last executing test programs: 2m10.612555329s ago: executing program 0 (id=613): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="39000000140081ae10003c000500018311001f9de60cbda816dc9f2c90c3c79f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x0) 2m10.262341988s ago: executing program 0 (id=614): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f00000002c0)={'syz_tun\x00', @random='D\x00\x00\x00(E'}) 6.200692222s ago: executing program 3 (id=1393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075b, 0x1004}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 6.048957458s ago: executing program 3 (id=1395): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x4000, &(0x7f0000000080)={[{@inode32}, {@prjquota}, {@prjquota}]}, 0x1, 0x9839, &(0x7f0000025e80)="$eJzs3QeYJGWheP1Z2CUnARVRFBUVI1GCiBIERIJEBQUEyZKDEpQkIkFREFAEJKPknHPOOeecc87he5bdVVwPyL3fvX+4nnOeZ3emq6tr3nl/XdUzUzPdS8y96BwDA2MMDGvygZG74dY5Ftxohzku2WvHPU6YfKwJJhu+ePgNJhl+cZJBw9+OMjAwMMrw7QxfNvaDxx43ysDgN5f/o7HHHGvQuAMD0w6/ONvwtzMOezPRQyPWe2OkRh7ooL9fHLTdsH9vNv7QDzH0naWuP/eMgYGBCd5y+6E3mfpfPlFpS8w+z9z/sPq721CrIcPff+u/0Yb9m+iegYGJ7hzg+8db1x30HnxKQz/mBDvcO8Y678HH/j/XErPPM+9I/kP3xVGHL5tx6D4+8j5obOT7+fUrz7Lb8Cl88/42MDD0EPdP+8r/iZaYfe75B97+OD9w/1jjnfLGm8fNsZ8cGBj7qYGBsZ8eGBj7mYGBsZ8dGBj7uffapf7/Nfsc080xdH8fcXk4+4j78gR0v9hrtWf3HBgYGH3YOmO/PuzxYpzJRzwmVFVV1fu72eeYbk54/B/jnR7/t9xq9ht7/K+qqvq/27yzzzHd0MfxkR7/x3mnx//vXHvt6sN+9j/bjMNu9fp7+0lUVVXVf6m558XH/wne6fF//O2v3rfH/6qqqv+7LbLAm4//44z0+D/xOz3+rz7frRcNX2/E1w2vvWWTb/7+2PDlr7xl+ahvWf7yW5YPect23rr+aG9Z/uJblo8xMDD2g8OXv/qPxWM/OfQ2/7qdsZ//x+/jTDL4LctfeMvy0d6y/MXhYxq6fPS3LH/tLeuP8Y/l4wz9b/LhH/eld5jqqqqq902LTDf3nANv+T374YtH/GI//l7oEUdsddt7Nd6qqqqqqqqq+q/3+mMnn/6Pv/n++MBb/nb173/DOvznAoOOPPPKK9+zgb4/GvSvPw/Z/L0e0//fhjqPcfDkAwNrLv5eD6Xeg/7P/K16/a+Uv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5vz/3//+/+BO7+w/fBVZ5701rsW/cctJxlYdfh7N9w6x4Krvgdjfw/6Tz3/P7DqoIGB4b4TDLVccPZFFptyYGBg0btunXSGgb9fN9PQ62aZcNQ3/5hzYGDKN/8fMsnbbHn4qyy8+eIOE/99G0e+uf1539hn1EEjDeItzXrG3QesssQL04/89nNv/3n8/fUllnx+nylG/C3LKCOtNMbb3HjE9kd8LiM7Dx/7lEPHPtX6a6w91XobbfzlVddYbuUVV15xzWmnnWb66WaYftqvzjzVSquuvuLUw/5/mzkb9tIVo76bORtn5Dl7bPa3ztnIn9sHjj8A5+xfX9Xjnzbx5hbPmvX+i0fM2eB3OWcjPt6o7zxnk686/ANNMjBkYNk3p2bQwMAkg4cMbDj0wjSjDwxMMmT4upMMXffrE44yMLDDPz7RQcOfbHTYOoM2H7rO++x1S2YePiObjFhv5OdZH3mg/+51S44ZZ+dbR3rdkv+t/luP///iNdOgv0/UiBdAGL7OMK/3+HUm/mW8kw9+80Hu7cb7Ds+L82Z0/1pjlYcW/596Xhwa7zjvMN53eB6/tx3vlNM8sfuwTf2PjXekY938w658N8e6gXc+1o1Kt1/xsslGPtbN9/ZD/Kf9eMQcjT7SSm93rNthvrM2G7r9gXc+1s2/6vAnD/jHsW6UgYFJRh1xrBt64BttyMAOQy9MO/TC6EMGDhx6Ybo3L4w5cObQC19Zfq3VVxj05tMMDN/u1EO3O9uEg4btQNcdsMroO7/xxuDhY3l+7H8e6/D7x+RvfTyffcLhkzn8tiO2O3TVEdt9ceth1402fLsv/Be2O+K2NN5JTht23ejDt/viSNsd8g7bHXHbf9kfphz0T7+oCseb9/R1jWj/HeMdxvsOz8ON97c33adY5v7/gefhHvR24x38zuN9u9cNedvxPnzxI3v/Tz1vON3P7txr2H1ljOH3s9f+C/ffEbcd+Tg27IlAhh32x3g3x7HJ/+U4tsWoo4w02W/p7b7OXQHWH75H/H1rK+z/wqoj5n7ISNv9d1/nvuVzGQTHsQlG+n5u0GZ7DwyiOX9w9Wc2eH2nd57zIQP//L3FiDkfcdt3mvPR382cf+yd53zkr5Pfbs6n/PSw64eMNP63zvnCu8523Yg5H22k7f67OR/9nR87/nXOBwaG0JzvMOmweXun4+nbzfmI246Y86EfZ5YJBw/MNTAwMMXwOR/t3cz5JP8z9/OxYP1h76/490VPzrDQl0bM+chz/O/mfLT/4pxveuff7+dTvHndp0YZGG20gQ2XW3/9dacZ9v+Ii9MO+5+PRU+uMGye3+mx9O2MRtz2nfaLwe/GaIJ3ZTTo3xlNOvjtjP6xa416wCJP/XePRYP/q0Zn8rHoxHmGzds7fV30dnM+4rb0ODjxW24/8veh7/D8Wfg5vTk/820z4vu998PzZ434fvf/5PNnjfiZ5KojH+Tr3dbP/93l7y5/d/m7y1/c25z/n3zE+f83xtnvQ8O/6Rxy2Uw3zvZej/c97j/6/P9w3386/z/bjTNdNvRbq+HXveP52WHrvC/Pz8447M1ED41Yb+TzgyMP9N+dn91rl/Uv+390fva/1Yh99V18X9zx313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/ubc7/Tz3i9wDuW2zB7w4/ETpkk2kO2+S9Hu973H/0+f/hvv90/n+Tw6bZZJSBv1/3juf/h63jOP9/9wKbLf1+Pv8/Yl/t/H/9m/J3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Fvc/5/thG/B3DIrHN9ZsTvA1yz7T67v9fjfY/7Tz3/3+v/e+v47y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hc3/Pz/wEgvk7hQ9wsMzv//3+5t/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/9/LHLP7fzx+z+C+RP2bxXzJ/zOL/g/wxi/8P88cs/kvlj1n8l84fs/gvkz9m8f9R/pjFf9n8MYv/cvljFv8f549Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/j/JH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/z/LHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6Yxf+X+WMW/y3zxyz+v8ofs/hvlT9m8f91/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8f5M/ZvH/bf6YxX/7/DGL/+/yxyz+v88fs/jvkD9m8d8xf8zi/4f8MYv/TvljFv+d88cs/rvkj1n8/5g/ZvH/U/6YxX/X/DGL/5/zxyz+u+WPWfx3zx+z+O+RP2bx/0v+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf+v+WMW/7/lj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/19+d/yDbfcTi/0b7PybxHzSQP2bxH5Q/ZvEfJX/M4j9q/pjFf3D+mMV/SP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/h/IH7P4T5g/ZvGfKH/M4j9x/pjF/4P5Yxb/D+WPWfw/nD9m8Z8kf8zi/5H8MYv/pPljFv+P5o9Z/D+WP2bxnyx/zOL/8fwxi/8n8scs/pPnj1n8P5k/ZvH/VP6Yxf/T+WMW/ynyxyz+n8kfs/h/Nn/M4v+5/DGL/5T5