last executing test programs: 2m24.933372208s ago: executing program 4 (id=489): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0) 2m24.610558284s ago: executing program 4 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000004000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2m24.251428777s ago: executing program 4 (id=496): r0 = io_uring_setup(0x1159, &(0x7f0000000440)={0x0, 0x2dd6, 0x40, 0x3, 0x81000117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000300000095a69938a1"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 2m24.012839711s ago: executing program 4 (id=498): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m23.463327806s ago: executing program 4 (id=503): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2m22.580795581s ago: executing program 4 (id=514): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@alg={0xe0, 0x10, 0x20, 0x70bd2d, 0x25dfdbfd, {{'ctr-aes-aesni\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 2m22.025944114s ago: executing program 32 (id=514): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@alg={0xe0, 0x10, 0x20, 0x70bd2d, 0x25dfdbfd, {{'ctr-aes-aesni\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 10.173459563s ago: executing program 1 (id=1934): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) 8.358621006s ago: executing program 2 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r1, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 7.695659622s ago: executing program 2 (id=1947): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x23032, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000001400)="f2b5c38d", 0x4}], 0x1) 6.979955522s ago: executing program 2 (id=1951): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0) 6.337395965s ago: executing program 2 (id=1955): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000000)={[{@umask={'umask', 0x3d, 0xe}}, {@nobarrier}, {}, {@nobarrier}, {@nobarrier}, {@uid}, {@nls={'nls', 0x3d, 'iso8859-13'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x10, 0x0) 6.212247388s ago: executing program 5 (id=1956): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="ad56b6c50400000000000000ea0600000000000000ef915d", 0x18) 5.417833943s ago: executing program 5 (id=1960): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0xf5}], 0x1) 5.307052724s ago: executing program 2 (id=1961): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x80108907, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000180)=0xf, 0x4) 5.285200219s ago: executing program 6 (id=1963): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) close(0x4) 4.779929968s ago: executing program 0 (id=1964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0x201, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004084}, 0x20004000) 4.624090521s ago: executing program 6 (id=1966): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 4.453306584s ago: executing program 1 (id=1967): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) 4.153134585s ago: executing program 0 (id=1968): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f00000002c0)}, 0x10) 4.015885238s ago: executing program 6 (id=1970): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x20, 0x0, @private0}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000006c0), 0x4) 3.507898479s ago: executing program 3 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xdffff038}, {0x6, 0x27, 0x4, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 3.423101377s ago: executing program 0 (id=1972): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000700)=0x0) io_submit(r0, 0x1, &(0x7f0000001ac0)=[0x0]) 3.338975516s ago: executing program 6 (id=1973): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 3.044540874s ago: executing program 5 (id=1974): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000000c000000", @ANYRES32, @ANYBLOB="ffffffff"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fdinfo/3\x00') pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x4) 2.978395288s ago: executing program 1 (id=1975): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) 2.681166402s ago: executing program 5 (id=1976): r0 = socket$nl_rdma(0x10, 0x3, 0x14) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000012140100"], 0x18}}, 0x0) 2.394759377s ago: executing program 0 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 2.388237154s ago: executing program 5 (id=1978): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x4001, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x9}}}, 0x108) 2.209720756s ago: executing program 3 (id=1979): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x38}}, 0x0) 2.033262553s ago: executing program 6 (id=1980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) 1.998820864s ago: executing program 1 (id=1981): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/devices.allow\x00', 0x120000, 0x80) fchown(r0, 0x0, 0xee01) 1.973855447s ago: executing program 0 (id=1982): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setflags(r0, 0x2, 0x0) 1.903882426s ago: executing program 5 (id=1983): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000100)={[{@pqnoenforce}]}, 0x1, 0x97ed, &(0x7f0000012f40)="$eJzs3QeYJHXBaP1ZYMkZVERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQBGQnHPOOeecc845Z75n2V3F9YB47/td9D3nPM/uTFdX11T/f11VM1M93UvMvegcAwOjDwxt8oERu+n2ORbcaIc5Lttrxz1OmnzM8ScbNnnYDSYZdnGSQcM+jjQwMDDSsOUMmzbWw8efMNLAKG9P/3tjjTHmoHEGBqYddnG2YR9nHPphokeGz/fWCI24ooP+dnHQdkP/vd14Q77EkE+WuvH8swYGBsZ/x+2H3GTqf7qj0paYfZ65/271N7chVoOHff7Of6MO/TfRfQNvjXf3AD8+3jnvoA/gLg35muPvcP/o63wAX/u/riVmn2feEfyHbIsjD5s245BtfMRt0NiIj/MbV55lt2FD+PbjbWBgyC7uH7aV/4qWmH3u+QfefT8/8OCY45721tv7zbGeHhgY65mBgbGeHRgY67mBgbGeHxgY64UP2qX+75p9junmGLK9D788jH34Y3l8elzstdrzew4MDIw2dJ6x3hx6vBh78oGBie7+oB7HVVVV9f6bfY7p5oTj/+jvdfzfcqvZb+74X1VV9d/bvLPPMd2Q4/gIx/+x3+v4/93rr1996O/+Z5tx6K3e/GDvRFVVVf1bzT0vHv/Hf6/j/3jbX7tvx/+qqqr/3hZZ4O3j/9gjHP8nfq/j/+rz3X7JsPmGf9/wxjsW+fbzx4ZNf+0d00d+x/RX3zF98DuW8875R33H9JffMX30gYGxHh42/fW/Tx7r6SG3+efljPXi35+PM8ko75j+0jumj/qO6S8PW6ch00d7x/Q33jH/6H+fPvaQ/yYf9nVfeY+hrqqq+o9pkenmnnPgHc+zHzZ5+BP78XmhRx211R0f1PpWVVVVVVVV1b/fm0+ceubf/+b7EwPv+NvVv/0N67DfCww6+uyrr/7AVvQ/o0H//PuQzT/odfq/bYjz6IdOPjCw5uIf9KrUB9B/zd+q1/8v5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4t7l/P/f/v5/4O4vbj9s1pknvf2eRf9+y0kGVh322U23z7Hgqh/Aun8A/W89/z+w6qCBgWG+4w+xXHD2RRabcmBgYNF7bp90hoG/XTfTkOtmmXDkt/+Yc2Bgyrf/HzzJuyx52LssvP3mDhP/bRlHv738ed/aZ+RBI6zEO5r1rHsPWGWJl6Yf8ePn3/1+/O39JZZ8cZ8phv8ty0gjzDT6u9x4+PKH35cRnYet+5RD1n2q9ddYe6r1Ntr4K6uusdzKK6684prTTjvN9NPNMP20X5t5qpVWXX3FqYf+/y5jNvStK0Z+P2M29ohj9sTs7xyzEe/bBCcegGP2z+/q8Q+LeHuJ58z64KXDx2yU9zlmw7/eyO89ZpOvOuwLTTIweGDZt4dm0MDAJKMMHthwyIVpRhsYmGTwsHknGTLvNyYcaWBgh7/f0UHDXmx06DyDNh8yz3/Y+5bMPGxENhk+34ivsz7iiv6r9y05buydbx/hfUv+/+r/6Pj/T14zDfrbQA1/A4Rh8wz1+oDfZ+Kf1nfyUd4+yL3b+r7H6+K8HT2+1ljlkcX/p14Xh9Z37PdY3/d4Hb93Xd8pp3lq96GL+h9b3xH2dfMPvfL97OsG3ntfNzLdfsUrJhtxXzffu6/iP2zHw8dotBFmerd93Q7znbPZkOUPvPe+bv5Vh714wN/3dSMNDEwy8vB93ZAd36iDB3YYcmHaIRdGGzxw8JAL0719YYyBs4dc+Orya62+wqC3X2Zg2HKnHrLc2SYcNHQDuuGAVUbb+a23Rhm2Li+O9Y/rOuzxMfk7j+ezTzhsMIfddvhyh8w6fLkvbz30ulGHLfelf2O5w29L6zvJGUOvG23Ycl8eYbmD32O5w2/7T9vDlIP+4YmqsL/5P3tfo2GvYf1/+75GtP2O/h7r+x6vw42Pt7fdp1jmwf+B1+Ee9G7rO8p7r++7vW/Iu67vo5c+tvf/1OuG0+Ps7r2GPlZGH/Y4e+PfePwOv+2I+7GhLwQydLc/+vvZj03+T/uxLUYeaYTBfkfv9n3uCjD/sC3ib0tbYf+XVh0+9oNHWO6/+j73HfdlEOzHxh/h57lBm+09MIjG/OHVn9vgzZ3ee8wHD/zjzxbDx3z4bd9rzEd7P2P+8fce8xG/T363MZ/yM0OvHzzC+r9zzBfedbYbho/5qCMs91+N+Wjvfez45zEfGBhMY77DpEPH7b32p+825sNvO3zMh3ydWSYcZWCugYGBKYaN+ajvZ8wn+Z95nI8J8w/9fMW/TXp6hoW+PHzMRxzjfzXmo/6bY77p3X97nE/x9nWfHmlg1FEHNlxu/fXXnWbo/8MvTjv0f94XPb3C0HF+r2PpuxkNv+17bRejvB+j8d+X0aB/ZTTpKO9m9PdNa+QDFnnm/3RfNMq/a3Q274tOnmfouL3X90XvNubDb0vHwYnfcfsRfw59j9fPwvv09vjMt83wn/f+E14/a/jPu/+Vr581/HeSq464k6/3W7//d5e/u/zd5e8uf3Hvcv5/8uHn/98ae78PD/uhc/AVM9082we9vh9w/6vP/w/z/Yfz/7PdPNMVQ360Gnbde56fHTrPf+T52RmHfpjokeHzjXh+cMQV/VfnZ/faZf0r/h+dn/0/avi2+j5+Lm7/7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Luf/px7+PIAHFlvwe8NOhA7eZJojNvmg1/cD7n/1+f9hvv9w/n+TI6bZZKSBv133nuf/h87jOP9/7wKbLf2ffP5/+Lba+f/6F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe5fz/bMOfB3DYrHN9dvjzAa7bdp/dP+j1/YD733r+v/f/99b+313+7vJ39w/+g/7rv52pf7O2f3f5u8vfXf7u8neXv7v83eXvLn93+Ysbdv5/YIS3SVyoxwUG5///u3sX/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL//fwxi/8P8scs/kvkj1n8l8wfs/j/MH/M4v+j/DGL/1L5Yxb/pfPHLP7L5I9Z/H+cP2bxXzZ/zOK/XP6Yxf8n+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/0/zxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4/yx/zOL/8/wxi/8G+WMW/w3zxyz+G/U2QJjFf+O2f8zi/4v8MYv/L/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjF/1f5Yxb/LfPHLP6/zh+z+G+VP2bx/03+mMV/6/wxi/82+WMW/23zxyz+2+WPWfx/mz9m8f9d/pjFf/v8MYv/7/PHLP5/yB+z+O+QP2bx3zF/zOL/x/wxi/9O+WMW/53zxyz+u+SPWfz/lD9m8f9z/pjFf9f8MYv/X/LHLP675Y9Z/HfPH7P475E/ZvH/a/6YxX/P/DGL/175Yxb/vf/Bf4z/56v1n5rFf5+2f8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/gPGsgfs/gPyh+z+I+UP2bxHzl/zOI/Sv6YxX9w/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOL/ofwxi/+H88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+H88fs/hPlj9m8f9E/pjF/5P5Yxb/yfPHLP6fyh+z+H86f8zi/5n8MYv/FPljFv/P5o9Z/D+XP2bx/3z+mMV/yvwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/l/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/1/PHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/+38scs/rPlj1n8Z88fs/jPkT9m8Z8zf8zi/+38MYv/XPljFv+588cs/vPkj1n8v5M/ZvGfN3/M4v/d/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fy9/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fz9/zOL/g/wxi/8S+WMW/yXzxyz+P8wfs/j/KH/M4r9U/pjFf+n8MYv/MvljFv8f549Z/JfNH7P4L5c/ZvH/Sf6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/T/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/LH7P4/zx/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP6/yB+z+P8yf8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfx/lT9m8d8yf8zi/+v8MYv/VvljFv/f5I9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/7f5Yxb/3+WPWfy3zx+z+P8+f8zi/4f8MYv/DvljFv8d88cs/n/MH7P475Q/ZvHfOX/M4r9L/pjF/0/5Yxb/P+ePWfx3zR+z+P8lf8ziv1v+mMV/9/wxi/8e+WMW/7/mj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8z/nW0x/BOL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/tz/N/5+z+A/KH7P4j5Q/ZvEfOX/M4j9K/pjFf3D+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4v+h/DGL/4fzxyz+H8kfs/hPkj9m8f9o/pjFf9L8MYv/x/LHLP4fzx+z+E+WP2bx/0T+mMX/k/ljFv/J88cs/p/KH7P4fzp/zOL/mfwxi/8U+WMW/8/mj1n8P5c/ZvH/fP6YxX/K/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X8sfs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi//X88cs/rPkj1n8v5E/ZvGfNX/M4v/N/DGL/7fyxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOL/7fwxi/9c+WMW/7nzxyz+8+SPWfy/kz9m8Z83f8zi/938MYv/fPljFv/588cs/gvkj1n8F8wfs/h/L3/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/h/P3/M4v+D/DGL/xL5Yxb/JfPHLP4/zB+z+P8of8ziv1T+mMV/6fwxi/8y+WMW/x/nj1n8l80fs/gvlz9m8f9J/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8zi/9P8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+P8sfs/j/PH/M4r9B/pjFf8P8MYv/RvljFv+N88cs/r/IH7P4/zJ/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/H+VP2bx3zJ/zOL/6/wxi/9W+WMW/9/kj1n8t84fs/hvkz9m8d82f8ziv13+mMX/t/ljFv/f5Y9Z/LfPH7P4/z5/zOL/h/wxi/8O+WMW/x3zxyz+f8wfs/jvlD9m8d85f8ziv0v+mMX/T/ljFv8/549Z/HfNH7P4/yV/zOK/W/6YxX/3/DGL/x75Yxb/v+aPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH3kgf8ziPyh/zOI/Uv6YxX/k/DGL/yj5Yxb/wfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/4fyxyz+H84fs/h/JH/M4j9J/pjF/6P5Yxb/SfPHLP4fyx+z+H88f8ziP1n+mMX/E/ljFv9P5o9Z/CfPH7P4fyp/zOL/6fwxi/9n8scs/lPkj1n8P5s/ZvH/XP6Yxf/z+WMW/ynzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/LX/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/l/PH7P4z5I/ZvH/Rv6YxX/W/DGL/zfzxyz+38ofs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/+388cs/nPlj1n8584fs/jPkz9m8f9O/pjFf978MYv/d/PHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+9/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v/9/DGL/w/yxyz+S+SPWfyXzB+z+P8wf8zi/6P8MYv/UvljFv+l88cs/svkj1n8f5w/ZvFfNn/M4r9c/pjF/yf5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/T/PHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/LH/M4v/z/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4/yJ/zOL/y/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx/1X+mMV/y/wxi/+v88cs/lvlj1n8f5M/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/f5o9Z/H+XP2bx3z5/zOL/+/wxi/8f8scs/jvkj1n8d8wfs/j/MX/M4r9T/pjFf+f8MYv/LvljFv8/5Y9Z/P+cP2bx3zV/zOL/l/wxi/9u+WMW/93zxyz+e+SPWfz/mj9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q1X+b433fue0+B+m8n//WfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf5SB/DGL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/KH7P4fzh/zOL/kfwxi/8k+WMW/4/mj1n8J80fs/h/LH/M4v/x/DGL/2T5Yxb/T+SPWfw/mT9m8Z88f8zi/6n8MYv/p/PHLP6fyR+z+E+RP2bx/2z+mMX/c/ljFv/P549Z/KfMH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/tfwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+H89f8ziP0v+mMX/G/ljFv9Z88cs/t/MH7P4fyt/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP7fzh+z+M+VP2bxnzt/zOI/T/6Yxf87+WMW/3nzxyz+380fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi//38scs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi//388cs/j/IH7P4L5E/ZvFfMn/M4v/D/DGL/4/yxyz+S+WPWfyXzh+z+C+TP2bx/3H+mMV/2fwxi/9y+WMW/5/kj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+P80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/s/wxi//P88cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/L/PHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjF/1f5Yxb/LfPHLP6/zh+z+G+VP2bx/03+mMV/6/wxi/82+WMW/23zxyz+2+WPWfx/mz9m8f9d/pjFf/v8MYv/7/PHLP5/yB+z+O+QP2bx3zF/zOL/x/wxi/9O+WMW/53zxyz+u+SPWfz/lD9m8f9z/pjFf9f8MYv/X/LHLP675Y9Z/HfPH7P475E/ZvH/a/6YxX/P/DGL/175Yxb/vfPHLP77SP1H+xfXW/z3lfr/qyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/8ED+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/D+WPWfw/nD9m8f9I/pjFf5L8MYv/R/PHLP6T5o9Z/D+WP2bx/3j+mMV/svwxi/8n8scs/p/MH7P4T54/ZvH/VP6Yxf/T+WMW/8/kj1n8p8gfs/h/Nn/M4v+5/DGL/+fzxyz+U+aPWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8f9a/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8v54/ZvGfJX/M4v+N/DGL/6z5Yxb/b+aPWfy/lT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/2/nj1n858ofs/jPnT9m8Z8nf8zi/538MYv/vPljFv/v5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/3v5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF//v5Yxb/H+SPWfyXyB+z+C+ZP2bx/2H+mMX/R/ljFv+l8scs/kvnj1n8l8kfs/j/OH/M4r9s/pjFf7n8MYv/T/LHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+f5o9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9Z/pjF/+f5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/Rf6Yxf+X+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOL/q/wxi/+W+WMW/1/nj1n8t8ofs/j/Jn/M4r91/pjFf5v8MYv/tvljFv/t8scs/r/NH7P4/y5/zOK/ff6Yxf/3+WMW/z/kj1n8d8gfs/jvmD9m8f9j/pjFf6f8MYv/zvljFv9d8scs/n/KH7P4/zl/zOK/a/6Yxf8v+WMW/93yxyz+u+ePWfz3yB+z+P81f8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxif+oA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lD9m8f9w/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMX/4/ljFv/J8scs/p/IH7P4fzJ/zOI/ef6Yxf9T+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/+fyxyz+n88fs/hPmT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/2v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvH/ev6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8f9W/pjFf7b8MYv/7PljFv858scs/nPmj1n8v50/ZvGfK3/M4j93/pjFf578MYv/d/LHLP7z5o9Z/L+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/7+WPWfwXyh+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/7+ePWfx/kD9m8V8if8ziv2T+mMX/h/ljFv8f5Y9Z/JfKH7P4L50/ZvFfJn/M4v/j/DGL/7L5Yxb/5fLHLP4/yR+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/H+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjF/2f5Yxb/n+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6Yxf8X+WMW/1/mj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+v8scs/lvmj1n8f50/ZvHfKn/M4v+b/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4/zZ/zOL/u/wxi//2+WMW/9/nj1n8/5A/ZvHfIX/M4r9j/pjF/4/5Yxb/nfLHLP47549Z/HfJH7P4/yl/zOL/5/wxi/+u+WMW/7/kj1n8d8sfs/jvnj9m8d8jf8zi/9f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38sck/qMN5I9Z/Aflj1n8R8ofs/iPnD9m8R/F5D/K+5/V4j/Y5P9vZPEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8of8zi/+H8MYv/R/LHLP6T5I9Z/D+aP2bxnzR/zOL/sfwxi//H88cs/pPlj1n8P5E/ZvH/ZP6YxX/y/DGL/6fyxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/1/LHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4v/1/DGL/yz5Yxb/b+SPWfxnzR+z+H8zf8zi/638MYv/bPljFv/Z88cs/nPkj1n858wfs/h/O3/M4j9X/pjFf+78MYv/PPljFv/v5I9Z/OfNH7P4fzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP7fyx+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP7fzx+z+P8gf8ziv0T+mMV/yfwxi/8P88cs/j/KH7P4L5U/ZvFfOn/M4r9M/pjF/8f5Yxb/ZfPHLP7L5Y9Z/H+SP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4/zR/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/z/LHLP4/zx+z+G+QP2bx3zB/zOK/Uf6YxX/j/DGL/y/yxyz+v8wfs/hvkj9m8d80f8ziv1n+mMV/8/xHpokW/y3yxyz+v8ofs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/b/DGL/+/yxyz+2+ePWfx/nz9m8f9D/pjFf4f8MYv/jvljFv8/5o9Z/HfKH7P475w/ZvHfJX/M4v+n/DGL/5/zxyz+u+aPWfz/kj9m8d8tf8ziv3v+mMV/j/wxi/9f88cs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/iPPpA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPKPZ/a7N3v87iP5HY/72y+E+cP2bx/1D+mMX/w/ljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/4/nj1n8J8sfs/h/In/M4v/J/DGL/+T5Yxb/T+WPWfw/nT9m8f9M/pjFf4r8MYv/Z/PHLP6fyx+z+H8+f8ziP2X+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv+v5Y9Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjF/+v5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMX/W/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8f92/pjFf678MYv/3PljFv958scs/t/JH7P4z5s/ZvH/bv6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+XP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/L+fP2bx/0H+mMV/ifwxi/+S+WMW/x/mj1n8f5Q/ZvFfKn/M4r90/pjFf5n8MYv/j/PHLP7L5o9Z/JfLH7P4/yR/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/af6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv+f5Y9Z/H+eP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/X+SPWfx/mT9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+v8ofs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/b/DGL/+/yxyz+2+ePWfx/nz9m8f9D/pjFf4f8MYv/jvljFv8/5o9Z/HfKH7P475w/ZvHfJX/M4v+n/DGL/5/zxyz+u+aPWfz/kj9m8d8tf8ziv3v+mMV/j/wxi/9f88cs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/iPMZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/Q/ljFv8P549Z/D+SP2bxnyR/zOL/0fwxi/+k+WMW/4/lj1n8P54/ZvGfLH/M4v+J/DGL/yfzxyz+k+ePWfw/lT9m8f90/pjF/zP5Yxb/KfLHLP6fzR+z+H8uf8zi//n8MYv/lPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/L+WP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/r+ePWfxnyR+z+H8jf8ziP2v+mMX/m/ljFv9v5Y9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/9v5Yxb/ufLHLP5z549Z/OfJH7P4fyd/zOI/b/6Yxf+7+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/17+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/37+mMX/B/ljFv8l8scs/kvmj1n8f5g/ZvH/Uf6YxX+p/DGL/9L5Yxb/ZfLHLP4/zh+z+C+bP2bxXy5/zOL/k/wxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf+n+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+WP2bx/3n+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/kT9m8f9l/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/j/Kn/M4r+lzX/09zebxf/XNv/3mcV/q/wxi/9v8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/9v8MYv/7/LHLP7b549Z/H+fP2bx/0P+mMV/h/wxi/+O+WMW/z/mj1n8d8ofs/jvnD9m8d8lf8zi/6f8MYv/n/PHLP675o9Z/P+SP2bx3y1/zOK/e/6YxX+P/DGL/1/zxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I85kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9D+WMW/w/nj1n8P5I/ZvGfJH/M4v/R/DGL/6T5Yxb/j+WPWfw/nj9m8Z8sf8zi/4n8MYv/J/PHLP6T549Z/D+VP2bx/3T+mMX/M/ljFv8p8scs/p/NH7P4fy5/zOL/+fwxi/+U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8v5Y/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv+v549Z/GfJH7P4fyN/zOI/a/6Yxf+b+WMW/2/lj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMX/2/ljFv+58scs/nPnj1n858kfs/h/J3/M4j9v/pjF/7v5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/Xv6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/fv6Yxf8H+WMW/yXyxyz+S+aPWfx/mD9m8f9R/pjFf6n8MYv/0vljFv9l8scs/j/OH7P4L5s/ZvFfLn/M4v+T/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/6f5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8f5Y/ZvH/ef6YxX+D/DGL/4Yy/9He53wW/41k/u83i//G+WMW/1/kj1n8f5k/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/r/KH7P4b5k/ZvH/df6YxX+r/DGL/2/yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/2/wxi//v8scs/tvnj1n8f58/ZvH/Q/6YxX+H/DGL/475Yxb/P+aPWfx3yh+z+O+cP2bx3yV/zOL/p/wxi/+f88cs/rvmj1n8/5I/ZvHfLX/M4r97/pjFf4/8MYv/X/PHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH5P4jzWQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/0P5Yxb/D+ePWfw/kj9m8Z8kf8zi/9H8MYv/pPljFv+P5Y9Z/D+eP2bxnyx/zOL/ifwxi/8n88cs/pPnj1n8P5U/ZvH/dP6Yxf8z+WMW/ynyxyz+n80fs/h/Ln/M4v/5/DGL/5T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8qf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfy/lj9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/6/nj1n8Z8kfs/h/I3/M4j9r/pjF/5v5Yxb/b+WPWfxnyx+z+M+eP2bxnyN/zOI/Z/6Yxf/b+WMW/7nyxyz+c+ePWfznyR+z+H8nf8ziP2/+mMX/u/ljFv/58scs/vPnj1n8F8gfs/gvmD9m8f9e/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8f9+/pjF/wf5Yxb/JfLHLP5L5o9Z/H+YP2bx/1H+mMV/qfwxi//S+WMW/2Xyxyz+P84fs/gvmz9m8V8uf8zi/5P8MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/p/ljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/lj9m8f95/pjFf4P8MYv/hvljFv+N8scs/hvnj1n8f5E/ZvH/Zf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4/yp/zOK/Zf6Yxf/X+WMW/63yxyz+v8kfs/hvnT9m8d8mf8ziv23+mMV/u/wxi/9v88cs/r/LH7P4b58/ZvH/ff6Yxf8P+WMW/x3yxyz+O+aPWfz/mD9m8d8pf8ziv3P+mMV/l/wxi/+f8scs/n/OH7P475o/ZvH/S/6YxX+3/DGL/+75Yxb/PfLHLP5/zR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif7HVf9T3vtrif4nV/19k8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHHsgfs/gPyh+z+I+UP2bxHzl/zOI/Sv6YxX9w/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOL/ofwxi/+H39X/zbfeeuv/zar9J2bx/0jbP2bxnyR/zOL/0fwxi/+k+WMW/4/lj1n8P54/ZvGfLH/M4v+J/DGL/yfzxyz+k+ePWfw/lT9m8f90/pjF/zP5Yxb/KfLHLP6fzR+z+H8uf8zi//n8MYv/lPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/L+WP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/r+ePWfxnyR+z+H8jf8ziP2v+mMX/m/ljFv9v5Y9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/9v5Yxb/ufLHLP5z549Z/OfJH7P4fyd/zOI/b/6Yxf+7+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/17+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/37+mMX/B/ljFv8l8scs/kvmj1n8f5g/ZvH/Uf6YxX+p/DGL/9L5Yxb/ZfLHLP4/zh+z+C+bP2bxXy5/zOL/k/wxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf+n+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+WP2bx/3n+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/kT9m8f9l/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/j/Kn/M4r9l/pjF/9f5Yxb/rfLHLP6/yR+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/2/zxyz+v8sfs/hvnz9m8f99/pjF/w/5Yxb/HfLHLP475o9Z/P+YP2bx3yl/zOK/c/6YxX+X/DGL/5/yxyz+f84fs/jvmj9m8f9L/pjFf7f8MYv/7vljFv898scs/n/NH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/If0iDRhwDi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+4wzkj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/1D+mMX/w/ljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/4/nj1n8J8sfs/h/In/M4v/J/DGL/+T5Yxb/T+WPWfw/nT9m8f9M/pjFf4r8MYv/Z/PHLP6fyx+z+H8+f8ziP2X+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv+v5Y9Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjF/+v5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMX/W/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8f92/pjFf678MYv/3PljFv958scs/t/JH7P4z5s/ZvH/bv6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+XP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/L+fP2bx/0H+mMV/ifwxi/+S+WMW/x/mj1n8f5Q/ZvFfKn/M4r90/pjFf5n8MYv/j/PHLP7L5o9Z/JfLH7P4/yR/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/af6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv+f5Y9Z/H+eP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/X+SPWfx/mT9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+v8ofs/hvmT9m8f91/pjFf6v8MYv/b/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/b/DGL/+/yxyz+2+ePWfx/nz9m8f9D/pjFf4f8MYv/jvljFv8/5o9Z/HfKH7P475w/ZvHfJX/M4v+n/DGL/5/zxyz+u+aPWfz/kj9m8d8tf8ziv3v+mMV/j/wxi/9f88cs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofk/iPO5A/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/Q/ljFv8P549Z/D+SP2bxnyR/zOL/0fwxi/+k+WMW/4/lj1n8P54/ZvGfLH/M4v+J/DGL/yfzxyz+k+ePWfw/lT9m8f90/pjF/zP5Yxb/KfLHLP6fzR+z+H8uf8zi//n8MYv/lPljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/L+WP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/r+ePWfxnyR+z+H8jf8ziP2v+mMX/m/ljFv9v5Y9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/9v5Yxb/ufLHLP5z549Z/OfJH7P4fyd/zOI/b/6Yxf+7+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/17+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/37+mMX/B/ljFv8l8scs/kvmj1n8f5g/ZvH/Uf6YxX+p/DGL/9L5Yxb/ZfLHLP4/zh+z+C+bP2bxXy5/zOL/k/wxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf+n+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+WP2bx/3n+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/kT9m8f9l/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/j/Kn/M4r9l/pjF/9f5Yxb/rfLHLP6/yR+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/2/zxyz+v8sfs/hvnz9m8f99/pjF/w/5Yxb/HfLHLP475o9Z/P+YP2bx3yl/zOK/c/7Y/17/Qe/kHneX/LH/vf7/uP3/KX/M4v/n/DGL/675Yxb/v+SPWfx3yx+z+O+eP2bx3yN/zOL/1/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+4w3kj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwn+v/Yo2c2QAwEiqKzu7OOiti2bdu2bUw8sW3btm3btm07fb6XP5B3Tnnb63/U8n9Y/6OW/8P5H7X8H97/qOX/CP5HLf9H9D9q+T+S/1HL/5H9j1r+j+J/1PJ/VP+jlv+j+R+1/B/d/6jl/xj+Ry3/x/Q/avk/lv9Ry/+x/Y9a/o/jf9Tyf1z/o5b/4/kftfwf3/+o5f8E/kct/yf0P2r5P5H/Ucv/if2PWv5P0v5/8KCYW/5P2v7/T7T8n8z/qOX/5P5HLf+n8D9q+T+l/1HL/6n8j1r+T+1/1PJ/Gv+jlv/T+h+1/J/O/6jl//T+Ry3/Z/A/avk/o/9Ry/+Z/I9a/s/sf9Tyfxb/o5b/s/oftfyfzf+o5f/s/kct/+fwP2r5P6f/Ucv/ufyPWv7P7X/U8n8e/6OW//P6H7X8n8//qOX//P5HLf8X8D9q+b+g/1HL/4X8j1r+L+x/1PJ/Ef+jlv+L+h+1/F/M/6jl/+L+Ry3/l/A/avm/pP9Ry/+l/I9a/i/tf9Tyfxn/o5b/y/oftfxfzv+o5f/y/kct/1fwP2r5v6L/Ucv/lfyPWv6v7H/U8n8V/6OW/6v6H7X8X83/qOX/6v5HLf/X8D9q+b+m/1HL/7X8j1r+r+1/1PJ/Hf+jlv/r+h+1/F/P/6jl//r+Ry3/N/A/avm/of9Ry/+N/I9a/m/sf9TyfxP/o5b/m/oftfzfzP+o5f/m/kct/7fwP2r5v6X/Ucv/rfyPWv4P8j9q+b+1/1HL/238j1r+b+t/1PJ/O/+jlv/b+x+1/N/B/6jl/47+Ry3/B/sftfzfyf+o5f/O/kct/3fxP2r5v6v/Ucv/3fyPWv7v7n/U8n8P/6OW/3v6H7X838v/qOX/3v5HLf/38T9q+b+v/1HL//38j1r+7+9/1PL/AP+jlv8H+h+1/D/I/6jl/8H+Ry3/D/E/avl/qP9Ry//D/I9a/h/uf9Ty/wj/o5b/R/oftfw/yv+o5f/R/kct/4/xP2r5f6z/Ucv/4/yPWv4f73/U8v8E/6OW/yf6H7X8P8n/qOX/yf5HLf9P8T9q+X+q/1HL/9P8j1r+n+5/1PL/DP+jlv9n+h+1/D/L/6jl/9n+Ry3/z/E/avl/rv9Ry//z/I9a/p/vf9Ty/wL/o5b/F/oftfy/yP+o5f/F/kct/y/xP2r5f6n/Ucv/y/yPWv5f7n/U8v8K/6OW/1f6H7X8v8r/qOX/1f5HLf+v8T9q+X+t/1HL/+v8j1r+X+9/1PL/Bv+jlv83+h+1/L/J/6jl/83+Ry3/b/E/avl/q/9Ry//b/I9a/t/uf9Ty/w7/o5b/d/oftfy/y/+o5f/d/kct/+/xP2r5f6//Ucv/+/yPWv7f73/U8v8B/6OW/w/6H7X8f8j/qOX/w/5HLf8f8T9q+f+o/1HL/8f8j1r+P+5/1PL/Cf+jlv9P+h+1/H/K/6jl/9P+Ry3/n/E/avn/rP9Ry//n/I9a/j/vf9Ty/wX/o5b/L/oftfx/yf+o5f/L/kct/1/xP2r5/6r/Ucv/1/yPWv6/7n/U8v8N/6OW/2/6H7X8f8v/qOX/2/5HLf/f8T9q+f+u/1HL//f8j1r+v+9/1PL/A/+jlv8f+h+1/P/I/z8aOKDo/8f+Ry3/P/E/avn/qf9Ry//P/I9a/n/uf9Ty/wv/o5b/X/oftfz/yv+o5f/X/kct/7/xP2r5/63/Ucv/7/yPWv5/73/U8v8H/6OW/z/6H7X8/8n/qOX/z/5HLf9/8T9q+f+r/1HL/9/8j0r+DzPA/6jl/9/8j1r+/93/qOX/P/yPWv4P9D9q+f9P/6OW///yP2r5/2//o5b///E/avn/X/+jlv//8z9q+f9//6OW/0P4H7X8H9L/qOX/UP5HLf+H9j/6y/0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPidvbuNzass/Dh+urZ7+rN/N+fwGjIYbLqJK1u7MhlsPtTHgqk6FgMmkC2sjEph7iG4gVoNSgzGMBkJIuo2dRNIjBkvhgkIK4lKnIrGiWiIQ1AXMTVMZETjUnO3vUt7r23Wq17XXuzzedHe55Tf6bbku3PK1gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUtq87ZYb1nZ0tG3ywgsvvBh4cap/ZwJSey36U/0jAQAAAAAAAAAAAAAARpLj24lO9c8RAAAAAABONy2t7+qurhpyqnrwwZyft/W+b3r1yuv3PP/4yvL7/g9fPswlJww+6Onp6XmpuWtm/+GkoihKn216//HkynHp+p1dl2/vOwrFb59tbt22vfngzq98/eG5U6fPqe09W1usua69o23JhKII1bXF1tJBQ1VRhIm1xfbSQWPpYFJtcX/pYGnvwZTiQOngwms3dKwrnTjhU8Npp6X1s0X1kGKLIb8bDO6/s2vTrvL7US5ZvlpN0d9/XfMP91Z8rGyE/svXD1WV/Y/5JwiMaGz9376w/H6US55w/3+0vW7VcB8buf/y9cME/UM6wzz/D2m093l/z/4ZIzz/zx3mkgP7n/5lZVep/5t++UJ9/6mak3n+L32+vqNQXdn/hCHP/6Xn+Jry8/+kogi14/zlgNNKS+vnuke7/1d2P7T/mrMqNlWD+z+6ak91qf/Ddz3w/v5TtSfV/8D1Q80o9/+qzxwY+mMFxqaldXdPxf1/DP0XC4a55ED/83cfu6rU/xk7j+wb9LGx9F9b2f/iLTd+YvHmbbfUt9+4dn3b+rabGhsbmpYua2q8aPni3keCvrfj/FWB08P47v/F1IpNVVG0DewXfXjZS6X+D577j7/1n5o8xv4njnr/f879H4Z1/oRi4sRi69otWzY19L0tHzb2ve37z4bp/8Sv/0fsf175/wOWv+4ufUE+sP/NO7/6kVL/905a9UD/qYlj7H/SaP13vvZ5gQjjvP+vq9gM6b/91e+sK/X/p1eOH+o/Ndav/yeP2v8u938Yj5bWir/w8z9W6n/1vw4P9+cEJyFM8ed/kE6O/rdO+8U349Zhqv4hnRz9L93cFvmXbcP/6R/SydH/r3ZUHYlbhzP0D+nk6P9r3Q9ujFuHafqHdHL0v3/2I0/FrcP/6x/SydH/8fXTr4pbhzr9Qzo5+r/sS3tXx63DdP1DOjn6r3pl2hNx6zBD/5BOjv7rq87+VNw6vE7/kE6O/q/rfPjFuHWYqX9IJ0f/n9/568jv0wmv1z+kk6P/p/64dUfcOszSP6STo/8XZrXXx63DmfqHdHL0f/8NTzwStw5v0D+kk6P/p7/1wWNx6xD0D+nk6P8bzx5ZE7cOs/UP6eTof9/CY3+IW4ez9A/p5Oj/3x+9+gNx6/BG/UM6OfoP+5d/N24dztY/pJOj/yuevKshbh3m6B/SydF/54rb7oxbh3P0D+nk6L+peeHsuHU4V/+QTo7+Z/z573fHrcNc/UM6Ofr/2H3vrfx3v09SOE//kE6O/m/esPrRuHU4X/+QTo7+V87ouSBuHebpH9LJ0f/ho/f9KG4d5usf0snR/913Lrkibh3epH9IJ0f/P7j1vO64dXiz/iGdHP2/XHvHrXHrsED/kE6O/r/8s5plceuwUP+QTo7+f/zQ93fFrcNb9A/p5Oj/xfc9dk7cOlygf0gnR/+7L571xbh1eKv+IZ0c/b/7mY3r49Zhkf4hnRz9T977+6Nx61Cvf0gnR//zVx38UNw6XKh/SCdH/xsWrfld3Dos1j+kk6P/Zw48fShuHZboH9LJ0f+Oxz7dHLcODfqHdHL0//hlHf+JW4dG/UM6Ofr/Z9NPPh63Dkv1D+nk6P/MQ9/+Qtw6NOkf0snR/9UPTp4Ztw4X6R/SydH/xmtmfy9uHZbpH9LJ0f8lcx+6NG4d3qZ/SCdH/+/564qb49bhYv1DOjn6r7vnnufi1mG5/iGdHP3Pu/b2a+LW4RL9Qzo5+r9+Tv2Tcetwqf4hnRz933G8ZUHcOqzQP6STo/+u257fF7cOK/UP6eTov/uTL9fFrcPb9Q/p5Oh/75Qr741bh3foHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CkAAP//49rVfw==") 1.64619827s ago: executing program 2 (id=1984): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.644674969s ago: executing program 3 (id=1985): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0xfffffffe, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2ed, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0x5, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a300000000064010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c001040000000000000000310010980480002"], 0x254}}, 0x10) 1.530804768s ago: executing program 1 (id=1986): socket$inet6(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x4000000000, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) 1.434917183s ago: executing program 0 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x2000, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 648.900121ms ago: executing program 33 (id=1984): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 633.35904ms ago: executing program 1 (id=1989): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=cp737,umask=0\x00\x00\x00\x00\x00\x00\x00@0800d=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,noquota\x00iocharset=cp850,grpquota,usrquota,uid=', @ANYBLOB="423170a811445258", @ANYBLOB=',quota,gid=', @ANYRESHEX, @ANYBLOB=',noquota,usrquota,gid=', @ANYRESHEX=0x0, @ANYBLOB="07cc39776030a6303cfb51e3fd04144e7cff37372bb915dded44", @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00', @ANYRES8=0x0], 0x5, 0x615b, &(0x7f0000008b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000240)=""/164, 0xa4) 629.787781ms ago: executing program 3 (id=1990): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184520, 0x0) 624.341936ms ago: executing program 6 (id=1991): openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x181040, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 319.454857ms ago: executing program 3 (id=1992): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 0s ago: executing program 3 (id=1993): r0 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ipvlan1\x00', {}, 0x3}) kernel console output (not intermixed with test programs): SB device number 8 using dummy_hcd [ 188.939971][ T8863] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 188.976213][ T8863] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.1031: Failed to acquire dquot type 1 [ 189.004555][ T8863] loop0: lost filesystem error report for type 5 error -117 [ 189.026802][ T8863] EXT4-fs (loop0): 1 truncate cleaned up [ 189.076722][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 189.102869][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 189.114278][ T8863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.143828][ T8876] loop6: detected capacity change from 0 to 1024 [ 189.157723][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 189.177387][ T8876] hfsplus: walked past end of dir [ 189.182608][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 189.183756][ T8880] loop5: detected capacity change from 0 to 256 [ 189.209467][ T9] usb 2-1: Product: syz [ 189.216562][ T9] usb 2-1: Manufacturer: syz [ 189.230318][ T9] usb 2-1: SerialNumber: syz [ 189.271945][ T49] hfsplus: b-tree write err: -5, ino 25 [ 189.300785][ T8863] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 189.302736][ T49] hfsplus: b-tree write err: -5, ino 4 [ 189.320778][ T9] usb 2-1: config 0 descriptor?? [ 189.331271][ T49] hfsplus: b-tree write err: -5, ino 2 [ 189.346922][ T8869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.370234][ T8863] EXT4-fs error (device loop0): __ext4_remount:6829: comm syz.0.1031: Abort forced by user [ 189.380826][ T49] hfsplus: b-tree write err: -5, ino 17 [ 189.398939][ T8880] FAT-fs (loop5): Directory bread(block 64) failed [ 189.404027][ T8863] EXT4-fs (loop0): Remounting filesystem read-only [ 189.406822][ T8880] FAT-fs (loop5): Directory bread(block 65) failed [ 189.452261][ T8880] FAT-fs (loop5): Directory bread(block 66) failed [ 189.486323][ T8880] FAT-fs (loop5): Directory bread(block 67) failed [ 189.487192][ T8863] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 189.493009][ T8880] FAT-fs (loop5): Directory bread(block 68) failed [ 189.523842][ T8863] ext4 filesystem being remounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.561370][ T8880] FAT-fs (loop5): Directory bread(block 69) failed [ 189.595518][ T8863] EXT4-fs: Ignoring removed orlov option [ 189.606339][ T8880] FAT-fs (loop5): Directory bread(block 70) failed [ 189.612997][ T8880] FAT-fs (loop5): Directory bread(block 71) failed [ 189.640999][ T5834] usb 2-1: USB disconnect, device number 8 [ 189.650337][ T8863] EXT4-fs: Ignoring removed bh option [ 189.664524][ T8863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.689164][ T8880] FAT-fs (loop5): Directory bread(block 72) failed [ 189.706922][ T8863] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 189.732034][ T8880] FAT-fs (loop5): Directory bread(block 73) failed [ 189.788003][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.993350][ T8902] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 190.072690][ T8899] loop6: detected capacity change from 0 to 4096 [ 190.237190][ T8912] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.318381][ T8905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.579179][ T8924] loop0: detected capacity change from 0 to 64 [ 190.632161][ T8925] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 190.723679][ T8925] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 191.004622][ T8933] set_capacity_and_notify: 1 callbacks suppressed [ 191.004643][ T8933] loop1: detected capacity change from 0 to 4096 [ 191.380320][ T8933] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 191.484320][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 191.595295][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 191.819981][ T8955] fido_id[8955]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.391554][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'. [ 192.498966][ T8979] loop1: detected capacity change from 0 to 4096 [ 192.531922][ T8979] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 192.568832][ T8979] ntfs3(loop1): ino=3, mi_enum_attr [ 192.602565][ T8959] loop5: detected capacity change from 0 to 32768 [ 192.705613][ T8959] JBD2: Ignoring recovery information on journal [ 192.750100][ T8961] loop2: detected capacity change from 0 to 32768 [ 192.812130][ T8979] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 192.862792][ T8961] read_mapping_page failed! [ 192.880183][ T8979] ntfs3(loop1): ino=1f, "file2" failed to open parent directory r=5 to update [ 192.891365][ T8988] sp0: Synchronizing with TNC [ 192.919769][ T8984] [U] è` [ 192.925993][ T8959] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 192.934679][ T8961] ERROR: (device loop2): txCommit: [ 192.934679][ T8961] [ 192.961501][ T8979] ntfs3(loop1): ino=1f, "file2" failed to open parent directory r=5 to write [ 193.395036][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 193.583560][ T5944] IPVS: starting estimator thread 0... [ 193.613291][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.622896][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.736838][ T9008] IPVS: using max 26 ests per chain, 62400 per kthread [ 193.855287][ T9016] loop6: detected capacity change from 0 to 64 [ 194.060924][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 194.081001][ T9022] netlink: 'syz.2.1105': attribute type 14 has an invalid length. [ 194.123195][ T9022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1105'. [ 194.431397][ T9030] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 194.478917][ T9030] bond1 (unregistering): Released all slaves [ 194.524975][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 194.579975][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 194.594557][ T9036] loop0: detected capacity change from 0 to 4096 [ 194.602469][ T9004] loop3: detected capacity change from 0 to 32768 [ 194.662587][ T9036] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 194.720609][ T9004] JBD2: Ignoring recovery information on journal [ 194.796525][ T9036] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex [ 194.898148][ T9004] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 195.043164][ T30] audit: type=1804 audit(1775096772.252:72): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1097" name="/newroot/204/file1/bus" dev="loop3" ino=17058 res=1 errno=0 [ 195.130290][ T9055] loop1: detected capacity change from 0 to 16 [ 195.141300][ T30] audit: type=1800 audit(1775096772.252:73): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1097" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 195.195044][ T9055] erofs (device loop1): mounted with root inode @ nid 36. [ 195.284668][ T9055] syz.1.1118: attempt to access beyond end of device [ 195.284668][ T9055] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 195.322564][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 195.410204][ T9055] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 195.474994][ T9055] erofs (device loop1): read error -117 @ 0 of nid 89 [ 195.475357][ T30] audit: type=1800 audit(1775096772.682:74): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1118" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 