zi/9f8MYv/afljFv/T88cs/n/LH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+T+I8zkD9m8R+UP2bxH5w/9o/+Yw+8W/3HyB+z7P9D8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL/3vyxyz+780fs/i/L3/M4v/+/DGL/wfyxyz+k+ePWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfynyB+z+H80f8ziP2X+mMV/aP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/2P5Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/0/ljFv/P5I9Z/D+bP2bx/1z+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfw/nz9m8f9C/pjFf5H8MYv/ovljFv8v5o9Z/BfLH7P4fyl/zOK/eP6YxX+J/DGL/5fzxyz+S+aPWfyXyh+z+C+dP2bx/0r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+X8sfs/h/PX/M4r9q/pjFf7X8MYv/6vljFv818scs/t/IH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v5k/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5U/ZvHfLH/M4r95/pjFf4v8MYv/t/PHLP7fyR+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/3fzxyz+38sfs/h/P3/M4v+D/DGL/7b5Yxb/7fLHLP7b549Z/H+YP2bx3yF/zOL/o/wxi/+O+WMW/53yxyz+P84fs/jvnD9m8d8lf8ziv2v+mMX/J/ljFv/d8scs/j/NH7P4/yx/zOK/e/6YxX+P/DGL/575Yxb/n+ePWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+SPWfwPyB+z+B+Y/z83xOP/y/wxi/+v8sfepf6DBga2G3XqOAflj71L/d9o1P3/1/ljFv+D88cs/ofkj1n8D80fs/j/Jn/M4v/b/DGL/2H5Yxb/3+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/+/zxyz+x+SPWfz/kD9m8T82f8zif1z+mMX/j/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/6f8MYv/KfljFv8/549Z/E/NH7P4/yV/zOL/1/wxi/9p+WMW/9Pzxyz+f8sfs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH5P4jzuQP2bxH5Q/ZvEfnD9m8R8jf8ziPyR/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8J8sfs/i/J3/M4v/e/DGL//vyxyz+788fs/h/IH/M4j95/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjFf4r8MYv/R/PHLP5T5o9Z/Ifmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF//P5Yxb/L+SPWfwXyR+z+C+aP2bx/2L+mMV/sfwxi/+X/h3/wf8X1+u/NIv/4u3/mMV/ifwxi/+X88cs/kvmj1n8l8ofs/gvnT9m8f9K/pjFf5n8MYv/svlj72L/UbnHXS5/7F3s/w/7//L5Yxb/r+aPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/9fyxyz+X88fs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/838scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/2/mj1n8N8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/2/lj1n8N8sfs/hvnj9m8d8if8zi/+38MYv/d/LHLP5b5o9Z/LfKH3uX+r9BPar/1vlj71L/NxrVf5v8MYv/d/PHLP7fyx+z+H/f5/9vfZqNxf8HPv9/K4v/tvljFv/t8scs/tvnj1n8f5g/ZvHfIX/M4v+j/DGL/475Yxb/nfLHLP4/zh+z+O+cP2bx3yV/zOK/a/6Yxf8n+WMW/93yxyz+P80fs/j/LH/M4r97/pjFf4/8MYv/nvljFv+f549Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv9fvK2/d8uw+B+gVn7rLP4H5o9Z/H+ZP2bx/1X+mMX/oPwxi/+v88cs/gfnj1n8D8kfs/gfmj9m8f9N/pjF/7f5Yxb/w/LHLP6/yx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/3+ePWfyPyR+z+P8hf8zif2z+mMX/uPwxi/8f88cs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/T/ljFv9T8scs/n/OH7P4n5o/ZvH/S/6Yxf+v+WMW/9Pyxyz+p+ePWfz/lj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/5N/3H+b63Xf2kW/3vb/zGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHJP7jDeSPWfwH5Y9Z/Afnj1n8x8gfs/gPyR+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/u/JH7P4vzd/zOL/vvwxi//788cs/h/IH7P4T54/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfIn/M4v/R/DGL/5T5Yxb/ofljFv+p8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvH/fP6Yxf8L+WMW/0Xyxyz+i+aPWfy/mD9m8V8sf8zi/6X8MYv/4vljFv8l8scs/l/OH7P4L5k/ZvFfKn/M4r90/pjF/yv5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvH/av6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4fy1/zOL/9fwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx/2b+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/1b+mMV/s/wxi//m+WMW/y3yxyz+384fs/h/J3/M4r9l/pjFf6v8MYv/1vljFv9t8scs/t/NH7P4fy9/zOL//fwxi/8P8scs/tvmj1n8t8sfs/hvnz9m8f9h/pjFf4f8MYv/j/LHLP475o9Z/HfKH7P4/zh/zOK/c/6YxX+X/DGL/675Yxb/n+SPWfx3yx+z+P80f8zi/7P8MYv/7vljFv898scs/nvmj1n8f54/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8f5E/ZvE/IH/M4n9g/pjF/5f5Yxb/X+WPWfwPyh+z+P86f8zif3D+mMX/kPwxi/+h+WMW/9/kj1n8f5s/ZvE/LH/M4v+7/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvH/ff6Yxf+Y/DGL/x/yxyz+x+aPWfyPyx+z+P8xf8zif3z+mMX/hPwxi/+J+WNv+g8a8m72Pyl/zLL/n5w/ZvH/U/6Yxf+U/DGL/5/zxyz+p+aPWfz/kj9m8f9r/pjF/7T8MYv/6fljFv+/5Y9Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePSfzHH8gfs/gPyh+z+A/OH7P4j5E/ZvEfkj9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/N+TP2bxf2/+mMX/ffljFv/3549Z/D+QP2bxnzx/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOI/Rf6Yxf+j+WMW/ynzxyz+Q/PHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOL/+fwxi/8X8scs/ovkj1n8F80fs/h/MX/M4r9Y/pjF/0v5Yxb/xfPHLP5L5I9Z/L+cP2bxXzJ/zOK/VP6YxX/p/DGL/1fyxyz+y+SPWfyXzR+z+C+XP2bxXz5/zOL/1fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bx/1r+mMX/6/ljFv9V88cs/qvlj1n8V88fs/ivkT9m8f9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/838MYv/BvljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8zi/638MYv/ZvljFv/N88cs/lvkj1n8v50/ZvH/Tv6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/L+bP2bx/17+mMX/+/ljFv8f5I9Z/LfNH7P4b5c/ZvHfPn/M4v/D/DGL/w75Yxb/H+WPWfx3zB+z+O+UP2bx/3H+mMV/5/wxi/8u+WMW/13zxyz+P8kfs/jvlj9m8f9p/pjF/2f5Yxb/3fPHLP575I9Z/PfMH7P4/zx/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4/yJ/zOJ/QP6Yxf/A/DGL/y/zxyz+v8ofs/gflD9m8f91/pjF/+D8MYv/IfljFv9D88cs/r/JH7P4/zZ/zOJ/WP6Yxf93+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOL/+/wxi/8x+WMW/z/kj1n8j80fs/gflz9m8f9j/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/j/KX/M4n9K/pjF/8/5Yxb/U/PHLP5/yR+z+P81f8zif1r+mMX/9Pwxi//f8scs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHJP4TDOSPWfwH5Y9Z/Afnj1n8x8gfs/gPyR+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7h6/8E41eI/nt6fs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8F8gfs/gvmD9m8V8of8ziv3D+mMX/8/ljFv8v5I9Z/BfJH7P4L5o/ZvH/Yv6YxX+x/DGL/5fyxyz+i+ePWfyXyB+z+H85f8ziv2T+mMV/qfwxi//S+WMW/6/kj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/q/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8zi/7X8MYv/1/PHLP6r5o9Z/FfLH7P4r54/ZvFfI3/M4v+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjF/5v5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/1v5Yxb/zfLHLP6b549Z/LfIH7P4fzt/zOL/nfwxi/+W+WMW/63yxyz+W+ePWfy3yR+z+H83f8zi/738MYv/9/PHLP4/yB+z+G+bP2bx3y5/zOK/ff6Yxf+H+WMW/x3yxyz+P8ofs/jvmD9m8d8pf8zi/+P8MYv/zvljFv9d8scs/rvmj1n8f5I/ZvHfLX/M4v/T/DGL/8/yxyz+u+ePWfz3yB+z+O+ZP2bx/3n+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bx/0X+mMX/gPwxi/+B+WMW/1/mj1n8f5U/ZvE/KH/M4v/r/DGL/8H5Yxb/Q/LHLP6H5o9Z/H+TP2bx/23+mMX/sPwxi//v8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/9/ljFv9j8scs/n/IH7P4H5s/ZvE/Ln/M4v/H/DGL//H5Y2/6jzvwbvY/IX/Msv+fmD9m8T8pf8zif3L+mMX/T/ljFv9T8scs/n/OH7P4n5o/ZvH/S/6Yxf+v+WMW/9Pyxyz+p+ePWfz/lj9m8T8jf8zif2b+mMX/rH/p/9r/3fX6L83if3b7P2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4vyzyH/IfzGvxf0Xk/59k8X81f8zi/1r+mMX/9fwxif+EA/ljFv9B+WMW/8H5Yxb/MfLHLP5D8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6YxX+y/DGL/3vyxyz+780fs/i/L3/M4v/+/DGL/wfyxyz+k+ePWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfynyB+z+H80f8ziP2X+mMV/aP6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/2P5Yxb/j+ePWfw/kT9m8f9k/pjF/1P5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMX/0/ljFv/P5I9Z/D+bP2bx/1z+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfw/nz9m8f9C/pjFf5H8MYv/ovljFv8v5o9Z/BfLH7P4fyl/zOK/eP6YxX+J/DGL/5fzxyz+S+aPWfyXyh+z+C+dP2bx/0r+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfy/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+X8sfs/h/PX/M4r9q/pjFf7X8MYv/6vljFv818scs/t/IH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8v5k/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8v5U/ZvHfLH/M4r95/pjFf4v8MYv/t/PHLP7fyR+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/3fzxyz+38sfs/h/P3/M4v+D/DGL/7b5Yxb/7fLHLP7b549Z/H+YP2bx3yF/zOL/o/wxi/+O+WMW/53yxyz+P84fs/jvnD9m8d8lf8ziv2v+mMX/J/ljFv/d8scs/j/NH7P4/yx/zOK/e/6YxX+P/DGL/575Yxb/n+ePWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/X+SPWfwPyB+z+B+YP2bx/2X+mMX/V/ljFv+D8scs/r/OH7P4H5w/9m70HzQwsN3AaP6H5I+9G/1p/z80f8zi/5v8MYv/b/PHLP6H5Y9Z/H+XP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP6/zx+z+B+TP2bx/0P+mMX/2Pwxi/9x+WMW/z/mj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/+f8scs/qfkj1n8/5w/ZvE/NX/M4v+X/DGL/1/zxyz+p+WPWfxPzx+z+P8tf8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX9M4j/RQP6YxX9Q/pjFf3D+mMV/jPwxi/+Q/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8zi/578MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/5PljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv8p8scs/h/NH7P4T5k/ZvEfmj9m8Z8qf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/1j+mMX/4/ljFv9P5I9Z/D+ZP2bx/1T+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv/P549Z/L+QP2bxXyR/zOK/aP6Yxf+L+WMW/8Xyxyz+X8ofs/gvnj9m8V8if8zi/+X8MYv/kvljFv+l8scs/kvnj1n8v5I/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv+v5o9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/1/LHLP5fzx+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/zfyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/b+aPWfw3yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/b+WPWfw3yx+z+G+eP2bx3yJ/zOL/7fwxi/938scs/lvmj1n8t8ofs/hvnT9m8d8mf8zi/938MYv/9/LHLP7fzx+z+P8gf8ziv23+mMV/u/wxi//2+WMW/x/mj1n8d8gfs/j/KH/M4r9j/pjFf6f8MYv/j/PHLP47549Z/HfJH7P475o/ZvH/Sf6YxX+3/DGL/0/zxyz+P8sfs/jvnj9m8d8jf8ziv2f+mMX/5/ljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/F/ljFv8D8scs/gfmj1n8f5k/ZvH/Vf6Yxf+g/DGL/6/zxyz+B+ePWfwPyR+z+B+aP2bx/03+mMX/t/ljFv/D8scs/r/LH7P4H54/ZvE/In9sNP/j363+R+aPWfb/o/LHLP5H549Z/H+fP2bxPyZ/zOL/h/wxi/+x+WMW/+Pyxyz+f8wfs/gfnz9m8T8hf8zif2L+2Cj+g97N/iflj1n2/5Pzxyz+f8ofs/ifkj9m8f9z/pjF/9T8MYv/X/LHLP5/zR+z+J+WP2bxPz1/zOL/t/wxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n8f+Y/9v7he/6VZ/O9v/8cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v/RW/kP+l9brvzSL/8vt/5jF/5X8MYv/q/ljFv/X8scs/q/nj0n8Jx7IH7P4/3/s3HuUXXV5x+E9k98kIUACpVoDBmNCICCQkAAhIpeAAkOSAS8oRBKIEC4lgRSiCVQh4gVtlaJUpbYKchEoAgpFSy00SimFikVFbYultEipVagoBVqVdA2ZiZnxZRazs7tZ5n2ePzJzzvgeIZ+1/OZM1tihfyhL/079Q1n6j9A/lKV/0T+UpX+X/qEs/UfqH8rSf5T+oSz9R+sfytJ/M/1DWfqP0T+Upf/m+oey9N9C/1CW/lvqH8rSf6z+oSz9x+kfytJ/K/1DWfpvrX8oS//f0D+Upf82+oey9P9N/UNZ+r9E/1CW/i/VP5Sl/2/pH8rS/2X6h7L0H69/KEv/bfUPZem/nf6hLP1frn8oS/8J+oey9N9e/1CW/q/QP5Sl/0T9Q1n6v1L/UJb+k/QPZek/Wf9Qlv476B/K0n+K/qEs/XfUP5Sl/076h7L0n6p/KEv/nfUPZem/i/6hLP1fpX8oS/9d9Q9l6b+b/qEs/XfXP5Sl/zT9Q1n6T9c/lKX/HvqHsvSfoX9oU+8/ct2n42bqH9rU+/cZt6f+oSz999I/lKX/3vqHsvSfpX8oS/999A9l6T9b/1CW/q/WP5Sl/776h7L0f43+oSz999M/lKX//vqHsvQ/QP9Qlv4H6h/K0n+O/qEs/Q/SP5Sl/8H6h7L0f63+oSz9X6d/KEv/Q/QPZel/qP6hLP0P0z+UpX+3/qEs/Q/XP5Sl/1z9Q1n6z9M/lKX/fP1DWfr36B/K0v8I/UNZ+h+pfyhL/9frH8rS/w36h7L0f6P+oSz936R/KEv/o/QPZen/Zv1DWfq/Rf9Qlv5H6x/K0v8Y/UNZ+i/QP5Sl/1v1D2Xpf6z+oSz9F+ofytJ/kf6hLP2P0z+Upf/x+oey9F+sfyhL/7fpH8rS/wT9Q1n6n6h/KEv/JfqHsvQ/Sf9Qlv4n6x/K0v8U/UNZ+p+qfyhL/9/WP5Sl/2n6h7L0X6p/KEv/ZfqHsvQ/Xf9Qlv5n6B/K0n+5/qEs/X9H/1CW/mfqH8rS/yz9Q1n6r9A/lKX/2/UPZen/Dv1DWfqv1D+Upf8q/UNZ+p+tfyhL/3P0D2Xp/7v6h7L0f6f+oSz936V/KEv/c/UPZel/nv6hLP1X6x/K0v/d+oey9D9f/1CW/u/RP5Sl/3v1D2Xp/z79Q1n6v1//UJb+F+gfytL/A/qHsvT/oP6hLP1/T/9Qlv6/r38oS/8P6R/K0v/D+oey9L9Q/1CW/n+gfyhL/4v0D2Xp/xH9Q1n6f1T/UJb+F+sfytL/D/UPZen/Mf1DWfp/XP9Qlv6f0D+Upf8l+oey9P8j/UNZ+n9S/1CW/n+sfyhL/z/RP5Sl/6f0D2Xp/2n9Q1n6X6p/KEv/y/QPZen/Gf1DWfpfrn8oS/8r9A9l6X+l/qEs/a/SP5Sl/2f1D2Xpf7X+oSz9r9E/lKX/tfqHsvT/U/1DWfpfp38oS//P6R/K0v96/UNZ+t+gfyhL/xv1D2Xp/3n9Q1n6f0H/UJb+N+kfytL/Zv1DWfr/mf6hLP1v0T+Upf8X9Q9l6f8l/UNZ+v+5/qEs/W/VP5Sl/1/oH8rS/8v6h7L0/0v9Q1n636Z/KEv/2/UPZen/V/qHsvRfo38oS/+v6B/K0v+r+oey9L9D/1CW/n+tfyhL/zv1D2Xp/zf6h7L0v0v/UJb+f6t/KEv/u/UPZel/j/6hLP3/Tv9Qlv5f0z+Upf+9+oey9P+6/qEs/f9e/1CW/vfpH8rS/xv6h7L0/6b+oSz9v6V/KEv/+/UPZen/bf1DWfp/R/9Qlv7f1T+Upf8/6B/K0v8f9Q9l6f9P+oey9H9A/1CW/t/TP5Sl/z/rH8rS/0H9Q1n6/4v+oSz9H9I/lKX/v+ofytL/3/QPZen/sP6hLP2/r38oS/9H9A9l6f/v+oey9H9U/1CW/v+hfyhL/x/oH8rS/z/1D2Xp/0P9Q1n6/0j/UJb+j+kfytL/cf1DWfr/l/6hLP1/rH8oS/8n9A9l6f8T/UNZ+v9U/1CW/k/qH8rS/7/1D2Xp/5T+oSz9n9Y/lKX/M/qHsvT/H/1DWfr/r/6hLP1/pn8oS/+f6x/K0v8X+oey9H9W/1CW/mv1DyXpv1WlfyhL/w79Q1n6d+ofytJ/hP6hLP2L/qEs/bv0D2XpP1L/UJb+o/QPZek/Wv9Qlv6b6R/K0n+M/qEs/TfXP5Sl/xb6h7L031L/UJb+Y/UPZek/Tv/QJtcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKiq7p45j43oGPDUiA0fTLh3yXMf93z66FOuuuqLW/d/7Pvy3OAlOzd8sHbt2rWdT1Zf63s4qqqq3v+2rfoejx583Pv65825ZOq6R2Xi5c/sct3KZw56/433X/P0oVfPva7ruWe7quNPOnXpkumdVVUmd1Wreh/s0VFVZceu6qLeBzN6H+zUVV3T+2Dmcw82q9b0Ptj9hDOWntj7xNTav2cA8Ouuu2d1NWLAYlcD/jSw4f6fN+fm1f0fh3jJ/lcrVd/+33rTNu8Y9LV+z7P//a9fXjl4/4f9LwgA/Irh7f8dE/s/DvGSv/L+f/7pH78/+trz73//65dJ9h8Amhd8/3/ARg/+vv+g7/9Hfw5Yf3/acReP6t3/q58+akXfU+WFfP//l69fJg/e/84B3//vqKqyQ//3/0dVVZmykb8dAJBCd8+7Hxvq/f/Q+1+2HXTTseH+b339mqN69//BMTe+tO+prmHu/w5Dvf8/ZNA/KwDwwnT3fGbtoPf/w9j/asfgJdfv/8Gr7n5J7/5/48HvT9zga8PZ/ymD93/aimXLp5119jm7nbps8clLTl5y+uxZs/bZa9bes2dMe+47Aut+3cjfFADYxG3c+/9qzKCbjqp6ZP39h26bcHfv/s/45GGn9D01epj7v+OQ7/8nev8PAANM6qxGjqxWLV6x4sw91v3a/3DGul/X/ceC/R/G3/9P7v8huv6fGeyoqpetv+856wOdvft/xeRtb+t7auQw93+nIff/wIE/qwgAvDAb+f7/xEE3A/Z/3IhrZ/fu/+FTdr6g76nh/v3/1CH3/zLv/wGgju6e6v/1TXTv/p+/xS8urXdddvbzfwDQvDb2//EJ75lU77rsYv8BoHlt7P+SA7a8pd51eZX9B4DmtbH/d3VfvLDeddnV/gNA89rY/3mnTbin3nXZzf4DQPPa2P+J55ywst512d3+A0Dz2tj/645+7KF612XagP0fbf8BoAlt7P+xox98ot51me79PwA0r439/+4uR55U77rsYf8BoHlt7P+X9939gXrXZYb9B4DmtbH/08dfNq/edZlp/wGgeW3s/0fP2P/KetdlT/sPAM1rY//Hz//8zHrXZS/7DwDNa2P/337s1y+sd132tv8A0Lw29v/Zcw8cX++6zLL/ANC8NvZ/zV3bL6h3Xfax/wDQvDb2f+4jF91b77rMtv8A0Lw29n+nJx9fXu+6vNr+A0Dz2tj/z33n+EfrXZd97T8ANK+N/R972bPj6l2X19h/AGheG/v/vvOXX1Lvuuxn/wGgeW3s/w8uHjul3nXZ3/4DQPPa2P+3fWH1TfWuywH2HwCa18b+f/PhmXPrXZcD7T8ANK+N/T/mK7d9r951mWP/AaB5bez/XvfdsbjedTnI/gNA89rY/9t/Mv+petflYPsPAM1rY/9f/t5vbV/vurzW/gNA89rY/098duEH612X19l/AGheG/v/sy9N3rPedTnE/gNA89rY/+Ufu/6KetflUPsPAM1rY/97dv3pQ/Wuy2H2HwCa18b+3zn2XSvrXZdu+w8AzWtj/699xYh76l2Xw+0/ADSvjf2ftN+HF9a7LnPtPwA0r439Xz13m1vqXZd59h8AmtfG/m9+6qcm1bsu8+0/ADSvjf0/edXDl9a7Lj32HwCa18b+/2jBstH1rssR9h8AmtfG/m83ZtH4etflSPsPAM1rY/8vmnrfhfWuy+vtPwA0r439//nsG2bWuy5vsP8A0Lw29n/ldhOvrHdd3mj/AaB5bez/t5fdPq/edXmT/QeA5rWx/4uOmP5AvetylP0HgOa1sf8zFvWcVO+6vNn+A0Dz2tj/W9+55ol61+Ut9h8AmtfG/l9w56dvqnddjrb/ANC8NvZ/i0e3mlLvuhxj/wGgeW3s//FPnX5JveuywP4DQPPa2P8f3v/QuHrX5a32HwCa18b+d19+7qP1rsux9h8AmtfG/n919Y+X17suC+0/ADSvjf2/4SMX3lvvuiyy/wDQvDb2f8rN1YJ61+U4+w8AzTvr7HNOW7x06ZIzfeITn/hk/Scv9v8yAQAATfvlH/pf7H8SAAAAAAAAAAAAAAAAAAAAyKuN/zuxF/vfEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/o8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAABPlbrzBAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwEAAP//7OPbug==") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000d00)={0xfffffffffffffffb, 0x800000000003, 0x9, 0x2, 0x800, 0x7ff, 0x32, 0x1, 0x4040c405}) 2.96835979s ago: executing program 0 (id=3931): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000002400), 0x20000) fcntl$setstatus(r0, 0x4, 0x2000) 1.810806729s ago: executing program 0 (id=3950): syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010800ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) 1.631525342s ago: executing program 1 (id=3955): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000009700)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) 1.550376114s ago: executing program 4 (id=3956): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, &(0x7f0000000140)) 1.470558745s ago: executing program 1 (id=3958): creat(&(0x7f00000001c0)='./file0\x00', 0x8) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000640)={[{@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@fat=@fmask={'fmask', 0x3d, 0x1}}, {@fat=@usefree}, {@dots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@quiet}, {@nodots}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") 1.339225577s ago: executing program 4 (id=3959): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd8, &(0x7f0000000000), &(0x7f0000000240)=0x4) 1.294415198s ago: executing program 3 (id=3960): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"001000", 0x7ff, 0x5, 0x2, 0x800, 0x1, '\x00', '\x00', "0300", "e8cc1304", ["8b59b4d766cbd603b0000700", "ca8cacff0f00", "000000ff0000000000000020"]}) 1.255859569s ago: executing program 1 (id=3962): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0) 1.236478249s ago: executing program 4 (id=3963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xf3aef3f4a65b26bf}}, 0x1c}}, 0x0) 1.110046611s ago: executing program 1 (id=3965): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1.096516291s ago: executing program 4 (id=3966): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_fd={0x5, 0x4, 0x4, 0x20, 0x1, {0x0, 0xea60}, {0x2, 0x8, 0xfa, 0x10, 0xea, 0x4, "7b5603f7"}, 0x400, 0x4, {&(0x7f0000000100)=[{0x1, 0x5, {}, 0xfffffff9}, {0x9, 0x101, {}, 0x5}]}, 0x8001}) 1.027168193s ago: executing program 1 (id=3967): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000010c0)=@rose={0xbb, 0x2, 0xbb, 0x1, 0x0}) 983.144933ms ago: executing program 4 (id=3968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r0, 0x2000000, 0xa0028000}, 0x38) 933.860424ms ago: executing program 1 (id=3969): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6f, 0x1, 0x3, 0x1, 0x2, 0x1c, {0x9, 0x21, 0x401, 0x3, 0x1, {0x22, 0xcbb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf7, 0x3, 0x3}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) 918.720084ms ago: executing program 4 (id=3970): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001300)={0x10, &(0x7f0000001380)={0x0, 0x0, 0x4, "717e7ea0"}, 0x0, 0x0}) 908.353314ms ago: executing program 5 (id=3971): r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x3, 0x0, [0x8a23, 0x80000001, 0x2, 0x0, 0x1, 0x8a], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x78) 848.539405ms ago: executing program 5 (id=3972): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 771.266466ms ago: executing program 5 (id=3973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 706.164338ms ago: executing program 5 (id=3974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@allocspi={0xf8, 