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8Z8qf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfy/mj9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/6/lj1n8Z8kfs/h/PX/M4j9r/pjF/xv5Yxb/b+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6Yxf9b+WMW/7nyxyz+c+ePWfznyR+z+H87f8ziP2/+mMX/O/ljFv/58scs/vPnj1n8F8gfs/gvmD9m8f9u/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8f9e/pjF//v5Yxb/JfLHLP5L5o9Z/H+QP2bx/2H+mMV/qfwxi//S+WMW/2Xyxyz+P8ofs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/ivm/y8NFvmvlD9m8V85f8ziv0r+mMV/1fwxi/9P8scs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8zi/7P8MYv/BvljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvH/Zf6YxX/L/DGL/6/yxyz+W+WPWfx/nT9m8d86f8ziv03+mMV/2/wxi/92+WMW/9/kj1n8f5s/ZvHfPn/M4v+7/DGL/+/zxyz+O+SPWfx3zB+z+P8hf8ziv1P+mMV/5/wxi/8u+WMW/z/mj1n8/5Q/ZvHfNX/M4v/n/DGL/275Yxb/3fPHLP575I9Z/P+SP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvH/a/6Yxf9v+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L839oWI96x+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Pd/P81i/+g/DGL/yj5Yxb/UfPHLP6D88cs/kPyxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvH/QP6YxX/C/DGL/0T5Yxb/ifPHLP4fzB+z+H8of8zi/+H8MYv/JPljFv+P5I9Z/CfNH7P4fzR/zOL/sfwxi/9k+WMW/4/nj1n8P5E/ZvGfPH/M4v/J/DGL/6fyxyz+n84fs/hPkT9m8f9M/pjF/7P5Yxb/z+WPWfynzB+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/9X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/h/LX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+H8zf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+38ofs/jPlT9m8Z87f8ziP0/+mMX/2/ljFv9588cs/t/JH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/d/PHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/9/LHLP7fzx+z+C+RP2bxXzJ/zOL/g/wxi/8P88cs/kvlj1n8l84fs/gvkz9m8f9R/pjFf9n8MYv/cvljFv8f549Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/j/JH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/z/LHLP4b5I9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6Yxf+X+WMW/y3zxyz+v8ofs/hvlT9m8f91/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8f5M/ZvH/bf6YxX/7/DGL/+/yxyz+v88fs/jvkD9m8d8xf8zi/4f8MYv/TvljFv+d88cs/rvkj1n8/5g/ZvH/U/6YxX/X/DGL/5/zxyz+u+WPWfx3zx+z+O+RP2bx/0v+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf+v+WMW/7/lj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R7zpP/i9GtX7Nov/ke3/mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/TOI/6kD+mMV/UP6YxX+U/DGL/6j5Yxb/wfljFv8h+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4fyB/zOI/Yf6YxX+i/DGL/8T5Yxb/D+aPWfw/lD9m8f9w/pjFf5L8MYv/R/LHLP6T5o9Z/D+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/0/nj1n8p8gfs/h/Jn/M4v/Z/DGL/+fyxyz+U+aPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjFf6r8MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8f9q/pjFf4b8MYv/jPljFv+Z8scs/jPnj1n8v5Y/ZvGfJX/M4v/1/DGL/6z5Yxb/b+SPWfy/mT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/2/lj1n858ofs/jPnT9m8Z8nf8zi/+38MYv/vPljFv/v5I9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/7v5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjF/3v5Yxb/7+ePWfyXyB+z+C+ZP2bx/0H+mMX/h/ljFv+l8scs/kvnj1n8l8kfs/j/KH/M4r9s/pjFf7n8MYv/j/PHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+f5I9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8f9p/pjF/2f5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/ef6Yxf8X+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOL/y/wxi/+W+WMW/1/lj1n8t8ofs/j/On/M4r91/pjFf5v8MYv/tvljFv/t8scs/r/JH7P4/zZ/zOK/ff6Yxf93+WMW/9/nj1n8d8gfs/jvmD9m8f9D/pjFf6f8MYv/zvljFv9d8scs/n/MH7P4/yl/zOK/a/6Yxf/P+WMW/93yxyz+u+ePWfz3yB+z+P8lf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOL/1/wxi//f8scs/gfmj1n8D8ofs/gfrPJ/Y/x3u6bF/xCV/7vP4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyT+gwfyxyz+g/LHLP6j5I9Z/EfNH7P4D84fs/gPyR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjF/wP5Yxb/CfPHLP4T5Y9Z/CfOH7P4fzB/zOL/ofwxi/+H88cs/pPkj1n8P5I/ZvGfNH/M4v/R/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+H86f8ziP0X+mMX/M/ljFv/P5o9Z/D+XP2bxnzJ/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/9X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8zi/7X8MYv/LPljFv+v549Z/GfNH7P4fyN/zOL/zfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+H8rf8ziP1f+mMV/7vwxi/88+WMW/2/nj1n8580fs/h/J3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/NH7P4L5Q/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/t/LH7P4fz9/zOK/RP6YxX/J/DGL/w/yxyz+P8wfs/gvlT9m8V86f8ziv0z+mMX/R/ljFv9l88cs/svlj1n8f5w/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/j/JH/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/9P88cs/j/LH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/z/PHLP6/yB+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/X+aPWfy3zB+z+P8qf8ziv1X+mMX/1/ljFv+t88cs/tvkj1n8t80fs/hvlz9m8f9N/pjF/7