195.733546][ T9074] loop1: detected capacity change from 0 to 64 [ 195.871946][ T9077] loop2: detected capacity change from 0 to 2048 [ 195.949161][ T9077] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 195.983747][ T9081] No buffer was provided with the request [ 196.034479][ T9077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.266614][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 196.301553][ T9094] loop3: detected capacity change from 0 to 2048 [ 196.388195][ T9094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.456761][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 196.463695][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.475033][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.486976][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 196.498095][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 196.508335][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.538141][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 196.556558][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 196.591638][ T9] usb 6-1: Manufacturer: syz [ 196.643565][ T9] usb 6-1: config 0 descriptor?? [ 196.765055][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.911369][ T9108] loop0: detected capacity change from 0 to 2048 [ 197.009286][ T9108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.077538][ T9] rc_core: IR keymap rc-hauppauge not found [ 197.095499][ T9] Registered IR keymap rc-empty [ 197.124452][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.190628][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.250532][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 197.303541][ T9113] loop1: detected capacity change from 0 to 8192 [ 197.310463][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 197.385650][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.479730][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.536828][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.566458][ T791] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 197.576937][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.606655][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.663365][ T9100] loop2: detected capacity change from 0 to 40427 [ 197.671145][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.717565][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.726258][ T791] usb 1-1: Using ep0 maxpacket: 32 [ 197.737966][ T791] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 197.757434][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.782416][ T791] usb 1-1: config 0 has no interface number 0 [ 197.790017][ T9132] random: crng reseeded on system resumption [ 197.798229][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.803509][ T791] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.829039][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.873049][ T791] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 197.889487][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 197.908720][ T791] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 36, changing to 7 [ 197.933390][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 197.955973][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 197.974479][ T791] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.016788][ T9] usb 6-1: USB disconnect, device number 9 [ 198.021311][ T791] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 198.042484][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.080404][ T791] usb 1-1: Product: syz [ 198.098595][ T9100] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 198.113611][ T791] usb 1-1: Manufacturer: syz [ 198.126173][ T791] usb 1-1: SerialNumber: syz [ 198.158888][ T9100] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.162883][ T791] usb 1-1: config 0 descriptor?? [ 198.217676][ T791] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input10 [ 198.318451][ T9138] loop3: detected capacity change from 0 to 256 [ 198.474356][ T9144] warning: `syz.5.1154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.548067][ T9] usb 1-1: USB disconnect, device number 6 [ 199.136545][ T9161] loop6: detected capacity change from 0 to 512 [ 199.212097][ T9161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.274937][ T9166] loop5: detected capacity change from 0 to 64 [ 199.282826][ T9161] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.407130][ T9166] Trying to free block not in datazone [ 199.450671][ T9174] loop0: detected capacity change from 0 to 256 [ 199.535020][ T7466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 199.569179][ T9174] FAT-fs (loop0): Directory bread(block 64) failed [ 199.626631][ T9174] FAT-fs (loop0): Directory bread(block 65) failed [ 199.673940][ T9174] FAT-fs (loop0): Directory bread(block 66) failed [ 199.713468][ T9174] FAT-fs (loop0): Directory bread(block 67) failed [ 199.740067][ T9174] FAT-fs (loop0): Directory bread(block 68) failed [ 199.762236][ T9180] ptrace attach of "./syz-executor exec"[5830] was attempted by "\x22"[9180] [ 199.782392][ T9174] FAT-fs (loop0): Directory bread(block 69) failed [ 199.809188][ T9174] FAT-fs (loop0): Directory bread(block 70) failed [ 199.837870][ T9174] FAT-fs (loop0): Directory bread(block 71) failed [ 199.844552][ T9174] FAT-fs (loop0): Directory bread(block 72) failed [ 199.885729][ T9174] FAT-fs (loop0): Directory bread(block 73) failed [ 199.977048][ T9188] loop5: detected capacity change from 0 to 128 [ 200.010311][ T9174] FAT-fs (loop0): Filesystem has been set read-only [ 200.034251][ T9188] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.126694][ T9188] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 200.207577][ T5830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.604097][ T9203] loop6: detected capacity change from 0 to 4096 [ 200.647868][ T9203] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 200.658139][ T9209] EXT4-fs: Ignoring removed orlov option [ 200.687792][ T9209] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 200.752142][ T9213] vivid-001: disconnect [ 200.770108][ T9203] ntfs3(loop6): ino=19, mi_enum_attr [ 200.782333][ T9203] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 200.782560][ T9212] vivid-001: reconnect [ 200.801127][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 200.809204][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 200.809287][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 200.815855][ T5137] Bluetooth: hci3: command 0x0406 tx timeout [ 200.830898][ T9209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.896368][ T9186] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1172 (9186) [ 200.916644][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 200.971161][ T9186] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.981873][ T9186] BTRFS info (device loop1): using crc32c checksum algorithm [ 201.076515][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 201.085413][ T5839] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.089829][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.095519][ T5839] usb 3-1: config 0 has no interface number 0 [ 201.112646][ T5839] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 201.127130][ T9186] BTRFS info (device loop1): allowing degraded mounts [ 201.134150][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.147010][ T9186] BTRFS info (device loop1): enabling ssd optimizations [ 201.153380][ T9231] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1187'. [ 201.153957][ T9186] BTRFS info (device loop1): turning on async discard [ 201.170408][ T5839] usb 3-1: Product: syz [ 201.174610][ T5839] usb 3-1: Manufacturer: syz [ 201.186646][ T5839] usb 3-1: SerialNumber: syz [ 201.187280][ T9186] BTRFS info (device loop1): enabling free space tree [ 201.194472][ T5839] usb 3-1: config 0 descriptor?? [ 201.207932][ T5839] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 201.242111][ T9186] BTRFS info (device loop1): enabling auto defrag [ 201.445242][ T5839] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 201.488695][ T9186] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 201.496571][ T5839] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 201.689188][ T5818] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.958321][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 201.959275][ T791] usb 3-1: USB disconnect, device number 4 [ 202.038482][ T791] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 202.112400][ T791] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 202.154039][ T791] quatech2 3-1:0.51: device disconnected [ 202.279173][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1199'. [ 202.482585][ T9263] set_capacity_and_notify: 2 callbacks suppressed [ 202.482606][ T9263] loop1: detected capacity change from 0 to 512 [ 202.567658][ T9263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.631300][ T9263] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.738536][ T9263] EXT4-fs error (device loop1): ext4_get_first_dir_block:3538: inode #12: comm syz.1.1201: directory missing '.' [ 202.974468][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.052877][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 203.486510][ T5944] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.570607][ T9305] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 203.656222][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 203.674396][ T9307] loop5: detected capacity change from 0 to 1024 [ 203.687159][ T5944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.706553][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.726263][ T5944] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.759589][ T5944] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 203.786885][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.815794][ T5944] usb 2-1: Product: syz [ 203.833685][ T5944] usb 2-1: Manufacturer: syz [ 203.865706][ T1160] hfsplus: b-tree write err: -5, ino 25 [ 203.867164][ T5944] usb 2-1: SerialNumber: syz [ 203.936789][ T1160] hfsplus: b-tree write err: -5, ino 4 [ 203.942399][ T1160] hfsplus: b-tree write err: -5, ino 2 [ 204.177937][ T9277] loop2: detected capacity change from 0 to 32768 [ 204.197247][ T9317] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 204.389842][ T9321] loop6: detected capacity change from 0 to 1024 [ 204.497481][ T9321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.584867][ T5944] usb 2-1: 0:2 : does not exist [ 204.644519][ T9321] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 16: comm syz.6.1228: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 204.807373][ T9321] EXT4-fs (loop6): Remounting filesystem read-only [ 204.854853][ T5944] usb 2-1: USB disconnect, device number 9 [ 205.041018][ T7466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.077978][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.224947][ T9342] use of bytesused == 0 is deprecated and will be removed in the future, [ 205.290401][ T9342] use the actual size instead. [ 205.450928][ T9348] loop0: detected capacity change from 0 to 1024 [ 205.708201][ T1160] hfsplus: b-tree write err: -5, ino 25 [ 205.733183][ T1160] hfsplus: b-tree write err: -5, ino 4 [ 205.757383][ T1160] hfsplus: b-tree write err: -5, ino 2 [ 205.859098][ T5944] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.048254][ T5944] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 206.086291][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.117310][ T5944] usb 4-1: config 0 descriptor?? [ 206.263850][ T9377] loop6: detected capacity change from 0 to 128 [ 206.312200][ T9377] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.333870][ T9377] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 206.344636][ T5944] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 206.377196][ T9377] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.1254: No space for directory leaf checksum. Please run e2fsck -D. [ 206.392618][ T9377] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.1254: Directory block failed checksum [ 206.431739][ T9374] loop1: detected capacity change from 0 to 4096 [ 206.522489][ T9374] ntfs3(loop1): ino=19, mi_enum_attr [ 206.548225][ T9374] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 206.591895][ T7466] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.607577][ T5944] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 206.614271][ T5944] [drm] Initialized udl on minor 2 [ 206.738885][ T5944] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 206.782225][ T9345] loop2: detected capacity change from 0 to 32768 [ 206.793684][ T5944] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 206.820595][ T791] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 206.858551][ T5944] usb 4-1: USB disconnect, device number 6 [ 206.906965][ T791] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 206.941037][ T9345] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.045576][ T9345] XFS (loop2): Ending clean mount [ 207.051661][ T9400] loop1: detected capacity change from 0 to 512 [ 207.066238][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 207.101721][ T9345] XFS (loop2): Quotacheck needed: Please wait. [ 207.143182][ T9400] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1258: Unrecognised inode hash code 4 [ 207.195432][ T9400] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1258: Corrupt directory, running e2fsck is recommended [ 207.251018][ T9345] XFS (loop2): Quotacheck: Done. [ 207.257915][ T9400] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 207.280266][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 207.299263][ T9400] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.1258: corrupted in-inode xattr: invalid ea_ino [ 207.321066][ T9] usb 7-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 207.368683][ T9400] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.371353][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 207.372214][ T9400] EXT4-fs (loop1): Remounting filesystem read-only [ 207.380612][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 207.380631][ C1] EXT4-fs (loop1): initial error at time 1775096784: ext4_iget_extra_inode:5040: inode 15 [ 207.380670][ C1] EXT4-fs (loop1): last error at time 1775096784: ext4_iget_extra_inode:5040: inode 15 [ 207.401172][ T9] usb 7-1: config 0 has no interface number 0 [ 207.438750][ T9400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.475500][ T5825] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.523658][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.566148][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.645383][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 207.719317][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.738209][ T9415] xt_socket: unknown flags 0xe4 [ 207.803331][ T9] usb 7-1: config 0 descriptor?? [ 207.811015][ T9416] rtc_cmos 00:00: Alarms can be up to one day in the future [ 207.851152][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.302158][ T9] corsair 0003:1B1C:1B34.000B: unknown main item tag 0x0 [ 208.341026][ T9] corsair 0003:1B1C:1B34.000B: unknown main item tag 0x0 [ 208.381772][ T9] corsair 0003:1B1C:1B34.000B: failed to start in urb: -90 [ 208.437601][ T9] corsair 0003:1B1C:1B34.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.6-1/input1 [ 208.530912][ T9] usb 7-1: USB disconnect, device number 3 [ 208.716045][ T9439] fido_id[9439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 208.739118][ T5921] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.775598][ T5921] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.798588][ T5921] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.828791][ T5921] rtc_cmos 00:00: Alarms can be up to one day in the future [ 208.847366][ T5921] rtc rtc0: __rtc_set_alarm: err=-22 [ 209.309219][ T9461] loop0: detected capacity change from 0 to 1024 [ 209.440085][ T9461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1288'. [ 209.577445][ T12] hfsplus: b-tree write err: -5, ino 25 [ 209.585140][ T12] hfsplus: b-tree write err: -5, ino 4 [ 209.605333][ T12] hfsplus: b-tree write err: -5, ino 2 [ 209.832171][ T9443] loop1: detected capacity change from 0 to 32768 [ 209.870498][ T9443] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1279 (9443) [ 209.925301][ T9448] loop2: detected capacity change from 0 to 32768 [ 209.968157][ T9443] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.988305][ T9448] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 210.060935][ T9443] BTRFS info (device loop1): using sha256 checksum algorithm [ 210.139665][ T9448] XFS (loop2): Ending clean mount [ 210.163836][ T9448] XFS (loop2): Quotacheck needed: Please wait. [ 210.306413][ T5944] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 210.326994][ T9448] XFS (loop2): Quotacheck: Done. [ 210.341689][ T9443] BTRFS info (device loop1): enabling ssd optimizations [ 210.366287][ T9443] BTRFS info (device loop1): turning on async discard [ 210.386391][ T9443] BTRFS info (device loop1): enabling free space tree [ 210.415638][ T9501] netlink: 'syz.6.1296': attribute type 1 has an invalid length. [ 210.451881][ T9501] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1296'. [ 210.473729][ T5825] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 210.482553][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 210.487867][ T9501] netlink: 'syz.6.1296': attribute type 1 has an invalid length. [ 210.495806][ T9463] loop3: detected capacity change from 0 to 32768 [ 210.514409][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.529615][ T9463] [ 210.529615][ T9463] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 210.529615][ T9463] [ 210.536927][ T9501] netlink: 'syz.6.1296': attribute type 8 has an invalid length. [ 210.553859][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 210.577405][ T9463] ERROR: (device loop3): dbReAlloc: the block is outside the filesystem [ 210.577405][ T9463] [ 210.591508][ T9501] netlink: 606 bytes leftover after parsing attributes in process `syz.6.1296'. [ 210.610949][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.633911][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.654010][ T5944] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 210.683412][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.717438][ T5944] usb 1-1: Product: syz [ 210.721943][ T5944] usb 1-1: Manufacturer: syz [ 210.736341][ T5944] usb 1-1: SerialNumber: syz [ 210.759498][ T5944] usb 1-1: config 0 descriptor?? [ 210.762202][ T9463] ERROR: (device loop3): remounting filesystem as read-only [ 210.798286][ T5818] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.833816][ T9463] jfs_create: dtInsert returned -EIO [ 210.838925][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 210.861502][ T9463] ERROR: (device loop3): jfs_create: [ 210.861502][ T9463] [ 210.873734][ T5944] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 210.965131][ T9504] loop6: detected capacity change from 0 to 128 [ 211.031992][ T9472] loop5: detected capacity change from 0 to 32768 [ 211.036582][ T9504] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 211.185316][ T9472] JBD2: Ignoring recovery information on journal [ 211.358439][ T9472] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 211.396180][ T5944] rc_core: IR keymap