0x15, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e20}, {@in6=@loopback, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffff}}, 0xf8}}, 0x0) 705.680068ms ago: executing program 5 (id=3975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xe4, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x40, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xe265}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x48, 0xef8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf03b, 0x15}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x48, 0x81}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xe4}}, 0x0) 673.225928ms ago: executing program 5 (id=3976): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x6, 0x7, 0x0, 0x7}) 569.04849ms ago: executing program 3 (id=3977): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="9302a0"], 0x232) 498.779641ms ago: executing program 3 (id=3978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x238, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd, 0x8}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x100, 0x1, {{'hmac(sha1)\x00'}, 0x5c0, "fd03480f2e2ebb04183ebca2d78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b6b8a3542814e750312a0ffb8d2a22897aa02b742120e6f30979c39395eff53127d75d756e6a5be009f9c5b73cc002ca5e0e93d1a1730a1593d11d326b04cf06a436e84581a4f7369563bd6ab49d5f5fd6114c1a68b7bd9c85dce5fe4b25231f54590dbd7156f55078a369d24a907824d1f331a6d7a31f0172f177c"}}]}, 0x238}}, 0x0) 370.747903ms ago: executing program 3 (id=3979): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0x3, 0x1b3, &(0x7f0000000780)="$eJzs28tu00AUxvFvbMcl5U5hwyoSSLChpqm4VGxgx6avgFS1JopwABE2iZAiVjwH78UjEAm2IGEUx3EUxyTkYkYk/9/qHJ9OZ8bKOCcLC8DWqqkmIyMnzXt7pqKf8TBxbK4MQNkGJ/1XDGA7ud9srwCAHf1ngy7ADJsBtzLVH3wx0lNJX79/OJXjT9X7H6WbXlo3OzqX7y8+S3dG4021cPxuVt8trN+9NZr/vC7ooi7psq7oqq6l9bNs/I0VOiFg+xjt5/OJC45eNqPwfpZXkvwgy/0kr+fywyzfSfL90zfRWXpl+hkAwA5nzvl3c+ffy51/AP+vdqf76iSKwncLB09+xPHio2YF6a8Qre0fFgWxKxWW/BInHQWDHZY8xcyg9s9m99ey0+eydKNygbfkSenpDx+2pYLq2u5GVfP/xvKDCUDpgvett0G7073XbJ00wkb4uv64fvTw8MHBo6Mg6fyDyf4fwOYYf+nbXgkAAAAAAAAAAAAAAFjWnq6nkTe++MnWagAAAACU6a/eGTq+ffxihVeObO8RAAAAAAAAAAAAAAAAAAAA2BS/AwAA//9qphc0") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 180.320867ms ago: executing program 3 (id=3980): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000010c0)=@rose={0xbb, 0x2, 0xbb, 0x1, 0x0}) 0s ago: executing program 3 (id=3981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1558}}, 0x0) kernel console output (not intermixed with test programs): inder of the config [ 181.264306][ T8249] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 181.279438][ T8249] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.294390][ T8246] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 181.301562][ T8246] f81534a: probe of ttyUSB0 failed with error -5 [ 181.308111][ T4219] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.365077][ T8246] usb 5-1: USB disconnect, device number 12 [ 181.373843][ T8246] f81232 5-1:0.0: device disconnected [ 181.400187][ T9678] loop3: detected capacity change from 0 to 65536 [ 181.476873][ T9678] XFS (loop3): Mounting V5 Filesystem [ 181.504657][ T8249] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.522150][ T8249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.535745][ T8249] usb 6-1: Product: syz [ 181.542980][ T8249] usb 6-1: Manufacturer: syz [ 181.554240][ T4219] usb 2-1: Using ep0 maxpacket: 32 [ 181.569116][ T8249] usb 6-1: SerialNumber: syz [ 181.590661][ T9678] XFS (loop3): Ending clean mount [ 181.610520][ T8249] usb 6-1: config 0 descriptor?? [ 181.684527][ T4219] usb 2-1: unable to get BOS descriptor set [ 181.691520][ T8249] cdc_ncm 6-1:0.0: CDC Union missing and no IAD found [ 181.704525][ T8249] cdc_ncm 6-1:0.0: bind() failure [ 181.748240][ T4174] XFS (loop3): Unmounting Filesystem [ 181.776975][ T4219] usb 2-1: config 1 interface 0 has no altsetting 0 [ 181.901623][ T9727] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2338'. [ 181.937806][ T4218] usb 6-1: USB disconnect, device number 6 [ 181.946177][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2338'. [ 181.959389][ T9727] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2338'. [ 181.959595][ T4219] usb 2-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.40 [ 181.968874][ T9727] netlink: 'syz.4.2338': attribute type 2 has an invalid length. [ 181.997784][ T9727] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2338'. [ 182.019340][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.040002][ T4219] usb 2-1: Product: syz [ 182.048584][ T4219] usb 2-1: Manufacturer: syz [ 182.053310][ T4219] usb 2-1: SerialNumber: syz [ 182.100014][ T9731] loop0: detected capacity change from 0 to 128 [ 182.206418][ T9731] ufs: Unable to do repair on error, will lock lock instead [ 182.229799][ T9731] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 182.329161][ T9739] device netdevsim0 entered promiscuous mode [ 182.383565][ T9741] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2344'. [ 182.385062][ T9739] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 182.504452][ T4219] usbhid 2-1:1.0: can't add hid device: -71 [ 182.511860][ T4219] usbhid: probe of 2-1:1.0 failed with error -71 [ 182.561394][ T4219] usb 2-1: USB disconnect, device number 14 [ 183.193782][ T9789] XFS (nullb0): Invalid superblock magic number [ 183.234855][ T9801] netlink: 'syz.3.2371': attribute type 21 has an invalid length. [ 183.252301][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'. [ 183.420807][ T9812] loop1: detected capacity change from 0 to 64 [ 183.786319][ T9820] loop3: detected capacity change from 0 to 4096 [ 184.058885][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2392'. [ 184.447731][ T9869] loop0: detected capacity change from 0 to 256 [ 184.479367][ T9866] loop3: detected capacity change from 0 to 4096 [ 184.493312][ T9871] netlink: 'syz.4.2404': attribute type 2 has an invalid length. [ 184.563920][ T9866] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 184.642538][ T9877] loop5: detected capacity change from 0 to 2048 [ 184.676225][ T9883] loop1: detected capacity change from 0 to 64 [ 184.839362][ T9890] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.873910][ T9877] NILFS error (device loop5): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 184.925593][ T9898] loop4: detected capacity change from 0 to 8 [ 184.956471][ T9877] Remounting filesystem read-only [ 184.966288][ T9902] ceph: No source [ 184.975292][ T9898] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 184.985481][ T9899] loop3: detected capacity change from 0 to 1024 [ 185.014084][ T9898] cramfs: Error -3 while decompressing! [ 185.060276][ T9898] cramfs: ffffffff961ce228(26)->ffff888071b56000(4096) [ 185.075685][ T9898] cramfs: Error -5 while decompressing! [ 185.087399][ T9898] cramfs: ffffffff961ce242(26)->ffff8880553fc000(4096) [ 185.096859][ T9898] cramfs: Error -3 while decompressing! [ 185.101341][ T9900] loop0: detected capacity change from 0 to 4096 [ 185.102501][ T9898] cramfs: ffffffff961ce228(26)->ffff888071b56000(4096) [ 185.179992][ T9900] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 185.221842][ T9909] loop5: detected capacity change from 0 to 8 [ 185.302884][ T9900] ntfs3: loop0: failed to convert "c46c" to cp855 [ 185.525004][ T9924] netlink: 'syz.3.2430': attribute type 32 has an invalid length. [ 185.821898][ T9950] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2442'. [ 185.848383][ T9950] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2442'. [ 185.874344][ T4249] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 185.903844][ T9954] loop4: detected capacity change from 0 to 128 [ 186.065943][ T9969] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2452'. [ 186.082605][ T4171] sysv_free_block: flc_count > flc_size [ 186.104560][ T4171] sysv_free_block: flc_count > flc_size [ 186.134515][ T4171] sysv_free_block: flc_count > flc_size [ 186.140110][ T4171] sysv_free_block: flc_count > flc_size [ 186.160249][ T4171] sysv_free_block: flc_count > flc_size [ 186.174519][ T4249] usb 4-1: Using ep0 maxpacket: 16 [ 186.174946][ T4171] sysv_free_block: flc_count > flc_size [ 186.208784][ T4171] sysv_free_block: flc_count > flc_size [ 186.222722][ T4171] sysv_free_block: flc_count > flc_size [ 186.254255][ T4171] sysv_free_block: flc_count > flc_size [ 186.259842][ T4171] sysv_free_block: flc_count > flc_size [ 186.293106][ T4171] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 186.314667][ T4249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 186.436184][ T9989] loop0: detected capacity change from 0 to 64 [ 186.494711][ T4249] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 186.498005][ T9989] Trying to free block not in datazone [ 186.508401][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.528466][ T4249] usb 4-1: Product: syz [ 186.532677][ T4249] usb 4-1: Manufacturer: syz [ 186.557153][ T4249] usb 4-1: SerialNumber: syz [ 186.575377][ T4249] usb 4-1: config 0 descriptor?? [ 186.582667][ T9989] Trying to free block not in datazone [ 186.602183][ T9989] Trying to free block not in datazone [ 186.620340][ T9989] Trying to free block not in datazone [ 186.625001][ T4249] hub 4-1:0.0: bad descriptor, ignoring hub [ 186.631122][ T9989] minix_free_block (loop0:6): bit already cleared [ 186.647557][ T4249] hub: probe of 4-1:0.0 failed with error -5 [ 186.660722][ T9989] Trying to free block not in datazone [ 186.666781][ T9989] Trying to free block not in datazone [ 186.668226][ T4249] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 186.724297][ T8249] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 186.740600][T10002] xt_connbytes: Forcing CT accounting to be enabled [ 186.789568][T10002] --map-set only usable from mangle table [ 186.984256][ T8249] usb 6-1: Using ep0 maxpacket: 16 [ 187.105026][ T8249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.187068][ T8246] usb 4-1: USB disconnect, device number 11 [ 187.281114][T10008] loop1: detected capacity change from 0 to 4096 [ 187.324647][ T8249] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 187.344747][T10016] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.351620][ T8249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.440044][ T8249] usb 6-1: Product: syz [ 187.460812][ T8249] usb 6-1: Manufacturer: syz [ 187.484252][ T8249] usb 6-1: SerialNumber: syz [ 187.527772][ T8249] usb 6-1: config 0 descriptor?? [ 187.585084][ T8249] hub 6-1:0.0: bad descriptor, ignoring hub [ 187.610040][ T8249] hub: probe of 6-1:0.0 failed with error -5 [ 187.666936][ T8249] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 187.800722][T10023] loop4: detected capacity change from 0 to 1764 [ 187.952813][T10023] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 187.971419][ T4249] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.019894][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 188.086892][T10034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.184569][ T1326] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 188.244665][ T4219] usb 6-1: USB disconnect, device number 7 [ 188.254284][ T4249] usb 4-1: Using ep0 maxpacket: 32 [ 188.428810][ T4249] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.455945][ T1326] usb 2-1: Using ep0 maxpacket: 16 [ 188.514459][ T4249] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 188.522680][ T4249] usb 4-1: config 7 has no interface number 0 [ 188.545082][ T4249] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 188.564023][ T4249] usb 4-1: config 7 interface 187 has no altsetting 0 [ 188.582237][T10036] loop4: detected capacity change from 0 to 32768 [ 188.589081][ T1326] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 188.604981][ T1326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.616487][ T1326] usb 2-1: config 0 has no interface number 0 [ 188.665541][T10046] loop0: detected capacity change from 0 to 4096 [ 188.679911][T10036] XFS (loop4): Mounting V5 Filesystem [ 188.707560][T10046] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 188.739175][ T4249] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 188.785261][ T4249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.804681][ T1326] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 188.830897][ T4249] usb 4-1: Product: syz [ 188.842270][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.854138][ T4249] usb 4-1: Manufacturer: syz [ 188.859222][ T4249] usb 4-1: SerialNumber: syz [ 188.874316][ T1326] usb 2-1: Product: syz [ 188.878527][ T1326] usb 2-1: Manufacturer: syz [ 188.883135][ T1326] usb 2-1: SerialNumber: syz [ 188.910420][ T1326] usb 2-1: config 0 descriptor?? [ 188.917191][T10020] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 188.939757][T10036] XFS (loop4): Ending clean mount [ 188.963543][T10058] nfs: Deprecated parameter 'nointr' [ 188.970626][ T1326] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 188.998192][ T1326] usb 2-1: No valid video chain found. [ 189.040046][ T4173] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 189.060491][ T4171] XFS (loop4): Unmounting Filesystem [ 189.072999][ T4173] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 189.096370][ T4173] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 189.197370][ T4218] usb 2-1: USB disconnect, device number 15 [ 189.204595][ T4249] usb 4-1: Limiting number of CPorts to U8_MAX [ 189.217649][ T4249] usb 4-1: Unknown endpoint type found, address 0x07 [ 189.227461][ T4249] usb 4-1: Not enough endpoints found in device, aborting! [ 189.483050][ T4217] usb 4-1: USB disconnect, device number 12 [ 189.660031][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2495'. [ 189.711421][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2495'. [ 189.751071][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2495'. [ 189.795326][T10084] loop1: detected capacity change from 0 to 256 [ 189.859083][T10084] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.887847][T10084] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 189.940068][T10084] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 190.247276][T10102] loop5: detected capacity change from 0 to 4096 [ 190.305558][T10102] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 190.327993][T10117] siw: device registration error -23 [ 190.484416][ T8247] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 190.639957][T10132] netlink: 5284 bytes leftover after parsing attributes in process `syz.0.2527'. [ 190.734527][ T8247] usb 2-1: Using ep0 maxpacket: 8 [ 190.854478][ T8247] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 190.871676][ T8247] usb 2-1: config 2 has no interface number 0 [ 190.891782][ T8247] usb 2-1: config 2 interface 31 has no altsetting 0 [ 191.064642][ T8247] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 191.092023][ T8247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.110659][ T8247] usb 2-1: Product: syz [ 191.115336][ T8247] usb 2-1: Manufacturer: syz [ 191.124912][ T8247] usb 2-1: SerialNumber: syz [ 191.144420][ T4219] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 191.353354][T10154] Invalid ELF header magic: != ELF [ 191.394298][ T4219] usb 6-1: Using ep0 maxpacket: 16 [ 191.472524][T10140] loop3: detected capacity change from 0 to 32768 [ 191.514481][ T4219] usb 6-1: config 0 has an invalid interface number: 240 but max is 1 [ 191.526163][ T4219] usb 6-1: config 0 has an invalid interface number: 130 but max is 1 [ 191.543298][ T4219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.565106][ T4219] usb 6-1: config 0 has no interface number 0 [ 191.575016][T10140] XFS (loop3): Mounting V5 Filesystem [ 191.576883][ T4219] usb 6-1: config 0 has no interface number 1 [ 191.592078][ T4219] usb 6-1: config 0 interface 240 altsetting 4 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 191.603648][ T4219] usb 6-1: config 0 interface 130 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 191.615587][ T4219] usb 6-1: config 0 interface 130 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 1023 [ 191.617838][T10149] loop0: detected capacity change from 0 to 32768 [ 191.635357][ T4219] usb 6-1: config 0 interface 130 altsetting 16 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 191.650469][T10140] XFS (loop3): Ending clean mount [ 191.654588][T10149] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2536 (10149) [ 191.672970][ T4219] usb 6-1: config 0 interface 130 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 191.688513][ T4219] usb 6-1: config 0 interface 130 altsetting 16 has a duplicate endpoint with address 0x3, skipping [ 191.699534][ T4219] usb 6-1: config 0 interface 130 altsetting 16 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 191.713208][ T4219] usb 6-1: config 0 interface 240 has no altsetting 0 [ 191.723127][ T4219] usb 6-1: config 0 interface 130 has no altsetting 0 [ 191.773502][T10149] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 191.822757][T10149] BTRFS info (device loop0): using free space tree [ 191.831137][ T8247] ch9200: probe of 2-1:2.31 failed with error -22 [ 191.842721][ T4174] XFS (loop3): Unmounting Filesystem [ 191.883023][ T8247] usb 2-1: USB disconnect, device number 16 [ 191.889296][ T4219] usb 6-1: New USB device found, idVendor=0df6, idProduct=006c, bcdDevice=c9.48 [ 191.894299][T10149] BTRFS info (device loop0): has skinny extents [ 191.903562][ T4219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.944613][ T4219] usb 6-1: Product: syz [ 191.950974][ T4219] usb 6-1: Manufacturer: syz [ 191.958351][ T4219] usb 6-1: SerialNumber: syz [ 191.975228][ T4219] usb 6-1: config 0 descriptor?? [ 191.989047][T10149] BTRFS info (device loop0): enabling ssd optimizations [ 192.016908][ T4219] r8712u: register rtl8712_netdev_ops to netdev_ops [ 192.023547][ T4219] usb 6-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 192.264533][ T4219] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 192.271272][ T4219] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 192.289158][ T4185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop0 scanned by udevd (4185) [ 192.307840][ T4219] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 192.316944][T10186] loop1: detected capacity change from 0 to 512 [ 192.366799][ T4219] r8712u: register rtl8712_netdev_ops to netdev_ops [ 192.386132][ T4219] usb 6-1: r8712u: USB_SPEED_HIGH with 3 endpoints [ 192.387546][T10186] EXT4-fs (loop1): Ignoring removed orlov option [ 192.458744][ T4219] usb 6-1: r8712u: Boot from EFUSE: Autoload Failed [ 192.478984][ T4219] usb 6-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 192.501533][T10186] EXT4-fs (loop1): orphan cleanup on readonly fs [ 192.504500][ T4219] usb 6-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 192.544538][T10186] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.2543: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 192.548360][ T4219] usb 6-1: USB disconnect, device number 8 [ 192.687402][T10186] EXT4-fs (loop1): Remounting filesystem read-only [ 192.723896][T10186] __quota_error: 2 callbacks suppressed [ 192.723913][T10186] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 192.802725][T10186] EXT4-fs warning (device loop1): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 192.840378][T10186] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 192.855627][T10186] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: writeback. [ 193.154283][ T8247] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.518908][T10231] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2561'. [ 193.524432][ T8247] usb 5-1: config 0 has an invalid interface number: 114 but max is 0 [ 193.556661][ T8247] usb 5-1: config 0 has no interface number 0 [ 193.738500][T10242] block nbd1: NBD_DISCONNECT [ 193.745460][ T8247] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=13.67 [ 193.764041][ T8247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.791090][ T8247] usb 5-1: Product: syz [ 193.798990][ T8247] usb 5-1: Manufacturer: syz [ 193.816415][ T8247] usb 5-1: SerialNumber: syz [ 193.838082][ T8247] usb 5-1: config 0 descriptor?? [ 193.841964][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.849377][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.906597][T10205] loop3: detected capacity change from 0 to 32768 [ 193.946235][T10253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2572'. [ 193.961589][T10253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2572'. [ 194.029217][T10205] ERROR: (device loop3): diAllocAG: error reading iag [ 194.029217][T10205] [ 194.112060][T10205] ialloc: diAlloc returned -5! [ 194.122842][ T8247] cdc_subset: probe of 5-1:0.114 failed with error -22 [ 194.377861][ T8247] usb 5-1: USB disconnect, device number 13 [ 194.434100][T10273] loop5: detected capacity change from 0 to 512 [ 194.457690][T10275] loop0: detected capacity change from 0 to 512 [ 194.511698][T10275] EXT4-fs (loop0): Ignoring removed nobh option [ 194.600027][T10273] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 194.610617][T10275] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noauto_da_alloc,delalloc,nobh,dioread_lock,. Quota mode: writeback. [ 194.647896][T10273] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 194.656908][T10275] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.657498][T10273] EXT4-fs (loop5): 1 truncate cleaned up [ 194.794266][T10273] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 194.851890][T10275] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.0.2582: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 194.921806][T10275] EXT4-fs (loop0): Remounting filesystem read-only [ 194.940397][T10273] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.2581: Logical block already allocated [ 194.964410][T10275] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 195.000975][T10275] EXT4-fs (loop0): Remounting filesystem read-only [ 195.046621][T10269] loop1: detected capacity change from 0 to 32768 [ 195.179905][T10269] XFS (loop1): Mounting V5 Filesystem [ 195.354375][ T4218] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.380567][T10269] XFS (loop1): Ending clean mount [ 195.538290][T10311] loop0: detected capacity change from 0 to 256 [ 195.544944][ T4172] XFS (loop1): Unmounting Filesystem [ 195.619910][T10311] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 195.747669][ T4218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 195.766234][ T4218] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 195.795804][ T4218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 195.821793][ T4218] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 195.850827][ T4218] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 195.871157][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.887605][ T4218] usb 4-1: config 0 descriptor?? [ 196.103074][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 196.170283][ T4218] hdpvr 4-1:0.0: firmware version 0x7b dated îårDž&k.0H`Ú]hŽ¥ù4_Ïu©V!í°ßš?ì‹ç<é7±’ [ 196.200409][ T4218] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 196.373856][T10346] loop4: detected capacity change from 0 to 256 [ 196.394468][ T4218] hdpvr 4-1:0.0: device init failed [ 196.399773][ T4218] hdpvr: probe of 4-1:0.0 failed with error -12 [ 196.426726][ T4218] usb 4-1: USB disconnect, device number 13 [ 196.450337][T10348] loop0: detected capacity change from 0 to 512 [ 196.633559][T10348] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2609: inode #1: comm syz.0.2609: iget: illegal inode # [ 196.646639][ T25] audit: type=1400 audit(1750249535.370:10): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=22 pid=10354 comm="syz.4.2614" [ 196.711791][T10348] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2609: error while reading EA inode 1 err=-117 [ 196.774774][T10362] No such timeout policy "syz1" [ 196.814888][T10348] EXT4-fs (loop0): 1 orphan inode deleted [ 196.832118][T10348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.916194][T10366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2619'. [ 197.002011][T10368] loop1: detected capacity change from 0 to 512 [ 197.049323][T10336] loop5: detected capacity change from 0 to 32768 [ 197.084448][T10368] EXT4-fs (loop1): Ignoring removed nobh option [ 197.188096][T10336] XFS (loop5): Mounting V5 Filesystem [ 197.218216][T10368] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noauto_da_alloc,delalloc,nobh,dioread_lock,. Quota mode: writeback. [ 197.354673][T10368] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.371111][T10395] syz.4.2630 (10395): /proc/10394/oom_adj is deprecated, please use /proc/10394/oom_score_adj instead. [ 197.427897][T10368] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.1.2621: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 197.448649][ T4218] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 197.466335][T10336] XFS (loop5): Ending clean mount [ 197.502876][T10368] EXT4-fs (loop1): Remounting filesystem read-only [ 197.524540][T10368] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 197.542583][T10368] EXT4-fs (loop1): Remounting filesystem read-only [ 197.607340][ T6185] XFS (loop5): Unmounting Filesystem [ 197.724384][ T4218] usb 1-1: Using ep0 maxpacket: 16 [ 197.834067][T10406] loop4: detected capacity change from 0 to 4096 [ 197.873046][T10406] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 197.896274][ T4218] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 197.916491][ T4218] usb 1-1: config 0 has no interface number 0 [ 197.922740][ T4218] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 197.991855][ T4218] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 198.048853][T10406] ntfs3: loop4: failed to convert "c46c" to macgaelic [ 198.174756][ T4218] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 198.204217][ T4218] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 198.226763][ T4218] usb 1-1: Manufacturer: syz [ 198.231410][ T4218] usb 1-1: SerialNumber: syz [ 198.256140][ T4218] usb 1-1: config 0 descriptor?? [ 198.272642][T10417] loop4: detected capacity change from 0 to 512 [ 198.305033][T10377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 198.375285][T10417] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback. [ 198.424566][T10417] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.534453][ T4218] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 198.542175][T10430] dlm: dev_write: no op 0 0 [ 198.550554][ T4218] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 198.554022][ T8246] Bluetooth: hci0: command 0x0401 tx timeout [ 198.584556][ T4218] usb 1-1: USB disconnect, device number 14 [ 198.674464][T10404] loop3: detected capacity change from 0 to 32768 [ 198.894512][ T1326] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 198.906993][T10404] XFS (loop3): Mounting V5 Filesystem [ 198.916138][T10452] delete_channel: no stack [ 199.086522][T10458] loop4: detected capacity change from 0 to 128 [ 199.133824][T10404] XFS (loop3): Ending clean mount [ 199.174392][ T1326] usb 6-1: Using ep0 maxpacket: 32 [ 199.186938][T10462] loop0: detected capacity change from 0 to 1024 [ 199.208479][T10404] XFS (loop3): Quotacheck needed: Please wait. [ 199.214476][T10458] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.234554][T10458] ext4 filesystem being mounted at /574/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.266377][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.290094][T10404] XFS (loop3): Quotacheck: Done. [ 199.354706][ T1326] usb 6-1: config 2 has an invalid interface number: 7 but max is 0 [ 199.372710][ T1326] usb 6-1: config 2 has no interface number 0 [ 199.403256][T10458] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:106: comm syz.4.2656: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 199.435137][ T4174] XFS (loop3): Unmounting Filesystem [ 199.601359][ T1326] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=ec.00 [ 199.616759][ T1326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.672905][ T1326] usb 6-1: Product: syz [ 199.701307][ T1326] usb 6-1: Manufacturer: syz [ 199.714289][ T1326] usb 6-1: SerialNumber: syz [ 199.775990][ T1326] rtl8150 6-1:2.7: couldn't find required endpoints [ 199.782725][ T1326] rtl8150: probe of 6-1:2.7 failed with error -5 [ 200.035281][ T1326] usb 6-1: USB disconnect, device number 9 [ 200.390251][T10493] loop1: detected capacity change from 0 to 4096 [ 200.450705][T10502] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 200.481494][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 200.489684][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 200.500578][T10502] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2677'. [ 200.525706][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 200.562870][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 200.582612][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 200.616745][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 200.634586][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 200.685411][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 200.693296][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 200.738741][T10493] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 201.204321][T10203] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 201.305019][ T4219] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.398867][T10545] loop0: detected capacity change from 0 to 22 [ 201.454839][T10545] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 201.487307][T10545] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 201.527128][T10545] MTD: Couldn't look up './file0': -13 [ 201.532781][T10545] ./file0: Can't open blockdev [ 201.564770][T10203] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 201.591919][T10203] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 201.601520][T10203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.665934][ T4219] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 201.681770][ T4219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.693368][ T4219] usb 4-1: config 0 has no interface number 0 [ 201.818661][T10564] loop1: detected capacity change from 0 to 4096 [ 201.855310][ T4219] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 201.865032][ T4219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.893916][T10203] usb 6-1: string descriptor 0 read error: -71 [ 201.901035][ T4217] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 201.912647][ T4219] usb 4-1: Product: syz [ 201.933049][T10203] hub 6-1:32.0: USB hub found [ 201.942547][ T4219] usb 4-1: Manufacturer: syz [ 201.950204][ T4219] usb 4-1: SerialNumber: syz [ 201.961523][ T4219] usb 4-1: config 0 descriptor?? [ 201.986390][T10574] VFS: could not find a valid V7 on nullb0. [ 202.004821][T10203] hub 6-1:32.0: config failed, can't read hub descriptor (err -22) [ 202.035618][ T4219] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 202.042045][ T4219] ims_pcu: probe of 4-1:0.41 failed with error -22 [ 202.096770][T10564] ntfs3: loop1: mft corrupted [ 202.125303][T10203] usb 6-1: USB disconnect, device number 10 [ 202.174335][ T4217] usb 5-1: Using ep0 maxpacket: 32 [ 202.277643][ T1326] usb 4-1: USB disconnect, device number 14 [ 202.294505][ T4217] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.312128][ T4217] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.369924][T10586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 202.416393][ T4164] udevd[4164]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.454571][ T4217] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.464344][ T4217] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 202.472717][ T4217] usb 5-1: Product: syz [ 202.534439][ T4217] usb 5-1: Manufacturer: syz [ 202.586552][ T4217] hub 5-1:4.0: USB hub found [ 202.761247][T10609] device wg1 entered promiscuous mode [ 202.804642][ T4217] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 203.075348][T10624] netlink: 'syz.1.2737': attribute type 2 has an invalid length. [ 203.124737][T10621] loop0: detected capacity change from 0 to 4096 [ 203.175789][ T1326] usb 5-1: USB disconnect, device number 14 [ 203.652287][T10658] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 203.881364][T10678] ipt_REJECT: ECHOREPLY no longer supported. [ 203.913338][T10679] loop0: detected capacity change from 0 to 64 [ 203.940724][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2765'. [ 203.961512][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2765'. [ 203.981319][T10681] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2765'. [ 204.662517][T10725] xt_CT: No such helper "snmp_trap" [ 204.880302][T10733] loop0: detected capacity change from 0 to 4096 [ 204.942251][T10733] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 205.437316][T10720] loop1: detected capacity change from 0 to 32768 [ 205.482010][ T7488] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 205.499243][T10720] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2792 (10720) [ 205.512112][ T1326] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.573715][T10720] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 205.600647][T10720] BTRFS info (device loop1): force zlib compression, level 3 [ 205.624709][T10720] BTRFS info (device loop1): force clearing of disk cache [ 205.654251][T10720] BTRFS info (device loop1): setting nodatasum [ 205.680187][T10720] BTRFS info (device loop1): allowing degraded mounts [ 205.682110][T10735] loop4: detected capacity change from 0 to 32768 [ 205.706996][T10720] BTRFS info (device loop1): enabling disk space caching [ 205.728666][T10720] BTRFS info (device loop1): disk space caching is enabled [ 205.738479][T10720] BTRFS info (device loop1): has skinny extents [ 205.784346][ T1326] usb 4-1: Using ep0 maxpacket: 8 [ 205.819841][T10735] (syz.4.2790,10735,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.907279][T10735] (syz.4.2790,10735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.914941][T10720] BTRFS info (device loop1): clearing free space tree [ 205.934600][ T1326] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 205.944603][T10720] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.969653][T10720] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.980269][ T7488] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.993366][T10735] JBD2: Ignoring recovery information on journal [ 206.048841][T10720] BTRFS error (device loop1): balance: invalid convert data profile raid5 [ 206.075100][ T7488] usb 6-1: config 2 has an invalid interface number: 24 but max is 0 [ 206.087461][ T7488] usb 6-1: config 2 has no interface number 0 [ 206.094468][ T7488] usb 6-1: config 2 interface 24 altsetting 16 has an invalid endpoint with address 0x0, skipping [ 206.105389][ T7488] usb 6-1: config 2 interface 24 has no altsetting 0 [ 206.144639][ T1326] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 206.154498][ T1326] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 206.162820][ T1326] usb 4-1: Product: syz [ 206.168139][ T1326] usb 4-1: Manufacturer: syz [ 206.173966][ T1326] usb 4-1: SerialNumber: syz [ 206.184850][T10735] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 206.284537][ T7488] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=23.12 [ 206.317055][ T7488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.371660][ T7488] usb 6-1: Product: syz [ 206.391988][ T7488] usb 6-1: Manufacturer: syz [ 206.400634][ T7488] usb 6-1: SerialNumber: syz [ 206.455026][ T1326] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 206.473597][ T1326] visor: probe of 4-1:1.0 failed with error -71 [ 206.505617][ T1326] usb 4-1: USB disconnect, device number 15 [ 206.591554][T10735] (syz.4.2790,10735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 206.606279][T10735] (syz.4.2790,10735,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 206.619423][T10735] (syz.4.2790,10735,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 206.636535][T10735] (syz.4.2790,10735,1):ocfs2_quota_read:201 ERROR: status = -5 [ 206.644584][T10735] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 206.668003][T10735] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 206.714450][T10735] (syz.4.2790,10735,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 206.735543][T10735] (syz.4.2790,10735,1):ocfs2_mknod:314 ERROR: status = -5 [ 206.754493][T10735] (syz.4.2790,10735,1):ocfs2_mknod:502 ERROR: status = -5 [ 206.761659][T10735] (syz.4.2790,10735,1):ocfs2_create:676 ERROR: status = -5 [ 206.784968][ T7488] gl620a: probe of 6-1:2.24 failed with error -22 [ 206.810416][ T7488] usb 6-1: USB disconnect, device number 11 [ 206.862448][ T4171] ocfs2: Unmounting device (7,4) on (node local) [ 206.911947][T10803] loop0: detected capacity change from 0 to 4096 [ 206.979572][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 207.005301][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 207.028581][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 207.041019][T10805] tipc: Can't bind to reserved service type 1 [ 207.047964][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 207.076135][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 207.105585][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 207.123511][ T1326] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 207.134776][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 207.156764][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 207.174719][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 207.192219][T10803] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 207.424560][ T1326] usb 2-1: Using ep0 maxpacket: 16 [ 207.438323][T10819] loop4: detected capacity change from 0 to 8 [ 207.554765][ T1326] usb 2-1: config 64 has an invalid interface number: 176 but max is 0 [ 207.563932][ T1326] usb 2-1: config 64 has no interface number 0 [ 207.592454][ T1326] usb 2-1: config 64 interface 176 has no altsetting 0 [ 207.744308][ T8236] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 207.775323][ T1326] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 207.787495][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.811635][ T1326] usb 2-1: Product: syz [ 207.829241][ T1326] usb 2-1: Manufacturer: syz [ 207.838410][ T1326] usb 2-1: SerialNumber: syz [ 207.941554][T10849] loop4: detected capacity change from 0 to 128 [ 208.104447][ T8236] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 208.112581][ T8236] usb 4-1: config 0 has no interface number 0 [ 208.134982][ T8236] usb 4-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 208.213848][ T1326] usb 2-1: USB disconnect, device number 17 [ 208.225347][T10865] netlink: 'syz.0.2844': attribute type 21 has an invalid length. [ 208.344667][ T8236] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 208.353757][ T8236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.416105][ T8236] usb 4-1: Product: syz [ 208.420320][ T8236] usb 4-1: Manufacturer: syz [ 208.433932][ T8236] usb 4-1: SerialNumber: syz [ 208.452322][ T8236] usb 4-1: config 0 descriptor?? [ 208.484543][T10825] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.613473][T10885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2852'. [ 208.644473][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2852'. [ 208.734818][ T8236] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 208.745411][ T8236] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.90/input/input21 [ 208.917156][T10898] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 208.946414][ T8236] usb 4-1: USB disconnect, device number 16 [ 208.964233][ C1] powermate: config urb returned -71 [ 208.970276][ C1] powermate: usb_submit_urb(config) failed [ 208.970378][ C1] powermate 4-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 209.028200][T10902] loop1: detected capacity change from 0 to 128 [ 209.057012][T10904] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 209.266981][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2865'. [ 209.407922][T10919] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 209.424298][T10919] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.543454][T10927] loop0: detected capacity change from 0 to 128 [ 209.564390][ T8236] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 209.620085][T10927] befs: (loop0): invalid magic header [ 209.688729][T10927] overlayfs: unrecognized mount option "verity=on" or missing value [ 209.745434][T10934] loop4: detected capacity change from 0 to 4096 [ 209.768614][T10938] loop5: detected capacity change from 0 to 512 [ 209.809047][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 209.824332][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 209.835812][T10938] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.847061][ T8246] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.864605][T10938] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.877820][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 209.891688][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 209.905018][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 209.943577][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 209.944473][ T8236] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 209.983613][ T8236] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 210.003532][ T8236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.011833][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 210.040884][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 210.071981][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 210.091707][T10934] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 210.114342][ T8246] usb 4-1: Using ep0 maxpacket: 8 [ 210.206953][T10947] loop5: detected capacity change from 0 to 512 [ 210.237008][ T8246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.251074][T10947] EXT4-fs (loop5): Ignoring removed oldalloc option [ 210.289723][T10947] EXT4-fs (loop5): Ignoring removed nobh option [ 210.294445][ T8236] usb 2-1: string descriptor 0 read error: -71 [ 210.302582][ T8236] hub 2-1:32.0: USB hub found [ 210.344410][T10947] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,resgid=0x0000000000000000,errors=remount-ro,nobh,delalloc,. Quota mode: writeback. [ 210.355009][T10943] loop0: detected capacity change from 0 to 32768 [ 210.366063][T10947] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.375138][ T8236] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 210.410772][T10943] (syz.0.2879,10943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 210.424488][ T8246] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.433561][ T8246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.443723][ T8246] usb 4-1: Product: syz [ 210.462304][ T8246] usb 4-1: Manufacturer: syz [ 210.467324][ T8246] usb 4-1: SerialNumber: syz [ 210.495474][ T8236] usb 2-1: USB disconnect, device number 18 [ 210.509781][T10943] (syz.0.2879,10943,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 210.524905][ T8246] usb 4-1: bad CDC descriptors [ 210.607368][T10943] JBD2: Ignoring recovery information on journal [ 210.752741][T10958] loop4: detected capacity change from 0 to 512 [ 210.755183][ T8246] usb 4-1: USB disconnect, device number 17 [ 210.775613][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.799365][T10958] EXT4-fs (loop4): Ignoring removed oldalloc option [ 210.806924][T10943] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 210.844985][T10958] EXT4-fs (loop4): Test dummy encryption mode enabled [ 210.874541][T10958] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 210.899175][T10958] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 210.925540][T10958] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 210.968185][T10958] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2885: inode #13: comm syz.4.2885: iget: illegal inode # [ 211.006400][T10943] (syz.0.2879,10943,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x5b86c303. Applying ECC. [ 211.030173][T10943] (syz.0.2879,10943,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x4bf4182b [ 211.065541][T10943] (syz.0.2879,10943,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 211.081682][T10943] (syz.0.2879,10943,1):ocfs2_quota_read:201 ERROR: status = -5 [ 211.090929][T10943] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6 [ 211.100217][T10943] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 211.102660][T10958] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2885: couldn't read orphan inode 13 (err -117) [ 211.111743][T10943] (syz.0.2879,10943,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 211.130798][T10943] (syz.0.2879,10943,1):ocfs2_mknod:314 ERROR: status = -5 [ 211.138280][T10943] (syz.0.2879,10943,1):ocfs2_mknod:502 ERROR: status = -5 [ 211.145816][T10943] (syz.0.2879,10943,1):ocfs2_create:676 ERROR: status = -5 [ 211.232562][T10958] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,oldalloc,noblock_validity,test_dummy_encryption=v1,mblk_io_submit,mblk_io_submit,max_dir_size_kb=0x000000000000222a,delalloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 211.272151][ T4173] ocfs2: Unmounting device (7,0) on (node local) [ 211.423222][T10958] EXT4-fs error (device loop4): ext4_resize_begin:61: comm syz.4.2885: resize_inode disabled but reserved GDT blocks non-zero [ 211.726374][T10994] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 211.743518][T10995] loop5: detected capacity change from 0 to 1024 [ 211.912824][T11004] loop0: detected capacity change from 0 to 128 [ 211.953855][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2909'. [ 211.971497][T10995] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,nodiscard,block_validity,noquota,,errors=continue. Quota mode: none. [ 212.003910][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2909'. [ 212.110593][T10995] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 38: comm syz.5.2902: bad entry in directory: directory entry overrun - offset=6144, inode=0, rec_len=63744, size=1024 fake=0 [ 212.193990][T11023] loop1: detected capacity change from 0 to 1024 [ 212.264474][T11023] EXT4-fs (loop1): #clusters per group too big: 24576 [ 212.433117][T11037] loop3: detected capacity change from 0 to 512 [ 212.499397][T11037] EXT4-fs (loop3): Ignoring removed oldalloc option [ 212.506267][T11045] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615) [ 212.536142][T11037] EXT4-fs (loop3): Ignoring removed nobh option [ 212.542617][T11045] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 212.611258][T11037] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,resgid=0x0000000000000000,errors=remount-ro,nobh,delalloc,. Quota mode: writeback. [ 212.653711][T11047] loop5: detected capacity change from 0 to 4096 [ 212.670454][T11037] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.756487][T11047] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 212.812606][T11047] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 212.893782][T11047] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 212.948124][T11047] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 212.982634][T11047] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 213.035416][T11047] ntfs: volume version 3.1. [ 213.072078][T11047] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 213.114272][T11047] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 213.125974][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2945'. [ 213.134333][T11047] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 213.160256][T11047] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 213.162747][T11086] delete_channel: no stack [ 213.173225][T11047] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 213.187623][T11085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2945'. [ 213.203529][T11086] delete_channel: no stack [ 213.228126][T11085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2945'. [ 213.325203][T11091] xt_CONNSECMARK: invalid mode: 0 [ 213.468041][T11106] netlink: 1476 bytes leftover after parsing attributes in process `syz.3.2954'. [ 213.671443][T11118] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.914950][ T4218] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 214.040380][T11127] loop4: detected capacity change from 0 to 1764 [ 214.322985][T11137] loop4: detected capacity change from 0 to 512 [ 214.329635][ T4218] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.345930][ T4218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 214.362003][ T4218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.372166][ T4218] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.391681][ T4218] usb 1-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 214.407936][ T4218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.419135][ T4218] usb 1-1: config 0 descriptor?? [ 214.478638][ T4218] usb 1-1: MIDIStreaming interface descriptor not found [ 214.484006][T11137] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.530414][T11137] ext4 filesystem being mounted at /638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.599001][T11137] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 18: comm syz.4.2969: lblock 23 mapped to illegal pblock 18 (length 1) [ 214.721134][ T1326] usb 1-1: USB disconnect, device number 15 [ 214.825956][T11152] loop5: detected capacity change from 0 to 2048 [ 214.946929][T11152] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 214.955343][T11164] netlink: 'syz.4.2981': attribute type 9 has an invalid length. [ 214.957986][T11163] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.016030][T11152] Remounting filesystem read-only [ 215.025335][ T4185] udevd[4185]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.177933][T11168] loop1: detected capacity change from 0 to 2048 [ 215.331068][T11168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.369514][T11168] UDF-fs: incorrect filename length (10) [ 215.458490][T11182] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2990'. [ 215.694324][ T7483] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 215.712524][T11194] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2996'. [ 215.742229][T11194] netlink: 'syz.0.2996': attribute type 3 has an invalid length. [ 215.767415][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2996'. [ 215.905499][T11204] loop1: detected capacity change from 0 to 128 [ 215.923536][T11161] loop3: detected capacity change from 0 to 32768 [ 215.944453][ T7483] usb 6-1: Using ep0 maxpacket: 32 [ 216.028526][T11204] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 216.054384][T11204] ext4 filesystem being mounted at /659/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.074601][ T7483] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 216.093052][ T7483] usb 6-1: config 4 has no interface number 0 [ 216.100215][ T7483] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.175716][T11219] [U]  [ 216.181137][T11204] EXT4-fs warning (device loop1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 216.203967][ T7483] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.254259][ T7483] usb 6-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 216.314130][ T7483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.330862][T11161] XFS (loop3): Mounting V5 Filesystem [ 216.385513][ T7483] hub 6-1:4.128: USB hub found [ 216.423870][T11161] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 216.537176][T11161] XFS (loop3): Starting recovery (logdev: internal) [ 216.600003][T11161] XFS (loop3): Ending recovery (logdev: internal) [ 216.623953][ T7483] hub 6-1:4.128: 2 ports detected [ 216.628328][T11236] loop0: detected capacity change from 0 to 8 [ 216.629863][ T7483] hub 6-1:4.128: Using single TT (err -22) [ 216.643265][T11216] loop4: detected capacity change from 0 to 32768 [ 216.652051][T11237] delete_channel: no stack [ 216.707011][T11216] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.3005 (11216) [ 216.810875][ T4174] XFS (loop3): Unmounting Filesystem [ 216.824423][ T7483] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 216.833781][T11216] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 216.851760][ T7483] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 216.890446][T11216] BTRFS info (device loop4): force zlib compression, level 3 [ 216.917435][T11216] BTRFS info (device loop4): force clearing of disk cache [ 216.935102][ T7483] usb 6-1: USB disconnect, device number 12 [ 216.949122][T11216] BTRFS info (device loop4): setting nodatasum [ 216.975814][T11216] BTRFS info (device loop4): allowing