f5Yxb/7fPHLP6/yx+z+P8+f8ziv0P+mMV/x/wxi/8f8scs/jvlj1n8d84fs/jvkj9m8f9j/pjF/0/5Yxb/XfPHLP5/zh+z+O+WP2bx3z1/zOK/R/6Yxf8v+WMW/z3zxyz+e+WPWfz3zh+z+O8j9R/931xv8d9X6v/vsvjvlz9m8d8/f8zif0D+mMX/r/ljFv+/5Y9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b97uP8o79W43qdZ/O9p/8cs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP2Qgf8ziPyh/zOI/Sv6YxX/U/DGL/+D8MYv/kPwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/D+QP2bxnzB/zOI/Uf6YxX/i/DGL/wfzxyz+H8ofs/h/OH/M4j9J/pjF/yP5Yxb/SfPHLP4fzR+z+H8sf8ziP1n+mMX/4/ljFv9P5I9Z/CfPH7P4fzJ/zOL/qfwxi/+n88cs/lPkj1n8P5M/ZvH/bP6Yxf9z+WMW/ynzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/NX/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/l/LH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+38wfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/+38scs/nPlj1n8584fs/jPkz9m8f92/pjFf978MYv/d/LHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v/d/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v+9/DGL//fzxyz+S+SPWfyXzB+z+P8gf8zi/8P8MYv/UvljFv+l88cs/svkj1n8f5Q/ZvFfNn/M4r9c/pjF/8f5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/T/LHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/NH/M4v+z/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zx/zOL/i/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx/2X+mMV/y/wxi/+v8scs/lvlj1n8f50/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv/f5I9Z/H+bP2bx3z5/zOL/u/wxi//v88cs/jvkj1n8d8wfs/j/IX/M4r9T/pjFf+f8MYv/LvljFv8/5o9Z/P+UP2bx3zV/zOL/5/wxi/9u+WMW/93zxyz+e+SPWfz/kj9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bx/2v+mMX/b/ljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5YxL/0Qbyxyz+g/LHLP6j5I9Z/EfNH7P4D84fs/gPyR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjF/wP5Yxb/CfPHLP4T5Y9Z/CfOH7P4fzB/zOL/ofwxi/+H88cs/pPkj1n8P5I/ZvGfNH/M4v/R/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+H86f8ziP0X+mMX/M/ljFv/P5o9Z/D+XP2bxnzJ/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fzfbPBIly3+X8kfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X80fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi//X8scs/rPkj1n8v54/ZvGfNX/M4v+N/DGL/zfzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOL/rfwxi/9c+WMW/7nzxyz+8+SPWfy/nT9m8Z83f8zi/538MYv/fPljFv/588cs/gvkj1n8F8wfs/h/N3/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/h/L3/M4v/9/DGL/xL5Yxb/JfPHLP4/yB+z+P8wf8ziv1T+mMV/6fwxi/8y+WMW/x/lj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8zi/5P8MYv/avljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+P80fs/j/LH/M4r9B/pjFf8P8MYv/RvljFv+N88cs/j/PH7P4/yJ/zOK/Sf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/H+ZP2bx3zJ/zOL/q/wxi/9W+WMW/1/nj1n8t84fs/hvkz9m8d82f8ziv13+mMX/N/ljFv/f5o9Z/LfPH7P4/y5/zOL/+/wxi/8O+WMW/x3zxyz+f8gfs/jvlD9m8d85f8ziv0v+mMX/j/ljFv8/5Y9Z/HfNH7P4/zl/zOK/W/6YxX/3/DGL/x75Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/P+aP2bx/1v+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf/SB/DGL/6D8MYv/KPljFv9R88cs/oPzxyz+Q/LHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8f9A/pjFf8L8MYv/RPljFv+J88cs/h/MH7P4fyh/zOL/4fwxi/8k+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/2T5Yxb/j+ePWfw/kT9m8Z88f8zi/8n8MYv/p/LHLP6fzh+z+E+RP2bx/0z+mMX/s/ljFv/P5Y9Z/KfMH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/1fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+H8tf8ziP0v+mMX/6/ljFv9Z88cs/t/IH7P4fzN/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP7fyh+z+M+VP2bxnzt/zOI/T/6Yxf/b+WMW/3nzxyz+38kfs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9388cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi//38scs/t/PH7P4L5E/ZvFfMn/M4v+D/DGL/w/zxyz+S+WPWfyXzh+z+C+TP2bx/1H+mMV/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+P8kfs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/0/wxi//P8scs/hvkj1n8N8wfs/hvlD9m8d84f8zi//P8MYv/L/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjF/5f5Yxb/LfPHLP6/yh+z+G+VP2bx/3X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfx/kz9m8f9t/pjFf/v8MYv/7/LHLP6/zx+z+O+QP2bx3zF/zOL/h/wxi/9O+WMW/53zxyz+u+SPWfz/mD9m8f9T/pjFf9f8MYv/n/PHLP675Y9Z/HfPH7P475E/ZvH/S/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/6/5Yxb/v+WPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxv9nmP8G7W83if4vN/11m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+2H+y/1b/WDr68/lj/8n+b93/X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+T+I8xkD9m8R+UP2bxHyV/zOI/av6YxX9w/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4fyB+z+E8o9n9js7e/zuI/kdj/nbL4T5w/ZvH/YP6Yxf9D+WMW/w/nj1n8J8kfs/h/JH/M4j9p/pjF/6P5Yxb/j+WPWfwnyx+z+H88f8zi/4n8MYv/5PljFv9P5o9Z/D+VP2bx/3T+mMV/ivwxi/9n8scs/p/NH7P4fy5/zOI/Zf6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/6/mj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMX/a/ljFv9Z8scs/l/PH7P4z5o/ZvH/Rv6Yxf+b+