last executing test programs: 3.082167767s ago: executing program 0 (id=18552): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.243705447s ago: executing program 2 (id=18565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4042044}, 0x0) 2.017250834s ago: executing program 2 (id=18569): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8916, 0x0) 1.883640539s ago: executing program 0 (id=18571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x8, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.832024719s ago: executing program 2 (id=18573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x0, 0x5, 0x33}, 0x2c) 1.73492585s ago: executing program 0 (id=18575): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x189042, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xa000006, 0x0, 0x0, 0x2, 0x6}) 1.636760392s ago: executing program 2 (id=18577): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001200010402080000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00140000bcb5f31a140003"], 0x9f}, 0x1, 0x0, 0x0, 0x4851}, 0x4080) syz_usb_connect(0x5, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a092402050001031f04092403030003"], 0x0) 1.582177751s ago: executing program 3 (id=18578): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r0, 0x1103}], 0x1, 0x0, &(0x7f0000000080), 0x8) 1.553372896s ago: executing program 0 (id=18580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) 1.4193054s ago: executing program 3 (id=18581): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x1, 0x1, 0x80}, 0x20) 1.378557802s ago: executing program 0 (id=18583): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000080)='./file0\x00', 0x249, &(0x7f00000000c0), 0x0, 0x97b1, &(0x7f0000009640)="$eJzs3AnYpXPhuPHzzmKXMVRSaiqiRdYsUc0MZigkS7QjSyoqqWgdlZQ2WrQvkiUlyhLK1kqyqyhFqGSJtNiG+V/vzDuMcZPq92/kvu/res/ynOc87/d8P8/3OTOaq22mbDF5MFhgMKsJg7k79dKp08ddvOn1h2y/+OGrHHPzAffccdmJI/eTRu4nDwaDUSMvD83aNn5w7HGjBmNmbr+7hRdcaGjRwWDVkacjxxmsOetu0fNn7zdjruYe6NDdN/vN+pnZYsO/YvjBVw7Y5+DBYDBujvcPDQZD0+71QaVtM2nqlLut7nIbtho78njOn/lm/Sx61mCw6AkDPj/m3HdoHnyk4d857SmnjN10Hvzu/7m2mTR1o7n8h9fi6JFtaw6v8bnXoLG5z/Nrl9t27ZEpnHm+DQbDl7h7rJX/ibaZNGXjwX1f5weHrHPGfjNmXTfnH8z6olhwMBgsNHJ9XWReu9R/1qTJq838zp79fIR99rk8jc6Lb7z8qDuHv6QHg8ESg8H4DWd/F1RVVdX/RpMmr7YefP8vcH/f/0cfvfQJff9XVVX977bRpMmrDX/Xz/X9v8j9ff/vvvSZ75713/4nrjnrXXfO2w9RVVVV/1JTNsLv/3H39/2/5nrnbtz3f1VV1f9um28y8/t/kbm+/5e8v+//lxy1zjIj+83+c8MdcxxyaI7/PeH2ObaPnmP7bXNsHzvHcebcf745tt8yx/b5h1+D/ScMBuNn/3vB6XdvHj9h+LWR7bfOsX3i3f9OZ9n159g+aY7tU+bYPnlkrMPbp86xfeoc+294P1NdVVX1oGnz1aasN5jj39mPbF5q9uv0/X/6ib9dcV6Nt6qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqv43u/P6k04ZDAZDg8Fg1GAwfTDyeM77wYwZM2YMPz/6tPPOm2cDfXA0dOqlU6ePu3jT6w/ZfvHDVznm5gPunqX/2f73P0H9Jw37L3DEhMFgt63m9VBqHtT6d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3F3Xn/SKSPnwKjBYPpg5PG02fcn7v/il47suvbWx9x44N3vXHbiLiOPTr106vRd5sHY50FDw5913MWbXn/I9osfvsoxNx/wEFg9//ufoP6TZvrvMjQYjKzvccNredNJm2+5wmAwOPDGY7ZeY3DXa2sNv7bO+NGD0TPfusLM2w2W5QNP23DW/cThmyXvOsbRM4+/0YyDRg/NNYg5etapVxzyqm1uXn3u++Xv+3OMmv3g4MuOv2nGjBkz7rFxpAXu482zjz/7s8y9zkfGvsLw2FfaY9fXr/TGvd664i67brfzjjvvuNsqq621+hqrrrLG2s9YaaddXrvjyrNu72POJsy8Xe+BzNkic8/Z9ZPmnLO5P9t9zdmE+5+zmUec/tahLWfP2Zh/cc7Wu/85m7DLyC9aduLYwbYzp2ZoMFh2/bGDPYefrDL/YLDsBiP7LjW877rjRw0G+9/9QYcfzX/XOTg0bXifbaZsMfnukd37E97rOn2PHZedOHI/aeR+8qwhThjcfSqOHxx73KjhubjHNC+84EJDiw4Gq448HTnOYO2RV788e78ZczX3QIfuvtlv1s/MFhs+yPCDV6980iXDa3Gu9///6N+6/t/La62huyZqaORnZJ9ZXpOmbnT375o5DcNzN3pk25rDJnPP2f9l9xrvhDGDcfcz3ikbTV5tePNc8z/7LXh+3bDcGW+bdW5NXHPWu+78t1FovIvcz3g3moTjXeT+xnvE2885btah/s/GO9e1buOZtxMfyLVucP/XutF0gB3PXmbua93z7nuI91jHs+do/rl2uq9r3Z6fWnXa8PEn3v+1buPhsY+9x7Vu1GCw7Hqzr3XDF74pYwf7Dz9ZdfjJ1LGDw4efrDbzyYKD04afPP2Vr3vtDsMbNpw9JysPH3fi+KGZ7mesec3yMz4+Y8b6I2OZOP6eYx05PybM+X0+afysyZz93tnHHd519nGvfuSs16aMHHfSv3Dc2e+l8d642KzXpo4cd/Jcxx17P8ed/d57rYcVhu66cN3H9WbKXNebkb/jzP519/iZb9bPomcNBoueQL5z7ftPr5m0fhe4n/FOmrzaesPjm2v93nU60vo9Z+rFw98Viw4GgyUGg/Ebzh77v9jQfY13zP2PdzKMd8z9jfeCr+26yf/BeAdzjPce59k2m886VzYcOc+m/gvn7+z3zn0dGzvz1VmX/Q0fyHVswr2uY3uPHjXXZM/Rff2ZbQfYf9bjpe7+c+6l3zxs9tyPneu4/+zPbHN8liG4jo2b6+/zoza8fDBEcz7tiHXPHfrEjBkbjgyA5nzs4J5/t5g957Pfe39zPvWBzPlj7n/OH+ifk1d44qzXx841/jnnfLMPPfqDs+d8vrmO+8/mfOr9f3fce84nDsbSnK9826x5u7/r6X3N+ez3zp7z4Y+4zvgxgw2Gv7NG5nzKA5nzpf5vzvOFYP9Zj3e8a9PJhxzzwtlzPvcc/7M5n/KvzvmEu87zZWe+9oRRg/nmG+y53R577L7KrNvZT1eddcvXolsunTXP9/ddel9Gs997f+ti/QdiNO4BGQ39M6Olx9yX0d1L66uv2/0R/+61aP1/1WjA16KLD5s1b/f356L7mvPZ76XvwSXneP/cfw/dfJOZf+5eZK7vwdlvwe/Bk0/ceN/Zhxx52x1zDXP29+rtc2wfPcf22+bYPnaO48y5/3xzbL9lju3DH2G+OfafzTph+O+8I9un3737+OE/PE0Y2X7rHNsn3v3eZdefY/ukObZPmWP75LtPjWWnzrF96hz7bzj4F5v936R3mfsiXw+0/vuvu/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7If4F5MI6aN7X+3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i7vz+pNOGTkHRg0G0wezHg+N3A+mDW123XOG7weDwdg1j5yx2bwe7zxu6NRLp04fd/Gm1x+y/eKHr3LMzQc8BFbP//4nqP+kmf67DA0GI+t73C6DwWDTSZtvucJgMNhsxpFrjhrc9dpSw6+tO37UYLD/0D0OMP9d+wxNG95nmylbTL77n5FPuNcvvdc6useOy04cuZ80cj951vVpwuDu83X84NjjRg3GzNx+dwsvuNDQooPBqiNPR44zWHPW3aLnz95vxlzNPdChu2/2m/Uzs8WGf8Xwgz13nvrY4bma6/0PmmZfq3cZ9U93bf27y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uDuvP+mUkXNg1GAwfTDr8dC0kfvB0FHHPnnkFBm714WHHjSvxzuPGzr10qnTx1286fWHbL/44ascc/MBD4HV87//Ceo/aab/LkODwcj6HrfLYDDYdNLmW64wGAwOOvTCvUYN7nptqeHX1h0/ajDYf+geB5j/rn2Gpg3vs82ULSYPBguM7DHhXr/0XuvoHjsuO3HkftLI/eRZ16cJg7vP1/GDY48bNRgzc/vdLbzgQkOLDgarjjwdOc5gzVl3i54/e78ZczX3QIfuvtlv1s/MFhv+FcMP9lnk0qOG52qu9//Xu6/FO/tavcuof/sQ5Sh/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXv7t/1H/N/PI6aN7X+3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/4b/P/8/la7/mVr/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/k3/GaP/rwdS86TWv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLu/P6k04ZOQdGDQbTB7Mejxq5H5p21ZXv3HL4fvj54hvue+m8Hu88bujUS6dOH3fxptcfsv3ih69yzM0HPARWz//+J6j/pGH/BY6YMBjsttW8HkrNg1r/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7O6086ZeThqLu3jprWeYENnXrp1OnjLt70+kO2X/zwVY65+YB5PaD/tPvw3zt/zOL/7vwxi/978scs/u/NH7P475M/ZvF/X/6YxX/f/DGL//vzxx6q/uPm8v9A/thD1X8wl/9++WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n890f/If05YfE/oPWPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwPzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/QfljFv+v5I9Z/A/OH7P4fzV/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5fyx+z+B+RP2bx/3r+mMX/G/ljFv8j88cs/t/MH7P4H5U/ZvE/On/M4v+t/DGL/7fzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/nfwxi/8J+WMW/xPzxyz+J+WPWfy/mz9m8f9e/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/h/P39oPo3/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP5n5I9Z/M/MH7P4/zR/zOJ/Vv6Yxf9n+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/n+ePWfx/kT9m8f9l/pjF/+L8MYv/JfljFv9f5Y9Z/H+dP2bxvzR/zOL/m/wxi/9v88cs/pflj1n8L88fs/j/Ln/M4n9F/pjF/8r8MYv/VfljFv/f549Z/P+QP2bx/6POf4EHtJfF/2qd/wPL4v+n/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zl/zOJ/Q/6Yxf/G/DGL/1/yxyz+N+WPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL//T8MYv/HfljFv8788cs/jPyxyT+owf5Yxb/ofwxi/+o/DGL/+j8MYv/mPwxi//Y/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/w/LHLP6L5Y9Z/Mflj1n8F88fs/iPzx+z+C+RP2bxXzJ/zOL/8Pwxi/8j8scs/o/MH7P4L5U/ZvF/VP6YxX/p/DGL/6Pzxyz+j8kfs/gvkz9m8X9s/pjF/3H5Yxb/CfljFv/H549Z/J+QP2bxf2L+mMV/2fwxi/9y+WMW/yflj1n8l88fs/ivkD9m8X9y/pjF/yn5Yxb/p+aPWfyflj9m8V8xf8zi//T8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8zi/4z8MYv/GvljFv8188cs/mvlj1n8184fs/g/M3/M4r9O/pjFf93852qBmbcW/2flj1n8n50/ZvF/Tv6YxX9i/pjFf1L+mMV/cv6YxX+9/DGL//r5Yxb/DfLHLP5T8scs/lPzxyz+G+aPWfw3yh+z+D83f8zi/7z8MYv/xvljFv9N8scs/pvmj1n8n58/ZvHfLH/M4v+C/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4vzB/zOK/df6YxX+b/DGL/4vyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+L88fs/i/In/M4r9t/pjFf7v8MYv/9vljFv9X5o9Z/HfIH7P475g/ZvHfKX/M4r9z/pjF/1X5Yxb/XfLHLP6vzh+z+L8mf8zi/9r8MYv/rvljFv/d8scs/q/LH7P4vz5/zOL/hvwxi//u+WMW/zfmj1n898gfs/i/KX/M4v/m/DGL/1vyxyz+e+aPWfz3yh+z+L81f8zi/7b8MYv/2/PHLP7vyB+z+L8zf8zi/678MYv/tPwxi//e+WMW/3fnj1n835M/ZvF/b/6YxX+f/DGL//vyxyz+++aPWfzfnz9m8f9A/pjFf7/8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/R/PHLP77549Z/A/IH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4H5g/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/4Pyxyz+X8kfs/gfnD9m8f9q/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8v5Y/ZvE/In/M4v/1/DGL/zfyxyz+R+aPWfy/mT9m8T8qf8zif3T+mMX/W/ljFv9v549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/zv5Yxb/E/LHLP4n5o9Z/E/KH7P4fzd/zOL/vfwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv8z8scs/mfmj1n8f5o/ZvE/K3/M4v+z/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/PHLP6/yB+z+P8yf8zif3H+mMX/kvwxi/+v8scs/r/OH7P4X5o/ZvH/Tf6Yxf+3+WMW/8vyxyz+l+ePWfx/lz9m8b8if8zif2X+mMX/qvwxi//v88cs/n/IH7P4/zF/zOJ/df6Yxf9P9/Kf/787rgdpFv9rWv+Yxf/a/DGL/3X5Yxb/6/PHLP5/zh+z+N+QP2bxvzF/zOL/l/wxi/9N+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOI/PX/M4n9H/pjF/878MYv/jPwxif+YQf6YxX8of8ziPyp/zOI/On/M4j8mf8ziPzZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4v+w/DGL/2L5Yxb/cfljFv/F88cs/uPzxyz+S+SPWfyXzB+z+D88f8zi/4j8MYv/I/PHLP5L5Y9Z/B+VP2bxXzp/zOL/6Pwxi/9j8scs/svkj1n8H5s/ZvF/XP6YxX9C/pjF//H5Yxb/J+SPWfyfmD9m8V82f8ziv1z+mMX/SfljFv/l88cs/ivkj1n8n5w/ZvF/Sv6Yxf+p+WMW/6flj1n8V8wfs/g/PX/M4r9S/pjFf+X8MYv/KvljD23/MbO3jlk1f+yh7X9XY1bLH7P4r54/ZvF/Rv6YxX+N/DGL/5r5Yxb/tfLHLP5rz/IfPa+G9WDN4v/M1j9m8V8nf8ziv27+mMX/WfljFv9n549Z/J+TP2bxn5g/ZvGflD9m8Z+cP2bxXy9/zOK/fv6YxX+D/DGL/5T8MYv/1Pwxi/+G+WMW/43yxyz+z80fs/g/L3/M4r9x/pjFf5P8MYv/pvljFv/n549Z/DfLH7P4vyB/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP4vzB+z+G+dP2bx3yZ/zOL/ovwxi/+L88cs/i/JH7P4vzR/zOL/svwxi//L88cs/q/IH3to+p+wyFxbx2ybP/bQ9J/VnOt/u/wxi//2+WMW/1fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/VfljFv9d8scs/q/OH7P4vyZ/zOL/2vwxi/+u+WMW/93yxyz+r8sfs/i/Pn/M4v+G/DGL/+75Yxb/N+aPWfz3yB+z+L8pf8zi/+b8MYv/W/LHLP575o9Z/PfKH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4vzN/zOL/rvwxi/+0/DGL/975Yxb/d+ePWfzfkz9m8X9v/pjFf5/8MYv/+/LHLP775o9Z/N+fP2bx/0D+mMV/v/wxi/8H8x+MgW0W/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW//3zxyz+B+SPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfwPzB+z+H8qf8zi/+n8MYv/Z/LHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/QfljFv+v5I9Z/A/OH7P4fzV/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5fyx+z+B+RP2bx/3r+mMX/G/ljFv8j88cs/t/MH7P4H5U/ZvE/On/M4v+t/DGL/7fzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOL/nfwxi/8J+WMW/xPzxyz+J+WPWfy/mz9m8f9e/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/h/P3/M4v+D/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/xn5Yxb/M/PHLP4/zR+z+J+VP2bx/1n+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/n+WMW/1/kj1n8f5k/ZvG/OH/M4n9J/pjF/1f5Yxb/X+ePWfwvzR+z+P8mf8zi/9s5/XdacB4M7MGZxf+y1j9m8b88f8zi/7v8MYv/FfljFv8r88cs/lflj1n8f58/ZvH/Q/6Yxf+P+WMW/6vzxyz+f8ofs/hfkz9m8b82f8zif13+mMX/+vwxi/+f88cs/jfkj1n8b8wfs/j/JX/M4n9T/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/hPzx+z+N+RP2bxvzN/zOI/I39M4j92kD9m8R/KH7P4j8ofs/iPzh+z+I/JH7P4j80fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+D8sf8ziv1j+mMV/XP6YxX/x/DGL//j8MYv/EvljFv8l88cs/g/PH7P4PyJ/zOL/yPwxi/9S+WMW/0flj1n8l84fs/g/On/M4v+Y/DGL/zL5Yxb/x+aPWfwflz9m8Z+QP2bxf3z+mMX/CfljFv8n5o9Z/JfNH7P4L5c/ZvF/Uv6YxX/5/DGL/wr5Yxb/J+ePWfyfkj9m8X9q/pjF/2n5Yxb/FfPHLP5Pzx+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP7PyB+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zPzxyz+6+SPWfzXzR+z+D8rf8zi/+z8MYv/c/LHLP4T88cs/pPyxyz+k/PHLP7r5Y9Z/NfPH7P4b5A/ZvGfkj9m8Z+aP2bx3zB/zOK/Uf6Yxf+5+WNz+4+Z1wP6T7sP/+flj1nW/8b5Yxb/TfLHLP6b5o9Z/J+fP2bx3yx/zOL/gvwxi//m+WMW/y3yxyz+W+aPWfy3yh+z+L8wf8ziv3X+mMV/m/wxi/+L8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/i/PH7P4vyJ/zOK/bf6YxX+7/DGL//b5Yxb/V+aPWfx3yB+z+O+YP2bx3yl/zOK/c/6Yxf9V+WMW/13yxyz+r84fs/i/Jn/M4v/a/DGL/675Yxb/3R6I/7j/j+N6kGbxf13rH7P4vz5/zOL/hvwxi//u+WMW/zfmj1n898gfs/i/KX/M4v/m/DGL/1vyxyz+e+aPWfz3yh+z+L81f8zi/7b8MYv/2/PHLP7vyB+z+L8zf8zi/678MYv/tPwxi//e+WMW/3fnj1n835M/ZvF/b/7YQ9t/7OytY/fJH3to+9/V2Pflj1n8980fs/i//379R///H9eDNIv/B1r/mMV/v/wxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/vvnj1n8D8gfs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/gfmD9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/g/LHLP5fyR+z+B+cP2bx/2r+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfy/lj9m8T8if8zi//X8MYv/N/LHLP5H5o9Z/L+ZP2bxPyp/zOJ/dP6Yxf9b+WMW/2/nj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/O/ljFv8T8scs/ifmj1n8T8ofs/h/N3/M4v+9/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/zPyxyz+Z+aPWfx/mj9m8T8rf8zi/7P8MYv/2fljFv9z8seG/Yfn5aHuf27+mGX9n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+f549Z/H+RP2bx/2X+mMX/4vwxi/8l+WMW/1/lj1n8f50/ZvG/NH/M4v+b/DGL/2/zxyz+l+WPWfwvzx+z+P8uf8zif0X+mMX/yvwxi/9V+WMW/9/nj1n8/5A/ZvH/Y/6Yxf/q/DGL/5/yxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOL/5/wxi/8N+WMW/xvzxyz+f8kfs/jflD9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+0/PHLP535I9Z/O/MH7P4z8gfk/jPN8gfs/gP5Y9Z/Eflj1n8R+ePWfzH5I9Z/Mfmj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwflj9m8V8sf8ziPy5/zOK/eP6YxX98/pjFf4n8MYv/kvljFv+H549Z/B+RP2bxf2T+mMV/qfwxi/+j8scs/kvnj1n8H50/ZvF/TP6YxX+Z/DGL/2Pzxyz+j8sfs/hPyB+z+D8+f8zi/4T8MYv/E/PHLP7L5o9Z/Jeby//OGTNm/LeH9mDM4v+k1j9m8V8+f8ziv0L+mMX/yfljFv+n5I9Z/J+aP2bxf1r+mMV/xfwxi//T88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8z8scs/mvkj1n818wfs/ivlT9m8V87f8zi/8z8MYv/OvljFv9188cs/s/KH7P4Pzt/zOL/nPwxi//E/DGL/6T8MYv/5Pwxi/96+WMW//Xzxyz+G+SPWfyn5I9Z/Kfmj1n8N8wfs/hvlD9m8X9u/pjF/3n5Yxb/jfPHLP6b5I9Z/DfNH7P4Pz9/zOK/Wf6Yxf8F+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bxf2H+mMV/6/wxi/82+WMW/xflj1n8X5w/ZvF/Sf6Yxf+l+WMW/5flj1n8X273H8WbLf6vsPvfRxb/bfPHLP7b5Y9Z/LfPH7P4vzJ/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6vyh+z+O+SP2bxf3X+mMX/NfljFv/X5o9Z/HfNH7P475Y/ZvF/Xf6Yxf/1+WMW/zfkj1n8d88fs/i/MX/M4r9H/pjF/035Yxb/N+ePWfzfkj9m8d8zf8ziv1f+mMX/rfljFv+35Y9Z/N+eP2bxf0f+mMX/nfljFv935Y9Z/Kflj1n8935g/qP/v43rQZrF/92tf8zi/578MYv/e/PHLP775I9Z/N+XP2bx3zd/zOL//vwxi/8H8scs/vvlj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvHfP3/M4n9A/pjF/2P5Yxb/j+ePWfw/kT9m8f9k/pjF/8D8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+B+UP2bx/0r+mMX/4Pwxi/9X88cs/ofkj1n8D80fs/gflj9m8T88f8zi/7X8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOL/zfwxi/9R+WMW/6Pzxyz+38ofs/h/O3/M4n9M/pjF/9j8MYv/cfljFv/j88cs/t/JH7P4n5A/ZvE/MX/M4n9S/pjF/7v5Yxb/7+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/ifkT9m8T8zf8zi/9P8MYv/WfljFv+f5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8f54/ZvH/Rf6Yxf+X+WMW/4vzxyz+l+SPWfx/lT9m8f91/pjF/9L8MYv/b/LHLP6/zR+z+F+WP2bxvzx/zOL/u/wxi/8V+WMW/yvzxyz+V+WPWfx/nz9m8f9D/pjF/4/5Yxb/q/PHLP5/yh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/5/zxyz+N+SPWfxvzB+z+P8lf8zif1P+mMX/r/ljFv+/5Y9Z/P+eP2bx/0f+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+E/PH7P435E/ZvG/M3/M4j8jf0ziP/8gf8ziP5Q/ZvEflT9m8R+dP2bxH5M/ZvEfmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxf1j+mMV/sfwxi/+4/DGL/+L5Yxb/8fljFv8l8scs/kvmj1n8H54/ZvF/RP6Yxf+R+WMW/6Xyxyz+j8ofs/gvnT9m8X90/pjF/zH5Yxb/ZfLHLP6PzR+z+D8uf8ziPyF/zOL/+Pwxi/8T8scs/k/MH7P4L5s/ZvFfLn/M4v+k/DGL//L5Yxb/FfLHLP5Pzh+z+D8lf8zi/9T8MYv/0/LHLP4r5o9Z/J+eP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/J+RP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/Z+aPPeT852Ce03+d/LGHnP99rP9188cs/s/KH7P4Pzt/zOL/nPwxi//E/DGL/6T8MYv/5Pwxi/96+WMW//Xzxyz+G+SPWfyn5I9Z/Kfmj1n8N8wfs/hvlD9m8X9u/pjF/3n5Yxb/jfPHLP6b5I9Z/DfNH7P4Pz9/zOK/Wf6Yxf8F+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bxf2H+mMV/6/wxi/82+WMW/xc5/Uf/sx0s/i92+v/TLP4vyR+z+L80f8zi/7L8MYv/y/PHLP6vyB+z+G+bP2bx3y5/zOK/ff6Yxf+V+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bxf1X+mMV/l/wxi/+r88cs/q/JH7P4vzZ/zOK/a/6YxX+3/DGL/+vyxyz+r88fs/i/IX/M4r97/pjF/435Yxb/PfLHHsL+0+b0f1P+2EPY/x7r/835Yxb/t+SPWfz3zB+z+O+VP2bxf2v+mMX/bfljFv+3549Z/N+RP2bxf2f+mMX/XfljFv9p+WMW/73zxyz+784fs/i/J3/M4v/e/DGL/z75Yxb/9+WPWfz3zR+z+L8/f8zi/4H8MYv/fvljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/PfPH7P4H5A/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvE/MH/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxx56/vOj/0H5Yw89f17/X8kfs/gfnD9m8f9q/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8v5Y/ZvE/In/M4v/1/DGL/zfyxyz+R+aPWfy/mT9m8T8qf8zif3T+mMX/W/ljFv9v549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/zv5Yxb/E/LHLP4n5o9Z/E/KH7P4fzd/zOL/vfwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv8z8scs/mfmj1n8f5o/ZvE/K3/M4v+z/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/z/PHLP6/yB+z+P8yf8zif3H+mMX/kvwxi/+v8scs/r/OH7P4X5o/ZvH/Tf6YxP9dg/wxif/8l+WPWfwvzx+z+P8uf8zif0X+mMX/yvwxi/9V+WMW/9/nj1n8/5A/ZvH/Y/5zNWbmrcX/6vwxi/+f8scs/tfkj1n8r80fs/hflz9m8b8+f8zi/+f8MYv/DfljFv8b88cs/n/JH7P435Q/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/tPzxyz+d+SPWfzvzB+z+M/IH5P4LzDIH7P4D+WPWfxH5Y9Z/Efnj1n8x+SPWfzH5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8H5Y/ZvFfLH/M4j8uf8ziv3j+mMV/fP6YxX+J/DGL/5L5Yxb/h+ePWfwfkT9m8X9k/pjFf6n8MYv/o/LHLP5L549Z/B+dP2bxf0z+mMV/mfwxi/9j88cs/o/LH7P4T8gfs/g/Pn/M4v+E/DGL/xPzxyz+y+aPWfyXyx+z+D8pf8ziv3z+mMV/hfwxi/+T88cs/k/JH7P4PzV/zOL/tPwxi/+K+WMW/6fnj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/2fkj1n818gfs/ivmT9m8V8rf8ziv3b+mMX/mfljFv918scs/uvmj1n8n5U/ZvF/dv6Yxf85+WMW/4n5Yxb/SfljFv/J+WMW//X+uf/yxvPD4r9+6x+z+G+QP2bxn5I/ZvGfmj9m8d8wf8ziv1H+mMX/ufljFv/n5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/8/DGL/2b5Yxb/F+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+F+WMW/63zxyz+2+SPWfxflD9m8X9x/pjF/yX5Yxb/l+aPWfxflj9m8X95/pjF/xX5Yxb/bfPHLP7b5Y9Z/LfPH7P4vzJ/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6vyh+z+O+SP2bxf3X+mMX/NfljFv/X5o9Z/HfNH7P475Y/ZvF/Xf6Yxf/1+WMW/zeo/B/4J7X4767yf+BZ/N+YP2bx3yN/zOL/pvwxi/+b88cs/m/JH7P475k/ZvHfK3/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4v/O/DGL/7vyxyz+0/LHLP57549Z/N+dP2bxf0/+mMX/vfljFv998scs/u/LH7P475s/ZvF/f/6Yxf8D+WMW//3yxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+H53tP20ejetBmsV//9Y/ZvE/IH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4n9g/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfwPyh+z+H8lf8zif3D+mMX/q/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8f9a/pjF/4j8MYv/1/PHLP7fyB+z+B+ZP2bx/2b+mMX/qPwxi//R+WMW/2/lj1n8v50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv/v5I9Z/E/IH7P4n5g/ZvE/KX/M4v/d/DGL//fyxyz+J+ePWfxPyR+z+J+aP2bxP+2e/gv818f1IM3if3rrH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/8Z+WMW/zPzxyz+P80fs/iflT9m8f9Z/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/5/ljFv9f5I9Z/H+ZP2bxvzh/zOJ/Sf6Yxf9X+WMW/1/nj1n8L80fs/j/Jn/M4v/b/DGL/2X5Yxb/y/PHLP6/yx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/3+WMW/z/kj1n8/5g/ZvG/On/M4v+n/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P4/zl/zOJ/Q/6Yxf/G/DGL/1/yxyz+N+WPWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL//T8MYv/HfljFv8788cs/jPyxyT+Cw7yxyz+Q/ljFv9R+WMW/9H5Yxb/MfljFv+x+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/h+WPWfwXyx+z+I/LH7P4L54/ZvEfnz9m8V8if8ziv2T+mMX/4fljFv9H5I9Z/B+ZP2bxXyp/zOL/qPwxi//S+WMW/0fnj1n8H5M/ZvFfJn/M4v/Y/DGL/+Pyxyz+E/LHLP6Pzx+z+D8hf8zi/8T8MYv/svljFv/l8scs/k/KH7P4L58/ZvFfIX/M4v/k/DGL/1Pyxyz+T80fs/g