rc-imon-pad not found [ 211.414202][ T5944] Registered IR keymap rc-empty [ 211.430586][ T5944] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 211.496267][ T5944] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 211.505938][ T9472] (syz.5.1293,9472,1):ocfs2_reflink_ioctl:4418 ERROR: status = -14 [ 211.589891][ T5944] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 211.662990][ T5944] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 211.735221][ T9517] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 211.772249][ T5944] imon 1-1:0.0: iMON device (15c2:003b, intf0) on usb<1:7> initialized [ 211.837151][ T5944] usb 1-1: USB disconnect, device number 7 [ 211.852322][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 211.921958][ T9524] loop1: detected capacity change from 0 to 1024 [ 212.086239][ T5921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.144550][ T9527] netlink: 'syz.6.1307': attribute type 4 has an invalid length. [ 212.189501][ T9527] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1307'. [ 212.278824][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 212.301986][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.351342][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 212.400105][ T5921] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 212.438513][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.482004][ T9536] mkiss: ax0: crc mode is auto. [ 212.484075][ T5921] usb 4-1: config 0 descriptor?? [ 212.553695][ T9540] loop6: detected capacity change from 0 to 256 [ 212.635555][ T9540] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 212.878197][ T9551] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1317'. [ 213.013969][ T5921] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 213.055738][ T5921] microsoft 0003:045E:07DA.000C: no inputs found [ 213.091935][ T5921] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 213.132589][ T9561] loop5: detected capacity change from 0 to 256 [ 213.170899][ T9561] exfat: Deprecated parameter 'namecase' [ 213.216609][ T9561] exfat: Deprecated parameter 'namecase' [ 213.233109][ T5921] usb 4-1: USB disconnect, device number 7 [ 213.278147][ T9561] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 213.384483][ T9568] loop2: detected capacity change from 0 to 1024 [ 213.430716][ T9562] fido_id[9562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 213.519385][ T9568] hfsplus: b-tree write err: -5, ino 2 [ 213.683396][ T13] hfsplus: b-tree write err: -5, ino 25 [ 213.683774][ T13] hfsplus: b-tree write err: -5, ino 4 [ 213.683865][ T13] hfsplus: b-tree write err: -5, ino 2 [ 213.683953][ T13] hfsplus: b-tree write err: -5, ino 26 [ 214.217172][ T9591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.311743][ T30] audit: type=1800 audit(1775096791.522:75): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1336" name="file2" dev="loop5" ino=1347 res=0 errno=0 [ 214.376303][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1338'. [ 214.610879][ T9599] set_capacity_and_notify: 1 callbacks suppressed [ 214.610900][ T9599] loop2: detected capacity change from 0 to 4096 [ 214.710021][ T9610] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.714821][ T9566] loop1: detected capacity change from 0 to 32768 [ 214.780965][ T9566] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 214.897515][ T9624] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1347'. [ 214.991023][ T9566] XFS (loop1): Ending clean mount [ 215.193115][ T5818] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 215.336752][ T9634] loop5: detected capacity change from 0 to 1024 [ 215.358030][ T5944] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.445055][ T9634] hfsplus: bad catalog entry type [ 215.549611][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.583368][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.624646][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.684440][ T5944] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.706469][ T1160] hfsplus: b-tree write err: -5, ino 25 [ 215.726894][ T1160] hfsplus: b-tree write err: -5, ino 4 [ 215.732584][ T1160] hfsplus: b-tree write err: -5, ino 2 [ 215.741911][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.800696][ T5944] usb 1-1: config 0 descriptor?? [ 216.246992][ T5944] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 216.254504][ T5944] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 216.294219][ T9659] loop5: detected capacity change from 0 to 2048 [ 216.311629][ T5944] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 216.337091][ T5944] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 216.344595][ T5944] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 216.364442][ T9661] loop1: detected capacity change from 0 to 256 [ 216.372926][ T9659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.390027][ T5944] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 216.431827][ T9661] FAT-fs (loop1): Directory bread(block 64) failed [ 216.466228][ T9661] FAT-fs (loop1): Directory bread(block 65) failed [ 216.475612][ T5944] usb 1-1: USB disconnect, device number 8 [ 216.480162][ T30] audit: type=1800 audit(1775097049.686:76): pid=9659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1364" name="file1" dev="loop5" ino=1415 res=0 errno=0 [ 216.497301][ T9661] FAT-fs (loop1): Directory bread(block 66) failed [ 216.532700][ T9661] FAT-fs (loop1): Directory bread(block 67) failed [ 216.591016][ T9661] FAT-fs (loop1): Directory bread(block 68) failed [ 216.618875][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1366'. [ 216.646817][ T9661] FAT-fs (loop1): Directory bread(block 69) failed [ 216.669817][ T9661] FAT-fs (loop1): Directory bread(block 70) failed [ 216.725805][ T9661] FAT-fs (loop1): Directory bread(block 71) failed [ 216.766284][ T9661] FAT-fs (loop1): Directory bread(block 72) failed [ 216.772869][ T9661] FAT-fs (loop1): Directory bread(block 73) failed [ 216.785646][ T9640] loop2: detected capacity change from 0 to 32768 [ 216.845233][ T9665] fido_id[9665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 217.019383][ T9670] [U] ^Kÿ [ 217.178004][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1372'. [ 217.227992][ T5944] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 217.389532][ T9683] loop3: detected capacity change from 0 to 256 [ 217.417852][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 217.478314][ T5944] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 217.492332][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.527575][ T5944] usb 6-1: Product: syz [ 217.546227][ T5944] usb 6-1: Manufacturer: syz [ 217.556904][ T5944] usb 6-1: SerialNumber: syz [ 217.568771][ T9683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 217.613207][ T5944] usb 6-1: config 0 descriptor?? [ 217.631720][ T5944] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 217.716397][ T9689] loop0: detected capacity change from 0 to 512 [ 217.728081][ T9689] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.799322][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1381'. [ 217.862736][ T9689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.977645][ T9689] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.096878][ T5944] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 218.124920][ T9706] tracefs: Bad value for 'uid' [ 218.139462][ T9706] tracefs: Bad value for 'uid' [ 218.263839][ T5944] usb 6-1: USB disconnect, device number 10 [ 218.300865][ T5944] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 218.329832][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.340926][ T5944] visor 6-1:0.0: device disconnected [ 218.429517][ T9717] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 218.429517][ T9717] program syz.3.1392 not setting count and/or reply_len properly [ 218.441035][ T9718] loop2: detected capacity change from 0 to 128 [ 218.510219][ T9718] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.538593][ T9723] loop0: detected capacity change from 0 to 128 [ 218.576500][ T9718] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.636576][ T9723] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 218.736561][ T9723] hpfs: filesystem error: improperly stopped [ 218.753482][ T9721] EXT4-fs: inline encryption not supported [ 218.782673][ T9723] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 218.802849][ T9721] EXT4-fs (loop1): Test dummy encryption mode enabled [ 218.830003][ T9721] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 218.840714][ T9723] hpfs: You really don't want any checks? You are crazy... [ 218.859010][ T9721] System zones: 0-5 [ 218.865240][ T9723] hpfs: hpfs_map_sector(): read error [ 218.874465][ T9721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.876435][ T9723] hpfs: code page support is disabled [ 218.922611][ T5825] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.933333][ T9723] hpfs: hpfs_map_4sectors(): unaligned read [ 218.958278][ T9723] hpfs: hpfs_map_4sectors(): unaligned read [ 218.964277][ T9723] hpfs: filesystem error: unable to find root dir [ 218.994266][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.076356][ T5944] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 219.236275][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 219.263830][ T9731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.285488][ T5944] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.354074][ T5944] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 219.385141][ T9739] exfat: Deprecated parameter 'utf8' [ 219.391061][ T9739] exfat: Deprecated parameter 'namecase' [ 219.398356][ T9739] exfat: Deprecated parameter 'namecase' [ 219.404140][ T9739] exfat: Deprecated parameter 'utf8' [ 219.416484][ T9739] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x151dac50) [ 219.424028][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.428586][ T9739] exFAT-fs (loop0): invalid boot region [ 219.448347][ T9739] exFAT-fs (loop0): failed to recognize exfat type [ 219.489692][ T5944] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 219.519919][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.529938][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.573859][ T5944] usb 4-1: Product: syz [ 219.595354][ T5944] usb 4-1: Manufacturer: syz [ 219.628317][ T5944] usb 4-1: SerialNumber: syz [ 219.669665][ T5944] usb 4-1: config 0 descriptor?? [ 219.700611][ T9744] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1402'. [ 219.766225][ T9744] tipc: Invalid UDP bearer configuration [ 219.766289][ T9744] tipc: Enabling of bearer rejected, failed to enable media [ 219.970439][ T9752] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1405'. [ 220.002331][ T9752] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1405'. [ 220.083835][ T5944] gs_usb 4-1:0.0: Configuring for 256 interfaces [ 220.112255][ T5944] gs_usb 4-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 220.133560][ T5944] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 220.227920][ T9763] set_capacity_and_notify: 3 callbacks suppressed [ 220.227940][ T9763] loop6: detected capacity change from 0 to 8 [ 220.230043][ T9764] loop1: detected capacity change from 0 to 256 [ 220.283526][ T9763] SQUASHFS error: Failed to read block 0x29b: -5 [ 220.295227][ T5944] usb 4-1: USB disconnect, device number 8 [ 220.314498][ T9763] SQUASHFS error: Unable to read metadata cache entry [299] [ 220.562406][ T9773] loop1: detected capacity change from 0 to 256 [ 220.628432][ T9773] exfat: Deprecated parameter 'utf8' [ 220.688884][ T9773] exfat: Deprecated parameter 'namecase' [ 220.694639][ T9773] exfat: Deprecated parameter 'namecase' [ 220.792529][ T9773] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 221.303613][ T9800] loop3: detected capacity change from 0 to 256 [ 221.349753][ T9801] vivid-007: ================= START STATUS ================= [ 221.414477][ T9801] vivid-007: Enable Output Cropping: true grabbed [ 221.422029][ T9800] FAT-fs (loop3): Directory bread(block 64) failed [ 221.437092][ T9801] vivid-007: Enable Output Composing: true grabbed [ 221.443701][ T9801] vivid-007: Enable Output Scaler: true grabbed [ 221.466152][ T9800] FAT-fs (loop3): Directory bread(block 65) failed [ 221.506417][ T9800] FAT-fs (loop3): Directory bread(block 66) failed [ 221.516885][ T9801] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 221.528119][ T5839] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.556190][ T9800] FAT-fs (loop3): Directory bread(block 67) failed [ 221.562827][ T9800] FAT-fs (loop3): Directory bread(block 68) failed [ 221.583678][ T9801] vivid-007: Transmit Mode: HDMI grabbed [ 221.594200][ T9801] vivid-007: Hotplug Present: 0x00000000 [ 221.632171][ T9801] vivid-007: RxSense Present: 0x00000000 [ 221.639520][ T9800] FAT-fs (loop3): Directory bread(block 69) failed [ 221.686225][ T9801] vivid-007: EDID Present: 0x00000000 [ 221.706239][ T9800] FAT-fs (loop3): Directory bread(block 70) failed [ 221.706734][ T9801] vivid-007: ================== END STATUS ================== [ 221.712791][ T9800] FAT-fs (loop3): Directory bread(block 71) failed [ 221.712904][ T9800] FAT-fs (loop3): Directory bread(block 72) failed [ 221.729814][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.765340][ T9800] FAT-fs (loop3): Directory bread(block 73) failed [ 221.792210][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.823070][ T5839] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 221.846186][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.858911][ T5839] usb 1-1: config 0 descriptor?? [ 222.294706][ T5839] pyra 0003:1E7D:2CF6.000E: item fetching failed at offset 5/7 [ 222.317863][ T5839] pyra 0003:1E7D:2CF6.000E: parse failed [ 222.335930][ T5839] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -22 [ 222.572848][ T5839] usb 1-1: USB disconnect, device number 9 [ 222.759986][ T9838] loop3: detected capacity change from 0 to 256 [ 222.972667][ T9838] FAT-fs (loop3): Directory bread(block 64) failed [ 223.001077][ T9838] FAT-fs (loop3): Directory bread(block 65) failed [ 223.017043][ T9814] loop5: detected capacity change from 0 to 32768 [ 223.029764][ T9838] FAT-fs (loop3): Directory bread(block 66) failed [ 223.056624][ T9844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1449'. [ 223.075293][ T9838] FAT-fs (loop3): Directory bread(block 67) failed [ 223.084126][ T9838] FAT-fs (loop3): Directory bread(block 68) failed [ 223.104624][ T9814] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.120288][ T9822] loop1: detected capacity change from 0 to 32768 [ 223.136926][ T9838] FAT-fs (loop3): Directory bread(block 69) failed [ 223.144604][ T9838] FAT-fs (loop3): Directory bread(block 70) failed [ 223.151556][ T9838] FAT-fs (loop3): Directory bread(block 71) failed [ 223.159306][ T9838] FAT-fs (loop3): Directory bread(block 72) failed [ 223.166256][ T9838] FAT-fs (loop3): Directory bread(block 73) failed [ 223.275318][ T9814] XFS (loop5): Ending clean mount [ 223.293482][ T9857] loop6: detected capacity change from 0 to 4096 [ 223.352749][ T9814] XFS (loop5): Quotacheck needed: Please wait. [ 223.466580][ T9857] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 223.473152][ T9857] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 223.536265][ T9814] XFS (loop5): Quotacheck: Done. [ 223.602454][ T30] audit: type=1800 audit(1775097056.816:77): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1451" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 223.652559][ T9856] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex [ 223.826918][ T5830] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 223.943920][ T58] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 223.960808][ T7466] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 224.000790][ T7466] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 224.046495][ T7466] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 224.095502][ T58] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 224.186472][ T9873] loop3: detected capacity change from 0 to 512 [ 224.247159][ T9873] EXT4-fs: Ignoring removed nobh option [ 224.352193][ T9873] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.1462: corrupted in-inode xattr: overlapping e_value [ 224.451865][ T9873] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.456138][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 224.471847][ C0] EXT4-fs (loop3): initial error at time 1775097057: ext4_iget_extra_inode:5040: inode 15 [ 224.481828][ C0] EXT4-fs (loop3): last error at time 1775097057: ext4_iget_extra_inode:5040: inode 15 [ 224.502455][ T9873] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1462: couldn't read orphan inode 15 (err -117) [ 224.517483][ T9873] loop3: lost filesystem error report for type 5 error -117 [ 224.535319][ T9873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.698747][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1460'. [ 224.846786][ T5944] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.891544][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.006197][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 225.030496][ T5944] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.048312][ T5944] usb 2-1: config 0 has no interface number 0 [ 225.085378][ T5944] usb 2-1: config 0 interface 184 has no altsetting 0 [ 225.089894][ T9898] loop5: detected capacity change from 0 to 512 [ 225.114881][ T5944] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 225.137085][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.153093][ T5944] usb 2-1: Product: syz [ 225.169165][ T5944] usb 2-1: Manufacturer: syz [ 225.178411][ T9899] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504 [ 225.194696][ T9898] EXT4-fs (loop5): 1 truncate cleaned up [ 225.200451][ T5944] usb 2-1: SerialNumber: syz [ 225.205551][ T5944] usb 2-1: config 0 descriptor?? [ 225.219854][ T9898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.244986][ T9899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.475008][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.643591][ T9912] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 225.713711][ T9907] set_capacity_and_notify: 1 callbacks suppressed [ 225.713731][ T9907] loop2: detected capacity change from 0 to 4096 [ 225.739569][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.823899][ T5944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 225.865438][ T5944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 225.917607][ T5944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 225.918911][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 225.955934][ T5944] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 225.980936][ T9922] loop6: detected capacity change from 0 to 128 [ 225.987913][ T9] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 226.016543][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.031610][ T5944] usb 2-1: USB disconnect, device number 10 [ 226.053385][ T9922] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 226.065874][ T9] usb 4-1: config 0 descriptor?? [ 226.116233][ T9922] hpfs: filesystem error: improperly stopped [ 226.132813][ T9922] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 226.208420][ T9922] hpfs: You really don't want any checks? You are crazy... [ 226.251573][ T9922] hpfs: hpfs_map_sector(): read