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bx/1b+mMV/rvwxi//c+WMW/3nyxyz+384fs/jPmz9m8f9O/pjFf778MYv//PljFv8F8scs/gvmj1n8v5s/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8v5c/ZvH/fv6YxX+J/DGL/5L5Yxb/H+SPWfx/mD9m8V8qf8ziv3T+mMV/mfwxi/+P8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8f9J/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/5/mj1n8f5Y/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv+f549Z/H+RP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP6/zB+z+G+ZP2bx/1X+mMV/q/wxi/+v88cs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/5v8MYv/b/PHLP7b549Z/H+XP2bx/33+mMV/h/wxi/+O+WMW/z/kj1n8d8ofs/jvnD9m8d8lf8zi/8f8MYv/n/LHLP675o9Z/P+cP2bx3y1/zOK/e/6YxX+P/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP5/zR+z+P8tf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6R/7z/6/+q43qdZ/E9u/8cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf8yB/DGL/6D8MYv/KPljFv9R88cs/oPzxyz+Q/LHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8f9A/pjFf8L8MYv/RPljFv+J88cs/h/MH7P4fyh/zOL/4fwxi/8k+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/2T5Yxb/j+ePWfw/kT9m8Z88f8zi/8n8MYv/p96l/5D/rXG9T7P4f7r9H7P4T5E/ZvH/TP6Yxf+z+WMW/8/lj1n8p8wfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/V/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4fy1/zOI/S/6Yxf/r+WMW/1nzxyz+38gfs/h/M3/M4j9b/pjFf/b8MYv/HPljFv8588cs/t/KH7P4z5U/ZvGfO3/M4j9P/pjF/9v5Yxb/efPHLP7fyR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/3fzxyz+C+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL//fyxyz+388fs/gvkT9m8V8yf8zi/4P8MYv/D/PHLP5L5Y9Z/JfOH7P4L5M/ZvH/Uf6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4/yR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4v/T/DGL/8/yxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/8/wxi/8v8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMX/l/ljFv8t88cs/r/KH7P4b5U/ZvH/df6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/H+TP2bx/23+mMV/+/wxi//v8scs/r/PH7P475A/ZvHfMX/M4v+H/DGL/075Yxb/nfPHLP675I9Z/P+YP2bx/1P+mMV/1/wxi/+f88cs/rvlj1n8d88fs/jvkT9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/r/ljFv+/5Y9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfzHGsgfs/gPyh+z+I+SP2bxHzV/zOI/OH/M4j8kf8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/D+SPWfwnzB+z+E+UP2bxnzh/zOL/wfwxi/+H8scs/h/OH7P4T5I/ZvH/SP6YxX/S/DGL/0fzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8zi/+n8MYv/FPljFv/P5I9Z/D+bP2bx/1z+mMV/yvwxi//n88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/l/NH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/1/LHLP6z5I9Z/L+eP2bxnzV/zOL/jfwxi/8388cs/rPlj1n8Z88fs/jPkT9m8Z8zf8zi/61/5//C//K43qdZ/Odq/8cs/nPnj1n858kfs/h/O3/M4j9v/pjF/zv5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/bv6YxX+h/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvH/Xv7/0vjD3xr8v58/Ztn/l8gfs/gvmT9m8f9B/pjF/4f5Yxb/pfLHLP5L549Z/JfJH7P4/yh/zOK/bP6YxX+5/DGL/4/zxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/n+SPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/af6Yxf9n+WMW/w3yxyz+G8r8R3+X61n8N5L5v9ss/hvnj1n8f54/ZvH/Rf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4/zJ/zOK/Zf6Yxf9X+WMW/63yxyz+v84fs/hvnT9m8d8mf8ziv23+mMV/u/wxi/9v8scs/r/NH7P4b58/ZvH/Xf6Yxf/3+WMW/x3yxyz+O+aPWfz/kD9m8d8pf8ziv3P+mMV/l/wxi/8f88cs/n/KH7P475o/ZvH/c/6YxX+3/DGL/+75Yxb/PfLHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4/zV/zOL/t/wxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/2AP5Yxb/QfljFv9R8scs/qPmj1n8B+ePWfyH5I9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/4H8MYv/hPljFv+J8scs/hPnj1n8P5g/ZvH/UP6Yxf/D+WMW/0nyxyz+H8kfs/hPmj9m8f9o/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/D89MDAw2ns1pvdxFv8p2v8xi/9n8scs/p/NH7P4fy5/zOI/Zf6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/6/mj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMX/a/ljFv9Z8scs/l/PH7P4z5o/ZvH/Rv6Yxf+b+WMW/9nyxyz+s+ePWfzneNN/jPdqVO/bLP5ztv9jFv9v5Y9Z/OfKH7P4z50/ZvGfJ3/M4v/t/DGL/7z5Yxb/7+SPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf+7+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6Yxf97+WMW/+/nj1n8l8gfs/gvmT9m8f9B/pjF/4f5Yxb/pfLHLP5L549Z/JfJH7P4/yh/zOK/bP6YxX+5/DGL/4/zxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/n+SPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/af6Yxf9n+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/3n+mMX/F/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/8v8MYv/lvljFv9f5Y9Z/LfKH7P4/zp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/yR+z+P82f8ziv33+mMX/d/ljFv/f549Z/HfIH7P475g/ZvH/Q/6YxX+n/DGL/875Yxb/XfLHLP5/zB+z+P8pf8ziv2v+mMX/z/ljFv/d8scs/rvnj1n898gfs/j/JX/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zi/9f8MYv/3/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif6zXf8g7XWnxP87r/45Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZyB/zOI/KH/M4j9K/pjFf9T8MYv/4Pwxi/+Q/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8P5A/ZvGfMH/M4j9R/pjFf+L8MYv/B/PHLP4felv/1994443/N0N7P2bx/3D7P2bxnyR/zOL/kfwxi/+k+WMW/4/mj1n8P5Y/ZvGfLH/M4v/x/DGL/yfyxyz+k+ePWfw/mT9m8f9U/pjF/9P5Yxb/KfLHLP6fyR+z+H82f8zi/7n8MYv/lPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/L+aP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/r+WPWfxnyR+z+H89f8ziP2v+mMX/G/ljFv9v5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/1v5Yxb/ufLHLP5z549Z/OfJH7P4fzt/zOI/b/6Yxf87+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/27+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/17+mMX/+/ljFv8l8scs/kvmj1n8f5A/ZvH/Yf6YxX+p/DGL/9L5Yxb/ZfLHLP4/yh+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf8n+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/H+aP2bx/1n+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfx/nj9m8f9F/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/j/Mn/M4r9l/pjF/1f5Yxb/rfLHLP6/zh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/2/yxyz+v80fs/hvnz9m8f9d/pjF//f5Yxb/HfLHLP475o9Z/P+QP2bx3yl/zOK/c/6YxX+X/DGL/x/zxyz+f8ofs/jvmj9m8f9z/pjFf7f8MYv/7vljFv898scs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/j/NX/M4v+3/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYX/oOTfLoX/wMA4d7X/Yxb/u/PHLP735I9Z/O/NH7P435f/AH0lbPG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjEf9yB/DGL/6D8MYv/KPljFv9R88cs/oPzxyz+Q/LHLP6j5Y9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8f9A/pjFf8L8MYv/RPljFv+J88cs/h/MH7P4fyh/zOL/4fwxi/8k+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/2T5Yxb/j+ePWfw/kT9m8Z88f8zi/8n8MYv/p/LHLP6fzh+z+E+RP2bx/0z+mMX/s/ljFv/P5Y9Z/KfMH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/1fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+H8tf8ziP0v+mMX/6/ljFv9Z88cs/t/IH7P4fzN/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP7fyh+z+M+VP2bxnzt/zOI/T/6Yxf/b+WMW/3nzxyz+38kfs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9388cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi//38scs/t/PH7P4L5E/ZvFfMn/M4v+D/DGL/w/zxyz+S+WPWfyXzh+z+C+TP2bx/1H+mMV/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+P8kfs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOL/0/wxi//P8scs/hvkj1n8N8wfs/hvlD9m8d84f8zi//P8MYv/L/LHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjF/5f5Yxb/LfPHLP6/yh+z+G+VP2bx/3X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfx/kz9m8f9t/pjFf/v8MYv/7/LHLP6/zx+z+O+QP2bx3zF/zOL/h/wxi/9O+WMW/53zxyz+u+SPWfz/mD9m8f9T/pjFf9f8MYv/n/PHLP675Y9Z/HfPH7P475E/ZvH/S/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/6/5Yxb/v+WPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj0n8xxvIH7P4D8ofs/iPkj9m8R81f8ziPzh/7D/d/55x33x3vCH5Y//p/sMbb7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+H8gfs/hPmD9m8Z8of8ziP3H+mMX/g/ljFv8P5Y9Z/D+cP2bxnyR/zOL/kfwxi/+k+WMW/4/mj1n8P5Y/ZvGfLH/M4v/x/DGL/yfyxyz+k+ePWfw/mT9m8f9U/pjF/9P5Yxb/KfLHLP6fyR+z+H82f8zi/7n8MYv/lPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bxnyp/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/L+aP2bxnyF/zOI/Y/6YxX+m/DGL/8z5Yxb/r+WPWfxnyR+z+H89f8ziP2v+mMX/G/ljFv9v5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/1v5Yxb/ufLHLP5z549Z/OfJH7P4fzt/zOI/b/6Yxf87+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/27+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/17+mMX/+/ljFv8l8scs/kvmj1n8f5A/ZvH/4bvwH/d/c1zv0yz+S7X/Yxb/pfPHLP7L5I9Z/H+UP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/0/yxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHhvkPGvhP918vf8yy/6+fP2bx/2n+mMX/Z/ljFv8N8scs/hvmj1n8N8ofs/hvnD9m8f95/pjF/xf5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/L/DGL/5b5Yxb/X+WPWfy3yh+z+P86f8ziv3X+mMV/m/wxi/+2+WMW/+10/u/us7X4/0bn/+6y+P82f8ziv33+mMX/d/ljFv/f549Z/HfIH7P475g/ZvH/Q/6YxX+n/DGL/875Yxb/XfLHLP5/zB+z+P8pf8ziv2v+mMX/z/ljFv/d8scs/rvnj1n898gfs/j/JX/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zi/9f8MYv/3/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyT+4w/kj1n8B+WPWfxHyR+z+I+aP2bxH5w/ZvEfkj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP/b/sU9PT4AYBhCHr+1d3burHdu2bdu2bdu2bdu2bdu2XjOZfU8m+31/wc78Zlv6D9Y/auk/RP+opf9Q/aOW/n/WP2rp/xf9o5b+f9U/aun/N/2jlv5/1z9q6f8P/aOW/v/UP2rp/y/9o5b+/9Y/aun/H/2jlv7/1T9q6f8//aOW/v/XP2rpP4z+UUv/YfWPWvoPp3/U0n94/aOW/iPoH7X0H1H/qKX/SPpHLf1H1j9q6T+K/lFL/1H1j1r6j6Z/1NJ/dP2jlv5j6B+19B9T/6il/1j6Ry39x9Y/auk/jv5RS/9x9Y9a+o+nf9TSf3z9o5b+E+gftfSfUP+opf9E+kct/SfWP2rpP4n+UUv/SfWPWvpPpn/U0n9y/aOW/lPoH7X0n1L/qKX/VPpHLf2n1j9q6T+N/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19J9R/6il/0z6Ry39Z9Y/auk/i/5RS/9Z9Y9a+s+mf9TSf3b9o5b+c+gftfSfU/+opf9c+kct/efWP2rpP4/+UUv/efWPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/0X1j1r6L6Z/1NJ/cf2jlv5L6B+19F9S/6il/1L