/LX/M4r9i/pjF/+n5Yxb/le7Lf+//0rgepFn8V279Yxb/VfLHLP6r5o9Z/FfLH7P4r54/ZvF/Rv6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/J+ZP2bxXyd/zOK/bv6Yxf9Z+WMW/2fnj1n8n5M/ZvGfmD9m8Z+UP2bxn5w/ZvFfL3/M4r9+/pjFf4P8MYv/lPwxi//U/DGL/4b5Yxb/jfLHLP7PzR+z+D8vf8ziv3H+mMV/k/wxi/+m+WMW/+fnj1n8N8sfs/i/IH/M4r95/pjFf4v8MYv/lvljFv+t8scs/i/MH7P4b50/ZvHfJn/M4v+i/DGL/4vzxyz+L8kfs/i/NH/M4v+y/DGL/8vzxyz+r8gfs/hvmz9m8d8uf8ziv33+mMX/lfljFv8d8scs/jvmj1n8d8ofs/jvnD9m8X9V/pjFf5f8MYv/q/PHLP6vyR+z+L82f8ziv2v+mMV/t/wxi//r8scs/q/PH7P4vyF/zOK/e/6Yxf+N+WMW/z3yxyz+b8ofs/i/OX/M4v+W/DGL/575Yxb/vfLHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP7vzB+z+L8rf8ziPy1/zOK/d/6Yxf/d+WMW//fkj1n835s/ZvHfJ3/M4v++/DGL/775Yxb/9+ePWfw/kD9m8d8vf8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv//vljFv8D8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/gfmj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf+g/DGL/1fyxyz+B+ePWfy/mj9m8T8kf8zif2j+mMX/sPwxi//h+WMW/6/lj1n8j8gfs/h/PX/M4v+N/DGL/5H5Yxb/b+aPWfyPyh+z+B+dP2bx/1b+mMX/2/ljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9O/pjF/4T8MYv/ifljFv+T8scs/t/NH7P4fy9/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/jPwxi/+Z+WMW/5/mj1n8z8ofs/j/LH/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zi//P8MYv/L/LHLP6/zB+z+F+cP2bxvyR/zOL/q/wxi/+v88cs/pfmj1n8f5M/ZvH/bf6Yxf+y/DGL/+X5Yxb/3+WPWfyvyB+z+F+ZP2bxvyp/zOL/+/wxi/8f8scs/n/MH7P4X50/ZvH/U/6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/P+cP2bxvyF/zOJ/Y/6Yxf8v+WMW/5vyxyz+f80fs/j/LX/M4v/3/DGL/z/yxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6YxX96/pjF/478MYv/nfljFv8Z+WMS/4UG+WMW/6H8MYv/qPwxi//o/DGL/5j8MYv/2Pwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/8Pyxyz+i+WPWfzH5Y9Z/BfPH7P4j88fs/gvkT9m8V8yf8zi//D8MYv/I/LHLP6PzB+z+C+VP2bxf1T+mMV/6fwxi/+j88cs/o/JH7P4L5M/ZvF/bP6Yxf9x+WMW/wn5Yxb/x+ePWfyfkD9m8X9i/pjFf9n8MYv/cvljFv8n5Y9Z/JfPH7P4r5A/ZvF/cv6Yxf8p+WMW/6fmj1n8n5Y/ZvFfMX/M4v/0/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4v+M/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4PzN/zOK/Tv6YxX/d/DGL/7Pyxyz+z84fs/g/J3/M4j8xf8ziPyl/zOI/OX/M4r9e/pjFf/38MYv/BvljFv8p+WMW/6n5Yxb/DfPHLP4b5Y9Z/J+bP2bxf17+mMV/4/wxi/8m+WMW/03zxyz+z88fs/hvlj9m8X9B/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8X5g/ZvHfOn/M4r9N/pjF/0X5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/l+ePWfxfkT9m8d82f8ziv13+mMV/+/wxi/8r88cs/jvkj1n8d8wfs/jvlD9m8d85f8zi/6r8MYv/LvljFv9X39v/2f/VcT1Is/i/pvWPWfxfmz9m8d81f8ziv1v+mMX/dfljFv/X549Z/N+QP2bx3z1/zOL/xvwxi/8e+WMW/zflj1n835w/ZvF/S/6YxX/P/DGL/175Yxb/t+aPWfzflj9m8X97/pjF/x35Yxb/d+aPWfzflT9m8Z+WP2bx3zt/zOL/7vwxi/97XP6jH+iOFv/3uvwfcBb/ffLHLP7vyx+z+O+bP2bxf3/+mMX/A/ljFv/98scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4758/ZvE/IH/M4v+x/DGL/8fzxyz+n8gfs/h/Mn/M4n9g/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfwPyh+z+H8lf8zif3D+mMX/q/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8f9a/pjF/4j8MYv/1/PHLP7fyB+z+B+ZP2bx/2b+mMX/qPwxi//R+WMW/2/lj1n8v50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv/v5I9Z/E/IH7P4n5g/ZvE/KX/M4v/d/DGL//fyxyz+J9+3/5j/yrgepFn8T2n9Yxb/U/PHLP6n5Y9Z/E/PH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/8Z+WMW/zPzxyz+P80fs/iflT9m8f9Z/pjF/+z8MYv/OfljFv9z79t/xp3/lYE9OLP4n9f6xyz+5+ePWfwvyB+z+F+YP2bxvyh/zOL/8/wxi/8v8scs/r8c/qwzZsyrUT1os/hf3PrHLP6X5I9Z/H+VP2bx/3X+mMX/0vwxi/9v8scs/r/NH7P4X5Y/ZvG/PH/M4v+7/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+fP2bx/0P+mMX/j/ljFv+r88cs/n/KH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/n/PHLP435I9Z/G/MH7P4/yV/zOJ/U/6Yxf+v+WMW/7/lj1n8/54/ZvH/R/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P4T88fs/jfkT9m8b8zf8ziPyN/TOK/8CB/zOI/lD9m8R+VP2bxH50/ZvEfkz9m8R+bP2bxny9/bOjUS4fn5SHvP3/+mGX9L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/g/LH7P4L5Y/ZvEflz9m8V88f8ziPz5/zOK/RP6YxX/J/DGL/8Pzxyz+j8gfs/g/Mn/M4r9U/pjF/1H5Yxb/pfPHLP6Pzh+z+D8mf8ziv0z+mMX/sfljFv/H5Y9Z/Cfkj1n8H58/ZvF/Qv6Yxf+J+WMW/2Xzxyz+y+WPWfyflD9m8V8+f8ziv0L+mMX/yfljFv+n5I9Z/J+aP2bxf1r+mMV/xfwxi//T88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8z8scs/mvkj1n818wfs/ivlT9m8V87f8zi/8z8MYv/OvljFv9188cs/s/KH7P4Pzt/zOL/nPwxi//E/DGL/6T8MYv/5Pwxi/96+WMW//Xzxyz+G+SPWfynqP3H3OcrFv+pav/7zuK/Yf6YxX+j/DGL/3Pzxyz+z8sfs/hvnD9m8d8kf8ziv2n+mMX/+fljFv/N8scs/i/IH7P4b54/ZvHfIn9sbv/R83pA/2n34b9l/phl/W+VP2bxf2H+mMV/6/wxi/82+WMW/xflj1n8X5w/ZvF/Sf6Yxf+l+WMW/5flj1n8X54/ZvF/Rf6YxX/b/DGL/3b5Yxb/7fPHLP6vzB+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/6vyxyz+u+SPWfxfnT9m8X9N/pjF/7X5Yxb/XfPHLP675Y9Z/F+XP2bxf33+mMX/DfljFv/d88cs/m/MH7P475E/ZvF/U/6Yxf/N+WMW/7fkj1n898wfs/jvlT9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8X9n/pjF/135Yxb/afljFv+988cs/u/OH7P4vyd/zOL/3vwxi/8++WMW//flj1n8980fs/i/P3/M4v+B/DGL/375Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfz3zx+z+B+QP2bx/1j+mMX/4/ljFv9P5I9Z/D+ZP2bxPzB/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/gflj1n8v5I/ZvE/OH/M4v/V/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4fy1/zOJ/RP6Yxf/r+WMW/2/kj1n8j8wfs/h/M3/M4n9U/pjF/+j8MYv/t/LHLP7fzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/3fyxyz+J+SPWfxPzB+z+J+UP2bx/27+mMX/e/ljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zi//38MYv/D/LHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP5n5I9Z/M/MH7P4/zR/zOJ/Vv6Yxf9n+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/n+ePWfx/kT9m8f9l/pjF/+L8MYv/JfljFv9f5Y9Z/H+dP2bxvzR/zOL/m/wxi/9v88cs/pflj1n8L88fs/j/Ln/M4n9F/pjF/8r8MYv/VfljFv/f549Z/P+QP2bx/2P+mMX/6vwxi/+f8scs/tfkj1n8r80fs/hflz9m8b8+f8zi/+f8MYv/DfljFv8b88cs/n/JH7P435Q/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/tPzxyz+d+SPPYT95+Re+M78sYew/z3W/4z8MYn/IoP8MYv/UP6YxX9U/pjFf3T+mMV/TP6YxX9s/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+0EWLzLp/6Ps/LH/Msv4Xyx+z+I/LH7P4L54/ZvEfnz9m8V8if8ziv2T+mMX/4fljFv9H5I9Z/B+ZP2bxXyp/zOL/qPwxi//S+WMW/0fnj1n8H5M/ZvFfJn/M4v/Y/DGL/+Pyxyz+E/LHLP6Pzx+z+D8hf8zi/8T8MYv/svljFv/l8scs/k/KH7P4L58/ZvFfIX/M4v/k/DGL/1Pyxyz+T80fs/g/LX/M4r9i/pjF/+n5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/xn5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvF/Zv6YxX+d/DGL/7r5Yxb/Z+WPWfyfnT9m8X9O/pjFf2L+mMV/Uv6YxX9y/pjFf738MYv/+vljFv8N8scs/lPyxyz+U/PHLP4b5o9Z/DfKH7P4Pzd/zOL/vPwxi//G+WMW/03yxyz+m+aPWfyfnz9m8d8sf8zi/4L8MYv/5vljFv8t8scs/lvmj1n8t8ofs/i/MH/M4r91/pjFf5v8MYv/i/LHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP4vzx+z+L8if8ziv23+mMV/u/wxi//2+WMW/1fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/VfljFv9d8scs/q/OH7P4vyZ/zOL/2vwxi/+u+WMW/93yxyz+r8sfs/i/Pn/M4v+G/DGL/+75Yxb/N+aPWfz3yB+z+L8pf8zi/+b8MYv/W/LHLP575o9Z/PfKH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4vzN/zOL/rvwxi/+0/DGL/975Yxb/d+ePWfzfkz9m8X9v/pjFf5/8MYv/+/LHLP775o9Z/N+fP2bx/0D+mMV/v/wxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/vvnj1n8D8gfs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/gfmD9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/tiw/2AwmPZQ9/98/phl/X8hf8zi/8X8MYv/l/LHLP5fzh+z+B+UP2bx/0r+mMX/4Pwxi/9X88cs/ofkj1n8D80fs/gflj9m8T88f8zi/7X8MYv/EfljFv+v549Z/L+RP2bxPzJ/zOL/zfwxi/9R+WMW/6Pzxyz+38ofs/h/O3/M4n9M/pjF/9j8MYv/cfljFv/j88cs/t/JH7P4n5A/ZvE/MX/M4n9S/pjF/7v5Yxb/7+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/ifkT9m8T8zf8zi/9P8MYv/WfljFv+f5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8f54/ZvH/Rf6Yxf+X+WMW/4vzxyz+l+SPWfx/lT9m8f91/pjF/9L8MYv/b/LHLP6/zR+z+F+WP2bxvzx/zOL/u/wxi/8V+WMW/yvzxyz+V+WPWfx/nz9m8f9D/pjF/4/5Yxb/q/PHLP5/yh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6e/jfOeO/P7AHZxb/P7f+MYv/DfljFv8b88cs/n/JH7P435Q/ZvH/a/6Yxf9v+WMW/7/nj1n8/5E/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/tPzxyz+d+SPWfzvzB+z+M/IH5P4LzrIH7P4D+WPWfxH5Y9Z/Efnj1n8x+SPWfzH5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8H5Y/ZvFfLH/M4j8uf8ziv3j+mMV/fP6YxX+J/DGL/5L5Yxb/h+ePWfwfkT9m8X9k/pjFf6n8MYv/o/LHLP5L549Z/B+dP2bxf0z+mMV/mfwxi/9j88cs/o/LH7P4T8gfs/g/Pn/M4v+E/DGL/xPzxyz+y+aPWfyXyx+z+D8pf8ziv3z+mMV/hfwxi/+T88cs/k/JH7P4PzV/zOL/tPwxi/+K+WMW/6fnj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/2fkj1n818gfs/ivmT9m8V8rf8ziv3b+mMX/mfljFv918scs/uvmj1n8n5U/ZvF/dv6Yxf85+WMW/4n5Yxb/SfljFv/J+WMW//Xyxyz+6+ePWfw3yB+z+E/JH7P4T80fs/hv+AD8F/j/Oa4HaRb/jVr/mMX/ufljFv/n5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/8/DGL/2b5Yxb/F+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+F+WMW/63zxyz+2+SPWfxflD9m8X9x/pjF/yX5Yxb/l+aPWfxflj9m8X95/pjF/xX5Yxb/bfPHLP7b5Y9Z/LfPH7P4vzJ/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6vyh+z+O+SP2bxf3X+mMX/NfljFv/X5o9Z/HfNH7P475Y/ZvF/Xf6Yxf/1+WMW/zfkj1n8d88fs/i/MX/M4r9H/pjF/035Yxb/N+ePWfzfkj9m8d8zf8ziv1f+mMX/rfljFv+35Y9Z/N+eP2bxf0f+mMX/nfljFv935Y9Z/Kflj1n8984fs/i/O3/M4v+e/DGL/3vzxyz+++SPWfzflz9m8d83f8zi//78MYv/B/LHLP775Y9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bx3z9/zOJ/QP6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf/A/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/gflD9m8f9K/pjF/+D8MYv/V/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4v+1/DGL/xH5Yxb/r+ePWfy/kT9m8T8yf8zi/838MYv/UfljFv+j88cs/t/KH7P4fzt/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fyR+z+J+QP2bxPzF/zOJ/Uv6Yxf+7+WMW/+/lj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi//388cs/j/IH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4n5E/ZvE/M3/M4v/T/DGL/1n5Yxb/n+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/H+eP2bx/0X+mMX/l/ljFv+L88cs/pfkj1n8f5U/ZvH/df6Yxf/S/DGL/2/yxyz+v80fs/hflj9m8b88f8zi/7v8MYv/FfljFv8r88cs/lflj1n8f58/ZvH/Q/6Yxf+P+WMW/6vzxyz+f8ofs/hfkz9m8b82f8zif13+mMX/+vwxi/+f88cs/jfkj1n8b8wfs/j/JX/M4n9T/pjF/6/5Yxb/v+WPWfz/nj9m8f9H/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/hPzx+z+N+RP2bxvzN/zOI/I39M4v+wQf6YxX8of8ziPyp/zOI/On/M4j8mf8ziPzZ/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4v+w/DGL/2L5Yxb/cfljFv/F88cs/uPzxyz+S+SPWfyXzB+z+D88f8zi/4j8MYv/I/PHLP5L5Y9Z/B+VP2bxXzp/zOL/6Pwxi/9j8scs/svkj1n8H5s/ZvF/XP6YxX9C/pjF//H5Yxb/J+SPWfyfmD9m8V82f8ziv1z+mMX/SfljFv/l88cs/ivkj1n8n5w/ZvF/Sv6Yxf+p+WMW/6flj1n8V8wfs/g/PX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/g/I3/M4r9G/pjFf838MYv/WvljFv+188cs/s/MH7P4r5M/ZvFfN3/M4v+s/DGL/7Pzxyz+z8kfs/hPzB+z+E/KH7P4T84fs/ivlz9m8V8/f8ziv0H+mMV/Sv6YxX9q/pjFf8P8MYv/RvljFv/n5o9Z/J+XP2bx3zh/zOK/Sf6YxX/T/DGL//Pzxyz+m+WPWfxfkD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/xfmj1n8t84fs/hvkz9m8X9R/pjF/8X5Yxb/l+SPWfxfmj9m8X9Z/pjF/+X5Yxb/V+SPWfy3zR+z+G+XP2bx3z5/zOL/yvwxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+L8qf8ziv0v+mMX/1fljFv/X5I9Z/F+bP2bx3zV/zOK/W/6Yxf91+WMW/9fnj1n835A/ZvHfPX/M4v/G/DGL/x75Yxb/N+WPWfzfnD9m8X9L/pjFf8/8MYv/XvljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv935o9Z/N+VP2bxn5Y/ZvHfO3/M4v/u/DGL/3vyxyz+780fs/jvkz9m8X9f/pjFf9/8MYv/+/PHLP4fyB+z+O+XP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV///wxi/8B+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/wPzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4n9Q/pjF/yv5Yxb/g/PHLP5fzR+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/9fyxyz+R+SPWfy/nj9m8f9G/pjF/8j8MYv/N/PHLP5H5Y9Z/I/OH7P4fyt/zOL/7fwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+H8nf8zif0L+mMX/xPwxi/9J+WMW/+/mj1n8v5c/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Rv6Yxf/M/DGL/0/zxyz+Z+WPWfx/lj9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/3n+mMX/F/ljFv9f5o9Z/C/OH7P4X5I/ZvH/Vf6Yxf/X+WMW/0vzxyz+v8kfs/j/Nn/M4n9Z/pjF//L8MYv/7/LHLP5X5I9Z/K/MH7P4X5U/ZvH/ff6Yxf8P+WMW/z/mj1n8r84fs/j/KX/M4n9N/pjF/9r8MYv/dfljFv/r88cs/n/OH7P435A/ZvG/MX/M4v+X/DGL/035Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4j89f8zif0f+mMX/zvwxi/+M/DGJ/2KD/DGL/1D+mMV/VP6YxX90/pjFf0z+mMV/bP6YxX++/DGL//z35S8/KSz+C0SNWfwXzB+z+C+UP2bxXzh/zOK/SP6YxX/R/DGL/8Pyxyz+i+WPWfzH5Y9Z/BfPH7P4j88fs/gvkT9m8V8yf8zi//D8MYv/I/LHLP6PzB+z+C+VP2bxf1T+mMV/6fwxi/+j88cs/o/JH7P4L5M/ZvF/bP6Yxf9x+WMW/wn5Yxb/x+ePWfyfkD9m8X9i/pjFf9n8MYv/cvljFv8n5Y9Z/JfPH7P4r5A/ZvF/cv6Yxf8p+WMW/6fmj1n8n5Y/ZvFfMX/M4v/0/DGL/0r5Yxb/lWf6j55Xo3rQZvFfpfWPWfxXzR+z+K+WP2bxXz1/zOL/jPwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+D8zf8ziv07+mMV/3fwxi/+z8scs/s/OH7P4Pyd/zOI/MX/M4j8pf8ziPzl/zOK/Xv6YxX/9/DGL/wb5Yxb/KfljFv+p+WMW/w3zxyz+G+WPWfyfmz9m8X9e/pjFf+P8MYv/JvljFv9N88cs/s/PH7P4b5Y/ZvF/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/F+YP2bx3zp/zOK/Tf6Yxf9F+WMW/xfnj1n8X5I/ZvF/af6Yxf9l+WMW/5fnj1n8X5E/ZvHfNn/M4r9d/pjFf/v8MYv/K/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4v+q/P8f+/QUPAZiRXH43zZpmzK1bdu2jbUZ21rbtm3btm3bdvZ1d+dkJs853/d8X+785kQt/YfpH7X0H65/1NJ/hP5RS/+R+kct/UfpH7X0H61/1NJ/jP5RS/+x+kct/cfpH7X0H69/1NJ/gv5RS/+J+kct/SfpH7X0n6x/1NJ/iv5RS/+p+kct/afpH7X0n65/1NJ/hv5RS/+Z+kct/WfpH7X0n61/1NJ/jv5RS/9V9I9a+q+qf9TSfzX9o5b+q+sftfRfQ/+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0n89/aOW/uvrH7X030D/qKX/hvpHLf030j9q6b+x/lFL/030j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/rvrH7X030P/qKX/nvpHLf330j9q6b+3/lFL/330j1r676t/1NJ/P/2jlv776x+19D9A/6il/4H6Ry39D9I/aul/sP5RS/9D9I9a+h+qf/TK/kMGBgYW1P6H6R+17P9w/aOW/kfoH7X0P1L/qKX/UfpHLf2P1j9q6X+M/lFL/2P1j1r6H6d/1NL/eP2jlv4n6B+19D9R/6il/0n6Ry39T9Y/aul/iv5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rpf47+UUv/c/WPWvqfp3/U0v98/aOW/hfoH7X0v1D/qKX/RfpHLf0v1j9q6X+J/lFL/0v1j1r6X6Z/1NL/cv2jlv5X6B+19L9S/6il/1X6Ry39r9Y/aul/TVf/QfN72NL/2q7+862l/3X6Ry39r9c/aul/g/5RS/8b9Y9a+t+kf9TS/2b9o5b+t+gftfS/Vf+opf9t+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/vfoH7X0v1f/qKX/ffpHLf3v1z9q6f+A/lFL/wf1j1r6P6R/1NL/Yf2jlv6P6B+19H9U/6il/2P6Ry39H9f/tebOLer/hP5RS/8n9Y9a+j+lf9TS/2n9o5b+z+gftfR/Vv+opf9z+kct/Z/XP2rp/4L+UUv/F/WPWvq/pH/U0n+u/lFJ/6ED+kct/V+nf9TS//X6Ry3936B/1NJ/kP5RS//B+kct/d+of9TS/036Ry3936x/1NJ/iP5RS/+36B+19H+r/lFL/7fpH7X0f7v+UUv/d+gftfR/p/5RS/+h+kct/d+lf9TS/936Ry3939Pefx7Pt/R/b3v/eWjp/z79o5b+79c/aun/Af2jlv4f1D9q6f8h/aOW/h/WP2rp/xH9o5b+H9U/aun/Mf2jlv4f1z9q6f8J/aOW/p/UP2rp/yn9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/p/XP2rp/wX9o5b+X9Q/aun/Jf2jlv5f1j9q6f8V/aOW/l/VP2rp/zX9o5b+X9c/aun/Df2jlv7f1D9q6f8t/aOW/t/WP2rp/x39o5b+39U/aun/Pf2jlv7f1z9q6f8D/aOW/j/UP2rp/yP9o5b+P9Y/aun/E/2jlv4/1T9q6f8z/aOW/j/XP2rp/wv9o5b+v9Q/aun/K/2jlv6/1j9q6f8b/aOW/r/VP2rp/zv9o5b+v9c/aun/B/2jlv5/1D9q6f8n/aOW/n/WP2rp/xf9o5b+f9U/aun/N/2jlv5/1z9q6f8P/aOW/v/UP2rp/y/9o5b+/9Y/aun/H/2jlv7/1T9q6f8//aOW/v/XP2rpv5D+0av6D15w+y+sf9Sy/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/5L6Ry39l9I/aum/tP5RS/9l9I9a+i+rf9TSfzn9o5b+y+sftfRfQf+opf+K+kct/VfSP2rpv7L+UUv/YfpHLf2H6x+19B+hf9TSf6T+UUv/UfpHLf1H6x+19B+jf9TSf6z+UUv/cfpHLf3H6x+19J+gf9TSf6L+UUv/SfpHLf0n6x+19J+if9TSf6r+UUv/afpHLf2n6x+19J+hf9TSf6b+UUv/WfpHLf1n6x+19J+jf7TA9QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeZt9uY+ssCz+O393WMfbnn4y44DI02eRCIRFmu4eMF4RNxrY66MbzGODYQzc21m12HXYF3MOLSYTwIMkkS5QoW4YSZkIjMRCsIKJBFzXR4AMgClE0ToSgW+JizWnPKe2xazxXva6h+3xe9PS+z373uibf3fdSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjv1dQ89/DoukGnRg88+OChlt7XGUeW3rz/t90XVl7Lby8a4pKjBh709PT0zHhu+vby4SlFUZR+tx3l43HV49L1dzR+oaPvKMzpfmnBsQk/bz68f+XpjzR0Hbm/vvdsfXHTmnUbWj42qijCxfVFR+mgoa4owvz64r7SQWPpYEF98UjpYHrvwanFt0sH56/atGF16cTC6O8Z/K9oat5RjB5UbDHob4OB/e9o/NadlddhLlm52pii3P8Vnd9/q+q9iuP0X7l+mFvdf81/QOC4auv/hTmV12Eu+S/3//FPLXtlqPeO33/l+uHj+od0hnj+H9Ro9XN/1fP/lCEu2b+/qq7zWKn/S297dmr51Jh/5/n/3euHi6v7HzXo+b/0HD+v8vx/SlGES0b47YCTSlPzzsPD3f+H73/M5KpN3cD+z2jbtK/U/+MLvvdE+VR9jf3PG+b+P2ph1dcK1Kap+cs9Vff/GvovPjLEJfv7f/uJXz9c6v+x3z9w5oD3aun/kur+p7W3bp62ZVvneetaV6xtWduysWH67BmzGhtmXTBzWu8jQd/HEX5X4OQwsvt/Mb5qU1cULf37a7r2P13qf+aDD84onxpXY//zh73/T3H/hyF9aFQxdmzRsaK9va2h72PlsLHvY98vG6L/Gv79f9Y55V9WX36tK4pJ/fu7zrx7San/dw4+u6t8amyN/S8Ytv85/b8vEGGE9//VVZtB/R84+FLv8/+iew+cUT5V67//Fw7b/6vu/zASTc1V/8HPf1ip/53FZZGdhiY//4N0cvT/2Ds3dMetwyf0D+nk6P93nztybtw6LNI/pJOj/zHrH3g+bh0u1T+kk6P/xRNnL4lbh8v0D+nk6H/Vq+f+OW4dmvUP6eTo/5wv7eqIW4fF+od0cvT/UNuMrXHrsET/kE6O/n962kOvxa3D5fqHdHL0f/ToPTfGrcMV+od0cvTftfvsH8Stw5X6h3Ry9H/5mrkhbh2u0j+kk6P/yZP++HjcOlytf0gnR/+z/vT30+LW4Rr9Qzo5+r/j80v2xq3DtfqHdHL0P/r6V16MW4el+od0cvS/8Oytc+PW4Tr9Qzo5+l/9k9U9ceuwTP+QTo7+p339R+vi1uF6/UM6Ofo/tPjR3XHrcIP+IZ0c/e9uKCbErcON+od0cvT/te+efjBuHT6pf0gnR/+/eerJ2XHrsFz/kE6O/p/7wO3fiFuHm/QP6eTo/96VL54Vtw4r9A/p5Oj/4T3PfzFuHVbqH9LJ0f8bb7T+X9w6rNI/pJOj//HjTn09bh1W6x/SydH/3Fu/0ha3Di36h3Ry9N+6q+uHceuwRv+QTo7+P3xs0rK4dVirf0gnR/9LZ+55f9w63Kx/SCdH/+9bdOHOuHVYp39IJ0f/F3V/9KK4dVivf0gnR//tz3z2q3HrcIv+IZ0c/e+Z+tr8uHXYoH9IJ0f/Ly9f+OO4dWjVP6STo/+3Hr1uY9w6bNQ/pJOj/yd/9vbRuHXYpH9IJ0f//3/BvL/GrcNm/UM6Ofqfv+DNVXHr8Cn9Qzo5+l/f9Y+X49ahTf+QTo7+px66elHcOmzRP6STo//vnNewL24d2vUP6eTo/84r9zbGrcNW/UM6Ofrfd+Cuu+PW4Vb9Qzo5+n/zF1Mmx63Dp/UP6eTo//4JB6+NW4cO/UM6Ofr/5cb6Z+LWYZv+IZ0c/f9t78TtcevQqX9IJ0f/T7/e/Ye4dbhN/5BOjv6Xj/nV2Lh1uF3/kE6O/id2br4vbh3u0D+kk6P/2fesOD9uHT6jf0gnR/9b/vLCN+PWYbv+IZ0t2zpvWbFhQ0ubT3xyUn1S+ZHUe+Xrea99coL/YgKSezf6E/2VAAAAAAAAAAAAAAAAx5Pjfyc60X9GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRO8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwAAAP//A8XgeQ==") ioctl$FS_IOC_GETFSMAP(r0, 0xc080583d, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX]) 1.285405865s ago: executing program 3 (id=18584): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0x13}) 1.267082211s ago: executing program 1 (id=18585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.190596147s ago: executing program 3 (id=18586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a30000000004c000000060a010300000000000000000100000008000b40000000000900010073797a30"], 0xc0}}, 0x0) 1.128950325s ago: executing program 1 (id=18587): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) time(0x0) 986.250748ms ago: executing program 1 (id=18588): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000076090100fffffff69500000000000000180100002020732500000000002020207b9af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f0ffffffc500000006000000a500f4fffcffffffbf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0x2f}, 0x94) 985.926198ms ago: executing program 3 (id=18589): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0x53, 0xfffff01c}, {0x6, 0x1, 0x8, 0x6}]}, 0x10) 917.284365ms ago: executing program 3 (id=18590): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000440)={[{@journal_async_commit}, {@heartbeat_none}, {@grpquota}, {@inode64}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@localflocks}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 711.771996ms ago: executing program 1 (id=18591): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000040)) 486.015802ms ago: executing program 1 (id=18592): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x1a, 0x0, 0x1c) 384.577213ms ago: executing program 1 (id=18593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f00040000000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) 384.101513ms ago: executing program 0 (id=18594): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000440)) 169.561282ms ago: executing program 2 (id=18595): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xd}, 0x94) 0s ago: executing program 2 (id=18596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1655.172043][T10603] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1655.237808][T10618] delete_channel: no stack [ 1655.254394][T10603] ntfs: volume version 3.1. [ 1655.277584][T10603] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Invalid