error [ 226.277013][ T9922] hpfs: code page support is disabled [ 226.298113][ T9922] hpfs: hpfs_map_4sectors(): unaligned read [ 226.304181][ T9922] hpfs: hpfs_map_4sectors(): unaligned read [ 226.338707][ T9922] hpfs: filesystem error: unable to find root dir [ 226.505060][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.537590][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.544720][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.582529][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.606537][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.613962][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.632347][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.677858][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.704743][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.720517][ T9] semitek 0003:1EA7:0907.000F: unknown main item tag 0x0 [ 226.739278][ T9937] sd 0:0:1:0: device reset [ 226.757575][ T9] semitek 0003:1EA7:0907.000F: hidraw0: USB HID v7f.fd Device [HID 1ea7:0907] on usb-dummy_hcd.3-1/input0 [ 226.781369][ T9920] loop5: detected capacity change from 0 to 32768 [ 226.801241][ T9] usb 4-1: USB disconnect, device number 9 [ 226.821687][ T9920] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.970227][ T9942] fido_id[9942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 227.102935][ T9920] XFS (loop5): Ending clean mount [ 227.145970][ T9920] XFS (loop5): Quotacheck needed: Please wait. [ 227.248120][ T9920] XFS (loop5): Quotacheck: Done. [ 227.386431][ T5830] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 227.612489][ T9964] tipc: New replicast peer: 100.1.1.0 [ 227.648360][ T9958] loop1: detected capacity change from 0 to 2048 [ 227.671500][ T9964] tipc: Enabled bearer , priority 30 [ 227.741254][ T9969] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.960418][ T9972] loop2: detected capacity change from 0 to 1024 [ 228.025731][ T9972] EXT4-fs: Ignoring removed bh option [ 228.066003][ T9975] loop6: detected capacity change from 0 to 4096 [ 228.085443][ T9977] xt_hashlimit: size too large, truncated to 1048576 [ 228.122896][ T9972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.166541][ T9975] NILFS (loop6): invalid segment: Checksum error in segment payload [ 228.225369][ T9975] NILFS (loop6): trying rollback from an earlier position [ 228.265786][ T9975] NILFS (loop6): recovery complete [ 228.274152][ T9983] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.434799][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.546549][ T5839] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 228.701968][ T9994] loop3: detected capacity change from 0 to 256 [ 228.750846][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.776488][ T9994] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 228.789318][ T5839] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 228.837673][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.877008][ T5839] usb 6-1: config 0 descriptor?? [ 229.291810][ T5839] ath6kl: Unsupported hardware version: 0x0 [ 229.314082][ T5839] ath6kl: Failed to init ath6kl core: -22 [ 229.347517][ T5839] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 229.406313][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 229.412446][T10016] loop0: detected capacity change from 0 to 1024 [ 229.496630][ T5944] usb 6-1: USB disconnect, device number 11 [ 229.518024][T10016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 229.555782][ T9991] loop2: detected capacity change from 0 to 32768 [ 229.566204][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 229.572418][T10016] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.599122][ T9] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 229.631265][ T9991] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 229.640628][ T9] usb 7-1: config 127 has no interface number 0 [ 229.648461][ T9] usb 7-1: config 127 interface 124 has no altsetting 0 [ 229.661200][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 229.673048][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.688457][ T9] usb 7-1: Product: syz [ 229.693244][ T9] usb 7-1: Manufacturer: syz [ 229.698554][ T9] usb 7-1: SerialNumber: syz [ 229.778018][ T9991] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 229.890118][ T9991] XFS (loop2): Starting recovery (logdev: internal) [ 229.914056][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 229.962287][ T9991] XFS (loop2): Ending recovery (logdev: internal) [ 230.062396][ T30] audit: type=1800 audit(1775097063.256:78): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1503" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 230.249663][ T5825] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 230.526015][T10054] loop5: detected capacity change from 0 to 1024 [ 230.538778][T10054] EXT4-fs: Ignoring removed orlov option [ 230.566171][ T9] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 230.596771][T10054] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 230.646302][T10054] System zones: 0-1, 3-12 [ 230.691897][T10054] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.773644][T10054] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 230.829421][ T9] usb 7-1: device firmware changed [ 230.867608][ T9] usb 7-1: USB disconnect, device number 4 [ 231.025135][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 231.067512][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 231.216737][T10080] loop5: detected capacity change from 0 to 256 [ 231.247217][T10080] exfat: Deprecated parameter 'utf8' [ 231.256481][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 231.271093][ T9] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 231.294892][ T9] usb 7-1: config 127 has no interface number 0 [ 231.321645][ T9] usb 7-1: config 127 interface 124 has no altsetting 0 [ 231.344342][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 231.367390][T10080] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 231.386516][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.400908][ T9] usb 7-1: Product: syz [ 231.405073][ T9] usb 7-1: Manufacturer: syz [ 231.446136][ T9] usb 7-1: SerialNumber: syz [ 231.728749][T10096] loop5: detected capacity change from 0 to 512 [ 231.805510][T10096] EXT4-fs: Ignoring removed nobh option [ 231.872617][T10096] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.1547: corrupted in-inode xattr: overlapping e_value [ 231.920310][T10096] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.926122][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 231.942241][ C1] EXT4-fs (loop5): initial error at time 1775097065: ext4_iget_extra_inode:5040: inode 15 [ 231.952211][ C1] EXT4-fs (loop5): last error at time 1775097065: ext4_iget_extra_inode:5040: inode 15 [ 231.974671][T10096] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1547: couldn't read orphan inode 15 (err -117) [ 232.029737][T10096] loop5: lost filesystem error report for type 5 error -117 [ 232.040586][T10096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.507829][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.613171][T10114] loop2: detected capacity change from 0 to 40427 [ 232.620983][T10114] F2FS-fs: inline encryption not supported [ 232.634343][T10114] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 232.644268][T10114] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 232.652798][T10114] F2FS-fs (loop2): invalid crc value [ 232.926562][ T9] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 233.076679][T10098] loop1: detected capacity change from 0 to 32768 [ 233.121316][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 233.153548][ T9] usb 7-1: device firmware changed [ 233.165154][T10098] JBD2: Ignoring recovery information on journal [ 233.190912][T10132] loop0: detected capacity change from 0 to 256 [ 233.233565][T10134] loop5: detected capacity change from 0 to 256 [ 233.266619][ T9] usb 7-1: USB disconnect, device number 5 [ 233.314516][T10098] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 233.363659][T10134] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 233.435171][T10132] FAT-fs (loop0): Directory bread(block 64) failed [ 233.491325][T10132] FAT-fs (loop0): Directory bread(block 65) failed [ 233.506471][T10132] FAT-fs (loop0): Directory bread(block 66) failed [ 233.526248][T10132] FAT-fs (loop0): Directory bread(block 67) failed [ 233.563547][T10132] FAT-fs (loop0): Directory bread(block 68) failed [ 233.595748][T10132] FAT-fs (loop0): Directory bread(block 69) failed [ 233.610581][T10132] FAT-fs (loop0): Directory bread(block 70) failed [ 233.640183][T10132] FAT-fs (loop0): Directory bread(block 71) failed [ 233.668147][T10132] FAT-fs (loop0): Directory bread(block 72) failed [ 233.686212][T10132] FAT-fs (loop0): Directory bread(block 73) failed [ 233.852395][ T5818] ocfs2: Unmounting device (7,1) on (node local) [ 234.058356][T10150] macsec0: entered promiscuous mode [ 234.064600][T10149] macsec0: left promiscuous mode [ 234.166709][T10154] syz_tun: entered promiscuous mode [ 234.180320][T10154] macsec1: entered allmulticast mode [ 234.200406][T10154] syz_tun: entered allmulticast mode [ 234.246885][T10154] syz_tun: left allmulticast mode [ 234.252344][T10154] syz_tun: left promiscuous mode [ 234.341939][T10156] bond_slave_0: entered promiscuous mode [ 234.347983][T10156] bond_slave_1: entered promiscuous mode [ 234.354767][T10156] macvlan2: entered promiscuous mode [ 234.385748][T10156] bond0: entered promiscuous mode [ 234.388510][T10137] loop3: detected capacity change from 0 to 32768 [ 234.402100][T10156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 234.486035][T10137] JBD2: Ignoring recovery information on journal [ 234.574680][T10137] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 235.021712][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 235.313940][T10153] loop6: detected capacity change from 0 to 32768 [ 235.346268][ T5944] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.453686][T10153] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.548694][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.604241][T10153] XFS (loop6): Ending clean mount [ 235.610654][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.652825][T10153] XFS (loop6): Quotacheck needed: Please wait. [ 235.687661][T10181] loop5: detected capacity change from 0 to 65536 [ 235.689752][ T5944] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 235.800247][T10181] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 235.801593][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.859735][T10175] loop0: detected capacity change from 0 to 32768 [ 235.907504][T10153] XFS (loop6): Quotacheck: Done. [ 235.910470][T10203] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1585'. [ 235.927504][T10181] XFS (loop5): Metadata CRC error detected at xfs_agi_read_verify+0x142/0x210, xfs_agi block 0x2 [ 235.939719][T10181] XFS (loop5): Unmount and run xfs_repair [ 235.945442][T10181] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 235.953198][T10181] 00000000: 58 41 47 49 00 00 00 02 00 00 00 00 00 00 40 00 XAGI..........@. [ 235.962084][T10181] 00000010: 00 00 00 40 00 00 00 04 00 00 00 01 00 00 00 37 ...@...........7 [ 235.971514][T10181] 00000020: 00 00 00 20 ff ff ff ff ff ff ff ff ff ff ff ff ... ............ [ 235.980419][T10181] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 235.989671][T10181] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 235.993178][T10175] JBD2: Ignoring recovery information on journal [ 235.998540][T10181] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 235.998562][T10181] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 235.998583][T10181] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 235.998822][T10181] XFS (loop5): metadata I/O error in "xfs_read_agi+0x270/0x5f0" at daddr 0x2 len 1 error 74 [ 236.044766][T10181] loop5: lost filesystem error report for type 5 error -117 [ 236.044795][T10181] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 236.061763][T10181] XFS (loop5): Failed to read root inode 0x20, error 117 [ 236.070019][T10181] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 236.161268][ T5944] usb 2-1: config 0 descriptor?? [ 236.251008][T10175] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 236.372633][ T7466] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.442652][T10209] /dev/loop0: Can't open blockdev [ 236.617091][ T5944] hid_parser_main: 222 callbacks suppressed [ 236.617117][ T5944] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 236.640858][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 236.746233][ T5944] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 236.813689][ T5944] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 236.868987][ T5944] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 236.923861][ T5944] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 236.956434][ T5944] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 236.986773][ T5821] ocfs2: Unmounting device (7,0) on (node local) [ 236.992480][ T5944] holtek_kbd 0003:04D9:A055.0010: unknown main item tag 0x0 [ 237.024331][ T5944] holtek_kbd 0003:04D9:A055.0010: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 237.150586][ T5944] usb 2-1: USB disconnect, device number 11 [ 237.263970][T10221] fido_id[10221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 237.973731][T10253] loop1: detected capacity change from 0 to 128 [ 238.062469][ T30] audit: type=1800 audit(1775097071.276:79): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1611" name="file1" dev="loop1" ino=1048777 res=0 errno=0 [ 238.159842][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 238.163068][T10262] mkiss: ax0: crc mode is auto. [ 238.367263][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 238.377444][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.419815][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.480843][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 238.506247][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 238.515310][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.570618][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 238.574164][ T9] usb 1-1: config 0 descriptor?? [ 238.756738][ T5944] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 238.764521][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 238.777606][ T29] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 238.796700][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.826149][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.846245][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 238.880004][ T29] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 238.899293][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.938465][ T29] usb 7-1: config 0 descriptor?? [ 238.945613][ T5944] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 238.968879][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.993025][ T5944] usb 2-1: config 0 descriptor?? [ 239.020744][ T5944] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 239.045825][ T9] nzxt-smart2 0003:1E71:2009.0011: collection stack underflow [ 239.082615][ T9] nzxt-smart2 0003:1E71:2009.0011: item 0 2 0 12 parsing failed [ 239.102353][ T9] nzxt-smart2 0003:1E71:2009.0011: probe with driver nzxt-smart2 failed with error -22 [ 239.220804][T10270] loop3: detected capacity change from 0 to 32768 [ 239.241171][T10270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1619 (10270) [ 239.269862][ T9] usb 1-1: USB disconnect, device number 10 [ 239.335343][T10270] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.370971][T10270] BTRFS info (device loop3): using sha256 checksum algorithm [ 239.429892][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0012/input/input15 [ 239.549566][T10270] BTRFS info (device loop3): enabling ssd optimizations [ 239.565291][T10280] loop5: detected capacity change from 0 to 32768 [ 239.574506][ T29] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.0012/input/input16 [ 239.586668][T10270] BTRFS info (device loop3): turning on async discard [ 239.586692][T10270] BTRFS info (device loop3): enabling free space tree [ 239.602425][T10280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1625 (10280) [ 239.626003][ T5944] gspca_cpia1: usb_control_msg 01, error -71 [ 239.627236][T10280] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.632643][ T5944] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 239.682787][ T5944] usb 2-1: USB disconnect, device number 12 [ 239.703671][T10280] BTRFS info (device loop5): using crc32c checksum algorithm [ 239.733549][T10306] loop2: detected capacity change from 0 to 512 [ 239.742690][ T29] kye 0003:0458:5013.0012: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 239.845536][T10306] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 239.845901][ T29] usb 7-1: USB disconnect, device number 6 [ 239.880617][T10318] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 239.884859][T10306] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 239.902960][ T5826] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.948203][T10306] EXT4-fs (loop2): 1 truncate cleaned up [ 239.985054][T10306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.233195][T10280] BTRFS info (device loop5): enabling ssd optimizations [ 240.298934][T10280] BTRFS info (device loop5): turning on flush-on-commit [ 240.305911][T10280] BTRFS info (device loop5): enabling free space tree [ 240.350446][T10315] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 240.383979][T10280] BTRFS info (device loop5): enabling auto defrag [ 240.486262][T10280] BTRFS info (device loop5): use lzo compression, level 1 [ 240.493628][T10280] BTRFS info (device loop5): max_inline set to 4096 [ 240.514724][T10326] fido_id[10326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 240.543438][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.661065][T10330] loop0: detected capacity change from 0 to 4096 [ 240.698645][T10330] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 240.847061][T10330] ntfs3(loop0): ino=19, mi_enum_attr [ 240.851560][T10341] loop2: detected capacity change from 0 to 128 [ 240.922082][T10330] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 240.960003][ T5830] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.007620][T10330] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 241.066476][T10341] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 241.073985][T10341] FAT-fs (loop2): Filesystem has been set read-only [ 241.137118][T10341] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 241.190962][T10341] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 241.675510][T10363] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1648'. [ 241.741479][T10363] netlink: 'syz.6.1648': attribute type 2 has an invalid length. [ 241.776182][ T5944] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 241.953845][ T5944] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 241.972307][ T5944] usb 3-1: config 0 has no interface number 0 [ 242.005207][ T5944] usb 3-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 242.067992][ T5944] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.083419][T10375] loop6: detected capacity change from 0 to 128 [ 242.116226][ T5944] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.161692][ T5944] usb 3-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 242.195425][ T30] audit: type=1800 audit(1775097075.406:80): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1652" name="file1" dev="loop6" ino=1048779 res=0 errno=0 [ 242.236735][ T5944] usb 3-1: config 0 interface 16 has no altsetting 0 [ 242.254213][ T5944] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 242.273643][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.295246][ T5944] usb 3-1: config 0 descriptor?? [ 242.307561][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.506526][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 242.527121][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 242.551421][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 242.584965][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 9510, setting to 1024 [ 242.600170][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.614890][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 242.626366][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.634463][ T9] usb 4-1: Product: syz [ 242.654559][ T9] usb 4-1: Manufacturer: syz [ 242.669792][ T9] usb 4-1: SerialNumber: syz [ 242.733295][ T9] usb 4-1: config 0 descriptor?? [ 242.738130][ T5944] uclogic 0003:5543:004D.0013: interface is invalid, ignoring [ 242.754416][T10374] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.774541][T10359] loop0: detected capacity change from 0 to 32768 [ 242.816279][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 242.837914][T10359] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.878540][T10359] XFS (loop0): Ending clean mount [ 242.912616][T10359] XFS (loop0): Quotacheck needed: Please wait. [ 242.990715][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.000582][ T29] usb 3-1: USB disconnect, device number 5 [ 243.009268][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.010745][T10374] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.021737][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.041535][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.050966][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.063335][ T10] usb 2-1: config 0 descriptor?? [ 243.133169][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 243.161387][T10359] XFS (loop0): Quotacheck: Done. [ 243.343692][T10405] loop6: detected capacity change from 0 to 8 [ 243.363615][ T9] usb 4-1: USB disconnect, device number 10 [ 243.389376][ T5821] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.511140][ T10] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x4 [ 243.591672][ T10] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 243.695445][ T10] usb 2-1: USB disconnect, device number 13 [ 243.858294][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1666'. [ 243.862078][T10407] fido_id[10407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 244.054315][ T30] audit: type=1326 audit(1775097077.266:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.140535][T10418] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1669'. [ 244.160854][ T30] audit: type=1326 audit(1775097077.306:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.259363][ T30] audit: type=1326 audit(1775097077.306:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.335154][ T30] audit: type=1326 audit(1775097077.306:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.390584][ T30] audit: type=1326 audit(1775097077.306:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.397605][T10426] overlayfs: overlapping lowerdir path [ 244.420776][T10398] loop5: detected capacity change from 0 to 40427 [ 244.443390][T10398] F2FS-fs: inline encryption not supported [ 244.470150][T10398] F2FS-fs (loop5): Image doesn't support compression [ 244.477190][ T30] audit: type=1326 audit(1775097077.306:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.526302][T10398] F2FS-fs (loop5): build fault injection rate: 690 [ 244.556257][ T30] audit: type=1326 audit(1775097077.306:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.579740][T10398] F2FS-fs (loop5): invalid crc value [ 244.712716][ T30] audit: type=1326 audit(1775097077.316:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.827631][ T30] audit: type=1326 audit(1775097077.316:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 244.933508][ T30] audit: type=1326 audit(1775097077.326:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10413 comm="syz.6.1667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1af7b9c819 code=0x7ffc0000 [ 245.020622][T10398] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 245.065718][T10398] F2FS-fs (loop5): Start checkpoint disabled! [ 245.087032][T10398] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 245.104681][T10398] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 245.246847][ T5834] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 245.276687][T10453] loop6: detected capacity change from 0 to 64 [ 245.352671][ T106] kworker/u8:5: attempt to access beyond end of device [ 245.352671][ T106] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.428793][ T5834] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 245.444335][ T106] CPU: 1 UID: 0 PID: 106 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.444372][ T106] Tainted: [L]=SOFTLOCKUP [ 245.444382][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.444398][ T106] Workqueue: writeback wb_workfn (flush-7:5) [ 245.444437][ T106] Call Trace: [ 245.444446][ T106] [ 245.444456][ T106] dump_stack_lvl+0xe8/0x150 [ 245.444495][ T106] f2fs_handle_critical_error+0x37c/0x540 [ 245.444539][ T106] f2fs_write_end_io+0xcdb/0xff0 [ 245.444587][ T106] __submit_merged_bio+0x256/0x700 [ 245.444631][ T106] __submit_merged_write_cond+0x3c9/0x4e0 [ 245.444677][ T106] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 245.444728][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.444768][ T106] f2fs_write_data_pages+0x2975/0x35e0 [ 245.444807][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.444879][ T106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.444938][ T106] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 245.445008][ T106] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 245.445071][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.445100][ T106] ? __lock_acquire+0x6b5/0x2cf0 [ 245.445149][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.445188][ T106] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 245.445228][ T106] do_writepages+0x32e/0x550 [ 245.445273][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.445302][ T106] ? reacquire_held_locks+0x104/0x190 [ 245.445338][ T106] ? writeback_sb_inodes+0x477/0x1a20 [ 245.445381][ T106] __writeback_single_inode+0x133/0x11a0 [ 245.445418][ T106] ? do_raw_spin_unlock+0xf5/0x210 [ 245.445450][ T106] writeback_sb_inodes+0x992/0x1a20 [ 245.445520][ T106] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 245.445553][ T106] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.445626][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.445654][ T106] ? rcu_is_watching+0x15/0xb0 [ 245.445690][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.445729][ T106] wb_writeback+0x456/0xb70 [ 245.445768][ T106] ? queue_io+0x2c1/0x4a0 [ 245.445812][ T106] ? __pfx_wb_writeback+0x10/0x10 [ 245.445843][ T106] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.445890][ T106] wb_workfn+0x414/0xf50 [ 245.445921][ T106] ? look_up_lock_class+0x57/0x110 [ 245.445971][ T106] ? __pfx_wb_workfn+0x10/0x10 [ 245.446003][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446032][ T106] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.446061][ T106] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 245.446091][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446127][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446159][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446196][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446229][ T106] ? process_scheduled_works+0xa8d/0x18c0 [ 245.446262][ T106] ? process_scheduled_works+0xa8d/0x18c0 [ 245.446297][ T106] process_scheduled_works+0xb6e/0x18c0 [ 245.446370][ T106] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.446411][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446439][ T106] ? assign_work+0x3d5/0x5e0 [ 245.446479][ T106] worker_thread+0xa53/0xfc0 [ 245.446515][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446562][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446603][ T106] kthread+0x388/0x470 [ 245.446628][ T106] ? __pfx_worker_thread+0x10/0x10 [ 245.446661][ T106] ? __pfx_kthread+0x10/0x10 [ 245.446687][ T106] ret_from_fork+0x51e/0xb90 [ 245.446725][ T106] ? __pfx_ret_from_fork+0x10/0x10 [ 245.446758][ T106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.446787][ T106] ? __switch_to+0xc7d/0x1450 [ 245.446822][ T106] ? __pfx_kthread+0x10/0x10 [ 245.446849][ T106] ret_from_fork_asm+0x1a/0x30 [ 245.446908][ T106] [ 246.006858][ T106] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 246.112168][T10463] loop6: detected capacity change from 0 to 4096 [ 246.132358][T10461] loop1: detected capacity change from 0 to 40427 [ 246.140531][ T5834] usb 4-1: config 0 has no interface number 0 [ 246.145397][T10461] F2FS-fs (loop1): build fault injection rate: 771 [ 246.157544][ T5834] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 246.166658][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.174680][ T5834] usb 4-1: Product: syz [ 246.181610][ T5834] usb 4-1: Manufacturer: syz [ 246.186280][ T5834] usb 4-1: SerialNumber: syz [ 246.228161][T10461] F2FS-fs (loop1): invalid crc value [ 246.235061][ T5834] usb 4-1: config 0 descriptor?? [ 246.329551][T10471] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.347083][T10463] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 246.437046][T10463] NILFS (loop6): mounting fs with errors [ 246.695235][T10461] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.759113][T10461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 246.818894][ T5834] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 246.873874][ T5834] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 246.923749][ T5834] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 246.952204][ T5834] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 246.985628][ T5834] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 247.031992][T10489] loop6: detected capacity change from 0 to 1024 [ 247.105291][ T5834] usb 4-1: USB disconnect, device number 11 [ 247.123711][ T5818] syz-executor: attempt to access beyond end of device [ 247.123711][ T5818] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.161355][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 247.161393][ T5818] Tainted: [L]=SOFTLOCKUP [ 247.161402][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.161417][ T5818] Call Trace: [ 247.161426][ T5818] [ 247.161436][ T5818] dump_stack_lvl+0xe8/0x150 [ 247.161478][ T5818] f2fs_handle_critical_error+0x37c/0x540 [ 247.161522][ T5818] f2fs_write_end_io+0xcdb/0xff0 [ 247.161570][ T5818] __submit_merged_bio+0x256/0x700 [ 247.161614][ T5818] __submit_merged_write_cond+0x3c9/0x4e0 [ 247.161659][ T5818] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 247.161710][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.161749][ T5818] f2fs_write_data_pages+0x2975/0x35e0 [ 247.161831][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.161886][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.161916][ T5818] ? css_rstat_updated+0x23a/0x530 [ 247.161979][ T5818] ? __pfx_css_rstat_updated+0x10/0x10 [ 247.162012][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162040][ T5818] ? __lock_acquire+0x6b5/0x2cf0 [ 247.162085][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162119][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162155][ T5818] ? __lock_acquire+0x6b5/0x2cf0 [ 247.162193][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162222][ T5818] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.162254][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162288][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162317][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 247.162344][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.162384][ T5818] do_writepages+0x32e/0x550 [ 247.162423][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162454][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162487][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162514][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 247.162545][ T5818] filemap_fdatawrite+0x1e9/0x2f0 [ 247.162588][ T5818] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 247.162669][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162700][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162734][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 247.162766][ T5818] f2fs_sync_dirty_inodes+0x30e/0x860 [ 247.162809][ T5818] f2fs_write_checkpoint+0x9df/0x26a0 [ 247.162874][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 247.162946][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.162974][ T5818] ? kfree+0x1c1/0x630 [ 247.162996][ T5818] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 247.163035][ T5818] kill_f2fs_super+0x314/0x720 [ 247.163067][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 247.163105][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.163140][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 247.163172][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.163217][ T5818] deactivate_locked_super+0xbc/0x130 [ 247.163245][ T5818] cleanup_mnt+0x437/0x4d0 [ 247.163275][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.163310][ T5818] task_work_run+0x1d9/0x270 [ 247.163342][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 247.163384][ T5818] exit_to_user_mode_loop+0xed/0x480 [ 247.163417][ T5818] ? rcu_is_watching+0x15/0xb0 [ 247.163458][ T5818] do_syscall_64+0x32d/0xf80 [ 247.163490][ T5818] ? trace_irq_disable+0x3b/0x150 [ 247.163511][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.163543][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.163569][ T5818] RIP: 0033:0x7ff069d9da57 [ 247.163592][ T5818] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 247.163613][ T5818] RSP: 002b:00007ffe69c01e38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 247.163638][ T5818] RAX: 0000000000000000 RBX: 00007ff069e32048 RCX: 00007ff069d9da57 [ 247.163656][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe69c01ef0 [ 247.163672][ T5818] RBP: 00007ffe69c01ef0 R08: 00007ffe69c02ef0 R09: 00000000ffffffff [ 247.163689][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe69c02f80 [ 247.163705][ T5818] R13: 00007ff069e32048 R14: 000000000003c499 R15: 00007ffe69c02fc0 [ 247.163746][ T5818] [ 247.206132][ T5834] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 247.210538][ T5818] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 247.267064][ T5834] keyspan 4-1:0.133: device disconnected [ 247.515960][T10497] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1702'. [ 248.208152][T10511] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 248.395139][T10513] loop0: detected capacity change from 0 to 4096 [ 248.486783][T10513] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 248.497608][T10522] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 248.520779][T10513] NILFS (loop0): mounting fs with errors [ 248.594112][T10513] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 248.666232][T10513] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 248.698160][T10528] loop6: detected capacity change from 0 to 64 [ 248.798765][T10534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1718'. [ 248.808009][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1716'. [ 249.816542][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 249.835832][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'. [ 249.846830][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 249.951663][T10578] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1740'. [ 250.021102][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 250.056217][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.064286][ T9] usb 1-1: Product: syz [ 250.099665][ T9] usb 1-1: Manufacturer: syz [ 250.104305][ T9] usb 1-1: SerialNumber: syz [ 250.234411][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.244503][T10586] loop5: detected capacity change from 0 to 64 [ 250.291127][ T5921] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.696836][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 250.798523][T10558] loop6: detected capacity change from 0 to 32768 [ 250.846741][T10558] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.880417][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 250.907219][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 250.919684][ T10] usb 3-1: config 0 has no interface number 0 [ 251.232436][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 251.307778][T10558] XFS (loop6): Ending clean mount [ 251.346651][T10558] XFS (loop6): Quotacheck needed: Please wait. [ 251.421109][ T9] usb 1-1: USB disconnect, device number 11 [ 251.432645][T10615] loop5: detected capacity change from 0 to 1024 [ 251.440562][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.455242][ T10] usb 3-1: Product: syz [ 251.461750][ T10] usb 3-1: Manufacturer: syz [ 251.466752][ T10] usb 3-1: SerialNumber: syz [ 251.482271][ T10] usb 3-1: config 0 descriptor?? [ 251.508763][ T10] hub 3-1:0.132: bad descriptor, ignoring hub [ 251.514957][ T10] hub 3-1:0.132: probe with driver hub failed with error -5 [ 251.525000][T10558] XFS (loop6): Quotacheck: Done. [ 251.606129][ T5921] usb 1-1: Service connection timeout for: 256 [ 251.617450][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input18 [ 251.646153][ T5921] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 251.686790][ T5921] ath9k_htc: Failed to initialize the device [ 251.736551][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 251.757568][ T791] IPVS: starting estimator thread 0... [ 251.801841][ T7466] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 251.898571][T10621] IPVS: using max 26 ests per chain, 62400 per kthread [ 252.039360][ T791] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 252.234792][ T791] usb 4-1: Using ep0 maxpacket: 16 [ 252.248698][ T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.287766][ T791] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 252.361075][ T791] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 252.403097][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.440844][ T791] usb 4-1: config 0 descriptor?? [ 252.552282][T10642] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 252.592661][T10642] macsec1: entered promiscuous mode [ 252.632579][T10642] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 252.689583][T10647] loop5: detected capacity change from 0 to 128 [ 252.755882][T10647] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 252.796321][T10647] hpfs: filesystem error: improperly stopped [ 252.802392][T10647] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 252.823836][T10647] hpfs: You really don't want any checks? You are crazy... [ 252.857868][T10647] hpfs: hpfs_map_sector(): read error [ 252.873721][ T791] microsoft 0003:045E:07DA.0015: unbalanced collection at end of report description [ 252.885155][T10647] hpfs: code page support is disabled [ 252.900733][T10647] hpfs: hpfs_map_4sectors(): unaligned read [ 252.911688][ T791] microsoft 0003:045E:07DA.0015: parse failed [ 252.927490][ T791] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22 [ 252.939738][T10647] hpfs: hpfs_map_4sectors(): unaligned read [ 252.939757][T10647] hpfs: filesystem error: unable to find root dir [ 253.026172][ T5944] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 253.048568][ T5172] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 253.077130][ T5172] usb 3-1: device reset changed ep0 maxpacket size! [ 253.100738][ T5921] usb 4-1: USB disconnect, device number 12 [ 253.110514][ T9] usb 3-1: USB disconnect, device number 6 [ 253.190514][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.230281][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.271179][ T5944] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 253.301831][ T5944] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.339629][ T5944] usb 7-1: config 0 descriptor?? [ 253.457165][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 253.658980][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.664410][T10673] gretap0: entered promiscuous mode [ 253.683308][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.708828][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 253.731109][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.772662][ T9] usb 3-1: config 0 descriptor?? [ 253.801360][ T5944] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0 [ 253.824779][ T5944] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0 [ 253.849479][ T5944] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0 [ 253.893182][ T5944] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0 [ 253.911032][ T5944] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0 [ 253.935011][ T5944] lua 0003:1E7D:2C2E.0016: hidraw0: USB HID v1.01 Device [HID 1e7d:2c2e] on usb-dummy_hcd.6-1/input0 [ 254.005993][ T5944] usb 7-1: USB disconnect, device number 7 [ 254.181100][T10685] fido_id[10685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 254.256814][ T9] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 254.278140][ T9] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 254.294105][ T9] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 254.301918][ T9] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 254.309945][ T9] pyra 0003:1E7D:2CF6.0017: unknown main item tag 0x0 [ 254.321995][ T9] pyra 0003:1E7D:2CF6.