6Ry39l9Y/aum/jP5RS/9l9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9K+kct/VfWP2rpv4r+UUv/VfWPWvqvpn/U0n91/aOW/mvoH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/3X1j1r6r6d/1NJ/ff2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6b+L/lFL/131j1r676Z/1NJ/d/2jlv576B+19N9T/6il/176Ry3999Y/aum/j/5RS/999Y9a+u+nf9TSf3/9o5b+B+gftfQ/UP+opf9B3+8/6EfY9RPV0v9g/49a+h+if9TS/1D9o5b+h+kftfQ/XP+opf8R+kct/Y/UP2rpf5T+UUv/o/WPWvofo3/U0v9Y/aOW/sfpH7X0P17/qKX/CfpHLf1P1D9q6X+S/lFL/5P1j1r6n6J/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfQ/X/+opf8F+kct/S/UP2rpf5H+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf2v1D9q6X+V/lFL/6v1j1r6X6N/1NL/Wv2jlv7X6R+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/1b9o5b+t+kftfS/Xf+opf8d+kct/e/UP2rpf5f+UUv/u/WPWvrfo3/U0v9e/aOW/vfpH7X0v1//qKX/A/pHLf0f1D9q6f+Q/lFL/4f1j1r6P6J/1NL/Uf2jlv6P6R+19H9c/6il/xP6Ry39n9Q/aun/lP5RS/+n9Y9a+j+jf9TS/1n9o5b+z+kftfR/Xv+opf8L+kct/V/UP2rp/5L+UUv/l/WPWvq/on/U0v9V/aOW/q/pH7X0f13/qKX/G/pHLf3f1P+HBg4o6v+W/lFL/7f1j1r6v6N/1NL/Xf2jlv7v6R+19H9f/6il/wf6Ry39P9Q/aun/kf5RS/+P9Y9a+n+if9TS/1P9o5b+n+kftfT/XP+opf8X+kct/b/UP2rp/5X+UUv/r/WPWvp/o3/U0v9b/aOS/kMH6B+19P+F/lFL/1/qH7X0/5X+UUv/gfpHLf0H6R+19P+1/lFL/9/oH7X0/63+UUv/3+kftfT/vf5RS/8/6B+19P+j/lFL/z/pH7X0H6x/1NJ/iP7Rz64/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8x97dxuZVFn4cP13bPf3Zv5tzeA0ZDDbdxJWtXZkMNh/qY8FUHYsBE8gWVkalMPcQ3ECtBiUGY5iMBBF1m7oJJMaMF8MEhJVEJU5F40Q0xCGoi5gaJjKicam5296lvdc261Wvay/2+bxo73PK73Rb8t05ZWsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkNLmbbfcsLajo22TF1544cXAi1P9OxOQ2mvRn+ofCQAAAAAAAAAAAAAAMJIc3050qn+OAAAAAABwumlpfVd3ddWQU9WDD+b8vK33fdOrV16/5/nHV5bf93/48mEuOWHwQU9PT89LzV0z+w8nFUVR+mzT+48nV45L1+/sunx731Eofvtsc+u27c0Hd37l6w/PnTp9Tm3v2dpizXXtHW1LJhRFqK4ttpYOGqqKIkysLbaXDhpLB5Nqi/tLB0t7D6YUB0oHF167oWNd6cQJnxpOOy2tny2qhxRbDPndYHD/nV2bdpXfj3LJ8tVqiv7+65p/uLfiY2Uj9F++fqiq7H/MP0FgRGPr//aF5fejXPKE+/+j7XWrhvvYyP2Xrx8m6B/SGeb5f0ijvc/7e/bPGOH5f+4wlxzY//QvK7tK/d/0yxfq+0/VnMzzf+nz9R2F6sr+Jwx5/i89x9eUn/8nFUWoHecvB5xWWlo/1z3a/b+y+6H915xVsaka3P/RVXuqS/0fvuuB9/efqj2p/geuH2pGuf9XfebA0B8rMDYtrbt7Ku7/Y+i/WDDMJQf6n7/72FWl/s/YeWTfoI+Npf/ayv4Xb7nxE4s3b7ulvv3Gtevb1rfd1NjY0LR0WVPjRcsX9z4S9L0d568KnB7Gd/8vplZsqoqibWC/6MPLXir1f/Dcf/yt/9TkMfY/cdT7/3Pu/zCs8ycUEycWW9du2bKpoe9t+bCx723ffzZM/yd+/T9i//PK/x+w/HV36Qvygf1v3vnVj5T6v3fSqgf6T00cY/+TRuu/87XPC0QY5/1/XcVmSP/tr35nXan/P71y/FD/qbF+/T951P53uf/DeLS0VvyFn/+xUv+r/3V4uD8nOAlhij//g3Ry9L912i++GbcOU/UP6eTof+nmtsi/bBv+T/+QTo7+f7Wj6kjcOpyhf0gnR/9f635wY9w6TNM/pJOj//2zH3kqbh3+X/+QTo7+j6+fflXcOtTpH9LJ0f9lX9q7Om4dpusf0snRf9Ur056IW4cZ+od0cvRfX3X2p+LW4XX6h3Ry9H9d58Mvxq3DTP1DOjn6//zOX0d+n054vf4hnRz9P/XHrTvi1mGW/iGdHP2/MKu9Pm4dztQ/pJOj//tveOKRuHV4g/4hnRz9P/2tDx6LW4egf0gnR//fePbImrh1mK1/SCdH//sWHvtD3DqcpX9IJ0f///7o1R+IW4c36h/SydF/2L/8u3HrcLb+IZ0c/V/x5F0NceswR/+QTo7+O1fcdmfcOpyjf0gnR/9NzQtnx63DufqHdHL0P+PPf787bh3m6h/SydH/x+57b+W/+32Swnn6h3Ry9H/zhtWPxq3D+fqHdHL0v3JGzwVx6zBP/5BOjv4PH73vR3HrMF//kE6O/u++c8kVcevwJv1DOjn6/8Gt53XHrcOb9Q/p5Oj/5do7bo1bhwX6h3Ry9P/ln9Usi1uHhfqHdHL0/+OHvr8rbh3eon9IJ0f/L77vsXPi1uEC/UM6OfrfffGsL8atw1v1D+nk6P/dz2xcH7cOi/QP6eTof/Le3x+NW4d6/UM6Ofqfv+rgh+LW4UL9Qzo5+t+waM3v4tZhsf4hnRz9P3Pg6UNx67BE/5BOjv53PPbp5rh1aNA/pJOj/8cv6/hP3Do06h/SydH/P5t+8vG4dViqf0gnR/9nHvr2F+LWoUn/kE6O/q9+cPLMuHW4SP+QTo7+N14z+3tx67BM/5BOjv4vmfvQpXHr8Db9Qzo5+n/PX1fcHLcOF+sf0snRf9099zwXtw7L9Q/p5Oh/3rW3XxO3DpfoH9LJ0f/1c+qfjFuHS/UP6eTo/47jLQvi1mGF/iGdHP133fb8vrh1WKl/SCdH/92ffLkubh3ern9IJ0f/e6dceW/cOrxD/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwX3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE8BAAD//0rM0ZI=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0105872, &(0x7f00000000c0)=ANY=[@ANYRESOCT]) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000f80)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 4.334915515s ago: executing program 3 (id=1405): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodiscard}, {@nolargeio}, {@gquota}]}, 0x1, 0x988a, &(0x7f00000185c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4002, 0x58) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xf000, 0x863, 0x0) 3.960974237s ago: executing program 2 (id=1407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 3.637489611s ago: executing program 2 (id=1409): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca96c633774262eb5942c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r0}) 3.311399456s ago: executing program 2 (id=1414): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) write$P9_RVERSION(r1, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 3.087353553s ago: executing program 2 