LCN < -1 in mapping pairs array. [ 1655.291137][T10620] netlink: 260 bytes leftover after parsing attributes in process `syz.0.16504'. [ 1655.678361][T10631] loop0: detected capacity change from 0 to 4096 [ 1655.757423][T10631] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1655.810506][T10631] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1656.281780][T10658] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1657.615981][T10723] loop1: detected capacity change from 0 to 764 [ 1657.705878][T10723] rock: directory entry would overflow storage [ 1657.712181][T10723] rock: sig=0x4654, size=5, remaining=4 [ 1658.032063][T10739] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1658.138411][T10744] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16564'. [ 1658.706151][T10773] loop0: detected capacity change from 0 to 512 [ 1658.735432][T10773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1658.777561][T10773] EXT4-fs: Ignoring removed bh option [ 1658.778519][T10775] bond0: (slave wlan1): Opening slave failed [ 1658.825694][T10773] EXT4-fs error (device loop0): mb_free_blocks:1952: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1658.880038][T10773] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.16578: corrupted inode contents [ 1658.946137][T10773] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #11: comm syz.0.16578: mark_inode_dirty error [ 1658.997743][T10773] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.16578: invalid indirect mapped block 1 (level 1) [ 1659.049646][T10773] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.16578: corrupted inode contents [ 1659.133124][T10773] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 1659.152015][T10773] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #11: comm syz.0.16578: corrupted inode contents [ 1659.204802][T10773] EXT4-fs error (device loop0): ext4_truncate:4294: inode #11: comm syz.0.16578: mark_inode_dirty error [ 1659.228507][T10773] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 1659.242831][T10773] EXT4-fs (loop0): 1 truncate cleaned up [ 1659.258926][T10789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1659.289730][T10773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1659.390440][T10773] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.16578: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1659.564697][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1659.685920][T10809] loop1: detected capacity change from 0 to 128 [ 1659.700446][T10810] netlink: 'syz.2.16596': attribute type 12 has an invalid length. [ 1659.714485][T10810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16596'. [ 1659.988226][T10821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1660.798073][T10853] netlink: 'syz.0.16616': attribute type 21 has an invalid length. [ 1660.946703][T10858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1661.024150][T10860] netlink: 'syz.1.16619': attribute type 10 has an invalid length. [ 1661.338152][T10860] team0 (unregistering): Port device team_slave_0 removed [ 1661.379166][T10860] team0 (unregistering): Port device team_slave_1 removed [ 1661.526604][ T8] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1661.722298][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1661.749611][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.764764][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1661.779151][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1661.795841][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.809688][ T8] usb 4-1: Product: syz [ 1661.814033][ T8] usb 4-1: Manufacturer: syz [ 1661.839156][ T8] usb 4-1: SerialNumber: syz [ 1661.853920][ T8] usb 4-1: config 0 descriptor?? [ 1662.024121][T10902] loop1: detected capacity change from 0 to 512 [ 1662.046949][T10902] FAT-fs (loop1): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 1662.090512][ T8] usb 4-1: USB disconnect, device number 100 [ 1663.079363][T10934] loop3: detected capacity change from 0 to 512 [ 1663.086344][ T27] kauditd_printk_skb: 249 callbacks suppressed [ 1663.086357][ T27] audit: type=1326 audit(2000001890.379:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.16657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7ffc0000 [ 1663.146994][T10934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1663.167481][ T27] audit: type=1326 audit(2000001890.379:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.16657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7ffc0000 [ 1663.194629][ T27] audit: type=1326 audit(2000001890.390:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.16657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7faafa19c799 code=0x7ffc0000 [ 1663.226318][ T27] audit: type=1326 audit(2000001890.390:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10935 comm="syz.0.16657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7ffc0000 [ 1663.280554][T10934] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.16656: inode has both inline data and extents flags [ 1663.295715][T10934] EXT4-fs (loop3): Remounting filesystem read-only [ 1663.305376][T10934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.460843][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.611975][T10946] loop0: detected capacity change from 0 to 4096 [ 1663.805291][T10946] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1663.941089][ T5820] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 1664.446221][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16680'. [ 1664.490666][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16680'. [ 1664.526023][T10989] loop3: detected capacity change from 0 to 512 [ 1664.575822][T10989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1664.583010][T10989] EXT4-fs: Ignoring removed bh option [ 1664.661547][T10989] EXT4-fs error (device loop3): mb_free_blocks:1952: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1664.700068][T10995] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16685'. [ 1664.724341][T10989] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #11: comm syz.3.16683: corrupted inode contents [ 1664.765127][T10999] loop1: detected capacity change from 0 to 512 [ 1664.790869][T10999] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1664.808991][T10989] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #11: comm syz.3.16683: mark_inode_dirty error [ 1664.831796][T10989] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.16683: invalid indirect mapped block 1 (level 1) [ 1664.881309][T10989] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #11: comm syz.3.16683: corrupted inode contents [ 1664.929172][T10989] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1664.946988][T10989] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #11: comm syz.3.16683: corrupted inode contents [ 1664.971807][T10989] EXT4-fs error (device loop3): ext4_truncate:4294: inode #11: comm syz.3.16683: mark_inode_dirty error [ 1665.012820][T10989] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1665.024404][T10989] EXT4-fs (loop3): 1 truncate cleaned up [ 1665.040218][T10989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1665.083772][T10989] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 13: comm syz.3.16683: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1665.237447][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.242679][ T5867] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1665.339668][T11011] loop0: detected capacity change from 0 to 1024 [ 1665.347581][T11009] loop1: detected capacity change from 0 to 4096 [ 1665.377250][T11009] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1665.440581][ T5867] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1665.459555][ T5867] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 1665.472644][ T5867] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 1665.574647][ T5867] usb 3-1: string descriptor 0 read error: -22 [ 1665.581212][ T5867] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 1665.597192][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.606055][T11009] ntfs3: loop1: failed to convert "c46c" to macceltic [ 1665.650860][ T5867] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1665.861431][ T5867] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 1665.967868][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16701'. [ 1666.129842][T12393] usb 3-1: USB disconnect, device number 87 [ 1666.237569][T11036] loop1: detected capacity change from 0 to 1024 [ 1666.251951][T11037] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1666.281105][T11036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.360722][T11036] EXT4-fs error (device loop1): __ext4_new_inode:1075: comm syz.1.16705: reserved inode found cleared - inode=2 [ 1666.401956][T11036] EXT4-fs (loop1): Remounting filesystem read-only [ 1666.518107][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.920402][T11064] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1667.120890][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16722'. [ 1667.138921][T11077] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16722'. [ 1667.145301][T11078] loop1: detected capacity change from 0 to 128 [ 1667.150837][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16722'. [ 1667.192397][T11078] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1667.267920][T11078] hpfs: filesystem error: improperly stopped [ 1667.282876][T11082] netlink: 'syz.3.16726': attribute type 32 has an invalid length. [ 1667.300497][T11078] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1667.322285][T11078] hpfs: You really don't want any checks? You are crazy... [ 1667.348448][T11078] hpfs: Code page index out of array [ 1667.374056][T11078] hpfs: code page support is disabled [ 1667.393664][T11085] loop0: detected capacity change from 0 to 512 [ 1667.408244][T11078] hpfs: hpfs_map_4sectors(): unaligned read [ 1667.414396][T11078] hpfs: hpfs_map_4sectors(): unaligned read [ 1667.443971][T11078] hpfs: filesystem error: unable to find root dir [ 1667.473839][T11085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1667.623886][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16730'. [ 1667.651322][T11085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:421: comm syz.0.16727: bg 0: bad block bitmap checksum [ 1667.771967][T11085] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Filesystem failed CRC [ 1667.799742][T11100] netlink: 'syz.1.16734': attribute type 3 has an invalid length. [ 1667.836689][T11100] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16734'. [ 1667.851283][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.912216][T11103] delete_channel: no stack [ 1668.111486][T11111] netlink: 'syz.1.16739': attribute type 46 has an invalid length. [ 1668.226745][T11119] binder: 11118:11119 ioctl c018620c 200000000380 returned -22 [ 1668.503323][T11132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16750'. [ 1668.851318][ T27] audit: type=1326 audit(2000001896.570:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.1.16758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1668.914593][ T27] audit: type=1326 audit(2000001896.570:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.1.16758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1668.964575][T11154] netlink: 'syz.2.16761': attribute type 1 has an invalid length. [ 1668.988197][T11154] NCSI netlink: No device for ifindex 0 [ 1668.998154][ T27] audit: type=1326 audit(2000001896.570:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.1.16758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1669.083180][ T27] audit: type=1326 audit(2000001896.570:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.1.16758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1669.127714][T11160] loop1: detected capacity change from 0 to 1024 [ 1669.186965][ T27] audit: type=1326 audit(2000001896.570:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.1.16758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1669.291279][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1669.297505][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1669.318568][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1670.446269][ T27] audit: type=1400 audit(2000001898.276:654): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11208 comm="syz.1.16787" [ 1670.691200][ T27] audit: type=1326 audit(2000001898.544:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.3.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1670.740328][ T27] audit: type=1326 audit(2000001898.544:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.3.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1670.820278][ T27] audit: type=1326 audit(2000001898.608:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.3.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1670.964751][ T27] audit: type=1326 audit(2000001898.608:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11220 comm="syz.3.16795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1671.019648][T11234] loop3: detected capacity change from 0 to 256 [ 1671.038613][T11235] loop0: detected capacity change from 0 to 256 [ 1671.139239][T11235] FAT-fs (loop0): Directory bread(block 64) failed [ 1671.186048][T11235] FAT-fs (loop0): Directory bread(block 65) failed [ 1671.206713][T11235] FAT-fs (loop0): Directory bread(block 66) failed [ 1671.236654][T11235] FAT-fs (loop0): Directory bread(block 67) failed [ 1671.267123][T11235] FAT-fs (loop0): Directory bread(block 68) failed [ 1671.311672][T11235] FAT-fs (loop0): Directory bread(block 69) failed [ 1671.322857][T11235] FAT-fs (loop0): Directory bread(block 70) failed [ 1671.333248][T11235] FAT-fs (loop0): Directory bread(block 71) failed [ 1671.341293][T11235] FAT-fs (loop0): Directory bread(block 72) failed [ 1671.358723][T11235] FAT-fs (loop0): Directory bread(block 73) failed [ 1671.439842][T11243] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581) [ 1671.486729][T11243] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1671.668485][T11247] loop1: detected capacity change from 0 to 4096 [ 1671.798268][T11247] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1671.881837][T11247] ntfs3: loop1: Failed to load $Extend (-22). [ 1671.888207][T11247] ntfs3: loop1: Failed to initialize $Extend. [ 1672.449364][T11280] __nla_validate_parse: 3 callbacks suppressed [ 1672.449382][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16823'. [ 1672.615123][T11287] libceph: resolve '400' (ret=-3): failed [ 1672.790697][T11261] 9pnet_fd: p9_fd_create_tcp (11261): problem connecting socket to 127.0.0.1 [ 1673.540195][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16844'. [ 1673.541354][ T27] kauditd_printk_skb: 1016 callbacks suppressed [ 1673.541367][ T27] audit: type=1326 audit(2000001901.602:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1673.579677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1673.635351][ T27] audit: type=1326 audit(2000001901.602:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1673.661174][ T27] audit: type=1326 audit(2000001901.602:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1673.685580][ T27] audit: type=1326 audit(2000001901.602:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1673.787590][ T27] audit: type=1326 audit(2000001901.602:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1673.857876][ T27] audit: type=1326 audit(2000001901.602:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1673.936820][ T27] audit: type=1326 audit(2000001901.602:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1673.958971][T11335] loop1: detected capacity change from 0 to 512 [ 1674.019401][ T27] audit: type=1326 audit(2000001901.602:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1674.084182][ T27] audit: type=1326 audit(2000001901.602:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1674.089485][T11335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1674.165181][ T27] audit: type=1326 audit(2000001901.602:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.0.16830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7fc00000 [ 1674.274335][T11335] ext4 filesystem being mounted at /4132/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1674.370177][T11335] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.16849: Failed to acquire dquot type 0 [ 1674.557324][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1674.756844][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.770568][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.728997][T11391] loop0: detected capacity change from 0 to 1764 [ 1675.918108][T11399] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1676.417798][T11422] loop3: detected capacity change from 0 to 2048 [ 1676.422081][T11418] loop1: detected capacity change from 0 to 4096 [ 1676.454997][T11421] loop0: detected capacity change from 0 to 4096 [ 1676.479108][T11422] Alternate GPT is invalid, using primary GPT. [ 1676.503330][T11422] loop3: p2 p3 p7 [ 1676.503417][T11418] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 1676.549622][T11418] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1676.573202][T11421] ntfs: volume version 3.1. [ 1676.966137][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 1676.967808][ T5834] udevd[5834]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1677.018537][ T5831] udevd[5831]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1677.176923][T11437] xt_hashlimit: max too large, truncated to 1048576 [ 1677.204784][T11437] No such timeout policy "syz1" [ 1677.241509][T11441] netlink: 'syz.3.16901': attribute type 1 has an invalid length. [ 1678.743116][T11516] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.851290][T11522] loop3: detected capacity change from 0 to 2048 [ 1678.903350][T11522] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1678.977819][T11529] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1679.085230][T11531] ./file0: Can't lookup blockdev [ 1679.149437][T11533] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1679.196456][T11533] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1679.691784][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16958'. [ 1679.744106][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16958'. [ 1679.779861][T11559] tc_dump_action: action bad kind [ 1679.868778][ T27] kauditd_printk_skb: 1607 callbacks suppressed [ 1679.868794][ T27] audit: type=1326 audit(2000001908.382:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1679.903361][T11565] loop0: detected capacity change from 0 to 4096 [ 1679.922967][ T27] audit: type=1326 audit(2000001908.382:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1679.930738][T11565] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1679.966369][ T27] audit: type=1326 audit(2000001908.436:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1680.001078][ T27] audit: type=1326 audit(2000001908.436:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1680.027950][ T786] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1680.032357][ T27] audit: type=1326 audit(2000001908.436:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1680.061165][T12393] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 1680.093125][ T27] audit: type=1326 audit(2000001908.479:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1680.141903][ T27] audit: type=1326 audit(2000001908.479:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1680.208625][ T27] audit: type=1326 audit(2000001908.490:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1680.235479][ T786] usb 2-1: config index 0 descriptor too short (expected 1316, got 36) [ 1680.253951][ T786] usb 2-1: config 7 has an invalid interface number: 204 but max is -1 [ 1680.258364][T11565] ntfs3: loop0: failed to convert "c46c" to iso8859-2 [ 1680.273993][ T786] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 0 [ 1680.289276][T12393] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.302902][T12393] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1680.314446][ T786] usb 2-1: config 7 has no interface number 0 [ 1680.341595][T12393] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 1680.344267][ T786] usb 2-1: config 7 interface 204 has no altsetting 0 [ 1680.353418][ T27] audit: type=1326 audit(2000001908.490:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11566 comm="syz.2.16962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7025f9c799 code=0x7ffc0000 [ 1680.408555][T12393] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1680.412833][ T786] usb 2-1: New USB device found, idVendor=0424, idProduct=9904, bcdDevice=d1.ce [ 1680.436728][T12393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.466028][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.499651][T12393] hub 4-1:1.0: bad descriptor, ignoring hub [ 1680.503476][ T786] usb 2-1: Product: syz [ 1680.510736][ T786] usb 2-1: Manufacturer: syz [ 1680.538169][ T786] usb 2-1: SerialNumber: syz [ 1680.540492][T12393] hub: probe of 4-1:1.0 failed with error -5 [ 1680.568469][T12393] cdc_wdm 4-1:1.0: skipping garbage [ 1680.574208][T12393] cdc_wdm 4-1:1.0: skipping garbage [ 1680.579876][T11573] loop0: detected capacity change from 0 to 8 [ 1680.583756][T12393] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1680.783820][ T786] smsc95xx v2.0.0 [ 1680.788063][ T786] smsc95xx 2-1:7.204 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1680.820701][ T786] smsc95xx: probe of 2-1:7.204 failed with error -22 [ 1680.841116][ T786] usbhid 2-1:7.204: couldn't find an input interrupt endpoint [ 1680.848269][ T8] usb 4-1: USB disconnect, device number 101 [ 1680.886606][ T786] usb 2-1: USB disconnect, device number 94 [ 1681.034338][ T8] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1681.221590][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1681.248629][ T8] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 1681.257068][ T8] usb 1-1: config 0 has no interface number 0 [ 1681.286313][ T8] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1681.321913][ T8] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1681.350822][ T8] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1681.377634][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.417078][ T8] usb 1-1: Product: syz [ 1681.421726][ T8] usb 1-1: Manufacturer: syz [ 1681.445028][ T8] usb 1-1: SerialNumber: syz [ 1681.459371][ T8] usb 1-1: config 0 descriptor?? [ 1681.482697][T11576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1681.721328][ T8] usb 1-1: USB disconnect, device number 108 [ 1681.743499][T12393] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1681.922019][T12393] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1681.937833][T12393] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1681.967108][T12393] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1681.981851][T12393] usb 2-1: config 0 has no interface number 0 [ 1681.994675][T12393] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64 [ 1682.025534][T12393] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1682.040632][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16988'. [ 1682.061597][T12393] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1682.088116][T12393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.096523][T12393] usb 2-1: Product: syz [ 1682.106562][T12393] usb 2-1: Manufacturer: syz [ 1682.115692][T12393] usb 2-1: SerialNumber: syz [ 1682.132008][T12393] usb 2-1: config 0 descriptor?? [ 1682.146757][T12393] asix: probe of 2-1:0.104 failed with error -22 [ 1682.265477][ T8] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1682.351083][T12393] usb 2-1: USB disconnect, device number 95 [ 1682.413964][T11631] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1682.462283][ T8] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1682.494406][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.517911][ T8] usb 3-1: config 0 descriptor?? [ 1682.538046][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1682.916710][ T8] gp8psk: usb out operation failed. [ 1682.936232][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1682.976991][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1683.012880][ T8] usb 3-1: USB disconnect, device number 88 [ 1683.138834][T11654] loop1: detected capacity change from 0 to 4096 [ 1683.155992][T11654] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1683.245222][T11654] ntfs: volume version 3.1. [ 1683.281036][ T6377] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 1683.477934][ T6377] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1683.513742][ T6377] usb 4-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.559727][ T6377] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1683.567440][T11667] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 1683.599314][ T6377] usb 4-1: string descriptor 0 read error: -22 [ 1683.605920][ T6377] usb 4-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 1683.643058][ T6377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.678227][ T6377] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input92 [ 1683.871228][ T5123] bcm5974 4-1:1.0: could not read from device [ 1683.886131][ T5123] bcm5974 4-1:1.0: could not read from device [ 1683.904670][ T5123] bcm5974 4-1:1.0: could not read from device [ 1683.925444][ T6377] usb 4-1: USB disconnect, device number 102 [ 1684.256433][T11686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17021'. [ 1684.387683][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17024'. [ 1684.407547][T11693] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17024'. [ 1684.488308][T11695] netlink: 'syz.2.17025': attribute type 1 has an invalid length. [ 1684.709766][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17029'. [ 1684.889876][T11715] loop0: detected capacity change from 0 to 256 [ 1685.376658][ T27] audit: type=1326 audit(2000001914.294:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.3.17045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x0 [ 1685.567468][T11745] loop1: detected capacity change from 0 to 256 [ 1685.703700][T11745] FAT-fs (loop1): Directory bread(block 64) failed [ 1685.738643][T11745] FAT-fs (loop1): Directory bread(block 65) failed [ 1685.765329][T11745] FAT-fs (loop1): Directory bread(block 66) failed [ 1685.782749][T11745] FAT-fs (loop1): Directory bread(block 67) failed [ 1685.799444][T11745] FAT-fs (loop1): Directory bread(block 68) failed [ 1685.814820][T11745] FAT-fs (loop1): Directory bread(block 69) failed [ 1685.847728][T11745] FAT-fs (loop1): Directory bread(block 70) failed [ 1685.874326][T11745] FAT-fs (loop1): Directory bread(block 71) failed [ 1685.889248][T11745] FAT-fs (loop1): Directory bread(block 72) failed [ 1685.902673][T11745] FAT-fs (loop1): Directory bread(block 73) failed [ 1686.511727][T11775] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 1687.209058][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17083'. [ 1687.277670][T11813] program syz.1.17084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1687.727869][T11807] loop3: detected capacity change from 0 to 32768 [ 1687.791153][T11807] find_entry called with index = 0 [ 1687.813738][T11807] read_mapping_page failed! [ 1687.827243][T11807] ERROR: (device loop3): txCommit: [ 1687.827243][T11807] [ 1687.885755][T11807] ERROR: (device loop3): remounting filesystem as read-only [ 1688.034716][T11839] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1688.112845][T11837] loop1: detected capacity change from 0 to 4096 [ 1688.147644][T11837] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1688.247476][T11837] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1688.303860][T11837] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1688.328114][T11837] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1688.381224][T11837] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1688.435003][T11837] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1688.491274][T11837] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1688.507646][T11837] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1688.511036][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17101'. [ 1688.533013][T11837] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1688.603858][T11837] ntfs: volume version 3.1. [ 1689.644494][T11897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1689.870868][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17128'. [ 1689.943114][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17130'. [ 1690.273055][T11919] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1690.430545][T11923] netlink: 'syz.3.17137': attribute type 2 has an invalid length. [ 1690.654203][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17141'. [ 1690.863829][T11940] netlink: 9 bytes leftover after parsing attributes in process `syz.1.17145'. [ 1690.882124][T11940] ..0·: renamed from hsr0 (while UP) [ 1690.926123][T11940] ..0·: entered allmulticast mode [ 1690.931223][T11940] hsr_slave_0: entered allmulticast mode [ 1690.942925][T11940] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 1691.655632][T11945] loop0: detected capacity change from 0 to 32768 [ 1691.689169][T11945] XFS: attr2 mount option is deprecated. [ 1691.791714][T11945] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1691.879750][T11945] XFS (loop0): Ending clean mount [ 1691.887551][T11945] XFS (loop0): Quotacheck needed: Please wait. [ 1691.967250][T11945] XFS (loop0): Quotacheck: Done. [ 1692.055673][ T5820] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1692.351081][T11997] openvswitch: netlink: Actions may not be safe on all matching packets [ 1692.914810][T12019] netlink: 'syz.2.17179': attribute type 3 has an invalid length. [ 1693.607076][T12049] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1693.849078][T12034] loop0: detected capacity change from 0 to 32768 [ 1693.866150][T12034] (syz.0.17185,12034,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1693.906085][T12034] (syz.0.17185,12034,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1694.018796][T12034] JBD2: Ignoring recovery information on journal [ 1694.097028][T12034] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1694.264903][ T6377] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1694.318925][ T5820] ocfs2: Unmounting device (7,0) on (node local) [ 1694.462878][ T6377] usb 4-1: Using ep0 maxpacket: 8 [ 1694.486023][ T6377] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1694.522370][ T6377] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1694.543558][ T6377] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17520, setting to 1024 [ 1694.567202][ T6377] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1694.586600][ T6377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.614660][ T6377] usb 4-1: Product: syz [ 1694.624126][ T6377] usb 4-1: Manufacturer: syz [ 1694.629227][ T6377] usb 4-1: SerialNumber: syz [ 1694.726197][T19871] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1694.906446][T19871] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1694.914915][T19871] usb 2-1: config 0 has no interface number 0 [ 1694.921432][T19871] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1694.931780][ T786] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1694.942514][T19871] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1694.971593][T19871] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1694.981503][T19871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.990140][T19871] usb 2-1: Product: syz [ 1694.994618][T19871] usb 2-1: Manufacturer: syz [ 1694.999488][T19871] usb 2-1: SerialNumber: syz [ 1695.007699][T19871] usb 2-1: config 0 descriptor?? [ 1695.013696][T12074] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1695.023220][T19871] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1695.036642][T19871] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1695.060519][ T6377] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1695.069375][ T6377] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1695.106269][ T6377] usb 4-1: USB disconnect, device number 103 [ 1695.136453][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 1695.154461][ T6268] udevd[6268]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1695.174084][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.194536][ T8] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1695.196863][ T786] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1695.223676][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.245712][ T786] usb 1-1: config 0 descriptor?? [ 1695.256649][ T786] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1695.370010][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1695.378158][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1695.395784][ T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1695.406727][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.423771][ T8] usb 3-1: Product: syz [ 1695.424665][ T786] usb 2-1: USB disconnect, device number 96 [ 1695.429418][ T8] usb 3-1: Manufacturer: syz [ 1695.439989][ T8] usb 3-1: SerialNumber: syz [ 1695.460266][ T786] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1695.460827][ T8] usb 3-1: config 0 descriptor?? [ 1695.497621][ T786] cyberjack 2-1:0.69: device disconnected [ 1695.499562][ T8] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1695.512629][ T9059] usb 1-1: USB disconnect, device number 109 [ 1695.706864][ T8] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1695.726473][ T8] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 1695.742355][T12092] loop3: detected capacity change from 0 to 16 [ 1695.754650][T12092] erofs: (device loop3): mounted with root inode @ nid 36. [ 1695.767116][T12092] cifs: Unknown parameter 'cache_strategy' [ 1695.966814][ T8] usb 3-1: USB disconnect, device number 89 [ 1696.063999][T12100] loop1: detected capacity change from 0 to 164 [ 1696.371835][T12106] loop1: detected capacity change from 0 to 4096 [ 1696.413623][T12106] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 1696.477328][T12106] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 1696.477328][T12106] [ 1696.739644][T12116] loop1: detected capacity change from 0 to 2048 [ 1696.837948][T12116] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1696.926616][ T786] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1696.932741][T12104] loop3: detected capacity change from 0 to 32768 [ 1696.964015][T12104] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.17220 (12104) [ 1697.051712][T12104] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1697.102014][T12104] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1697.141489][T12104] BTRFS info (device loop3): force zlib compression, level 3 [ 1697.149021][T12104] BTRFS info (device loop3): turning on flush-on-commit [ 1697.149945][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 1697.182034][T12104] BTRFS info (device loop3): max_inline at 4096 [ 1697.206319][T12104] BTRFS info (device loop3): using free space tree [ 1697.219965][ T786] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1697.234085][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1697.242625][ T786] usb 3-1: Product: syz [ 1697.246995][ T786] usb 3-1: Manufacturer: syz [ 1697.251612][ T786] usb 3-1: SerialNumber: syz [ 1697.267577][ T786] usb 3-1: config 0 descriptor?? [ 1697.283477][ T786] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1697.342367][T12104] BTRFS info (device loop3): enabling ssd optimizations [ 1697.381139][T12104] BTRFS info (device loop3): auto enabling async discard [ 1697.597748][ T5825] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1697.691066][ T786] gspca_sn9c2028: read1 error -71 [ 1697.729865][ T786] gspca_sn9c2028: read1 error -71 [ 1697.735087][ T786] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 1697.762860][ T786] usb 3-1: USB disconnect, device number 90 [ 1698.031056][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1698.031069][ T27] audit: type=1326 audit(2000001927.877:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.3.17239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1698.063632][ T27] audit: type=1326 audit(2000001927.909:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.3.17239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1698.157651][ T27] audit: type=1326 audit(2000001927.941:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.3.17239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1698.193452][ T27] audit: type=1326 audit(2000001927.941:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12160 comm="syz.3.17239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1698.232372][T12169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17243'. [ 1698.413532][T12173] sctp: [Deprecated]: syz.3.17245 (pid 12173) Use of int in max_burst socket option. [ 1698.413532][T12173] Use struct sctp_assoc_value instead [ 1698.668674][T12184] x_tables: duplicate underflow at hook 4 [ 1698.861569][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17254'. [ 1699.061685][T12197] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1699.321359][T12205] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1699.339599][T12181] loop3: detected capacity change from 0 to 32768 [ 1699.405043][T12181] jfs_strtoUCS: char2uni returned -22. [ 1699.412261][T12181] charset = cp950, char = 0xd4 [ 1700.106531][T12231] loop1: detected capacity change from 0 to 4096 [ 