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 254.357679][T10695] loop0: detected capacity change from 0 to 4096 [ 254.436521][ T5944] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 254.460987][ T9] usb 3-1: USB disconnect, device number 7 [ 254.519070][T10696] fido_id[10696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 254.596282][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 254.618869][ T5944] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 254.661436][ T5944] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 254.688358][ T5944] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 254.726699][ T5944] usb 4-1: config 250 has no interface number 0 [ 254.747858][ T5944] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 254.794898][ T5944] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 254.849304][ T5944] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 254.865518][ T5944] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 254.891539][ T5944] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 254.908945][ T5944] usb 4-1: config 250 interface 228 has no altsetting 0 [ 254.939497][ T5944] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 254.951069][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 254.967620][ T5944] usb 4-1: Product: syz [ 254.977180][ T5944] usb 4-1: SerialNumber: syz [ 255.019405][ T5944] hub 4-1:250.228: bad descriptor, ignoring hub [ 255.054206][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.060917][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.076717][ T5944] hub 4-1:250.228: probe with driver hub failed with error -5 [ 255.232266][ T5944] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 255.473445][T10724] loop2: detected capacity change from 0 to 64 [ 255.562548][ C1] usblp0: nonzero read bulk status received: -71 [ 255.608567][ T5834] usb 4-1: USB disconnect, device number 13 [ 255.640214][ T5834] usblp0: removed [ 255.655750][T10728] ip6tnl2: entered allmulticast mode [ 256.013589][T10707] loop5: detected capacity change from 0 to 32768 [ 256.079277][T10707] jfs: Unexpected value for 'quota' [ 256.216189][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 256.396594][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 256.420783][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 256.446261][ T9] usb 7-1: config 0 has no interface number 0 [ 256.472607][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 256.512788][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.559598][ T9] usb 7-1: Product: syz [ 256.574418][ T9] usb 7-1: Manufacturer: syz [ 256.594536][ T9] usb 7-1: SerialNumber: syz [ 256.635590][ T9] usb 7-1: config 0 descriptor?? [ 256.689976][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 256.769230][T10753] loop2: detected capacity change from 0 to 4096 [ 256.916820][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 256.967844][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 257.381270][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 257.391379][ T9] usb 7-1: USB disconnect, device number 8 [ 257.423083][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 257.487412][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 257.501193][T10777] loop0: detected capacity change from 0 to 256 [ 257.527593][ T9] quatech2 7-1:0.51: device disconnected [ 257.564375][T10775] loop3: detected capacity change from 0 to 4096 [ 257.617035][T10777] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 257.846244][ T5834] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 257.867161][T10787] tmpfs: Cannot change global quota limit on remount [ 258.052799][ T5834] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 258.086248][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.090059][T10796] loop3: detected capacity change from 0 to 64 [ 258.139945][ T5834] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 258.176579][ T5834] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 258.184640][ T5834] usb 6-1: Manufacturer: syz [ 258.205892][T10800] netlink: 4436 bytes leftover after parsing attributes in process `syz.6.1839'. [ 258.244088][ T5834] usb 6-1: config 0 descriptor?? [ 258.249536][T10800] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 258.536292][ T5834] rc_core: IR keymap rc-hauppauge not found [ 258.568982][ T5834] Registered IR keymap rc-empty [ 258.587993][ T5834] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 258.638450][ T5834] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 258.897333][T10814] loop6: detected capacity change from 0 to 8192 [ 258.995526][T10825] macvlan2: entered promiscuous mode [ 259.016721][T10829] loop1: detected capacity change from 0 to 512 [ 259.106608][T10829] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1853: bad orphan inode 13 [ 259.134387][ T791] usb 6-1: USB disconnect, device number 12 [ 259.162713][T10829] loop1: lost filesystem error report for type 5 error -117 [ 259.166111][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 259.179978][ C1] EXT4-fs (loop1): initial error at time 1775097092: ext4_orphan_get:1423 [ 259.188743][ C1] EXT4-fs (loop1): last error at time 1775097092: ext4_orphan_get:1423 [ 259.203154][T10829] ext4_test_bit(bit=12, block=4) = 1 [ 259.228171][T10838] loop0: detected capacity change from 0 to 128 [ 259.240845][T10829] is_bad_inode(inode)=0 [ 259.297643][T10829] NEXT_ORPHAN(inode)=0 [ 259.316117][T10829] max_ino=32 [ 259.319424][T10829] i_nlink=1 [ 259.338262][T10829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.450997][T10829] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 259.550644][T10842] loop3: detected capacity change from 0 to 1024 [ 259.650975][T10842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.708858][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.107718][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.728738][ T9] hid_parser_main: 2 callbacks suppressed [ 260.728763][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 260.749934][T10865] loop0: detected capacity change from 0 to 24 [ 260.779176][T10865] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 260.824672][ T9] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 260.934263][T10865] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 260.967468][ T5921] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 261.201573][T10869] fido_id[10869]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 261.215449][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.288009][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.381419][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.444093][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 261.526547][ T5921] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.592685][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.660598][ T5921] usb 2-1: config 0 descriptor?? [ 262.162903][ T5921] plantronics 0003:047F:FFFF.0019: unbalanced delimiter at end of report description [ 262.264768][ T5921] plantronics 0003:047F:FFFF.0019: parse failed [ 262.346630][ T5921] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 262.517346][ T5921] usb 2-1: USB disconnect, device number 14 [ 263.385240][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 263.434230][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1885'. [ 264.697980][T10891] loop0: detected capacity change from 0 to 32768 [ 264.917841][T10891] JBD2: Ignoring recovery information on journal [ 265.124435][T10937] loop1: detected capacity change from 0 to 1024 [ 265.183503][T10891] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 265.308348][T10937] __quota_error: 13 callbacks suppressed [ 265.308370][T10937] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 265.474958][T10937] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 265.586227][T10937] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.1900: Failed to acquire dquot type 0 [ 265.706232][T10937] loop1: lost filesystem error report for type 5 error -117 [ 265.721562][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 265.735389][ C0] EXT4-fs (loop1): initial error at time 1775097098: ext4_acquire_dquot:7026 [ 265.744316][ C0] EXT4-fs (loop1): last error at time 1775097098: ext4_acquire_dquot:7026 [ 265.807354][T10937] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 265.897110][ T5821] ocfs2: Unmounting device (7,0) on (node local) [ 265.935669][T10937] EXT4-fs (loop1): 1 truncate cleaned up [ 266.012373][T10937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.166394][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 266.294733][T10937] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 266.382416][T10937] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 266.426988][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 266.464273][ T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 266.490241][T10937] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.1900: Failed to acquire dquot type 0 [ 266.527068][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.596228][ T9] usb 7-1: Product: syz [ 266.610232][ T9] usb 7-1: Manufacturer: syz [ 266.643042][ T9] usb 7-1: SerialNumber: syz [ 266.723287][ T9] usb 7-1: config 0 descriptor?? [ 266.795836][ T9] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 266.882538][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.242496][ T9] usb 7-1: clie_3_5_startup: get interface number bad return length: 0 [ 267.292378][ T9] visor 7-1:0.0: probe with driver visor failed with error -5 [ 267.510980][ T5921] usb 7-1: USB disconnect, device number 9 [ 267.732197][T10975] loop0: detected capacity change from 0 to 512 [ 267.814527][T10976] netlink: 'syz.3.1917': attribute type 2 has an invalid length. [ 267.867965][T10975] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1916: inode has both inline data and extents flags [ 267.886406][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1917'. [ 267.975986][T10975] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.976103][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 267.991722][ C0] EXT4-fs (loop0): initial error at time 1775097101: ext4_orphan_get:1397: inode 15 [ 268.001153][ C0] EXT4-fs (loop0): last error at time 1775097101: ext4_orphan_get:1397: inode 15 [ 268.026024][T10975] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1916: couldn't read orphan inode 15 (err -117) [ 268.141059][T10975] loop0: lost filesystem error report for type 5 error -117 [ 268.143400][T10975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.680024][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.314573][ T30] audit: type=1400 audit(1775097102.506:104): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26AE18 pid=10993 comm="syz.6.1926" [ 269.564766][T10995] loop3: detected capacity change from 0 to 4096 [ 270.005003][T10980] loop2: detected capacity change from 0 to 32768 [ 270.131997][T10980] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 270.313569][T10995] ntfs3(loop3): failed to convert "0080" to macromanian [ 270.406622][T10980] XFS (loop2): Ending clean mount [ 270.430918][T10995] ntfs3(loop3): failed to convert name for inode 1e. [ 270.473166][T10987] loop5: detected capacity change from 0 to 32768 [ 270.492320][T10980] XFS (loop2): Quotacheck needed: Please wait. [ 270.552195][T10995] ntfs3(loop3): ino=1f, mi_enum_attr [ 270.562745][T10987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1922 (10987) [ 270.623092][T10995] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 270.680647][T11011] pim6reg: entered allmulticast mode [ 270.770284][T10987] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 270.789383][T10980] XFS (loop2): Quotacheck: Done. [ 270.879577][T10987] BTRFS info (device loop5): using crc32c checksum algorithm [ 271.288143][T11027] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 271.465341][ T5825] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 271.667435][T10987] BTRFS error (device loop5): open_ctree failed: -4 [ 272.720263][T10999] loop6: detected capacity change from 0 to 32768 [ 272.836684][T10999] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1929 (10999) [ 272.997131][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 273.095684][T11050] tipc: Enabling of bearer rejected, failed to enable media [ 274.355348][T11062] loop0: detected capacity change from 0 to 4096 [ 274.596509][T11071] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.713582][ T30] audit: type=1800 audit(1775097107.926:105): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1945" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 275.578096][T11081] loop0: detected capacity change from 0 to 164 [ 275.732570][T11083] loop2: detected capacity change from 0 to 1024 [ 275.772386][T11081] ISOFS: unable to read i-node block [ 275.871382][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1957'. [ 276.299259][ T5825] hfsplus: bad catalog entry type [ 276.626537][ T30] audit: type=1326 audit(1775097109.836:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 276.796684][ T5921] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 276.909154][ T30] audit: type=1326 audit(1775097109.876:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 277.026572][ T5921] usb 6-1: Using ep0 maxpacket: 8 [ 277.101020][ T5921] usb 6-1: unable to get BOS descriptor or descriptor too short [ 277.188612][ T5921] usb 6-1: config 4 interface 0 has no altsetting 0 [ 277.201101][ T30] audit: type=1326 audit(1775097109.876:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 277.280545][ T5921] usb 6-1: string descriptor 0 read error: -22 [ 277.326746][ T5921] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 277.406207][ T5921] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 277.421718][ T30] audit: type=1326 audit(1775097109.886:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 277.522355][T11106] loop1: detected capacity change from 0 to 512 [ 277.572937][ T5921] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 277.642728][ T30] audit: type=1326 audit(1775097109.886:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 277.694817][ T5921] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 277.755609][T11110] loop0: detected capacity change from 0 to 256 [ 277.784275][T11093] usb 6-1: dvb_usb_au6610: wlen=245, aborting [ 277.803078][T11106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.825287][ T5921] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 277.905464][ T5921] usb 6-1: media controller created [ 277.913518][ T30] audit: type=1326 audit(1775097109.886:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 277.961390][T11106] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.090647][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.136669][ T30] audit: type=1326 audit(1775097109.886:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 278.184164][T11106] EXT4-fs (loop1): resizing filesystem from 128 to 2 blocks [ 278.267901][T11106] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 278.345156][ T5921] zl10353_read_register: readreg error (reg=127, ret==0) [ 278.390729][ T30] audit: type=1326 audit(1775097109.886:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 278.607643][ T30] audit: type=1326 audit(1775097109.886:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11095 comm="syz.3.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5499c819 code=0x7ffc0000 [ 278.652145][T11122] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 278.652145][T11122] The task syz.6.1973 (11122) triggered the difference, watch for misbehavior. [ 278.725717][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.761779][ T5921] usb 6-1: USB disconnect, device number 13 [ 279.759741][ T141] hfsplus: b-tree write err: -5, ino 25 [ 279.815268][ T141] hfsplus: b-tree write err: -5, ino 4 [ 279.878538][ T141] hfsplus: b-tree write err: -5, ino 2 [ 280.354519][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 281.406698][ T5921] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 281.497706][T11144] loop5: detected capacity change from 0 to 32768 [ 281.604811][T11144] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 281.667864][ T5921] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 281.707890][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.719594][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.728561][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.753109][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.761388][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.797466][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.866301][T11144] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 281.880851][ T5921] usb 7-1: Product: syz [ 281.885018][ T5921] usb 7-1: Manufacturer: syz [ 281.929252][ T5921] usb 7-1: SerialNumber: syz [ 281.939745][T11144] XFS (loop5): Unmount and run xfs_repair [ 281.945489][T11144] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 282.007334][ T5921] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 282.021835][T11144] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 20 00 XAGF.......... . [ 282.055556][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.074957][T11144] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 282.149158][T11144] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 282.209395][T11144] 00000030: 00 00 00 06 00 00 13 e3 00 ff 0f e0 00 00 00 00 ................ [ 282.280707][T11144] 00000040: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 282.413988][T11144] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 282.450034][T11144] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 282.475791][T11144] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 282.505416][T11144] XFS (loop5): metadata I/O error in "xfs_read_agf+0x289/0x5f0" at daddr 0x1 len 1 error 74 [ 282.538810][T11144] loop5: lost filesystem error report for type 5 error -117 [ 282.538841][T11144] XFS (loop5): Error -117 reserving per-AG metadata reserve pool. [ 283.216093][ C1] sched: DL replenish lagged too much [ 283.501775][T11144] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1f0/0x240 (fs/xfs/xfs_fsops.c:559). Shutting down filesystem. [ 283.910667][ T5832] Bluetooth: hci4: command tx timeout [ 287.183092][ T5832] Bluetooth: hci4: command tx timeout [ 289.914874][ T5832] Bluetooth: hci4: command tx timeout [ 293.679538][ T5832] Bluetooth: hci4: command tx timeout [ 298.576483][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 298.583571][ T9] ath9k_htc: Failed to initialize the device [ 322.945350][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.967747][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.811296][ T5829] Bluetooth: hci0: command tx timeout [ 380.057910][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.080847][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.100517][T11144] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 392.306025][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 392.313012][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11156/1:b..l [ 392.321659][ C1] rcu: (detected by 1, t=10502 jiffies, g=36521, q=472938 ncpus=2) [ 392.329633][ C1] task:syz.1.1989 state:R running task stack:24384 pid:11156 tgid:11153 ppid:5818 task_flags:0x400040 flags:0x00080000 [ 392.344014][ C1] Call Trace: [ 392.347301][ C1] [ 392.350235][ C1] __schedule+0x15dd/0x52d0 [ 392.354766][ C1] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 392.360429][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.366090][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.371734][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 392.376687][ C1] ? __pfx___schedule+0x10/0x10 [ 392.381569][ C1] preempt_schedule_irq+0x4d/0xa0 [ 392.386691][ C1] irqentry_exit+0x599/0x620 [ 392.391290][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.396929][ C1] ? trace_irq_disable+0x3b/0x150 [ 392.401962][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.407950][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 392.413247][ C1] Code: e9 30 ff ff ff e8 85 a4 0d 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 01 02 7b 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 d1 b2 6e ff cc 48 8d 3d 3e 92 73 [ 392.432886][ C1] RSP: 0018:ffffc90003417098 EFLAGS: 00000282 [ 392.438968][ C1] RAX: b9d6a0a9a003e600 RBX: 0000000000000246 RCX: 0000000000000046 [ 392.446943][ C1] RDX: 0000000088789759 RSI: ffffffff8e16b29d RDI: ffffffff8c27d100 [ 392.454917][ C1] RBP: 0000000000000000 R08: ffffffff81767e95 R09: ffffffff8e75e5e0 [ 392.462988][ C1] R10: dffffc0000000000 R11: ffffffff81b0d0f0 R12: 0000000000000002 [ 392.470967][ C1] R13: ffffffff8e75e5e0 R14: 0000000000000000 R15: 0000000000000000 [ 392.479041][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.485299][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 392.490502][ C1] ? __set_page_owner+0x8d/0x4c0 [ 392.495457][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 392.500586][ C1] unwind_next_frame+0xc2/0x23c0 [ 392.505546][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 392.510679][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 392.515894][ C1] ? save_stack+0x122/0x230 [ 392.520403][ C1] ? __set_page_owner+0x8d/0x4c0 [ 392.525355][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.531515][ C1] arch_stack_walk+0x11b/0x150 [ 392.536302][ C1] ? __set_page_owner+0x8d/0x4c0 [ 392.541249][ C1] stack_trace_save+0xa9/0x100 [ 392.546015][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 392.551392][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.557046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.562696][ C1] save_stack+0x122/0x230 [ 392.567052][ C1] ? __pfx_save_stack+0x10/0x10 [ 392.571929][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.577568][ C1] ? __rmqueue_pcplist+0x18fa/0x1c40 [ 392.582876][ C1] __set_page_owner+0x8d/0x4c0 [ 392.587649][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 392.593021][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 392.599084][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.604719][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 392.609926][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.615575][ C1] post_alloc_hook+0x231/0x280 [ 392.620353][ C1] get_page_from_freelist+0x24dc/0x2580 [ 392.625924][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 392.631503][ C1] ? prepare_alloc_pages+0x22a/0x650 [ 392.636806][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 392.642625][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 392.648968][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 392.654276][ C1] alloc_pages_mpol+0x232/0x4a0 [ 392.659146][ C1] folio_alloc_mpol_noprof+0x39/0x70 [ 392.664444][ C1] shmem_alloc_and_add_folio+0x445/0xf80 [ 392.670081][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.675725][ C1] ? filemap_get_entry+0xca/0x320 [ 392.680746][ C1] ? filemap_get_entry+0xca/0x320 [ 392.685774][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.691422][ C1] ? filemap_get_entry+0x2ac/0x320 [ 392.696656][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 392.702141][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.707799][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 392.713978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.719624][ C1] ? shmem_allowable_huge_orders+0x309/0x690 [ 392.725636][ C1] shmem_get_folio_gfp+0x5a9/0x1670 [ 392.730874][ C1] shmem_write_begin+0x16c/0x330 [ 392.735828][ C1] generic_perform_write+0x2e2/0x8f0 [ 392.741141][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 392.746963][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.752606][ C1] ? preempt_count_add+0x91/0x190 [ 392.757644][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.763284][ C1] ? mnt_put_write_access_file+0xb9/0x100 [ 392.769017][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.774706][ C1] ? file_update_time_flags+0x400/0x4a0 [ 392.780268][ C1] shmem_file_write_iter+0xf8/0x120 [ 392.785482][ C1] vfs_write+0x61d/0xb90 [ 392.789748][ C1] ? __pfx_vfs_write+0x10/0x10 [ 392.794538][ C1] ? __fget_files+0x2a/0x420 [ 392.799133][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.804783][ C1] ksys_write+0x150/0x270 [ 392.809135][ C1] ? __pfx_ksys_write+0x10/0x10 [ 392.813994][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.819652][ C1] do_syscall_64+0x14d/0xf80 [ 392.824516][ C1] ? trace_irq_disable+0x3b/0x150 [ 392.829549][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.835624][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.841518][ C1] RIP: 0033:0x7ff069d5d04e [ 392.845936][ C1] RSP: 002b:00007ff06aca4da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.854353][ C1] RAX: ffffffffffffffda RBX: 00007ff06aca56c0 RCX: 00007ff069d5d04e [ 392.862585][ C1] RDX: 0000000001000000 RSI: 00007ff05fa00000 RDI: 0000000000000003 [ 392.870555][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 392.878520][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 392.886489][ C1] R13: 00007ff06aca4ee0 R14: 00007ff06aca4ea0 R15: 00007ff05fa00000 [ 392.894485][ C1] [ 392.897508][ C1] rcu: rcu_preempt kthread starved for 846 jiffies! g36521 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 392.908534][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 392.918511][ C1] rcu: RCU grace-period kthread stack dump: [ 392.924403][ C1] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 392.938109][ C1] Call Trace: [ 392.941391][ C1] [ 392.944321][ C1] __schedule+0x15dd/0x52d0 [ 392.948843][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 392.953799][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.959534][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.965189][ C1] ? __pfx___schedule+0x10/0x10 [ 392.970057][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.975700][ C1] ? schedule+0x90/0x360 [ 392.979954][ C1] schedule+0x164/0x360 [ 392.984121][ C1] schedule_timeout+0x158/0x2c0 [ 392.988977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 392.994615][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 392.999995][ C1] ? __pfx_process_timeout+0x10/0x10 [ 393.005468][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.011109][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 393.016926][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.022570][ C1] ? prepare_to_swait_event+0x340/0x370 [ 393.028131][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 393.033004][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.038646][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 393.044298][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.050209][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 393.054993][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 393.061642][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 393.066955][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 393.072170][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 393.078073][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 393.082682][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 393.087884][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 393.093697][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 393.098649][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.104376][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 393.109460][ C1] kthread+0x388/0x470 [ 393.113544][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 393.118767][ C1] ? __pfx_kthread+0x10/0x10 [ 393.123380][ C1] ret_from_fork+0x51e/0xb90 [ 393.128216][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 393.133388][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.139038][ C1] ? __switch_to+0xc7d/0x1450 [ 393.143874][ C1] ? __pfx_kthread+0x10/0x10 [ 393.148477][ C1] ret_from_fork_asm+0x1a/0x30 [ 393.153285][ C1] [ 393.156295][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 393.162607][ C1] Sending NMI from CPU 1 to CPUs 0: [ 393.167890][ C0] NMI backtrace for cpu 0 [ 393.167909][ C0] CPU: 0 UID: 0 PID: 6104 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 393.167938][ C0] Tainted: [L]=SOFTLOCKUP [ 393.167946][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.167959][ C0] RIP: 0010:__lock_acquire+0x865/0x2cf0 [ 393.167991][ C0] Code: 29 cb 89 ca c1 c2 06 31 da 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29 f1 89 f3 c1 c3 10 31 cb 01 d6 29 da 89 dd c1 c5 13 31 d5 <01> f3 29 ee 01 eb c1 c5 04 31 f5 48 c1 e5 20 83 3d b9 67 70 0e 00 [ 393.168009][ C0] RSP: 0018:ffffc900000073f8 EFLAGS: 00000006 [ 393.168028][ C0] RAX: 000000006fa691b2 RBX: 00000000e4e7f0d0 RCX: 00000000e957452e [ 393.168043][ C0] RDX: 00000000bd47baaa RSI: 00000000582db92a RDI: ffff8880334abd00 [ 393.168058][ C0] RBP: 000000003bc09d95 R08: ffffffff81767e95 R09: ffffffff8e75e5e0 [ 393.168074][ C0] R10: dffffc0000000000 R11: ffffffff81b0d0f0 R12: ffff8880334ac8d0 [ 393.168090][ C0] R13: ffff8880334ac8d0 R14: ffff8880334abd00 R15: 0000000000000003 [ 393.168108][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 393.168125][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.168140][ C0] CR2: 00007fc51aa00218 CR3: 000000007c47e000 CR4: 0000000000350ef0 [ 393.168157][ C0] Call Trace: [ 393.168165][ C0] [ 393.168176][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 393.168201][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.168228][ C0] ? stack_depot_save_flags+0x33/0x810 [ 393.168275][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 393.168308][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.168338][ C0] lock_acquire+0xf0/0x2e0 [ 393.168366][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 393.168402][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 393.168435][ C0] ? do_syscall_64+0x14d/0xf80 [ 393.168465][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 393.168498][ C0] unwind_next_frame+0xc2/0x23c0 [ 393.168529][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 393.168566][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 393.168600][ C0] ? x64_sys_call+0x221a/0x2240 [ 393.168632][ C0] ? do_syscall_64+0x14d/0xf80 [ 393.168662][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.168686][ C0] arch_stack_walk+0x11b/0x150 [ 393.168724][ C0] ? do_syscall_64+0x14d/0xf80 [ 393.168755][ C0] stack_trace_save+0xa9/0x100 [ 393.168777][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 393.168803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.168829][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 393.168854][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.168882][ C0] kasan_save_track+0x3e/0x80 [ 393.168907][ C0] ? kasan_save_track+0x3e/0x80 [ 393.168930][ C0] ? kasan_save_free_info+0x46/0x50 [ 393.168963][ C0] ? __kasan_slab_free+0x5c/0x80 [ 393.168987][ C0] ? kfree+0x1c1/0x630 [ 393.169006][ C0] ? dummy_timer+0xb59/0x45d0 [ 393.169039][ C0] ? __hrtimer_run_queues+0x53a/0xcc0 [ 393.169071][ C0] ? hrtimer_run_softirq+0x182/0x5a0 [ 393.169103][ C0] ? handle_softirqs+0x22a/0x870 [ 393.169132][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 393.169160][ C0] ? irq_exit_rcu+0x9/0x30 [ 393.169187][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 393.169214][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 393.169237][ C0] ? notifier_call_chain+0x10c/0x400 [ 393.169276][ C0] ? blocking_notifier_call_chain+0x6a/0x90 [ 393.169296][ C0] ? netlink_release+0x123b/0x1ad0 [ 393.169319][ C0] ? sock_close+0xc3/0x240 [ 393.169350][ C0] ? __fput+0x44f/0xa70 [ 393.169382][ C0] ? task_work_run+0x1d9/0x270 [ 393.169404][ C0] ? do_exit+0x70f/0x23c0 [ 393.169424][ C0] ? do_group_exit+0x21b/0x2d0 [ 393.169445][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 393.169467][ C0] ? x64_sys_call+0x221a/0x2240 [ 393.169499][ C0] ? do_syscall_64+0x14d/0xf80 [ 393.169547][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.169575][ C0] kasan_save_free_info+0x46/0x50 [ 393.169608][ C0] __kasan_slab_free+0x5c/0x80 [ 393.169635][ C0] kfree+0x1c1/0x630 [ 393.169654][ C0] ? dummy_timer+0xb59/0x45d0 [ 393.169692][ C0] dummy_timer+0xb59/0x45d0 [ 393.169734][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.169759][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 393.169804][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 393.169826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.169857][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 393.169894][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 393.169919][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 393.169953][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 393.169986][ C0] __hrtimer_run_queues+0x53a/0xcc0 [ 393.170030][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 393.170061][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 393.170087][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.170119][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 393.170157][ C0] handle_softirqs+0x22a/0x870 [ 393.170188][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 393.170222][ C0] __irq_exit_rcu+0x5f/0x150 [ 393.170250][ C0] irq_exit_rcu+0x9/0x30 [ 393.170281][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 393.170308][ C0] [ 393.170315][ C0] [ 393.170324][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 393.170347][ C0] RIP: 0010:notifier_call_chain+0x10c/0x400 [ 393.170381][ C0] Code: fe ff 41 89 c6 31 ff 89 c6 e8 40 f7 33 00 45 85 f6 0f 84 3f 01 00 00 41 80 3c 1f 00 74 08 4c 89 e7 e8 08 40 9e 00 4d 8b 2c 24 <0f> 1f 44 00 00 e8 da f2 33 00 65 44 8b 2d 36 ce 8a 11 bf 07 00 00 [ 393.170399][ C0] RSP: 0018:ffffc90005caf9c0 EFLAGS: 00000246 [ 393.170416][ C0] RAX: ffffffff8191c1d0 RBX: dffffc0000000000 RCX: 0000000000000000 [ 393.170431][ C0] RDX: ffff8880334abd00 RSI: 0000000000000001 RDI: 0000000000000000 [ 393.170445][ C0] RBP: 00000000fffffffc R08: ffffffff9011ccb7 R09: 1ffffffff2023996 [ 393.170461][ C0] R10: dffffc0000000000 R11: fffffbfff2023997 R12: ffffffff8fc4a760 [ 393.170477][ C0] R13: ffffffff89c90720 R14: 0000000000000001 R15: 1ffffffff1f894ec [ 393.170493][ C0] ? __pfx_nfqnl_rcv_nl_event+0x10/0x10 [ 393.170520][ C0] ? notifier_call_chain+0xf0/0x400 [ 393.170565][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 393.170588][ C0] netlink_release+0x123b/0x1ad0 [ 393.170616][ C0] ? netlink_release+0x101/0x1ad0 [ 393.170639][ C0] ? __pfx_netlink_release+0x10/0x10 [ 393.170659][ C0] ? down_write+0x16d/0x200 [ 393.170690][ C0] ? __pfx_down_write+0x10/0x10 [ 393.170724][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.170754][ C0] sock_close+0xc3/0x240 [ 393.170786][ C0] ? __pfx_sock_close+0x10/0x10 [ 393.170818][ C0] __fput+0x44f/0xa70 [ 393.170858][ C0] task_work_run+0x1d9/0x270 [ 393.170883][ C0] ? __pfx_task_work_run+0x10/0x10 [ 393.170906][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 393.170934][ C0] do_exit+0x70f/0x23c0 [ 393.170961][ C0] ? __pfx_do_exit+0x10/0x10 [ 393.170980][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 393.171004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.171032][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 393.171060][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.171087][ C0] do_group_exit+0x21b/0x2d0 [ 393.171113][ C0] __x64_sys_exit_group+0x3f/0x40 [ 393.171136][ C0] x64_sys_call+0x221a/0x2240 [ 393.171168][ C0] do_syscall_64+0x14d/0xf80 [ 393.171195][ C0] ? trace_irq_disable+0x3b/0x150 [ 393.171215][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.171240][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.171268][ C0] RIP: 0033:0x7fa31b6f16c5 [ 393.171286][ C0] Code: Unable to access opcode bytes at 0x7fa31b6f169b. [ 393.171297][ C0] RSP: 002b:00007ffc1b03bd38 EFLAGS: 00000256 ORIG_RAX: 00000000000000e7 [ 393.171317][ C0] RAX: ffffffffffffffda RBX: 000055b254f3a360 RCX: 00007fa31b6f16c5 [ 393.171333][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 393.171347][ C0] RBP: 000055b254de9910 R08: 0000000000000000 R09: 0000000000000000 [ 393.171361][ C0] R10: 0000000000000000 R11: 0000000000000256 R12: 0000000000000000 [ 393.171374][ C0] R13: 00007ffc1b03bd80 R14: 0000000000000000 R15: 0000000000000000 [ 393.171399][ C0]