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4444, &(0x7f00000088c0)="$eJzs3c9rG1ceAPA3Y+/GziZZ58chCwsr2MAuu4uxc9pdBzZxnDh24k1Jm1B6UWRbSdzKVrDl0kMO7i3QU6GH0ENooTefgg+9pn9CLz2m50B76KVQCHWRNLI1YwmrwRPX4fOBeDzvzXvvK301T08B+cWJ2r2FlcLCSqG0VKjO3Vk5W3i/WlldLIf4Fdnv8elNHnmS+/1z/eLlN2+dDeGr+W+eb25uboa6/tDRaNvvP/7wYK792BJn2tT77dzbXnknhHBqR1x1fSGEt78MIQohXEjKxpPjYAjhWGjW3Xrw0e3CHkXz5Fn5XPHFzMONsTPT6483uj/2KIRPK3/6193F7/7aN/btP/ZoeAAAAAAAAAAAAAAAAAAADrjJG9dvvjEyGp5GoX892vl93cnk2O37sZt75i/5P1gAAAAAAAAAAAAAAAAAAAD4jdr+/n8hOtHh+/8TyfF8l/ab/8s/RvIz9f/rE5dGRpP936Md9f9Oir6/0BeOd9j3Pbv/+4VM+877vx/Zs/hb8bXGHQpRPJw6j+Ph4RA+TzZ+Px0djivVldo/71RXl+b3LIwDK53/5u79qVdBsqF/r/kfz/Sf//7/J0P2VVs/v73zpUwH6fz3db3uiw+jnvJ/Md3sUU5htzmZ/xCvsXT++xtlg+0XHGoe6vn/uH/3/E9k+s/r/j8WQihE9VgLqRmgvoapl3dZr/wuj1gOsnT+m09PaupMnshu9/9PmfxfyvS/X/P/WvaNiI7S+f99o2wgdUVzAdDIf7z7/X850/9+5L8e/5r3/56k859M9v2pSxrP5Pb8n5Sudc7/ZKb/vPJ/M07iPBalXgHrUbO829+rIy2d/4Ed9duf/+Ke1n9XMu0753/vbs5WfK1xW5//WtP/36Pm5z86S+d/sOt1va7/pjLt8p7/zzfWf7ysdP4PN8rSa+ehxs/O+a9PwOn8T2f6zyv/jVXJQCv/2/PJz4ea5Z9Z//Uknf8/NAvj9ivWGj8b679o9/X/1Uz/+7H+q8e/Fuc76usinf/u/y9bz//XPbz/X8u0yz//IYxY67+0dP6Pdr2ucf8P7J7/mUy7vPP/tzw7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAxpPjUIji4dR5HA8Ph3AxOT8dDkezpfnibKU6995KCBNJeSGciO5WqrOlSnFhqTpfLpYqlepcCJeS+lNhIFqpVGvFxdL9y1t9DUb3yqXl2my5VAshTCblfw5HW33NLtQWS/dDCFe26v4YV5fv3ystFecXlv87MjIyEqa2YjgelT+olZdqzdGbtSFMb7UditqCa1Rf3YrlSPRudXV5qVRplF9ra1OpzpUqbW1mkrpPwvGotry6NFeqlYuV6t3WePvpfHKcmLrx1o1rozvqb0fN4/irDQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAX+np2H8ehRD6m2dxCKEQJb9Eyb+UJ8/K54ovZh5ujJ2ZXn+88bzTNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwCztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYpX+UiIEoDsBvRkFLj2EVks42oogWRgRPoMfwMHoUL+EdLCxsLZaF3Qks+QMhsN33NQ/mx5s3MA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFju7rl7eaqbiBTnm7OIr7fvn8P8odSP6+n+kxUzT1f0cBz3j93Nbd2Uf0+j/Koc/bZ5l/7/vb/GRO19DvZkuE974zlDc/s2975+7kWkXEVEW/LLlHNVLbsLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiyAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRd8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvwIAAP//8VgYtg==") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) 2.68974113s ago: executing program 1 (id=1419): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@random="8957a73b2ea7", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0x65, 0x0, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010102}, @address_request={0x11, 0x0, 0x0, 0xffff879e}}}}}, 0x0) 2.372207043s ago: executing program 1 (id=1421): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x10000008, 0x4) 2.169086137s ago: executing program 2 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00cb7b27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) 1.634377417s ago: executing program 1 (id=1424): r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x100, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 1.634051876s ago: executing program 2 (id=1425): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[], 0x1, 0x5537, &(0x7f0000005e80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000002240)=[{&(0x7f0000000140)="1f26a13b9deb3005498bc836e7dcbee9608fb5b21c8a95ff7c3c10dc79c66eaf6c58bb7e53925271c96d6c9381bf3cc62b5035897389b5e7a56275855c472ce3c637cdfd6870f6d98a7aa81b", 0x4c}, {&(0x7f0000001100)="e5ac0fa35d6b06d455aaac4e9b132fc19badc425427f0fcd3e8a912781e1a211a04fa5e6e3586fc7cb4e4825a5c38893c38729e1460df37541df8b5e4a2059867baa89298c4ae8ce90317e59ac5eba334783487b0116eacfd1c1914dbdac0a410baaffae0e53e639e01c1a1758b77b731ad67868250f075797678d25ad9fd9cf8ae05ab80be1cbb2da8584f156e21d47a7f778c16e359b3b184d4c9dc5cc6b78fffbab72e25c4e1c638c27b6dee60e182251539851a85dea429bba40b2da015afc26a0f36d20e0538529a2bf2350a119fa59090107af40d6e4e508a8f98d3d2c012f217e064d402d90028c3a8115bd2a4af8ef2ec00ad5ce7fe488e60f3c1a5bd8456040e264ddca29e69d3d808a25e30c4e8e785813ea3a02d1bde5f5e5ca1e825d92d7accd87873bd3be6ec44c0391fbb89325a00895c85553b7e3d9493250a00be63fc0557009324fb3d5e13a4df58bf89d84c98a2ebedb35f6347ab41034e62018bcbf21272109fadf0c6f3484b955dff2b436d86f175da2da4899bb872139b060dd54a7cb017784e5f32dd9657b5bd84906a763f8157a2115b5afd86ca220b9e1a34b50816073d94e6df0a9fe345d310589eeee5e734e0e62b1e385433e0949255186c266784634f745f41676451f155c9923064e27377a94a5874b9bd0d73619858a2f5dd836444f10dfcd19afc723538dd4b5ecc53b0d10f9703d4119701d63e4751d2cad476c5c8cbfd9f5667afee79cdece95e314b5aed3255d480e449b034095e3a8eab73fe1995ebc54798ada19102b3e1ff951a94052ef8489c9bd4cee1c992abd7c6db7c83c4021761517d8d9e4a8314c4994adf8ce12d5b032a29a9bfaf0cf5e846887849247aa76ace2aa455b3cceef65ac9a2261ee12462509fbc5d50da69f3b66a6c87f0c214e4aa86291a7eb481c0ce003e23014875fe026e401d6508f328846f87bc214690cb3256934e3b93520532205260c19fbeb0ade5cdf14dcd4283e8f6925bb685ff95d1481b14b618e19fee0d359a5e4cde5012679cd687aefb928adbb6beb88a59242c750f887ba256b752582e114dc4b4519aa739635e923d1505162c3eedf7f55646ac4b5b58