1700.181946][T12241] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1700.307189][T12231] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1700.424122][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17282'. [ 1700.436851][T12231] Remounting filesystem read-only [ 1700.448098][T12247] xt_TCPMSS: Only works on TCP SYN packets [ 1700.461808][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17282'. [ 1700.481929][ T5824] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 1700.481953][T12249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17282'. [ 1700.508253][ T5824] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 1700.686225][T12255] kernel read not supported for file / œNü7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀ>•ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 12255 comm: syz.2.17286) [ 1700.747728][ T27] audit: type=1800 audit(2000001930.774:3284): pid=12255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17286" name=20019C4EFC1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C03E95CD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=119952 res=0 errno=0 [ 1701.730786][T12306] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1702.160373][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17318'. [ 1702.207940][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17318'. [ 1702.273498][T12327] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17319'. [ 1702.303243][T12327] netlink: 172 bytes leftover after parsing attributes in process `syz.0.17319'. [ 1702.618570][T12315] loop1: detected capacity change from 0 to 32768 [ 1702.643926][T12315] XFS: attr2 mount option is deprecated. [ 1702.795902][T12315] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1702.922375][T12315] XFS (loop1): Ending clean mount [ 1702.934955][T12315] XFS (loop1): Quotacheck needed: Please wait. [ 1703.085250][T12315] XFS (loop1): Quotacheck: Done. [ 1703.576133][ T5824] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1703.706281][T12369] kernel read not supported for file / œNü7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀ>•ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 12369 comm: syz.3.17336) [ 1703.756489][ T27] audit: type=1800 audit(2000001934.014:3285): pid=12369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17336" name=20019C4EFC1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C03E95CD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=121072 res=0 errno=0 [ 1704.024444][T12383] netlink: 'syz.3.17344': attribute type 5 has an invalid length. [ 1704.583113][T12410] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17359'. [ 1705.013476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.167882][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.292522][ C0] vkms_vblank_simulate: vblank timer overrun [ 1705.948381][T12470] tipc: Trying to set illegal importance in message [ 1706.172080][ T6377] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1706.377631][ T6377] usb 1-1: Using ep0 maxpacket: 32 [ 1706.389553][ T6377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1706.415339][T12493] x_tables: duplicate underflow at hook 2 [ 1706.425075][T12492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17397'. [ 1706.446057][ T6377] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1706.464901][ T6377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.487640][T12492] veth3: entered allmulticast mode [ 1706.498144][ T6377] usb 1-1: Product: syz [ 1706.502377][ T6377] usb 1-1: Manufacturer: syz [ 1706.513881][ T6377] usb 1-1: SerialNumber: syz [ 1706.683057][T12499] can0: slcan on ttyS3. [ 1706.757867][ T6377] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1706.760799][ T9059] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1706.785679][ T6377] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1706.824844][ T6377] usb 1-1: 3:0: failed to get current value for ch 0 (-22) [ 1706.853848][T12498] can0 (unregistered): slcan off ttyS3. [ 1706.858730][ T6377] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1706.891376][ T6377] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1706.930871][ T6377] usb 1-1: 3:0: cannot get min/max values for control 4 (id 3) [ 1706.976322][ T6377] usb 1-1: 3:0: cannot get min/max values for control 3 (id 3) [ 1706.982350][ T9059] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 1707.002455][ T9059] usb 2-1: config 0 has no interface number 0 [ 1707.005989][ T6377] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1707.008951][ T9059] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1707.048537][ T9059] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1707.077866][ T6377] usb 1-1: USB disconnect, device number 110 [ 1707.110668][ T9059] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1707.160239][ T9059] usb 2-1: config 0 interface 11 has no altsetting 0 [ 1707.188142][ T9059] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1707.197426][ T9059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.213469][T12514] loop3: detected capacity change from 0 to 2048 [ 1707.230314][ T9059] usb 2-1: config 0 descriptor?? [ 1707.250899][T12497] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1707.260695][T12497] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1707.291701][T12514] loop3: p1 p3 p4 [ 1707.302145][T12514] loop3: p4 size 589824 extends beyond EOD, truncated [ 1707.302937][ T9059] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 1707.341357][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 1707.359587][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 1707.386686][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 1707.400456][T12514] FAT-fs (loop3p1): bogus number of reserved sectors [ 1707.423539][T12514] FAT-fs (loop3p1): Can't find a valid FAT filesystem [ 1707.440043][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 1707.477138][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 1707.505684][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 1707.537053][ T9059] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1707.591244][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 1707.633923][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 1707.679316][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 1707.701995][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 1707.714434][T12527] netlink: 108 bytes leftover after parsing attributes in process `syz.0.17409'. [ 1707.724270][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 1707.739469][T12527] netlink: 108 bytes leftover after parsing attributes in process `syz.0.17409'. [ 1707.749793][ T9059] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 1707.769892][ T9059] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1707.834924][ T9059] usb 2-1: USB disconnect, device number 97 [ 1707.867636][ T9059] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1707.938182][ T9059] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1707.964681][ T9059] keyspan 2-1:0.11: device disconnected [ 1708.679785][T12569] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1708.708704][T12565] loop1: detected capacity change from 0 to 4096 [ 1709.456431][T12593] loop0: detected capacity change from 0 to 4096 [ 1709.469172][T12598] netlink: 'syz.3.17435': attribute type 1 has an invalid length. [ 1709.500661][T12593] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1709.618713][T12593] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 1709.647518][T12593] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1709.691354][T12593] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1709.701369][T12593] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1709.798354][T12593] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1709.807129][T12593] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1709.874078][T12593] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1709.916756][T12593] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1709.994909][T12593] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1710.024543][T12593] ntfs: volume version 3.1. [ 1710.101374][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17442'. [ 1710.149850][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17442'. [ 1710.176233][T12613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17442'. [ 1710.191317][T12615] netlink: 'syz.3.17443': attribute type 7 has an invalid length. [ 1710.216759][T12615] netlink: 'syz.3.17443': attribute type 8 has an invalid length. [ 1710.254734][T12615] netlink: 'syz.3.17443': attribute type 15 has an invalid length. [ 1710.408104][T12621] loop1: detected capacity change from 0 to 256 [ 1710.446970][T12621] exfat: Deprecated parameter 'utf8' [ 1710.459568][T12621] exfat: Deprecated parameter 'namecase' [ 1710.497370][T12621] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 1710.897922][T12393] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1710.987247][T12647] can0: slcan on ttyS3. [ 1711.079842][T12652] loop3: detected capacity change from 0 to 128 [ 1711.093550][T12393] usb 1-1: Using ep0 maxpacket: 16 [ 1711.105747][T12643] can0 (unregistered): slcan off ttyS3. [ 1711.108551][T12393] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.153125][T12393] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1711.163511][T12393] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1711.214494][T12393] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1711.264260][T12393] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1711.274132][T12393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.283181][T12393] usb 1-1: Product: syz [ 1711.315444][T12393] usb 1-1: Manufacturer: syz [ 1711.342503][T12393] usb 1-1: SerialNumber: syz [ 1711.608296][T12665] xt_CT: No such helper "snmp" [ 1711.762964][T12393] usb 1-1: 0:2 : does not exist [ 1711.839479][T12393] usb 1-1: USB disconnect, device number 111 [ 1711.915165][ T6268] udevd[6268]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1712.097114][T12691] xt_hashlimit: invalid interval [ 1712.305303][T12701] tmpfs: Bad value for 'mpol' [ 1713.675338][ T6377] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1713.877814][ T6377] usb 4-1: Using ep0 maxpacket: 16 [ 1713.901142][ T6377] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1713.919792][ T6377] usb 4-1: config 0 has no interface number 0 [ 1713.941156][ T6377] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1713.956734][T12782] loop1: detected capacity change from 0 to 512 [ 1713.972519][ T6377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.995934][ T6377] usb 4-1: Product: syz [ 1714.000513][ T6377] usb 4-1: Manufacturer: syz [ 1714.017268][T12782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1714.045057][ T6377] usb 4-1: SerialNumber: syz [ 1714.072894][T12788] loop0: detected capacity change from 0 to 256 [ 1714.085781][ T6377] usb 4-1: config 0 descriptor?? [ 1714.090607][T12788] exfat: Deprecated parameter 'utf8' [ 1714.096717][T12788] exfat: Deprecated parameter 'namecase' [ 1714.102671][T12788] exfat: Deprecated parameter 'namecase' [ 1714.109276][T12788] exfat: Deprecated parameter 'utf8' [ 1714.130563][ T6377] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1714.142330][T12782] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.17511: Unimplemented hash flags: 0x0001 [ 1714.180238][T12788] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1714.233632][T12782] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.17511: Corrupt directory, running e2fsck is recommended [ 1714.377895][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.411383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1714.505763][ T6377] gspca_spca1528: reg_w err -71 [ 1714.542565][ T6377] spca1528: probe of 4-1:0.1 failed with error -71 [ 1714.568543][ T6377] usb 4-1: USB disconnect, device number 104 [ 1714.586303][T12802] netlink: 'syz.0.17521': attribute type 4 has an invalid length. [ 1714.614772][T12802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17521'. [ 1714.664485][T12804] loop1: detected capacity change from 0 to 256 [ 1714.833981][T12808] loop1: detected capacity change from 0 to 512 [ 1714.931476][T12808] __quota_error: 24 callbacks suppressed [ 1714.931496][T12808] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1714.986170][T12808] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1715.017086][T12808] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.17524: Failed to acquire dquot type 1 [ 1715.073857][T12808] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1715.101514][T12808] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1715.131621][T12808] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.17524: Failed to acquire dquot type 1 [ 1715.189970][T12808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.17524: bg 0: block 248: padding at end of block bitmap is not set [ 1715.245822][T12808] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 1715.283197][T12808] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1715.317642][T12808] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1715.361592][T12808] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.17524: Failed to acquire dquot type 1 [ 1715.369289][T12823] loop3: detected capacity change from 0 to 512 [ 1715.399410][T12808] EXT4-fs (loop1): 1 orphan inode deleted [ 1715.415105][T12808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1715.455328][T12808] ext4 filesystem being mounted at /4284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1715.540386][T12808] Quota error (device loop1): do_check_range: Getting block 1536 out of range 0-5 [ 1715.562191][T12823] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.17530: bad orphan inode 11862016 [ 1715.619776][T12823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1715.650278][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1715.671656][T12823] ext4 filesystem being mounted at /4474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1715.777410][T12837] netlink: 'syz.2.17535': attribute type 11 has an invalid length. [ 1715.786232][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17535'. [ 1715.872750][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1716.019995][T12845] loop0: detected capacity change from 0 to 1024 [ 1716.073214][T12845] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1716.110479][T12845] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #3: block 1: comm syz.0.17537: lblock 1 mapped to illegal pblock 1 (length 1) [ 1716.178637][T12853] netlink: 'syz.1.17543': attribute type 32 has an invalid length. [ 1716.191088][T12845] Quota error (device loop0): write_blk: dquota write failed [ 1716.199921][T12845] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1716.238808][T12845] EXT4-fs error (device loop0): ext4_acquire_dquot:6949: comm syz.0.17537: Failed to acquire dquot type 0 [ 1716.332438][T12845] EXT4-fs error (device loop0): ext4_free_blocks:6690: comm syz.0.17537: Freeing blocks not in datazone - block = 0, count = 4096 [ 1716.388673][T12845] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.17537: Invalid inode bitmap blk 0 in block_group 0 [ 1716.409467][ T4473] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1716.452891][ T4473] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1716.475255][ T4473] EXT4-fs error (device loop0): ext4_release_dquot:6985: comm kworker/u4:10: Failed to release dquot type 0 [ 1716.487849][T12845] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 1716.519491][T12845] EXT4-fs (loop0): 1 orphan inode deleted [ 1716.533614][T12845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1716.636251][T12845] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1716.730735][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.860162][T12876] netlink: 'syz.2.17553': attribute type 27 has an invalid length. [ 1716.887282][T12876] netlink: 'syz.2.17553': attribute type 3 has an invalid length. [ 1716.906211][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17554'. [ 1716.916862][T12876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17553'. [ 1716.931725][T12882] sctp: [Deprecated]: syz.3.17555 (pid 12882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1716.931725][T12882] Use struct sctp_sack_info instead [ 1717.340698][T12900] overlay: Unknown parameter '\' [ 1718.126454][T12937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17582'. [ 1718.146350][T12937] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1718.370338][ T9059] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1718.491120][T12954] loop1: detected capacity change from 0 to 1024 [ 1718.562471][ T9059] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.574042][ T9059] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1718.596279][ T9059] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1718.615776][ T9059] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1718.619875][T12954] syz.1.17591: attempt to access beyond end of device [ 1718.619875][T12954] loop1: rw=0, sector=4294967564, nr_sectors = 2 limit=1024 [ 1718.633885][ T9059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.661252][ T9059] usb 1-1: Product: syz [ 1718.665562][ T9059] usb 1-1: Manufacturer: syz [ 1718.671115][T12393] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1718.679740][ T9059] usb 1-1: SerialNumber: syz [ 1718.749811][ T4473] hfsplus: b-tree write err: -5, ino 25 [ 1718.761837][ T4473] hfsplus: b-tree write err: -5, ino 4 [ 1718.771212][ T4473] hfsplus: b-tree write err: -5, ino 2 [ 1718.782304][ T4473] hfsplus: b-tree write err: -5, ino 20 [ 1718.851371][T12393] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1718.872376][T12393] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1718.891048][T12393] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1718.905493][ T9059] usb 1-1: USB disconnect, device number 112 [ 1718.942931][T12393] usb 4-1: string descriptor 0 read error: -22 [ 1718.949484][T12393] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1718.968844][T12393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.153499][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17601'. [ 1719.402108][T12393] usb 4-1: Can't set UAC3 power state to 1 for id 10 [ 1719.426167][ T9059] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1719.426213][T12393] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1719.471736][T12393] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1719.542421][T12393] usb 4-1: USB disconnect, device number 105 [ 1719.630064][ T9059] usb 3-1: Using ep0 maxpacket: 8 [ 1719.663400][ T9059] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1719.682583][ T9059] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1719.700629][ T9059] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1719.719653][ T9059] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1719.742508][ T9059] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1719.771195][ T9059] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1719.799119][ T9059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.207613][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17617'. [ 1720.223419][ T9059] usb 3-1: USB disconnect, device number 91 [ 1720.560618][T13021] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 1720.572820][T13023] overlayfs: cannot append lower layer [ 1720.672333][T13027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17627'. [ 1720.683415][T13027] veth1_vlan: left promiscuous mode [ 1720.730152][T13027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17627'. [ 1720.758927][T12393] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1720.973262][T12393] usb 1-1: Using ep0 maxpacket: 32 [ 1720.984034][T12393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.014454][T12393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.032639][T13039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1721.049397][T12393] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1721.059920][T12393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.087982][T12393] usb 1-1: config 0 descriptor?? [ 1721.108297][T12393] hub 1-1:0.0: USB hub found [ 1721.294261][T13052] netlink: 'syz.2.17638': attribute type 3 has an invalid length. [ 1721.308677][T12393] hub 1-1:0.0: 1 port detected [ 1721.338389][ T9059] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1721.407816][T13056] netlink: 'syz.2.17640': attribute type 1 has an invalid length. [ 1721.498794][T12393] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1721.525487][T12393] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1721.525696][ T9059] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1721.555213][ T9059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.561362][T12393] usbhid 1-1:0.0: can't add hid device: -71 [ 1721.565418][ T9059] usb 2-1: config 0 descriptor?? [ 1721.574712][T12393] usbhid: probe of 1-1:0.0 failed with error -71 [ 1721.615204][ T9059] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1721.645656][T12393] usb 1-1: USB disconnect, device number 113 [ 1722.009574][ T9059] gspca_sunplus: reg_w_riv err -71 [ 1722.026279][ T9059] sunplus: probe of 2-1:0.0 failed with error -71 [ 1722.055655][ T9059] usb 2-1: USB disconnect, device number 98 [ 1722.554133][T13092] loop3: detected capacity change from 0 to 256 [ 1722.599220][T13092] FAT-fs (loop3): Directory bread(block 64) failed [ 1722.613852][T13092] FAT-fs (loop3): Directory bread(block 65) failed [ 1722.620620][T13092] FAT-fs (loop3): Directory bread(block 66) failed [ 1722.640148][T13092] FAT-fs (loop3): Directory bread(block 67) failed [ 1722.648394][T13092] FAT-fs (loop3): Directory bread(block 68) failed [ 1722.670708][T13092] FAT-fs (loop3): Directory bread(block 69) failed [ 1722.677468][T13092] FAT-fs (loop3): Directory bread(block 70) failed [ 1722.702191][T13092] FAT-fs (loop3): Directory bread(block 71) failed [ 1722.715958][T13092] FAT-fs (loop3): Directory bread(block 72) failed [ 1722.722997][T13092] FAT-fs (loop3): Directory bread(block 73) failed [ 1722.772477][T13092] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1723.150354][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17666'. [ 1723.247615][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17666'. [ 1723.493392][T13126] loop1: detected capacity change from 0 to 256 [ 1724.005526][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17685'. [ 1724.326764][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17694'. [ 1724.946197][T13191] loop3: detected capacity change from 0 to 4096 [ 1724.962609][T13191] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1725.066727][T13191] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 1725.353953][T19871] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1725.540844][T19871] usb 3-1: Using ep0 maxpacket: 16 [ 1725.569499][T19871] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1725.589355][T19871] usb 3-1: config 0 has no interface number 0 [ 1725.595530][T19871] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1725.628178][T19871] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1725.667775][T13217] loop3: detected capacity change from 0 to 4096 [ 1725.677210][T19871] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1725.701841][T19871] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1725.709551][T13217] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1725.745047][T19871] usb 3-1: Product: syz [ 1725.749363][T19871] usb 3-1: SerialNumber: syz [ 1725.774744][T19871] usb 3-1: config 0 descriptor?? [ 1725.795963][T19871] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1725.832628][T19871] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input94 [ 1726.000320][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1726.208119][ T9059] usb 3-1: USB disconnect, device number 92 [ 1726.221878][ T9059] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1726.270638][T19871] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1726.360573][T13238] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17729'. [ 1726.416238][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17731'. [ 1726.468627][T19871] usb 1-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 1726.480340][T19871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.490355][T19871] usb 1-1: Product: syz [ 1726.494756][T19871] usb 1-1: Manufacturer: syz [ 1726.499398][T19871] usb 1-1: SerialNumber: syz [ 1726.509516][T19871] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1726.913050][T19871] gspca_spca501: reg write: error -71 [ 1726.918672][T19871] spca501 1-1:68.0: Reg write failed for 0x02,0xa048,0x00 [ 1726.957663][T19871] spca501: probe of 1-1:68.0 failed with error -22 [ 1726.999632][T19871] usb 1-1: USB disconnect, device number 114 [ 1727.003370][T13259] netlink: 'syz.3.17740': attribute type 8 has an invalid length. [ 1727.059357][T13259] bridge2: entered promiscuous mode [ 1727.098264][T13261] loop1: detected capacity change from 0 to 1024 [ 1727.118063][T13261] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1727.169965][T13261] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1727.195688][T13261] System zones: 0-1, 3-36 [ 1727.240993][T13261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1727.414095][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.028532][ T8] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1728.052978][T13296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17757'. [ 1728.176449][T13301] lo: entered allmulticast mode [ 1728.183539][T13301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1728.215157][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1728.235779][ T8] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1728.259689][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.298504][ T8] usb 2-1: config 0 has no interface number 0 [ 1728.342431][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1728.353425][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.369862][ T8] usb 2-1: Product: syz [ 1728.383035][ T8] usb 2-1: Manufacturer: syz [ 1728.387891][ T8] usb 2-1: SerialNumber: syz [ 1728.408219][ T8] usb 2-1: config 0 descriptor?? [ 1728.625047][ T8] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1728.672122][ T8] usb 2-1: No valid video chain found. [ 1728.813460][T13328] loop0: detected capacity change from 0 to 2048 [ 1728.816417][ T8] usb 2-1: USB disconnect, device number 99 [ 1728.850080][T13331] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1728.892806][T13332] loop3: detected capacity change from 0 to 512 [ 1728.915309][T13332] EXT4-fs: Ignoring removed mblk_io_submit option [ 1728.969218][T13332] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1728.985961][T13332] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 1729.021749][T13332] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.17774: attempt to clear invalid blocks 2 len 1 [ 1729.044623][T13332] EXT4-fs (loop3): Remounting filesystem read-only [ 1729.059412][T13332] EXT4-fs (loop3): 1 truncate cleaned up [ 1729.099757][T13332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1729.206235][T13341] netlink: 'syz.2.17778': attribute type 1 has an invalid length. [ 1729.217194][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.218695][T13341] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.17778'. [ 1729.448916][ T27] audit: type=1326 audit(2000001961.587:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.3.17781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1729.519845][ T27] audit: type=1326 audit(2000001961.620:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.3.17781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1729.588148][ T27] audit: type=1326 audit(2000001961.620:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.3.17781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1729.659999][ T27] audit: type=1326 audit(2000001961.620:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13346 comm="syz.3.17781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1729.986270][T19871] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1730.010943][T13371] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1730.020434][T13371] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1730.173345][T19871] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1730.189369][T13379] Cannot find del_set index 4 as target [ 1730.192954][T19871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.210613][T19871] usb 2-1: Product: syz [ 1730.217356][T19871] usb 2-1: Manufacturer: syz [ 1730.234533][T19871] usb 2-1: SerialNumber: syz [ 1730.252016][T19871] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1730.278410][ T9059] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1730.759249][T19871] usb 2-1: USB disconnect, device number 100 [ 1731.274525][ T9059] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1731.290843][ T9059] ath9k_htc: Failed to initialize the device [ 1731.307507][T19871] usb 2-1: ath9k_htc: USB layer deinitialized [ 1731.528686][T13427] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1732.022192][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1732.033266][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.186342][ T9059] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1732.382664][ T9059] usb 1-1: Using ep0 maxpacket: 16 [ 1732.404722][ T9059] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1732.418592][ T9059] usb 1-1: config 0 has no interface number 0 [ 1732.451965][ T9059] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1732.470190][ T9059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.489032][ T9059] usb 1-1: Product: syz [ 1732.498843][ T9059] usb 1-1: Manufacturer: syz [ 1732.508808][ T9059] usb 1-1: SerialNumber: syz [ 1732.511076][ T9059] usb 1-1: config 0 descriptor?? [ 1732.706967][ T9059] usb 1-1: selecting invalid altsetting 1 [ 1732.716215][ T9059] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1732.733698][ T9059] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1732.745266][ T9059] speedtch: probe of 1-1:0.1 failed with error -22 [ 1732.759020][ T9059] usb 1-1: USB disconnect, device number 115 [ 1732.977887][T19871] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1733.164567][T19871] usb 3-1: Using ep0 maxpacket: 32 [ 1733.170386][T13500] netlink: 'syz.3.17857': attribute type 1 has an invalid length. [ 1733.174647][T19871] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1733.179333][T13500] netlink: 248 bytes leftover after parsing attributes in process `syz.3.17857'. [ 1733.192116][T19871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.247958][T19871] usb 3-1: Product: syz [ 1733.252276][T19871] usb 3-1: Manufacturer: syz [ 1733.290810][T19871] usb 3-1: SerialNumber: syz [ 1733.310691][T19871] usb 3-1: config 0 descriptor?? [ 1733.500076][T13512] program syz.0.17863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1733.528177][T19871] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 1733.546998][T19871] eb 9a 47 80 9b f8 7a f0 [ 1733.551616][T19871] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 1733.614442][T13514] xt_hashlimit: max too large, truncated to 1048576 [ 1733.721879][T19871] usb 3-1: USB disconnect, device number 93 [ 1733.742656][ T6377] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1733.956123][ T6377] usb 2-1: Using ep0 maxpacket: 16 [ 1733.963362][ T6377] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.981383][ T6377] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1734.003077][ T6377] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1734.031419][ T6377] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1734.048223][ T6377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1734.058691][ T6377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.066715][ T6377] usb 2-1: Product: syz [ 1734.087069][ T6377] usb 2-1: Manufacturer: syz [ 1734.096332][ T6377] usb 2-1: SerialNumber: syz [ 1734.511798][ T6377] usb 2-1: 0:2 : does not exist [ 1734.556382][ T6377] usb 2-1: USB disconnect, device number 101 [ 1735.281289][ T6377] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1735.457736][ T6377] usb 3-1: Using ep0 maxpacket: 8 [ 1735.476305][ T6377] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1735.513280][ T6377] usb 3-1: config 179 has no interface number 0 [ 1735.519877][ T6377] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1735.557725][ T6377] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1735.585268][ T6377] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1735.600690][T13591] loop3: detected capacity change from 0 to 2048 [ 1735.614710][ T6377] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1735.628009][ T6377] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1735.642410][T13595] loop0: detected capacity change from 0 to 16 [ 1735.643414][ T6377] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1735.666818][T13595] erofs: (device loop0): mounted with root inode @ nid 36. [ 1735.704263][T13595] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1735.710255][ T6377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.734748][T23157] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1735.753348][T13591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1735.770667][T13568] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1735.778994][T13595] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 1735.827212][T13591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.17901: bg 0: block 234: padding at end of block bitmap is not set [ 1735.848406][ T27] audit: type=1800 audit(2000001968.432:3299): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17902" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 1736.018246][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1736.080900][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.230003][T19871] usb 3-1: USB disconnect, device number 94 [ 1736.230115][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1736.245062][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1736.743980][T13630] bond0: Unable to set up delay as MII monitoring is disabled [ 1736.922776][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17922'. [ 1736.967846][T13636] veth2: entered promiscuous mode [ 1736.972938][T13636] veth2: entered allmulticast mode [ 1737.135423][T13642] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.17926'. [ 1738.097097][T13682] futex_wake_op: syz.2.17945 tries to shift op by 32; fix this program [ 1738.203873][T13685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17946'. [ 1738.485142][T13700] tmpfs: Bad value for 'mpol' [ 1738.824441][T13714] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1738.841253][T13714] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1738.857919][T13719] loop1: detected capacity change from 0 to 512 [ 1738.870661][T13714] overlayfs: missing 'lowerdir' [ 1738.963959][T13717] xt_CT: No such helper "netbios-ns" [ 1738.973953][T13719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1739.043992][T13719] ext4 filesystem being mounted at /4391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1739.279350][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1739.476899][T13739] loop0: detected capacity change from 0 to 1024 [ 1739.493800][T13739] EXT4-fs: inline encryption not supported [ 1739.529392][T13739] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1739.577039][T13739] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.17973: lblock 2 mapped to illegal pblock 2 (length 1) [ 1739.642594][T13750] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17975'. [ 1739.676872][T13739] EXT4-fs (loop0): Remounting filesystem read-only [ 1739.714691][T13739] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1739.745815][T13739] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1739.770560][T13739] EXT4-fs (loop0): 1 orphan inode deleted [ 1739.791145][T13739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.047145][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.183361][T13772] netlink: 'syz.3.17988': attribute type 21 has an invalid length. [ 1740.285474][ T6377] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1740.423813][T13782] loop0: detected capacity change from 0 to 512 [ 1740.483753][ T6377] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1740.501858][ T6377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.524271][ T6377] usb 3-1: Product: syz [ 1740.534830][ T6377] usb 3-1: Manufacturer: syz [ 1740.544730][T13782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1740.557663][T13782] ext4 filesystem being mounted at /4415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.560166][ T6377] usb 3-1: SerialNumber: syz [ 1740.644620][ T6377] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1740.663524][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17997'. [ 1740.714794][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1740.739810][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1741.060007][T13801] bridge5: entered promiscuous mode [ 1741.065561][T13801] bridge5: entered allmulticast mode [ 1741.332247][ T6377] usb 3-1: USB disconnect, device number 95 [ 1741.428061][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18008'. [ 1741.530044][T13817] netlink: 'syz.3.18009': attribute type 1 has an invalid length. [ 1741.663727][T13819] loop1: detected capacity change from 0 to 4096 [ 1741.700692][T13819] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1741.711854][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1741.712028][ T8] ath9k_htc: Failed to initialize the device [ 1741.712894][ T6377] usb 