degraded mounts [ 216.994859][T11216] BTRFS info (device loop4): enabling disk space caching [ 217.001944][T11216] BTRFS info (device loop4): disk space caching is enabled [ 217.089877][T11216] BTRFS info (device loop4): has skinny extents [ 217.346871][T11216] BTRFS info (device loop4): clearing free space tree [ 217.359612][T11216] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.374447][T11216] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.541639][T11216] BTRFS info (device loop4): balance: start -sconvert=raid0,soft,usage=34359738372,usage=4..8,devid=0,vrange=7..0 [ 217.601521][T11216] BTRFS info (device loop4): balance: ended with status: 0 [ 217.718360][T11288] loop1: detected capacity change from 0 to 256 [ 218.294462][ T8246] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 218.518597][T11333] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3046'. [ 218.854529][ T8246] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 218.863634][ T8246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.878720][ T8246] usb 6-1: Product: syz [ 218.891877][ T8246] usb 6-1: Manufacturer: syz [ 218.909780][ T8246] usb 6-1: SerialNumber: syz [ 218.926713][ T8246] usb 6-1: config 0 descriptor?? [ 218.986752][ T8246] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 219.079663][ T150] block nbd1: Attempted send on invalid socket [ 219.086198][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 219.097739][T11357] hpfs: hpfs_map_sector(): read error [ 219.292806][T11365] loop3: detected capacity change from 0 to 256 [ 219.319785][T11331] loop0: detected capacity change from 0 to 32768 [ 219.321185][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3063'. [ 219.370108][T11365] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 219.398029][T11331] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 219.414461][ T8246] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 219.424279][ T8246] sq905c 6-1:0.0: Reading version command failed [ 219.430751][ T8246] sq905c: probe of 6-1:0.0 failed with error -71 [ 219.455225][T11331] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 219.474902][ T8246] usb 6-1: USB disconnect, device number 13 [ 219.518700][T11331] ocfs2: Unmounting device (7,0) on (node local) [ 219.525417][T11365] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 219.610329][T11372] loop1: detected capacity change from 0 to 4096 [ 219.624343][T11365] exFAT-fs (loop3): Filesystem has been set read-only [ 219.727433][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 219.816194][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 219.874983][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 219.883513][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 219.924392][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 219.932295][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 219.979994][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 220.001191][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 220.005596][T11388] xt_l2tp: missing protocol rule (udp|l2tpip) [ 220.009459][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 220.054072][T11372] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 220.094383][ T8246] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 220.334359][ T8246] usb 1-1: Using ep0 maxpacket: 8 [ 220.485493][T11413] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3080'. [ 220.495648][ T8246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 220.504298][T11316] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 220.574386][ T8246] usb 1-1: config 1 has an invalid interface number: 96 but max is 0 [ 220.599662][ T8246] usb 1-1: config 1 has an invalid interface descriptor of length 2, skipping [ 220.613114][ T8246] usb 1-1: config 1 has no interface number 0 [ 220.637068][ T8246] usb 1-1: config 1 interface 96 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 220.697715][ T8246] usb 1-1: config 1 interface 96 has no altsetting 0 [ 220.795054][T11316] usb 4-1: Using ep0 maxpacket: 8 [ 220.864477][ T8246] usb 1-1: New USB device found, idVendor=19d2, idProduct=1097, bcdDevice=12.87 [ 220.883809][ T8246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.914526][T11316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.925434][ T8246] usb 1-1: Product: syz [ 220.929642][ T8246] usb 1-1: Manufacturer: syz [ 220.939770][ T8246] usb 1-1: SerialNumber: syz [ 220.979993][T11437] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3095'. [ 221.090060][T11316] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 221.104603][T11316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.122960][T11316] usb 4-1: Product: syz [ 221.133086][T11316] usb 4-1: Manufacturer: syz [ 221.138440][T11316] usb 4-1: SerialNumber: syz [ 221.155224][T11316] usb 4-1: config 0 descriptor?? [ 221.197937][T11316] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 221.208120][T11445] netlink: 'syz.1.3099': attribute type 30 has an invalid length. [ 221.286421][ T8246] usb 1-1: USB disconnect, device number 16 [ 221.293140][T11425] loop4: detected capacity change from 0 to 32768 [ 221.413396][T11425] XFS (loop4): Mounting V5 Filesystem [ 221.421757][T11316] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 221.436376][T11316] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 221.551671][T11425] XFS (loop4): Ending clean mount [ 221.565922][T11425] XFS (loop4): Quotacheck needed: Please wait. [ 221.634023][T11425] XFS (loop4): Quotacheck: Done. [ 221.676620][T11315] usb 4-1: USB disconnect, device number 18 [ 221.789319][T11447] loop5: detected capacity change from 0 to 32768 [ 221.885928][T11447] ea_get: invalid extended attribute [ 221.907694][ T4171] XFS (loop4): Unmounting Filesystem [ 223.081887][T11521] loop1: detected capacity change from 0 to 1764 [ 223.122764][T11477] loop5: detected capacity change from 0 to 32768 [ 223.205743][T11524] loop0: detected capacity change from 0 to 4096 [ 223.241671][T11477] XFS (loop5): Mounting V5 Filesystem [ 223.294408][T11540] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 223.340331][T11524] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 223.645394][T11477] XFS (loop5): Ending clean mount [ 223.854525][ T6185] XFS (loop5): Unmounting Filesystem [ 224.099345][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.138941][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.168806][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.190021][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.200828][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.210384][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.257402][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.274846][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3156'. [ 224.821798][T11617] netlink: 'syz.1.3172': attribute type 21 has an invalid length. [ 224.835071][T11617] netlink: 'syz.1.3172': attribute type 4 has an invalid length. [ 225.273027][T11643] loop5: detected capacity change from 0 to 512 [ 225.420151][T11643] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.473785][T11643] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.502805][T11662] device bond1 entered promiscuous mode [ 225.510529][T11662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.518445][T11665] netlink: 'syz.3.3190': attribute type 10 has an invalid length. [ 225.528321][T11665] rdma_rxe: ignoring netdev event = 10 for veth0_vlan [ 225.587917][T11665] infiniband syz2: set down [ 225.592985][T11665] rdma_rxe: ignoring netdev event = 14 for veth0_vlan [ 225.615791][T11665] device veth0_vlan left promiscuous mode [ 225.645011][T11665] device veth0_vlan entered promiscuous mode [ 225.736742][T11665] infiniband syz2: set active [ 225.766341][T11665] team0: Device veth0_vlan failed to register rx_handler [ 225.791600][T11665] rdma_rxe: ignoring netdev event = 10 for veth0_vlan [ 225.875755][T11675] loop1: detected capacity change from 0 to 764 [ 225.900801][T11675] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 225.947538][T11665] infiniband syz2: set down [ 225.955103][T11665] rdma_rxe: ignoring netdev event = 9 for veth0_vlan [ 225.976554][T11665] rdma_rxe: ignoring netdev event = 8 for veth0_vlan [ 226.022171][T11673] __nla_validate_parse: 51 callbacks suppressed [ 226.022189][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3194'. [ 226.051451][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3194'. [ 226.059479][ T8246] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 226.061015][T11673] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3194'. [ 226.077668][T11679] netlink: 'syz.0.3197': attribute type 2 has an invalid length. [ 226.276870][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3202'. [ 226.438219][ T8246] usb 6-1: config 0 has an invalid interface number: 90 but max is 0 [ 226.457680][ T8246] usb 6-1: config 0 has no interface number 0 [ 226.469751][ T8246] usb 6-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 226.544116][T11709] nftables ruleset with unbound set [ 226.634681][ T8242] Bluetooth: hci1: command 0x0406 tx timeout [ 226.672984][T11715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.688645][ T8246] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 226.697856][ T8247] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 226.713035][ T8246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.721529][ T8246] usb 6-1: Product: syz [ 226.731807][ T8246] usb 6-1: Manufacturer: syz [ 226.736611][ T8246] usb 6-1: SerialNumber: syz [ 226.761916][ T8246] usb 6-1: config 0 descriptor?? [ 226.791447][T11671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 226.849637][T11727] netlink: 'syz.0.3219': attribute type 6 has an invalid length. [ 226.949830][ T8247] usb 5-1: Using ep0 maxpacket: 32 [ 227.064917][ T8246] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 227.073653][ T8246] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.90/input/input23 [ 227.124814][ T8247] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.207899][ T8247] usb 5-1: config 129 has an invalid interface number: 249 but max is 0 [ 227.216741][T11743] xt_l2tp: unknown flags: 3b [ 227.228273][ T8247] usb 5-1: config 129 has no interface number 0 [ 227.242536][ T8247] usb 5-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 227.274405][ T8247] usb 5-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 227.330155][ T8247] usb 5-1: config 129 interface 249 has no altsetting 0 [ 227.333475][T11746] loop3: detected capacity change from 0 to 256 [ 227.344316][ C1] powermate: config urb returned -71 [ 227.364211][ C1] powermate: config urb returned -71 [ 227.372219][ T8246] usb 6-1: USB disconnect, device number 14 [ 227.384234][ C1] powermate: config urb returned -71 [ 227.389558][ C1] powermate: usb_submit_urb(config) failed [ 227.389609][ C1] powermate 6-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 227.554696][ T8247] usb 5-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 227.572798][ T8247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.597240][ T8247] usb 5-1: Product: syz [ 227.601443][ T8247] usb 5-1: Manufacturer: syz [ 227.630186][ T8247] usb 5-1: SerialNumber: syz [ 227.694658][T11701] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.759071][T11767] loop0: detected capacity change from 0 to 1024 [ 227.791220][T11771] loop1: detected capacity change from 0 to 512 [ 227.818144][T11767] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 227.837437][T11767] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 227.846955][T11767] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.893548][T11767] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,sysvgroups,resuid=0x0000000000000000,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 227.930856][T11701] udc-core: couldn't find an available UDC or it's busy [ 228.019895][T11771] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 228.059429][T11701] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.090538][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.114431][T11771] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.3243: corrupted inode contents [ 228.164753][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.171315][T11771] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #16: comm syz.1.3243: mark_inode_dirty error [ 228.185730][ T8247] smsc95xx v2.0.0 [ 228.209374][ T8247] smsc95xx 5-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 228.233090][ T8247] smsc95xx: probe of 5-1:129.249 failed with error -71 [ 228.252392][ T8247] usb 5-1: USB disconnect, device number 15 [ 228.260880][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.301228][T11771] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.3243: corrupted inode contents [ 228.317733][T11773] loop3: detected capacity change from 0 to 32768 [ 228.344650][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.351208][T11771] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.3243: mark_inode_dirty error [ 228.365808][T11784] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3248'. [ 228.371650][T11786] capability: warning: `syz.0.3249' uses 32-bit capabilities (legacy support in use) [ 228.382209][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.404647][T11773] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.3244 (11773) [ 228.414223][T11771] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.3243: corrupted inode contents [ 228.441848][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.457010][T11773] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 228.474331][T11771] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.3243: mark_inode_dirty error [ 228.494374][T11773] BTRFS info (device loop3): enabling ssd optimizations [ 228.509729][T11773] BTRFS info (device loop3): not using ssd optimizations [ 228.527738][T11773] BTRFS info (device loop3): metadata ratio 3 [ 228.535051][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.552112][T11773] BTRFS info (device loop3): turning off barriers [ 228.566830][T11771] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #16: comm syz.1.3243: corrupted inode contents [ 228.584930][T11773] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 228.615696][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.623744][T11771] EXT4-fs error (device loop1): ext4_truncate:4273: inode #16: comm syz.1.3243: mark_inode_dirty error [ 228.645574][T11773] BTRFS info (device loop3): use lzo compression, level 0 [ 228.652754][T11773] BTRFS info (device loop3): using free space tree [ 228.708035][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.724391][T11773] BTRFS info (device loop3): has skinny extents [ 228.754292][T11771] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.3243: couldn't truncate inode 16 (err -117) [ 228.794766][T11771] EXT4-fs (loop1): Remounting filesystem read-only [ 228.814484][T11771] EXT4-fs (loop1): 1 orphan inode deleted [ 228.827480][T11771] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,grpquota,lazytime,stripe=0x0000000000008000,resgid=0x0000000000000000,sysvgroups,noauto_da_alloc,usrquota,. Quota mode: writeback. [ 228.854558][T11771] ext4 filesystem being mounted at /730/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.934405][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 229.223365][T11795] loop0: detected capacity change from 0 to 32768 [ 229.231852][T11827] netlink: 'syz.4.3260': attribute type 1 has an invalid length. [ 229.264067][T11827] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3260'. [ 229.500570][T11795] XFS (loop0): Mounting V5 Filesystem [ 229.749505][T11795] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 229.754377][ T4218] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 229.844761][T11795] XFS (loop0): Starting recovery (logdev: internal) [ 230.049259][T11865] loop1: detected capacity change from 0 to 64 [ 230.057236][ T4218] usb 6-1: Using ep0 maxpacket: 16 [ 230.081091][T11795] XFS (loop0): Ending recovery (logdev: internal) [ 230.288137][ T4173] XFS (loop0): Unmounting Filesystem [ 230.364629][ T4218] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 230.383994][ T4218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.403663][ T4218] usb 6-1: Product: syz [ 230.409064][ T4218] usb 6-1: Manufacturer: syz [ 230.413888][ T4218] usb 6-1: SerialNumber: syz [ 230.423812][T11877] loop1: detected capacity change from 0 to 1024 [ 230.436808][ T4218] usb 6-1: config 0 descriptor?? [ 230.486847][ T4218] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 230.935634][ T4218] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 230.952586][ T4218] visor: probe of 6-1:0.0 failed with error -71 [ 230.986876][T11903] loop4: detected capacity change from 0 to 64 [ 230.990874][ T4218] usb 6-1: USB disconnect, device number 15 [ 231.624249][T11315] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 231.706916][T11942] device gre0 entered promiscuous mode [ 231.884362][T11315] usb 5-1: Using ep0 maxpacket: 32 [ 231.996964][T11907] loop3: detected capacity change from 0 to 32768 [ 232.004857][T11315] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 232.012933][T11315] usb 5-1: config 0 has no interface number 0 [ 232.127374][T11907] ERROR: (device loop3): dbAlloc: unable to allocate blocks [ 232.127374][T11907] [ 232.235441][T11315] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 232.239737][T11961] loop5: detected capacity change from 0 to 2048 [ 232.255385][T11315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.265424][T11315] usb 