3-1: ath9k_htc: USB layer deinitialized [ 1741.763996][T13819] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 1741.938364][ T5824] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 1742.090123][T13837] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18019'. [ 1742.419488][T13849] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18025'. [ 1743.007527][T13872] loop1: detected capacity change from 0 to 4096 [ 1743.640559][T13876] loop3: detected capacity change from 0 to 32768 [ 1743.698720][T13876] jfs_lookup: dtSearch returned -5 [ 1743.722359][T13899] ip6gre1: entered promiscuous mode [ 1743.808089][ T8] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1744.022568][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1744.040441][ T8] usb 1-1: config index 0 descriptor too short (expected 18, got 14) [ 1744.071753][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.106371][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1744.146607][ T8] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1744.167042][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.188838][ T8] usb 1-1: Product: syz [ 1744.206936][ T8] usb 1-1: Manufacturer: syz [ 1744.221083][ T8] usb 1-1: SerialNumber: syz [ 1744.253216][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 1744.335442][T13915] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18058'. [ 1744.478569][ T8] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1744.508398][ T12] usb 1-1: config 0 descriptor?? [ 1744.637802][ T9059] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1744.709917][ T8] usb 1-1: USB disconnect, device number 116 [ 1744.719938][ T12] usb 1-1: can't set config #0, error -71 [ 1744.814901][ T9059] usb 2-1: Using ep0 maxpacket: 8 [ 1744.830477][ T9059] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1744.846402][ T9059] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1744.869245][ T9059] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1744.886192][ T9059] usb 2-1: Product: syz [ 1744.890953][ T9059] usb 2-1: Manufacturer: syz [ 1744.896412][ T9059] usb 2-1: SerialNumber: syz [ 1744.979464][T13939] netlink: 'syz.2.18069': attribute type 13 has an invalid length. [ 1744.987930][T13939] netlink: 172 bytes leftover after parsing attributes in process `syz.2.18069'. [ 1745.036495][T13939] erspan0: refused to change device tx_queue_len [ 1745.117891][ T9059] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1745.130382][ T9059] usb 2-1: Handspring Visor / Palm OS: port 106, is for unknown use [ 1745.146648][ T9059] usb 2-1: Handspring Visor / Palm OS: port 214, is for Remote File System use [ 1745.156707][T13943] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1745.156782][ T9059] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1745.171546][T13945] program syz.2.18072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1745.312097][ T9059] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1745.318552][T13950] netlink: 'syz.0.18074': attribute type 12 has an invalid length. [ 1745.328508][ T9059] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1745.350280][ T9059] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1745.379805][ T9059] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1745.420853][ T9059] usb 2-1: USB disconnect, device number 102 [ 1745.452772][ T9059] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1745.480689][ T9059] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1745.518754][ T9059] visor 2-1:1.0: device disconnected [ 1745.716356][T13965] netlink: 6 bytes leftover after parsing attributes in process `syz.3.18082'. [ 1745.725862][T13965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1746.053872][T13979] loop3: detected capacity change from 0 to 64 [ 1746.080777][T13979] syz.3.18089: attempt to access beyond end of device [ 1746.080777][T13979] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1746.117647][T13979] Buffer I/O error on dev loop3, logical block 512, async page read [ 1746.135735][T13979] syz.3.18089: attempt to access beyond end of device [ 1746.135735][T13979] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1746.178479][T13979] Buffer I/O error on dev loop3, logical block 56576, async page read [ 1746.325518][T13989] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1746.956311][T14020] netlink: 'syz.0.18109': attribute type 3 has an invalid length. [ 1746.979633][T14020] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18109'. [ 1747.127234][T14029] loop3: detected capacity change from 0 to 512 [ 1747.195851][T14029] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #3: comm syz.3.18113: corrupted inode contents [ 1747.220774][T14038] netlink: 'syz.2.18116': attribute type 12 has an invalid length. [ 1747.235793][T14029] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #3: comm syz.3.18113: mark_inode_dirty error [ 1747.326922][T14029] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #3: comm syz.3.18113: corrupted inode contents [ 1747.397215][T14029] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.18113: mark_inode_dirty error [ 1747.403672][T14045] loop1: detected capacity change from 0 to 512 [ 1747.426492][T14029] Quota error (device loop3): write_blk: dquota write failed [ 1747.444406][T14045] EXT4-fs: Ignoring removed oldalloc option [ 1747.451406][T14029] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1747.479745][T14045] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.18118: corrupted in-inode xattr: invalid ea_ino [ 1747.495046][T14029] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.18113: Failed to acquire dquot type 0 [ 1747.514111][T14029] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.18113: corrupted inode contents [ 1747.533996][T14045] EXT4-fs (loop1): Remounting filesystem read-only [ 1747.542827][T14045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1747.555670][T14029] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #16: comm syz.3.18113: mark_inode_dirty error [ 1747.571021][T14029] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.18113: corrupted inode contents [ 1747.603597][T14029] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.18113: mark_inode_dirty error [ 1747.660613][T14029] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.18113: corrupted inode contents [ 1747.669597][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.719990][T14029] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1747.735278][T14029] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #16: comm syz.3.18113: corrupted inode contents [ 1747.760487][T14029] EXT4-fs error (device loop3): ext4_truncate:4294: inode #16: comm syz.3.18113: mark_inode_dirty error [ 1747.781112][T14029] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1747.798991][T14029] EXT4-fs (loop3): 1 truncate cleaned up [ 1747.806218][T14029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.827395][T14029] ext4 filesystem being mounted at /4655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1747.943967][T14060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18126'. [ 1748.042468][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.057866][T14066] netlink: 'syz.0.18129': attribute type 1 has an invalid length. [ 1748.107575][T14066] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18129'. [ 1748.161313][T14066] nbd: must specify at least one socket [ 1748.795901][T14096] binder: 14094:14096 ioctl 40046210 0 returned -14 [ 1749.142983][T14108] loop0: detected capacity change from 0 to 2048 [ 1749.183068][T14108] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1749.254855][T14108] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 1749.508899][T14126] loop3: detected capacity change from 0 to 256 [ 1749.548821][T14126] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1749.702427][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1749.957945][T14144] openvswitch: netlink: EtherType 0 is less than min 600 [ 1750.007682][T14148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1750.130262][ T27] audit: type=1326 audit(2000001983.773:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.1.18174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1750.219763][ T27] audit: type=1326 audit(2000001983.773:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.1.18174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1750.314297][ T27] audit: type=1326 audit(2000001983.773:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.1.18174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1750.356741][ T27] audit: type=1326 audit(2000001983.773:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.1.18174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1750.428175][ T27] audit: type=1326 audit(2000001983.773:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14153 comm="syz.1.18174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff017b9c799 code=0x7ffc0000 [ 1750.482244][ T27] audit: type=1326 audit(2000001983.955:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14159 comm="syz.0.18176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7ffc0000 [ 1750.523608][ T27] audit: type=1326 audit(2000001983.955:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14159 comm="syz.0.18176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7ffc0000 [ 1750.547034][T14170] netlink: 144 bytes leftover after parsing attributes in process `syz.3.18181'. [ 1750.595032][ T27] audit: type=1326 audit(2000001983.966:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14159 comm="syz.0.18176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faafa19c799 code=0x7ffc0000 [ 1750.946198][T14189] sctp: [Deprecated]: syz.3.18190 (pid 14189) Use of int in max_burst socket option. [ 1750.946198][T14189] Use struct sctp_assoc_value instead [ 1751.001444][T14191] loop0: detected capacity change from 0 to 512 [ 1751.079040][T14191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1751.092013][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18192'. [ 1751.097127][T14191] ext4 filesystem being mounted at /4462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1751.336252][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1752.878802][T14261] loop1: detected capacity change from 0 to 16 [ 1752.916368][T14261] erofs: (device loop1): mounted with root inode @ nid 36. [ 1753.059447][T14265] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1753.126866][T14265] bridge3: entered promiscuous mode [ 1753.140577][T14265] bridge3: entered allmulticast mode [ 1753.268425][T14274] netlink: 'syz.1.18231': attribute type 3 has an invalid length. [ 1753.379845][T14280] netlink: 'syz.2.18233': attribute type 1 has an invalid length. [ 1753.426531][T14283] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1753.881359][T14305] netlink: 'syz.1.18245': attribute type 1 has an invalid length. [ 1754.036832][ T6377] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1754.219591][ T6377] usb 1-1: Using ep0 maxpacket: 8 [ 1754.256080][ T6377] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1754.289735][ T6377] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1754.310302][ T6377] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1754.322928][ T6377] usb 1-1: Product: syz [ 1754.327224][ T6377] usb 1-1: Manufacturer: syz [ 1754.341269][ T6377] usb 1-1: SerialNumber: syz [ 1754.561645][ T6377] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1754.585641][ T6377] usb 1-1: Handspring Visor / Palm OS: port 208, is for unknown use [ 1754.598266][ T6377] usb 1-1: Handspring Visor / Palm OS: port 187, is for Console use [ 1754.607252][ T6377] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1754.749046][ T6377] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 1754.763927][ T6377] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1754.790530][ T6377] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1754.816483][ T6377] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1754.872627][ T6377] usb 1-1: USB disconnect, device number 117 [ 1754.900047][ T6377] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1754.956640][ T6377] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1754.990036][ T6377] visor 1-1:1.0: device disconnected [ 1755.953225][ T8] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1756.162346][ T8] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1756.191006][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.222103][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.269110][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.324993][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.355334][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.390217][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.402410][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.426743][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.439173][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.456805][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.482663][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.503622][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.512643][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.521992][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.533203][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.541321][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.550996][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.582581][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.607079][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.615014][ T9059] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1756.634145][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.653878][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.688384][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1756.706463][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1756.727279][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1756.737563][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1756.747310][ T8] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1756.756099][ T8] usb 4-1: Product: syz [ 1756.760709][ T8] usb 4-1: Manufacturer: syz [ 1756.766702][ T8] usb 4-1: SerialNumber: syz [ 1756.776017][ T8] usb 4-1: config 0 descriptor?? [ 1756.827618][ T8] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1756.829181][ T9059] usb 1-1: Using ep0 maxpacket: 16 [ 1756.870892][ T9059] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.894100][ T9059] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1756.942608][ T9059] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1756.959579][ T9059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.981653][ T9059] usb 1-1: Product: syz [ 1756.985883][ T9059] usb 1-1: Manufacturer: syz [ 1756.993111][ T9059] usb 1-1: SerialNumber: syz [ 1757.007914][ T9059] r8152-cfgselector 1-1: config 0 descriptor?? [ 1757.026605][ T8] usb 4-1: USB disconnect, device number 106 [ 1757.053566][ T8] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1757.200019][T14440] loop1: detected capacity change from 0 to 1024 [ 1757.226829][ T9059] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1757.240194][T14440] EXT4-fs: inline encryption not supported [ 1757.255892][T14440] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1757.279479][T14440] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.18311: lblock 2 mapped to illegal pblock 2 (length 1) [ 1757.320989][T14440] EXT4-fs (loop1): Remounting filesystem read-only [ 1757.338106][T14440] __quota_error: 19 callbacks suppressed [ 1757.338124][T14440] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1757.360658][T14440] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1757.369989][T14440] EXT4-fs (loop1): 1 orphan inode deleted [ 1757.377089][T14440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1757.461882][ T9059] usb 1-1: USB disconnect, device number 118 [ 1757.536108][ T5824] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.031734][ T9059] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1758.219540][ T9059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1758.235280][T14474] loop3: detected capacity change from 0 to 64 [ 1758.244653][T14474] MINIX-fs: bad superblock [ 1758.255854][ T9059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1758.299799][ T9059] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1758.319555][T14476] comedi: No check for data length of config insn id 32784 is implemented [ 1758.335451][ T9059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.344269][T14476] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1758.366464][ T9059] usb 3-1: config 0 descriptor?? [ 1758.378495][T14476] comedi: Assuming n=15 is correct [ 1758.499316][T14483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1758.586396][ T9059] ath6kl: Failed to submit usb control message: -71 [ 1758.614751][ T9059] ath6kl: unable to send the bmi data to the device: -71 [ 1758.631291][ T9059] ath6kl: Unable to send get target info: -71 [ 1758.649694][ T9059] ath6kl: Failed to init ath6kl core: -71 [ 1758.671432][T14491] loop3: detected capacity change from 0 to 16 [ 1758.682959][T14491] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1758.700280][ T9059] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1758.724112][ T9059] usb 3-1: USB disconnect, device number 96 [ 1758.934476][T14499] netlink: 'syz.3.18339': attribute type 17 has an invalid length. [ 1758.945470][T14499] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1760.011168][T14543] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1760.182314][T14550] netlink: 'syz.3.18364': attribute type 21 has an invalid length. [ 1760.200811][T14550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18364'. [ 1760.726184][T14576] netlink: 3 bytes leftover after parsing attributes in process `syz.3.18376'. [ 1760.852986][ T27] audit: type=1326 audit(2000001995.275:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1760.921077][ T27] audit: type=1326 audit(2000001995.275:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1760.977133][ T27] audit: type=1326 audit(2000001995.275:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1761.028360][ T27] audit: type=1326 audit(2000001995.275:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1761.096065][ T27] audit: type=1326 audit(2000001995.275:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1761.157528][ T27] audit: type=1326 audit(2000001995.275:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1761.229584][ T27] audit: type=1326 audit(2000001995.275:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1761.344854][ T27] audit: type=1326 audit(2000001995.275:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14581 comm="syz.3.18380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff28a59c799 