5-1: Product: syz [ 232.269632][T11315] usb 5-1: Manufacturer: syz [ 232.301787][T11315] usb 5-1: SerialNumber: syz [ 232.319036][T11315] usb 5-1: config 0 descriptor?? [ 232.380439][T11315] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 232.537698][T11961] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,jqfmt=vfsv1,auto_da_alloc=0x000000000000997c,,errors=continue. Quota mode: none. [ 232.809571][T11964] loop1: detected capacity change from 0 to 32768 [ 232.822122][T11315] gspca_topro: reg_w err -71 [ 232.864706][T11315] gspca_topro: Sensor soi763a [ 232.888417][T11964] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.3321 (11964) [ 232.913411][T11315] usb 5-1: USB disconnect, device number 16 [ 232.966441][T11964] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 232.990522][T11964] BTRFS info (device loop1): force zlib compression, level 3 [ 233.012481][T11964] BTRFS info (device loop1): force clearing of disk cache [ 233.021379][T11982] blk_update_request: I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.043793][T11964] BTRFS info (device loop1): setting nodatasum [ 233.052788][T11964] BTRFS info (device loop1): use zlib compression, level 3 [ 233.061740][T11983] mmap: syz.5.3326 (11983) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 233.076862][T11982] blk_update_request: I/O error, dev loop3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 233.088643][T11964] BTRFS info (device loop1): allowing degraded mounts [ 233.098486][T11964] BTRFS info (device loop1): enabling disk space caching [ 233.106400][T11982] Mount JFS Failure: -5 [ 233.121586][T11982] jfs_mount failed w/return code = -5 [ 233.127598][T11964] BTRFS info (device loop1): disk space caching is enabled [ 233.152709][T11964] BTRFS info (device loop1): has skinny extents [ 233.544523][T11964] BTRFS info (device loop1): enabling ssd optimizations [ 233.561637][T11968] loop0: detected capacity change from 0 to 32768 [ 233.570032][T11964] BTRFS info (device loop1): clearing free space tree [ 233.649152][T11964] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.691743][T11964] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 233.770634][T11968] XFS (loop0): Mounting V5 Filesystem [ 234.420835][T11968] XFS (loop0): Ending clean mount [ 234.576735][ T4173] XFS (loop0): Unmounting Filesystem [ 234.781197][T12065] loop1: detected capacity change from 0 to 164 [ 234.930546][T12063] loop3: detected capacity change from 0 to 4096 [ 235.020160][T12073] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3358'. [ 235.619368][ T7] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 235.877011][T12103] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3373'. [ 235.911151][T12103] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 235.935240][T12103] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 236.044420][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 236.084218][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 236.112520][T12112] loop3: detected capacity change from 0 to 64 [ 236.122596][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 236.162439][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.191113][ T7] usb 5-1: config 0 descriptor?? [ 236.234735][T12083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 236.474827][ T7] ath6kl: Failed to submit usb control message: -71 [ 236.496929][ T7] ath6kl: unable to send the bmi data to the device: -71 [ 236.504097][ T7] ath6kl: Unable to send get target info: -71 [ 236.545990][T12135] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.559670][ T7] ath6kl: Failed to init ath6kl core: -71 [ 236.584481][ T4219] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 236.660698][ T7] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 236.695101][ T7] usb 5-1: USB disconnect, device number 17 [ 236.843291][T12150] loop3: detected capacity change from 0 to 16 [ 236.849814][ T4219] usb 6-1: Using ep0 maxpacket: 8 [ 236.893457][T12152] loop1: detected capacity change from 0 to 64 [ 236.905230][T12150] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 237.074933][ T4217] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 237.194490][ T4219] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 237.225021][ T4219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.254032][ T4219] usb 6-1: Product: syz [ 237.263855][ T4219] usb 6-1: Manufacturer: syz [ 237.294491][ T4219] usb 6-1: SerialNumber: syz [ 237.327779][ T4217] usb 1-1: Using ep0 maxpacket: 32 [ 237.454571][ T4217] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 237.473348][ T4217] usb 1-1: config 4 has no interface number 0 [ 237.508146][ T4217] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.547955][ T4217] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.582622][ T4217] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 237.625360][ T4217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.640048][T12181] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.666781][ T4219] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 237.694776][T12181] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 237.714553][ T4219] mxuport 6-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 237.724893][ T4217] hub 1-1:4.128: USB hub found [ 237.725001][T12181] overlayfs: missing 'lowerdir' [ 237.733800][ T4219] mxuport: probe of 6-1:254.0 failed with error -71 [ 237.778218][ T4219] usb 6-1: USB disconnect, device number 16 [ 237.944514][ T4217] hub 1-1:4.128: 2 ports detected [ 237.949989][ T4217] hub 1-1:4.128: Using single TT (err -22) [ 238.154517][ T4217] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 238.173419][ T4217] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 238.197763][T12210] loop1: detected capacity change from 0 to 512 [ 238.264866][ T4217] usb 1-1: USB disconnect, device number 17 [ 238.328922][T12210] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.402012][T12210] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 238.443772][T12210] EXT4-fs (loop1): 1 truncate cleaned up [ 238.450140][T12210] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 238.591071][T12235] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 238.623463][T12237] netlink: 'syz.3.3435': attribute type 3 has an invalid length. [ 238.632367][T12237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3435'. [ 239.376231][T12271] cgroup: No subsys list or none specified [ 239.507337][T12281] loop1: detected capacity change from 0 to 256 [ 239.649421][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 239.649436][ T25] audit: type=1800 audit(1750249578.380:11): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3455" name="file0" dev="loop1" ino=1048639 res=0 errno=0 [ 239.699084][T12292] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 240.184300][T12331] UBIFS error (pid: 12331): cannot open "(null)", error -22 [ 240.349681][T12342] loop5: detected capacity change from 0 to 2048 [ 240.400235][T12352] openvswitch: netlink: Message has 4 unknown bytes. [ 240.422030][T12342] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=2362, location=2362 [ 240.466974][T12342] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 240.510758][T12359] overlayfs: missing 'workdir' [ 240.518340][T12342] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 240.562773][T12342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.709307][T12369] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3499'. [ 240.749792][T12369] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 240.778770][T12369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.800553][T12373] loop1: detected capacity change from 0 to 512 [ 240.840078][T12376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3500'. [ 240.858106][T12377] netlink: 'syz.0.3503': attribute type 3 has an invalid length. [ 240.874374][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 240.884361][T12376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3500'. [ 240.893329][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3500'. [ 240.970241][T12373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.983934][T12373] ext4 filesystem being mounted at /785/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.091187][T12392] loop5: detected capacity change from 0 to 256 [ 241.181422][T12396] netlink: 'syz.1.3508': attribute type 8 has an invalid length. [ 241.377346][T12402] device veth0_macvtap left promiscuous mode [ 241.560580][T12408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3516'. [ 241.622651][T12409] netlink: 'syz.1.3518': attribute type 3 has an invalid length. [ 242.217962][T12430] loop5: detected capacity change from 0 to 2048 [ 242.267863][T12430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.519908][ T4217] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 242.572240][T12452] deleting an unspecified loop device is not supported. [ 242.784429][ T4217] usb 5-1: Using ep0 maxpacket: 8 [ 242.824504][ T4217] usb 5-1: too many configurations: 173, using maximum allowed: 8 [ 243.101292][T12476] loop5: detected capacity change from 0 to 2048 [ 243.264050][T12476] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,data_err=ignore,max_batch_time=0x0000000000000009,sysvgroups,,errors=continue. Quota mode: none. [ 243.284612][T12476] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.536132][T12496] device vlan0 entered promiscuous mode [ 243.634718][ T4217] usb 5-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 243.653119][ T4217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=66 [ 243.673368][ T4217] usb 5-1: Product: syz [ 243.684061][ T4217] usb 5-1: Manufacturer: syz [ 243.703657][ T4217] usb 5-1: SerialNumber: syz [ 243.725122][ T4217] usb 5-1: config 0 descriptor?? [ 243.743768][T12466] loop3: detected capacity change from 0 to 32768 [ 243.797990][T12466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3545 (12466) [ 243.822277][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3568'. [ 243.933339][T12466] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 243.964309][T12466] BTRFS info (device loop3): using free space tree [ 243.981081][T12466] BTRFS info (device loop3): has skinny extents [ 244.026577][ T4217] gspca_main: 0c45:613b too many config [ 244.045122][ T4217] usb 5-1: USB disconnect, device number 18 [ 244.140967][T12522] netlink: 'syz.0.3572': attribute type 3 has an invalid length. [ 244.366642][T12466] BTRFS info (device loop3): enabling ssd optimizations [ 244.459158][T12552] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.759433][T12562] loop4: detected capacity change from 0 to 64 [ 244.779016][ T4185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4185) [ 244.792013][T12558] loop0: detected capacity change from 0 to 4096 [ 244.899726][T12558] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 245.124756][T12558] ntfs3: loop0: failed to convert "c46c" to iso8859-6 [ 245.163407][T12558] ntfs3: loop0: failed to convert "0030" to iso8859-6 [ 245.210093][T12558] ntfs3: loop0: failed to convert "0031" to iso8859-6 [ 245.266822][T12558] ntfs3: loop0: failed to convert "0032" to iso8859-6 [ 245.553975][T12583] loop1: detected capacity change from 0 to 4096 [ 245.565395][T12593] loop5: detected capacity change from 0 to 256 [ 245.663796][T12593] FAT-fs (loop5): Directory bread(block 64) failed [ 245.686337][T12593] FAT-fs (loop5): Directory bread(block 65) failed [ 245.703736][T12583] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 245.713528][T12593] FAT-fs (loop5): Directory bread(block 66) failed [ 245.724581][T12593] FAT-fs (loop5): Directory bread(block 67) failed [ 245.742043][T12593] FAT-fs (loop5): Directory bread(block 68) failed [ 245.750501][T12593] FAT-fs (loop5): Directory bread(block 69) failed [ 245.792850][T12593] FAT-fs (loop5): Directory bread(block 70) failed [ 245.824900][T12593] FAT-fs (loop5): Directory bread(block 71) failed [ 245.836950][T12593] FAT-fs (loop5): Directory bread(block 72) failed [ 245.861662][T12603] loop4: detected capacity change from 0 to 16 [ 245.880477][T12593] FAT-fs (loop5): Directory bread(block 73) failed [ 245.967709][T12603] erofs: (device loop4): mounted with root inode @ nid 36. [ 246.014521][T12603] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 246.054525][T12603] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 246.222324][T12619] loop3: detected capacity change from 0 to 256 [ 246.369685][T12619] FAT-fs (loop3): bogus sectors per cluster 0 [ 246.379326][T12619] FAT-fs (loop3): Can't find a valid FAT filesystem [ 246.524514][T12629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.686728][T12635] loop0: detected capacity change from 0 to 4096 [ 246.745607][T12635] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 246.822446][T12635] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 246.860925][T12635] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 246.935410][T12635] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 246.954817][T12635] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 247.026794][T12662] loop1: detected capacity change from 0 to 512 [ 247.050820][T12635] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 247.074616][T12635] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 247.141424][T12662] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.163874][T12635] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 247.218371][T12635] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 247.259727][T12669] loop4: detected capacity change from 0 to 2048 [ 247.284817][T12635] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 247.306340][T12635] ntfs: volume version 3.1. [ 247.306618][T12662] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 247.394620][T12662] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 247.419025][T12662] EXT4-fs (loop1): 1 truncate cleaned up [ 247.428839][T12662] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback. [ 247.558457][T12669] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,grpjquota=,bsddf,. Quota mode: none. [ 247.754908][T12669] afs: Unexpected value for 'dyn' [ 248.037705][T12696] loop3: detected capacity change from 0 to 1024 [ 248.186697][T12660] loop5: detected capacity change from 0 to 32768 [ 248.220726][T12696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 248.230266][T12696] System zones: 0-1, 3-36 [ 248.236913][T12696] EXT4-fs (loop3): orphan cleanup on readonly fs [ 248.249473][T12696] EXT4-fs warning (device loop3): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 248.265310][T12696] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 248.272121][T12696] EXT4-fs error (device loop3): __ext4_iget:4893: inode #12: block 13: comm syz.3.3645: invalid block [ 248.290637][T12696] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.3645: couldn't read orphan inode 12 (err -117) [ 248.323603][T12696] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.349329][T12696] kAFS: No cell specified [ 248.380816][T12712] loop4: detected capacity change from 0 to 64 [ 248.403488][T12660] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 248.442889][T12660] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 248.585024][T12660] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 248.676671][ T4218] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 248.683914][ T4218] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 248.769588][T12728] netlink: 'syz.3.3660': attribute type 6 has an invalid length. [ 248.924303][ T4218] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 240ms [ 248.937488][ T4218] gfs2: fsid=syz:syz.0: jid=0: Done [ 248.944906][T12660] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 249.015488][T12741] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3667'. [ 249.124457][ T4217] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 249.494349][ T4217] usb 2-1: config 7 interface 0 has no altsetting 0 [ 249.520758][T12762] loop5: detected capacity change from 0 to 256 [ 249.571570][T12764] loop3: detected capacity change from 0 to 1024 [ 249.625775][T12764] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.740845][T12764] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 249.754397][ T4217] usb 2-1: string descriptor 0 read error: -22 [ 249.793692][ T4217] usb 2-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 249.825361][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.916289][ T4217] usb 2-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 249.934543][ T4217] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.956683][ T4217] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 249.977636][ T4217] usb 2-1: media controller created [ 250.007829][ T4217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.039802][T12782] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 250.204728][ T7482] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 250.385468][ T4217] usb 2-1: USB disconnect, device number 19 [ 250.464575][ T7482] usb 5-1: Using ep0 maxpacket: 16 [ 250.638681][T12798] xt_CT: No such helper "snmp" [ 250.734806][T12776] loop0: detected capacity change from 0 to 32768 [ 250.741642][T12806] netlink: 'syz.5.3696': attribute type 30 has an invalid length. [ 250.782247][T12776] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 250.794486][ T7482] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 250.805380][ T7482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 250.811986][T12776] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 250.813488][ T7482] usb 5-1: Product: syz [ 250.831839][T12776] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 250.867029][ T4217] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 250.890520][ T4217] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 250.919493][ T7482] usb 5-1: Manufacturer: syz [ 250.938046][ T7482] usb 5-1: SerialNumber: syz [ 250.952681][ T7482] r8152-cfgselector 5-1: config 0 descriptor?? [ 250.974309][ T4217] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 83ms [ 251.002624][ T4217] gfs2: fsid=syz:syz.0: jid=0: Done [ 251.018491][T12776] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 251.088002][T12813] loop1: detected capacity change from 0 to 256 [ 251.145945][ T7479] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 251.219933][T12813] FAT-fs (loop1): Directory bread(block 64) failed [ 251.293065][T12813] FAT-fs (loop1): Directory bread(block 65) failed [ 251.331598][T12813] FAT-fs (loop1): Directory bread(block 66) failed [ 251.349898][T12813] FAT-fs (loop1): Directory bread(block 67) failed [ 251.370267][T12813] FAT-fs (loop1): Directory bread(block 68) failed [ 251.404440][ T7479] usb 4-1: Using ep0 maxpacket: 16 [ 251.414257][T12813] FAT-fs (loop1): Directory bread(block 69) failed [ 251.421067][T12813] FAT-fs (loop1): Directory bread(block 70) failed [ 251.444420][T12813] FAT-fs (loop1): Directory bread(block 71) failed [ 251.451059][T12813] FAT-fs (loop1): Directory bread(block 72) failed [ 251.471565][ T7482] r8152-cfgselector 5-1: Unknown version 0x0000 [ 251.489134][T12813] FAT-fs (loop1): Directory bread(block 73) failed [ 251.493037][ T7482] r8152-cfgselector 5-1: USB disconnect, device number 19 [ 251.559041][ T7479] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 251.591789][ T7479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.609706][ T7479] usb 4-1: config 0 has no interface number 0 [ 251.681762][T12809] loop5: detected capacity change from 0 to 40427 [ 251.752481][T12809] F2FS-fs (loop5): invalid crc value [ 251.784526][ T7479] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 251.801378][ T7479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.816737][T12809] F2FS-fs (loop5): Found nat_bits in checkpoint [ 251.820002][ T7479] usb 4-1: Product: syz [ 251.840935][ T7479] usb 4-1: Manufacturer: syz [ 251.850728][ T7479] usb 4-1: SerialNumber: syz [ 251.866276][ T7479] usb 4-1: config 0 descriptor?? [ 251.918615][ T7479] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 251.935941][ T7479] usb 4-1: No valid video chain found. [ 252.047433][T12809] F2FS-fs (loop5): Start checkpoint disabled! [ 252.114477][T12809] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 252.163893][ T3146] usb 4-1: USB disconnect, device number 19 [ 252.229839][T12843] loop4: detected capacity change from 0 to 2048 [ 252.311692][T12843] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.385850][T12834] loop1: detected capacity change from 0 to 32768 [ 252.454339][ T4217] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 252.509535][T12834] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 252.596659][T12851] netlink: 'syz.4.3717': attribute type 1 has an invalid length. [ 252.604720][T12851] netlink: 'syz.4.3717': attribute type 2 has an invalid length. [ 252.714265][ T4217] usb 1-1: Using ep0 maxpacket: 16 [ 252.834633][ T4217] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 252.864942][ T4217] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.913847][ T4217] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 252.980006][ T4172] ocfs2: Unmounting device (7,1) on (node local) [ 253.002864][T12873] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3728'. [ 253.032731][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3728'. [ 253.058286][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 253.067941][T12877] loop5: detected capacity change from 0 to 256 [ 253.104904][ T4217] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.124254][ T4217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.162864][ T4217] usb 1-1: Product: syz [ 253.167453][T12879] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3731'. [ 253.184769][ T4217] usb 1-1: Manufacturer: syz [ 253.209182][T12879] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3731'. [ 253.209727][ T4217] usb 1-1: SerialNumber: syz [ 253.250708][T12881] loop4: detected capacity change from 0 to 2048 [ 253.372248][T12881] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 253.426267][T12889] loop3: detected capacity change from 0 to 1024 [ 253.444956][T12881] attempt to access beyond end of device [ 253.444956][T12881] loop4: rw=524288, want=33554432, limit=2048 [ 253.462421][T12890] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.593688][T12896] loop1: detected capacity change from 0 to 1024 [ 253.594440][ T4217] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 253.635884][T12881] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 16777227 [ 253.708727][T12881] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 253.731239][ T4217] usb 1-1: USB disconnect, device number 18 [ 253.789400][T12881] Remounting filesystem read-only [ 253.804674][T12881] NILFS (loop4): error -5 truncating bmap (ino=16) [ 253.965472][ T8199] udevd[8199]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.012462][ T4171] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 254.185905][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3745'. [ 254.377521][T12924] loop0: detected capacity change from 0 to 512 [ 254.513867][T12924] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 254.534633][T12924] ext4 filesystem being mounted at /755/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.722643][T12900] loop5: detected capacity change from 0 to 32768 [ 254.820377][T12950] loop4: detected capacity change from 0 to 512 [ 254.889831][T12950] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 254.951148][T12950] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 254.970097][T12950] ext4 filesystem being mounted at /786/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.278098][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.290851][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.346400][T12982] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 255.472421][T12991] loop3: detected capacity change from 0 to 64 [ 255.556057][T12997] xt_cluster: node mask cannot exceed total number of nodes [ 255.797723][T13015] loop5: detected capacity change from 0 to 1024 [ 255.806916][T13017] loop0: detected capacity change from 0 to 164 [ 255.891045][T13017] Unable to read rock-ridge attributes [ 255.921567][T13017] Unable to read rock-ridge attributes [ 255.960545][T13017] attempt to access beyond end of device [ 255.960545][T13017] loop0: rw=524288, want=263332, limit=164 [ 256.003078][T13032] loop4: detected capacity change from 0 to 512 [ 256.017600][T13033] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 256.024371][T13017] attempt to access beyond end of device [ 256.024371][T13017] loop0: rw=0, want=263332, limit=164 [ 256.068276][T13033] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€ [ 256.069730][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 256.069742][ T25] audit: type=1800 audit(1750249594.800:12): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3795" name="file0" dev="loop0" ino=1862 res=0 errno=0 [ 256.093258][T13030] loop3: detected capacity change from 0 to 4096 [ 256.152127][T13032] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.165062][T13032] ext4 filesystem being mounted at /795/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.183464][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 256.197224][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 256.227767][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 256.233159][T13032] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz.4.3803: corrupted xattr block 33 [ 256.239448][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 256.257404][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 256.265487][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 256.273635][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 256.282445][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 256.290910][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 256.298899][T13030] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 256.518126][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 256.540160][T13053] loop0: detected capacity change from 0 to 256 [ 256.614484][ T7482] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 256.697865][T13061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3817'. [ 256.720659][T13061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3817'. [ 256.760297][T13063] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3815'. [ 256.794651][T13063] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3815'. [ 256.799085][ T7] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 256.830367][T13063] netlink: 'syz.0.3815': attribute type 3 has an invalid length. [ 256.865682][T13063] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3815'. [ 256.874893][ T7482] usb 6-1: Using ep0 maxpacket: 32 [ 256.994685][ T7482] usb 6-1: config 0 has an invalid interface number: 191 but max is 0 [ 257.027757][ T7482] usb 6-1: config 0 has no interface number 0 [ 257.080499][ T7482] usb 6-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.090845][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 257.137688][ T7482] usb 6-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 257.236873][ T7] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 257.275952][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.330946][ T7] usb 5-1: config 0 has no interface number 0 [ 257.378070][ T7482] usb 6-1: New USB device found, idVendor=04fc, idProduct=0204, bcdDevice=67.67 [ 257.417989][ T7482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.458619][ T7482] usb 6-1: Product: syz [ 257.462842][ T7482] usb 6-1: Manufacturer: syz [ 257.498919][ T7482] usb 6-1: SerialNumber: syz [ 257.542536][ T7482] usb 6-1: config 0 descriptor?? [ 257.548080][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 257.563136][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.598658][ T7] usb 5-1: Product: syz [ 257.618568][ T7] usb 5-1: Manufacturer: syz [ 257.625916][ T7482] spcp8x5 6-1:0.191: SPCP8x5 converter detected [ 257.653761][ T7] usb 5-1: SerialNumber: syz [ 257.659687][ T7482] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 257.680844][ T7] usb 5-1: config 0 descriptor?? [ 257.744273][ T3146] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 257.786988][T13090] loop3: detected capacity change from 0 to 4096 [ 257.820182][T13090] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 257.853135][T11315] usb 6-1: USB disconnect, device number 17 [ 257.859355][T13090] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 257.890575][T11315] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 257.910344][T13090] ntfs: (device loop3): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 257.931577][T11315] spcp8x5 6-1:0.191: device disconnected [ 257.942106][T13090] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 257.955967][T13090] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 257.969707][ T7] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 257.976263][T13090] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 257.988739][ T7] usb 5-1: No valid video chain found. [ 258.020449][T13090] ntfs: volume version 3.1. [ 258.030785][T13074] loop0: detected capacity change from 0 to 32768 [ 258.040320][T13090] ntfs: (device loop3): ntfs_read_locked_inode(): Directory index is corrupt. [ 258.063403][T13090] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 258.101631][T13074] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 258.114423][ T3146] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 258.122615][ T3146] usb 2-1: config 0 has no interface number 0 [ 258.128994][ T3146] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 258.132585][T13074] (syz.0.3822,13074,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 258.164469][T13074] (syz.0.3822,13074,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 258.173299][T13074] (syz.0.3822,13074,1):ocfs2_mknod:298 ERROR: status = -2 [ 258.173831][ T7482] usb 5-1: USB disconnect, device number 20 [ 258.188207][ T3146] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 258.254744][T13074] (syz.0.3822,13074,1):ocfs2_mknod:502 ERROR: status = -2 [ 258.261901][T13074] (syz.0.3822,13074,1):ocfs2_mkdir:659 ERROR: status = -2 [ 258.342627][ T4173] ocfs2: Unmounting device (7,0) on (node local) [ 258.394799][ T3146] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 258.403885][ T3146] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 258.444200][ T3146] usb 2-1: Product: syz [ 258.474269][ T3146] usb 2-1: Manufacturer: syz [ 258.478985][ T3146] usb 2-1: SerialNumber: syz [ 258.505653][ T3146] usb 2-1: config 0 descriptor?? [ 258.545732][ T3146] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 258.553543][ T3146] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 258.586031][ T3146] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 258.617948][ T3146] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 258.647754][ T3146] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 258.684470][ T3146] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 258.725283][ T3146] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 258.764517][ T3146] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 258.773959][ T3146] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 258.805485][ T3146] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 258.824104][ T3146] usb 2-1: USB disconnect, device number 20 [ 258.834541][ T3146] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 258.907686][ T3146] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 258.945555][ T3146] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 258.984393][ T7482] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 258.984755][ T3146] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 259.035187][ T3146] keyspan 2-1:0.107: device disconnected [ 259.063081][T13096] loop3: detected capacity change from 0 to 32768 [ 259.160487][T13096] jfs_strtoUCS: char2uni returned -22. [ 259.176417][T13096] charset = cp949, char = 0xd4 [ 259.264495][ T7482] usb 6-1: Using ep0 maxpacket: 32 [ 259.293354][T13130] loop0: detected capacity change from 0 to 512 [ 259.404520][ T7482] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.416716][T13130] EXT4-fs (loop0): orphan cleanup on readonly fs [ 259.432152][T13130] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3849: bg 0: block 248: padding at end of block bitmap is not set [ 259.444190][ T7482] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.456701][ T7482] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 259.472032][ T7482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.545325][ T7482] hub 6-1:4.0: USB hub found [ 259.554976][T13130] Quota error (device loop0): write_blk: dquota write failed [ 259.574891][T13130] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.3849: Failed to acquire dquot type 1 [ 259.597494][T13130] EXT4-fs (loop0): 1 truncate cleaned up [ 259.634635][T13130] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.742369][T13130] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 259.774389][ T7482] hub 6-1:4.0: config failed, can't read hub descriptor (err -90) [ 259.922581][T13155] netlink: 'syz.1.3862': attribute type 1 has an invalid length. [ 260.068614][T13164] delete_channel: no stack [ 260.125336][ T3146] usb 6-1: USB disconnect, device number 18 [ 260.213589][T13175] AppArmor: change_hat: Invalid input '0x0' [ 260.331140][T13185] loop1: detected capacity change from 0 to 64 [ 260.555127][T13187] loop4: detected capacity change from 0 to 4096 [ 260.568271][T13191] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3879'. [ 260.655733][T13198] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.725939][T13199] netlink: 'syz.3.3883': attribute type 2 has an invalid length. [ 260.904533][T13208] device syz_tun entered promiscuous mode [ 261.291276][T13229] loop4: detected capacity change from 0 to 128 [ 261.500806][T13236] xt_NFQUEUE: number of total queues is 0 [ 261.689107][T13246] netlink: 'syz.4.3906': attribute type 1 has an invalid length. [ 261.784347][T11315] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 262.006908][T13213] loop1: detected capacity change from 0 to 32768 [ 262.071604][T13262] netlink: 'syz.5.3914': attribute type 1 has an invalid length. [ 262.103579][T13213] ERROR: (device loop1): diAllocBit: iag inconsistent [ 262.103579][T13213] [ 262.163946][T13213] ERROR: (device loop1): remounting filesystem as read-only [ 262.184578][T11315] usb 4-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 262.194409][T11315] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 262.203506][T11315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 262.248306][T13213] ialloc: diAlloc returned -5! [ 262.470235][ T7482] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 262.504674][T11315] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 262.513754][T11315] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 262.550539][T11315] usb 4-1: Product: syz [ 262.564477][T11315] usb 4-1: Manufacturer: syz [ 262.578964][T11315] usb 4-1: SerialNumber: syz [ 262.626820][T11315] usb 4-1: config 0 descriptor?? [ 262.691797][T13276] netlink: 'syz.1.3921': attribute type 15 has an invalid length. [ 262.701221][T13276] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3921'. [ 262.874374][ T7482] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.900306][ T7482] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 262.925700][T11315] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 262.942874][ T7482] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 263.021023][ T4164] udevd[4164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.109066][T13266] loop0: detected capacity change from 0 to 32768 [ 263.148387][T11315] usb 4-1: USB disconnect, device number 20 [ 263.175028][T13266] XFS: ikeep mount option is deprecated. [ 263.181455][T13266] XFS: noikeep mount option is deprecated. [ 263.187867][ T7482] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.197663][ T7482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.198150][T13272] loop5: detected capacity change from 0 to 32768 [ 263.211629][ T7482] usb 5-1: Product: syz [ 263.216920][ T7482] usb 5-1: Manufacturer: syz [ 263.221822][ T7482] usb 5-1: SerialNumber: syz [ 263.277519][T13266] XFS (loop0): Mounting V5 Filesystem [ 263.285466][ T7482] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 263.295999][ T7482] cdc_ncm 5-1:1.0: bind() failure [ 263.315377][T13294] loop1: detected capacity change from 0 to 256 [ 263.346434][ T8199] loop5: p1 p2 p3 < p5 > [ 263.354031][ T8199] loop5: p1 size 242222080 extends beyond EOD, truncated [ 263.422038][T13272] loop5: p1 p2 p3 < p5 > [ 263.424616][T13266] XFS (loop0): Ending clean mount [ 263.427608][T13272] loop5: p1 size 242222080 extends beyond EOD, truncated [ 263.459762][T13266] XFS (loop0): Quotacheck needed: Please wait. [ 263.487062][T13294] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 263.551942][T11315] usb 5-1: USB disconnect, device number 21 [ 263.627505][T13266] XFS (loop0): Quotacheck: Done. [ 263.741066][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3929'. [ 263.807761][ T4173] XFS (loop0): Unmounting Filesystem [ 264.032227][T13302] loop1: detected capacity change from 0 to 4096 [ 264.153378][T13302] __ntfs_error: 1 callbacks suppressed [ 264.153396][T13302] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 264.264272][T13302] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 264.344753][T13302] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 264.391605][T13318] syz.3.3940 uses obsolete (PF_INET,SOCK_PACKET) [ 264.410285][T13302] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 264.458667][T13302] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 264.520356][T13302] ntfs: volume version 3.1. [ 264.572024][T13302] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 264.645369][T13302] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 264.673550][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 264.706888][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 264.722274][ T8199] udevd[8199]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 264.728259][ T5218] udevd[5218]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 264.766000][T13302] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 264.809385][T13302] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 264.849766][T13302] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 264.923356][T13339] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 265.213120][T13347] loop3: detected capacity change from 0 to 4096 [ 265.234405][ T3146] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 265.347466][T13359] loop1: detected capacity change from 0 to 256 [ 265.366574][T13347] ntfs: volume version 3.1. [ 265.764503][ T3146] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 265.782820][ T3146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.839205][ T3146] usb 1-1: Product: syz [ 265.854421][ T3146] usb 1-1: Manufacturer: syz [ 265.859325][ T3146] usb 1-1: SerialNumber: syz [ 265.895908][ T3146] usb 1-1: config 0 descriptor?? [ 265.930498][T13389] Cannot find set identified by id 65534 to match [ 265.948917][ T3146] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 265.958257][ T3146] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 265.966923][ T3146] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 266.134306][ T7] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.142106][T11315] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 266.212752][ T7482] usb 1-1: USB disconnect, device number 19 [ 266.425591][T13407] loop3: detected capacity change from 0 to 64 [ 266.437853][T13397] loop5: detected capacity change from 0 to 32768 [ 266.445396][T11315] usb 2-1: Using ep0 maxpacket: 8 [ 266.519454][T13397] (syz.5.3976,13397,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 266.538201][T13397] (syz.5.3976,13397,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 266.578949][T13397] JBD2: Ignoring recovery information on journal [ 266.588056][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 266.598093][T11315] usb 2-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 266.614586][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 266.624721][T11315] usb 2-1: config 1 interface 0 has no altsetting 0 [ 266.631448][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 266.642088][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 266.668267][T13397] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 266.761603][T13397] [ 266.763978][T13397] ====================================================== [ 266.771012][T13397] WARNING: possible circular locking dependency detected [ 266.778140][T13397] 5.15.185-syzkaller #0 Not tainted [ 266.783341][T13397] ------------------------------------------------------ [ 266.790359][T13397] syz.5.3976/13397 is trying to acquire lock: [ 266.796453][T13397] ffff88807e7bc650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_write_info+0x117/0x350 [ 266.805654][T13397] [ 266.805654][T13397] but task is already holding lock: [ 266.813121][T13397] ffff88806029ea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 266.824039][T13397] [ 266.824039][T13397] which lock already depends on the new lock. [ 266.824039][T13397] [ 266.834461][T13397] [ 266.834461][T13397] the existing dependency chain (in reverse order) is: [ 266.843496][T13397] [ 266.843496][T13397] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 266.852347][T13397] down_write+0x38/0x60 [ 266.857015][T13397] ocfs2_lock_global_qf+0x1e5/0x270 [ 266.862718][T13397] ocfs2_acquire_dquot+0x29d/0xaf0 [ 266.868437][T13397] dqget+0x778/0xeb0 [ 266.872860][T13397] __dquot_initialize+0x3b6/0xcb0 [ 266.878405][T13397] ocfs2_get_init_inode+0x138/0x1b0 [ 266.884110][T13397] ocfs2_mknod+0x8aa/0x22b0 [ 266.889139][T13397] ocfs2_create+0x192/0x410 [ 266.894163][T13397] path_openat+0x11e1/0x2f30 [ 266.899559][T13397] do_filp_open+0x1b3/0x3e0 [ 266.904581][T13397] do_sys_openat2+0x142/0x4a0 [ 266.909799][T13397] __x64_sys_openat+0x135/0x160 [ 266.915196][T13397] do_syscall_64+0x4c/0xa0 [ 266.920130][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.927506][T13397] [ 266.927506][T13397] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 266.938169][T13397] down_write+0x38/0x60 [ 266.942882][T13397] ocfs2_lock_global_qf+0x1c7/0x270 [ 266.948608][T13397] ocfs2_acquire_dquot+0x29d/0xaf0 [ 266.954362][T13397] dqget+0x778/0xeb0 [ 266.958782][T13397] __dquot_initialize+0x3b6/0xcb0 [ 266.964319][T13397] ocfs2_get_init_inode+0x138/0x1b0 [ 266.970063][T13397] ocfs2_mknod+0x8aa/0x22b0 [ 266.975177][T13397] ocfs2_create+0x192/0x410 [ 266.980186][T13397] path_openat+0x11e1/0x2f30 [ 266.985319][T13397] do_filp_open+0x1b3/0x3e0 [ 266.990360][T13397] do_sys_openat2+0x142/0x4a0 [ 266.995555][T13397] __x64_sys_openat+0x135/0x160 [ 267.000948][T13397] do_syscall_64+0x4c/0xa0 [ 267.005917][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.012342][T13397] [ 267.012342][T13397] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 267.019964][T13397] __mutex_lock_common+0x1eb/0x2390 [ 267.025781][T13397] mutex_lock_nested+0x17/0x20 [ 267.031077][T13397] dquot_commit+0x5a/0x410 [ 267.036008][T13397] ext4_write_dquot+0x1f0/0x360 [ 267.041357][T13397] mark_all_dquot_dirty+0x1e3/0x400 [ 267.047052][T13397] __dquot_free_space+0x7ca/0xb90 [ 267.052590][T13397] ext4_free_blocks+0x1af5/0x2480 [ 267.058112][T13397] ext4_ext_remove_space+0x1eaa/0x4390 [ 267.064071][T13397] ext4_ext_truncate+0x192/0x240 [ 267.069505][T13397] ext4_truncate+0x9f1/0x10d0 [ 267.074693][T13397] ext4_evict_inode+0xb43/0x1080 [ 267.080124][T13397] evict+0x485/0x870 [ 267.084521][T13397] ext4_orphan_cleanup+0xaa9/0x12e0 [ 267.090247][T13397] ext4_fill_super+0x9288/0x9a00 [ 267.095682][T13397] mount_bdev+0x287/0x3c0 [ 267.100514][T13397] legacy_get_tree+0xe6/0x180 [ 267.105707][T13397] vfs_get_tree+0x88/0x270 [ 267.111288][T13397] do_new_mount+0x24a/0xa40 [ 267.116292][T13397] __se_sys_mount+0x2d6/0x3c0 [ 267.121516][T13397] do_syscall_64+0x4c/0xa0 [ 267.126457][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.132857][T13397] [ 267.132857][T13397] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 267.140566][T13397] down_write+0x38/0x60 [ 267.145244][T13397] ext4_truncate+0x96d/0x10d0 [ 267.150451][T13397] ext4_setattr+0xffe/0x19e0 [ 267.155541][T13397] notify_change+0xbcd/0xee0 [ 267.160740][T13397] do_truncate+0x197/0x220 [ 267.165683][T13397] do_sys_ftruncate+0x31b/0x3d0 [ 267.171094][T13397] do_syscall_64+0x4c/0xa0 [ 267.176156][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.182662][T13397] [ 267.182662][T13397] -> #2 (jbd2_handle){++++}-{0:0}: [ 267.189942][T13397] start_this_handle+0x1338/0x15a0 [ 267.195661][T13397] jbd2__journal_start+0x2b7/0x5a0 [ 267.201272][T13397] jbd2_journal_start+0x26/0x30 [ 267.206628][T13397] ocfs2_start_trans+0x374/0x6c0 [ 267.212070][T13397] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 267.218322][T13397] ocfs2_dismount_volume+0x1de/0x880 [ 267.224124][T13397] generic_shutdown_super+0x130/0x300 [ 267.230027][T13397] kill_block_super+0x7c/0xe0 [ 267.235208][T13397] deactivate_locked_super+0x93/0xf0 [ 267.240993][T13397] cleanup_mnt+0x418/0x4d0 [ 267.245913][T13397] task_work_run+0x125/0x1a0 [ 267.251104][T13397] exit_to_user_mode_loop+0x10f/0x130 [ 267.256979][T13397] exit_to_user_mode_prepare+0xb1/0x140 [ 267.263038][T13397] syscall_exit_to_user_mode+0x16/0x40 [ 267.269020][T13397] do_syscall_64+0x58/0xa0 [ 267.274076][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.280476][T13397] [ 267.280476][T13397] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 267.288971][T13397] down_read+0x44/0x2e0 [ 267.293632][T13397] ocfs2_start_trans+0x368/0x6c0 [ 267.299077][T13397] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 267.305312][T13397] ocfs2_dismount_volume+0x1de/0x880 [ 267.311143][T13397] generic_shutdown_super+0x130/0x300 [ 267.317014][T13397] kill_block_super+0x7c/0xe0 [ 267.322190][T13397] deactivate_locked_super+0x93/0xf0 [ 267.327986][T13397] cleanup_mnt+0x418/0x4d0 [ 267.332905][T13397] task_work_run+0x125/0x1a0 [ 267.337995][T13397] exit_to_user_mode_loop+0x10f/0x130 [ 267.343874][T13397] exit_to_user_mode_prepare+0xb1/0x140 [ 267.349938][T13397] syscall_exit_to_user_mode+0x16/0x40 [ 267.355902][T13397] do_syscall_64+0x58/0xa0 [ 267.360817][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.367232][T13397] [ 267.367232][T13397] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 267.374876][T13397] __lock_acquire+0x2c33/0x7c60 [ 267.380255][T13397] lock_acquire+0x197/0x3f0 [ 267.385281][T13397] ocfs2_start_trans+0x269/0x6c0 [ 267.390757][T13397] ocfs2_write_info+0x117/0x350 [ 267.396117][T13397] dquot_set_dqinfo+0x459/0x6c0 [ 267.401468][T13397] quota_setinfo+0x2a4/0x2b0 [ 267.406570][T13397] __se_sys_quotactl+0x295/0x6c0 [ 267.412027][T13397] do_syscall_64+0x4c/0xa0 [ 267.416945][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.423350][T13397] [ 267.423350][T13397] other info that might help us debug this: [ 267.423350][T13397] [ 267.433561][T13397] Chain exists of: [ 267.433561][T13397] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &ocfs2_quota_ip_alloc_sem_key [ 267.433561][T13397] [ 267.450483][T13397] Possible unsafe locking scenario: [ 267.450483][T13397] [ 267.457914][T13397] CPU0 CPU1 [ 267.463267][T13397] ---- ---- [ 267.468616][T13397] lock(&ocfs2_quota_ip_alloc_sem_key); [ 267.474491][T13397] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 267.484290][T13397] lock(&ocfs2_quota_ip_alloc_sem_key); [ 267.492456][T13397] lock(sb_internal#3); [ 267.496712][T13397] [ 267.496712][T13397] *** DEADLOCK *** [ 267.496712][T13397] [ 267.504851][T13397] 3 locks held by syz.5.3976/13397: [ 267.510155][T13397] #0: ffff88807e7bc0e0 (&type->s_umount_key#74){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 267.520332][T13397] #1: ffff88806029ed88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 267.533266][T13397] #2: ffff88806029ea20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 267.544723][T13397] [ 267.544723][T13397] stack backtrace: [ 267.550600][T13397] CPU: 0 PID: 13397 Comm: syz.5.3976 Not tainted 5.15.185-syzkaller #0 [ 267.558815][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.568865][T13397] Call Trace: [ 267.572130][T13397] [ 267.575042][T13397] dump_stack_lvl+0x168/0x230 [ 267.579703][T13397] ? load_image+0x3b0/0x3b0 [ 267.584204][T13397] ? show_regs_print_info+0x20/0x20 [ 267.589392][T13397] ? print_circular_bug+0x12b/0x1a0 [ 267.594586][T13397] check_noncircular+0x274/0x310 [ 267.599509][T13397] ? add_chain_block+0x940/0x940 [ 267.604431][T13397] ? lockdep_lock+0xdc/0x1e0 [ 267.609057][T13397] ? lockdep_unlock+0x134/0x2d0 [ 267.613908][T13397] ? mark_lock+0x94/0x320 [ 267.618217][T13397] ? mark_lock+0x94/0x320 [ 267.622538][T13397] ? _find_first_zero_bit+0xce/0xf0 [ 267.627717][T13397] __lock_acquire+0x2c33/0x7c60 [ 267.632583][T13397] ? verify_lock_unused+0x140/0x140 [ 267.637762][T13397] ? verify_lock_unused+0x140/0x140 [ 267.642945][T13397] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 267.649078][T13397] lock_acquire+0x197/0x3f0 [ 267.653566][T13397] ? ocfs2_write_info+0x117/0x350 [ 267.658679][T13397] ? __might_sleep+0xf0/0xf0 [ 267.663250][T13397] ? do_raw_spin_lock+0x11d/0x280 [ 267.668249][T13397] ? read_lock_is_recursive+0x10/0x10 [ 267.673598][T13397] ? __rwlock_init+0x140/0x140 [ 267.678336][T13397] ? __rwlock_init+0x140/0x140 [ 267.683075][T13397] ? do_raw_spin_unlock+0x11d/0x230 [ 267.688247][T13397] ocfs2_start_trans+0x269/0x6c0 [ 267.693174][T13397] ? ocfs2_write_info+0x117/0x350 [ 267.698182][T13397] ? down_write+0x44/0x60 [ 267.702521][T13397] ? ocfs2_recovery_exit+0x50/0x50 [ 267.707608][T13397] ocfs2_write_info+0x117/0x350 [ 267.712449][T13397] ? ocfs2_mark_dquot_dirty+0xb80/0xb80 [ 267.718002][T13397] ? __rwlock_init+0x140/0x140 [ 267.722744][T13397] ? do_raw_spin_unlock+0x11d/0x230 [ 267.727921][T13397] dquot_set_dqinfo+0x459/0x6c0 [ 267.732751][T13397] quota_setinfo+0x2a4/0x2b0 [ 267.737321][T13397] ? quota_getinfo+0x270/0x270 [ 267.742059][T13397] ? bpf_lsm_capable+0x5/0x10 [ 267.746714][T13397] ? bpf_lsm_quotactl+0x5/0x10 [ 267.751459][T13397] ? security_quotactl+0x85/0xb0 [ 267.756403][T13397] ? do_quotactl+0x5ad/0x710 [ 267.760970][T13397] __se_sys_quotactl+0x295/0x6c0 [ 267.765899][T13397] ? __x64_sys_quotactl+0xa0/0xa0 [ 267.770943][T13397] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 267.776924][T13397] ? lock_chain_count+0x20/0x20 [ 267.781756][T13397] ? vtime_user_exit+0x2dc/0x400 [ 267.786676][T13397] ? lockdep_hardirqs_on+0x94/0x140 [ 267.791863][T13397] do_syscall_64+0x4c/0xa0 [ 267.796270][T13397] ? clear_bhb_loop+0x30/0x80 [ 267.800949][T13397] ? clear_bhb_loop+0x30/0x80 [ 267.805726][T13397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.811623][T13397] RIP: 0033:0x7f3806b85929 [ 267.816022][T13397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.835630][T13397] RSP: 002b:00007f38049ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 267.844039][T13397] RAX: ffffffffffffffda RBX: 00007f3806dacfa0 RCX: 00007f3806b85929 [ 267.851990][T13397] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffff80000601 [ 267.859943][T13397] RBP: 00007f3806c07b39 R08: 0000000000000000 R09: 0000000000000000 [ 267.867979][T13397] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 267.875933][T13397] R13: 0000000000000000 R14: 00007f3806dacfa0 R15: 00007fff54feef78 [ 267.883889][T13397] [ 267.912358][ T6185] ocfs2: Unmounting device (7,5) on (node local) [ 267.931557][T11315] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 267.941590][T11315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.949780][ T7] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 267.958891][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.966906][T11315] usb 2-1: Product: syz [ 267.971072][T11315] usb 2-1: Manufacturer: syz [ 267.975723][ T7] usb 5-1: Product: syz [ 267.979881][ T7] usb 5-1: Manufacturer: syz [ 267.984617][T11315] usb 2-1: SerialNumber: syz [ 267.990401][ T7] usb 5-1: SerialNumber: syz [ 267.996422][ T7] usb 5-1: config 0 descriptor?? [ 268.036159][ T7] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 268.305788][ T7] ums-isd200: probe of 5-1:0.0 failed with error -22 [ 268.316576][T11315] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input25 [ 268.331328][T11315] usb 2-1: USB disconnect, device number 21 [ 268.346510][ T3533] bcm5974 2-1:1.0: could not read from device [ 268.352629][ T3533] bcm5974: mode switch failed [ 268.463471][ T7] usb 5-1: USB disconnect, device number 22