code=0x7ffc0000 [ 1761.531176][T14637] loop3: detected capacity change from 0 to 256 [ 1761.705567][T14637] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 1761.982220][T14651] netlink: 'syz.2.18396': attribute type 1 has an invalid length. [ 1762.010114][T14651] netlink: 'syz.2.18396': attribute type 2 has an invalid length. [ 1762.671822][T14688] loop0: detected capacity change from 0 to 2048 [ 1762.690636][T14689] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1762.781884][T14688] NILFS (loop0): failed to count free inodes: err=-34 [ 1762.978572][T14699] netlink: 'syz.3.18420': attribute type 32 has an invalid length. [ 1763.131395][ T5820] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 1763.150211][ T5820] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1763.191816][ T5820] Remounting filesystem read-only [ 1763.194880][T14707] netlink: 'syz.2.18423': attribute type 1 has an invalid length. [ 1763.197482][ T5820] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1763.228634][ T5820] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1763.245255][ T5820] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 1763.261349][ T5820] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 1763.288553][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.317464][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.335348][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.359460][ T5820] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 1763.374994][ T5820] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 1763.390912][ T5820] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 1763.413538][ T5820] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 1763.437617][ T5820] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 1763.445561][ T5820] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 1763.458084][ T5820] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 1763.493534][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.511900][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.521692][T14721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18429'. [ 1763.540513][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.571692][ T5820] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 1763.586645][ T5820] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 1763.593993][ T5820] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 1763.622242][ T5820] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 1763.655452][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.700535][ T5820] NILFS (loop0): discard dirty page: offset=163840, ino=3 [ 1763.726703][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.740126][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.749706][ T5820] NILFS (loop0): discard dirty block: blocknr=47, size=1024 [ 1763.757507][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.767833][ T5820] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 1763.775595][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.788371][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.810398][ T5820] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 1763.822469][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.838354][ T5820] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 1763.858526][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.876888][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1763.903746][ T5820] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 1763.911274][ T5820] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1764.186756][T14742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18439'. [ 1764.302142][T14729] loop3: detected capacity change from 0 to 32768 [ 1764.370884][T14729] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1764.427636][T14753] netlink: 'syz.0.18441': attribute type 3 has an invalid length. [ 1764.436077][T14753] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.18441'. [ 1764.540759][T14729] XFS (loop3): Ending clean mount [ 1764.690537][ T5825] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1764.922129][T14740] loop1: detected capacity change from 0 to 32768 [ 1765.986653][T14785] loop0: detected capacity change from 0 to 4096 [ 1766.064830][T14793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18459'. [ 1766.539863][T14812] bridge3: entered promiscuous mode [ 1766.557808][T14812] bridge3: entered allmulticast mode [ 1766.567769][T14816] netlink: 'syz.2.18470': attribute type 1 has an invalid length. [ 1766.596355][T14816] netlink: 10916 bytes leftover after parsing attributes in process `syz.2.18470'. [ 1766.749144][T14821] SET target dimension over the limit! [ 1766.964865][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18479'. [ 1767.109572][ T6377] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1767.308773][ T6377] usb 4-1: Using ep0 maxpacket: 16 [ 1767.329086][ T6377] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1767.351448][ T6377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.378980][ T6377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.403354][ T6377] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1767.425876][ T6377] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1767.445545][ T6377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.465440][ T6377] usb 4-1: config 0 descriptor?? [ 1767.481058][ T6377] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input96 [ 1767.548892][ T5123] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1767.601668][ T5123] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1767.663658][ T5123] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1767.690022][T14828] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1767.720648][ T5123] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1767.741270][ T8] usb 4-1: USB disconnect, device number 107 [ 1768.573599][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18511'. [ 1768.601397][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18511'. [ 1768.751764][T14905] loop0: detected capacity change from 0 to 4096 [ 1768.787634][T14905] ntfs3: loop0: ino=3, Correct links count -> 2. [ 1769.020999][T14905] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1769.073730][T14917] netlink: 'syz.3.18519': attribute type 3 has an invalid length. [ 1769.082114][T14917] netlink: 'syz.3.18519': attribute type 1 has an invalid length. [ 1769.100201][T14917] netlink: 220 bytes leftover after parsing attributes in process `syz.3.18519'. [ 1769.543445][T14938] xt_bpf: check failed: parse error [ 1769.721859][T14945] libceph: resolve 'c' (ret=-3): failed [ 1769.803051][ T9059] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1769.844136][T14951] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18534'. [ 1770.007805][ T9059] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 1770.026997][ T9059] usb 2-1: config 0 has no interface number 0 [ 1770.044105][ T9059] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 1770.065057][ T9059] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 1770.077769][ T9059] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1770.084860][T14959] loop0: detected capacity change from 0 to 16 [ 1770.088057][ T9059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.105342][ T9059] usb 2-1: config 0 descriptor?? [ 1770.115683][ T9059] ttusbir 2-1:0.83: cannot find expected altsetting [ 1770.131060][T14959] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1770.172153][T10054] udevd[10054]: incorrect cramfs checksum on /dev/loop0 [ 1770.236640][ T6268] udevd[6268]: incorrect cramfs checksum on /dev/loop0 [ 1770.381720][ T9059] usb 2-1: USB disconnect, device number 103 [ 1771.117888][T15001] netlink: 'syz.3.18558': attribute type 5 has an invalid length. [ 1771.136128][T15001] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.18558'. [ 1771.168304][T14995] loop1: detected capacity change from 0 to 4096 [ 1771.640597][T15015] netlink: 'syz.3.18566': attribute type 1 has an invalid length. [ 1771.654911][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18565'. [ 1772.090741][T15034] netlink: 'syz.1.18574': attribute type 1 has an invalid length. [ 1772.303635][T15045] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.469207][ T6377] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1772.631349][T15058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18586'. [ 1772.676742][ T6377] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1772.692770][ T6377] usb 3-1: config 0 has no interface number 0 [ 1772.704831][ T6377] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1772.724025][ T6377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.754563][ T6377] usb 3-1: Product: syz [ 1772.777852][ T6377] usb 3-1: Manufacturer: syz [ 1772.792612][ T6377] usb 3-1: SerialNumber: syz [ 1772.809341][ T6377] usb 3-1: config 0 descriptor?? [ 1773.021493][ T6377] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 1773.047653][T15052] loop0: detected capacity change from 0 to 32768 [ 1773.055193][ T6377] usb 3-1: No valid video chain found. [ 1773.072756][ T6377] usb 3-1: USB disconnect, device number 97 [ 1773.123671][T15052] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1773.297167][T15052] XFS (loop0): Ending clean mount [ 1773.392346][ T5820] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1773.505433][T15080] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1773.525794][T15066] loop3: detected capacity change from 0 to 32768 [ 1773.540258][T15066] (syz.3.18590,15066,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1773.595012][T15066] (syz.3.18590,15066,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1773.673634][T15066] JBD2: Ignoring recovery information on journal [ 1773.730180][T15066] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1773.795643][T15066] [ 1773.798019][T15066] ====================================================== [ 1773.805211][T15066] WARNING: possible circular locking dependency detected [ 1773.812248][T15066] syzkaller #0 Not tainted [ 1773.816742][T15066] ------------------------------------------------------ [ 1773.823749][T15066] syz.3.18590/15066 is trying to acquire lock: [ 1773.829887][T15066] ffff888077f7cda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 1773.842182][T15066] [ 1773.842182][T15066] but task is already holding lock: [ 1773.849949][T15066] ffff888077f7ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 1773.861092][T15066] [ 1773.861092][T15066] which lock already depends on the new lock. [ 1773.861092][T15066] [ 1773.871679][T15066] [ 1773.871679][T15066] the existing dependency chain (in reverse order) is: [ 1773.880995][T15066] [ 1773.880995][T15066] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1773.889160][T15066] down_read+0x46/0x2e0 [ 1773.893894][T15066] ocfs2_init_acl+0x30a/0x770 [ 1773.899180][T15066] ocfs2_mknod+0x140f/0x2300 [ 1773.904741][T15066] vfs_mknod+0x32b/0x360 [ 1773.910108][T15066] do_mknodat+0x386/0x500 [ 1773.915040][T15066] __x64_sys_mknod+0x8e/0xa0 [ 1773.920153][T15066] do_syscall_64+0x55/0xa0 [ 1773.925438][T15066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1773.932022][T15066] [ 1773.932022][T15066] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1773.940877][T15066] down_read+0x46/0x2e0 [ 1773.945727][T15066] ocfs2_start_trans+0x3a8/0x6f0 [ 1773.951373][T15066] ocfs2_shutdown_local_alloc+0x1fc/0xaa0 [ 1773.957776][T15066] ocfs2_dismount_volume+0x1e5/0x8a0 [ 1773.963661][T15066] generic_shutdown_super+0x134/0x2b0 [ 1773.970080][T15066] kill_block_super+0x44/0x90 [ 1773.975367][T15066] deactivate_locked_super+0x97/0x100 [ 1773.981602][T15066] cleanup_mnt+0x43b/0x4d0 [ 1773.986553][T15066] task_work_run+0x1d4/0x260 [ 1773.991777][T15066] exit_to_user_mode_loop+0xe6/0x110 [ 1773.997779][T15066] exit_to_user_mode_prepare+0xee/0x180 [ 1774.003854][T15066] syscall_exit_to_user_mode+0x1a/0x50 [ 1774.009929][T15066] do_syscall_64+0x61/0xa0 [ 1774.014862][T15066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1774.021265][T15066] [ 1774.021265][T15066] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 1774.028914][T15066] ocfs2_start_trans+0x2a9/0x6f0 [ 1774.034379][T15066] ocfs2_setattr+0xc72/0x1bc0 [ 1774.039753][T15066] notify_change+0xb0d/0xe10 [ 1774.044956][T15066] chown_common+0x413/0x5d0 [ 1774.050080][T15066] do_fchownat+0x14b/0x240 [ 1774.055114][T15066] __x64_sys_chown+0x82/0x90 [ 1774.060369][T15066] do_syscall_64+0x55/0xa0 [ 1774.065302][T15066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1774.071884][T15066] [ 1774.071884][T15066] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 1774.080928][T15066] __lock_acquire+0x2df1/0x7d40 [ 1774.086484][T15066] lock_acquire+0x19e/0x420 [ 1774.091765][T15066] down_write+0x97/0x200 [ 1774.096627][T15066] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 1774.103142][T15066] ocfs2_xattr_set+0x61b/0x13e0 [ 1774.108602][T15066] ocfs2_set_acl+0x4e1/0x590 [ 1774.113789][T15066] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1774.119695][T15066] vfs_set_acl+0x803/0xa60 [ 1774.124810][T15066] path_setxattr+0x41d/0x5d0 [ 1774.129929][T15066] __x64_sys_setxattr+0xbb/0xd0 [ 1774.135293][T15066] do_syscall_64+0x55/0xa0 [ 1774.140232][T15066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1774.147095][T15066] [ 1774.147095][T15066] other info that might help us debug this: [ 1774.147095][T15066] [ 1774.157740][T15066] Chain exists of: [ 1774.157740][T15066] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1774.157740][T15066] [ 1774.174362][T15066] Possible unsafe locking scenario: [ 1774.174362][T15066] [ 1774.181983][T15066] CPU0 CPU1 [ 1774.187430][T15066] ---- ---- [ 1774.192909][T15066] lock(&oi->ip_xattr_sem); [ 1774.197913][T15066] lock(&journal->j_trans_barrier); [ 1774.206056][T15066] lock(&oi->ip_xattr_sem); [ 1774.213175][T15066] lock(&ocfs2_file_ip_alloc_sem_key); [ 1774.218921][T15066] [ 1774.218921][T15066] *** DEADLOCK *** [ 1774.218921][T15066] [ 1774.227061][T15066] 3 locks held by syz.3.18590/15066: [ 1774.232331][T15066] #0: ffff88807eb04418 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1774.241659][T15066] #1: ffff888077f7d118 (&type->i_mutex_dir_key#32){++++}-{3:3}, at: vfs_set_acl+0x37a/0xa60 [ 1774.251935][T15066] #2: ffff888077f7ce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x340 [ 1774.263671][T15066] [ 1774.263671][T15066] stack backtrace: [ 1774.269743][T15066] CPU: 0 PID: 15066 Comm: syz.3.18590 Not tainted syzkaller #0 [ 1774.277460][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1774.287757][T15066] Call Trace: [ 1774.291041][T15066] [ 1774.293974][T15066] dump_stack_lvl+0x18c/0x250 [ 1774.298654][T15066] ? load_image+0x400/0x400 [ 1774.303158][T15066] ? show_regs_print_info+0x20/0x20 [ 1774.308359][T15066] ? print_circular_bug+0x12b/0x1a0 [ 1774.313551][T15066] check_noncircular+0x2fc/0x400 [ 1774.318929][T15066] ? arch_stack_walk+0x160/0x190 [ 1774.323967][T15066] ? look_up_lock_class+0x75/0x140 [ 1774.329375][T15066] ? print_deadlock_bug+0x5d0/0x5d0 [ 1774.334930][T15066] ? lockdep_lock+0xf5/0x230 [ 1774.339876][T15066] ? stack_trace_save+0xaa/0x100 [ 1774.345615][T15066] ? _find_first_zero_bit+0xd3/0x100 [ 1774.351338][T15066] __lock_acquire+0x2df1/0x7d40 [ 1774.356499][T15066] ? verify_lock_unused+0x140/0x140 [ 1774.362169][T15066] ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70 [ 1774.369018][T15066] ? _raw_spin_unlock+0x40/0x40 [ 1774.374089][T15066] ? verify_lock_unused+0x140/0x140 [ 1774.379814][T15066] lock_acquire+0x19e/0x420 [ 1774.384569][T15066] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 1774.391364][T15066] ? __might_sleep+0xe0/0xe0 [ 1774.396120][T15066] ? read_lock_is_recursive+0x20/0x20 [ 1774.402015][T15066] down_write+0x97/0x200 [ 1774.406341][T15066] ? ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 1774.412596][T15066] ? down_read_killable+0x340/0x340 [ 1774.417804][T15066] ? ocfs2_xattr_set+0x5ef/0x13e0 [ 1774.423009][T15066] ? __lock_acquire+0x7d40/0x7d40 [ 1774.428146][T15066] ? ocfs2_xattr_block_find+0x15b/0x4d0 [ 1774.433912][T15066] ocfs2_try_remove_refcount_tree+0xb7/0x340 [ 1774.440266][T15066] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 1774.446615][T15066] ? up_write+0x1c3/0x410 [ 1774.451291][T15066] ocfs2_xattr_set+0x61b/0x13e0 [ 1774.456258][T15066] ? __ocfs2_xattr_set_handle+0xf40/0xf40 [ 1774.462425][T15066] ? mark_lock+0x94/0x320 [ 1774.466943][T15066] ? __lock_acquire+0x1347/0x7d40 [ 1774.472338][T15066] ? __lock_acquire+0x7d40/0x7d40 [ 1774.477732][T15066] ? do_raw_spin_lock+0x11f/0x2c0 [ 1774.482839][T15066] ? __rwlock_init+0x150/0x150 [ 1774.487682][T15066] ? do_raw_spin_unlock+0x121/0x230 [ 1774.493227][T15066] ? _raw_spin_unlock+0x28/0x40 [ 1774.498075][T15066] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 1774.503786][T15066] ? ocfs2_inode_lock_atime+0x530/0x530 [ 1774.509585][T15066] ocfs2_set_acl+0x4e1/0x590 [ 1774.514255][T15066] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1774.519185][T15066] ? read_lock_is_recursive+0x20/0x20 [ 1774.524600][T15066] ? ocfs2_xattr_get+0x260/0x260 [ 1774.529721][T15066] ? evm_inode_set_acl+0xbc/0x430 [ 1774.535195][T15066] ? down_write+0x16e/0x200 [ 1774.540055][T15066] ? evm_revalidate_status+0x4f/0xb0 [ 1774.545860][T15066] ? ima_inode_set_acl+0x81/0x170 [ 1774.551150][T15066] ? make_vfsuid+0x51/0xb0 [ 1774.555952][T15066] ? inode_owner_or_capable+0xf0/0x1c0 [ 1774.561601][T15066] vfs_set_acl+0x803/0xa60 [ 1774.569271][T15066] path_setxattr+0x41d/0x5d0 [ 1774.574000][T15066] ? simple_xattrs_free+0x150/0x150 [ 1774.579578][T15066] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1774.586178][T15066] ? lock_chain_count+0x20/0x20 [ 1774.591030][T15066] __x64_sys_setxattr+0xbb/0xd0 [ 1774.595987][T15066] do_syscall_64+0x55/0xa0 [ 1774.600613][T15066] ? clear_bhb_loop+0x40/0x90 [ 1774.605342][T15066] ? clear_bhb_loop+0x40/0x90 [ 1774.610390][T15066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1774.616798][T15066] RIP: 0033:0x7ff28a59c799 [ 1774.621371][T15066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.641683][T15066] RSP: 002b:00007ff28b4f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1774.650272][T15066] RAX: ffffffffffffffda RBX: 00007ff28a815fa0 RCX: 00007ff28a59c799 [ 1774.658259][T15066] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 1774.666575][T15066] RBP: 00007ff28a632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1774.674566][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.682661][T15066] R13: 00007ff28a816038 R14: 00007ff28a815fa0 R15: 00007ffe31b09a18 [ 1774.690811][T15066] [ 1774.694052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1774.859889][ T5825] ocfs2: Unmounting device (7,3) on (node local) [ 1775.499761][T15087] Bluetooth: hci0: Opcode 0x0c20 failed: -4