cd2076e4801ac0f66c133f18d1af255bdbe211a0db674d224c67643674d9d0befd6b98ccfbfe8db279ce955a9ab58205e6c6caffbdee3c167acaed3c2ad7aae276ef83d60f69ed7785a7c4f5b7719bb4885fc752f31eb795837b8bc813013f40eda0a6155266c797811c8f80a7582f128c4562b386a09e7adf1a342dd9d2066dea26ff48e1d8aa1c93e72ef568fa152fc5b524f5c93d8c36b617dead9c369cb607f4e0dbe3d2cf577249ef2d43e26f304e0572a4e021196419eb540e9d11116ec4cec86e069b1bf76f080320d755f06f22c8f9182c6c6867e494941d9708075cb7204334ac3711bc3f447b3fba9f343d83c85de4f73efd1bedb7fa34ab0fc84244896205eb414a67423bd5ead90163c77f34a4ea24046a025dc075306eab4165b0be55995a15bfc1dbf964e7a81d2273a4caef0d01ecfc7a9404bb179fd392dd54a31a7bc0bd754ffa9c61ff12591efcc531b3fa9bd825db06dc1f74d4314f889de68102bde0510d6a146fc588471a8d7b6c5c1a037bfcb36cc8b52d32485ad3048bda8d478bcf86b37ba618eccb9b9919c1eddac5659cac33f5489c82f734a8448a5e6fc5562ea991c941f8575be599bbf03b79442d0739fedd0819d199963c2f44503c5716300a887c3bf3bafa71ebd8b87522ca8e9bde0c53a29959f1c4a4e0e396f9464f6db0dde296f25db46d004fefb4b2bc5858585d0a86c1c2f8cad79f88fa8e3757f09cdaae55e002ac4d8594c862689846f7c056e81d2e05edb77ca91f12a21fce62b6e0bdd2dcdd4522e0514349315018ce3a2af025e9e72088d4ca6c2d373b233ac13ee5af62410332350a79b830a80fab7d4550d30e3a7da1dc2d4c2644155cce81ee45e4f124098d1b6abf875c6a0b12ad64ce5ae49f590617e914394818813e6681f2235fe2c44e4199cf7b986b83a24a5190a7c0e097ae1278ad97fd34a2ed1243f8eaf01e1ebbbcf80bed518e7ceba2251d9154f9869cd34a52059dd00bc488567e6daf71f0bc227191f7e6ece5811f14cc9a05c5c1685c02c80156fb74ab2fc53b491b836f118a6a05e95036d28623d8ac802338ea6a750530bba8957bbfdaa24c27cab4323918dd123ddaaf50cc0a782eace2f1141b02545d367903b43e66d86a08f473f64cda35a2373f0e8826574b74cb79d4d491ea10a487f56861c50d8e963fd0892b6e0c9d28411476284f2879292a5a72094576be6c7f9371e266fda92b4bac1f9e452100c2265a488f6f2c525376539c656f4dd9c048d17229ccee96d9a5f2f1c1ccaae2c8114b35050bc27b3d09b3238591a2f4b44b4c55d0d3acd6b38fca29ff9473543ca823c56a8de3fe536dcf315da759a3890e9b41df8a45c684d319ac1414184f966c1909dccf21410bab9fe7ccc3b0ae5c1f4f72bc7c348acad586d1616a721df092c6cc9810df150dc7dc12b8075614b875bea6558c17ed2a94d77f1e84167530a9ffc59cb5aeb7aa6609544a6e685d3d5e84e0df5b5486a41267ed62ffe3cac98ff0f79f924aca8af352e638ab3dcdccab7d7e7c490439e267293e41e4e1c9d567344dc0ca22080567f2d943f30d9587a6887c66c519c6cf092cf6cf9eea4f10d517da79b2cdd5b6494199c70afe3013744618bb364fda353053a8bf55c091130198fa4063e7eebcc39d137a969707000f4c6e6fd63ab82aaf4ab655ba9c1cace4e34c014e18fdb9c1ca37dbdbb1bf7a70bd8093fc7c39e34481d8ce6912092ae57896547cff1411696262a22c0d3c78de74aa38434113646b9e54361e6d8019f47ac32506ddd5329bc62e8f73d31fa5edd779a9aa64d8000dd5face750f61f209f42b9207a1257e7f9e6e1be1ce788ace8a0b9a250c2d1559d7fa106ce00a55244b7a71fe701120b9d83945bf02bbcc207b75a2bf5776039676c207c30543a72cd25ff4a011b0ba159013a8b6ea22757e0cb00d9b6c6e3fc01c25126cc01fc36245d948714d3863b20a3111d1e3477589d8cc08e08b27eeaabd37e6a14090675282de4f0281c4a5bf15284aa9667519186a0abf5de28e1e9d4cb8717723bf58247574ad884f63d27521540bdc69089c3056c5a2fee7343965d1687cfcec73e5d4c94cffb04edfb046e0f7380c32e2520c5792634313c8ba145b243f5d0ec54dc41389a5face8e2d278f13e5d90311cb564a4b96c1dd9154fcc5c5b2f2c81fc7d9b331f79da8c845cf3f2392181888609d4bc3b5d7de2608882ba272242154d493d866dacb6617d8b54194bdc10b3c19949707e6a6893af6b79b4993c7dcf34e82ed038681d4553defa92ed96dd7cdb965d337dc1c8d3c459184be97cf2c2adc7543a965ac4316c4392466938ab9fd7e585325249cf7f15adb9f6d20f59cacc77681685e53ab061b4190f5d3147f1d3be4c0ff17533c642bceed571d2c633bdc5d662ac4d155e7e6117690ab8f1cbb55d0a0ec49c75f1e6cff7be0e2f61b89ddb41ad07870c4ad8d8affa8736b3d0ff83bed74734f9a740003efa04d08ad55e3faf6a7f65b31c08c4727d5cac6641ed49a32835fe0b2e93d67dde4ce81f5aff6aea24b99bfcf87532f3491a164b24290756a472e73c78c1cc7980d9ca421436de933a040a4ebff9f6afacdde7f60aa33593e10aa1bdeca73670987a32b4125209457bc0ec47bcbc6bcd61abd76d782e125fc96bdeb59d46303da7793d8cfd9c7ad91654f7d320bbbe40fa0a05637a6f95680ddce71d968709c3334c373851f11b9c2c513a4be28bb3304e52c23a168cd42ec3427b5c9be9c920398b8e868263a1e34c5af3903f679cbd2860df74ed8a9e91d63c6314f95b8024698fd6baed01d9ba9e95d970fb2d077308db2c63d9113b68023b0f3a8b3583ac2e659b40ba4527b0a3c86f5043033153c2a49a37dc67e4df5b5f5e8d9406dd90fa95cee75bc434a1ee01baf44855e5ecbe9b1379a91d05d64553a70e408ed3487b19e8de8a81769b269f76d4387c2fdced009df86735fc57ba6e3546da603fa9f2a2aed44be7e56e2e41b689a0be2028aff60b63d0c8b7adffe8dec55d0c88c82890d85869f6c9457f42466b39fa392376c8fbc6130771371473d1da33a93d78671d4d1bb1c3ad1bd5b992489a21db230f105debf9ea3b8b1a97bacdfa4d0467c98acf926ffebba5672b5fc1af79e45b0ecf690a6118c0d5610d22c6549980e8a7a452a222b5dfd828310194803deec68da13b7691d2870c0de8655885a9e7fd451835f62f517a51ede775bf9c3f4e92095fac8c13799237a218fb369300f106c4956acef5a23d478ca975bd0cf61d469ab386999db9ce42668a76acdb184da4faedfccc17845fb3ddcc60f2e6183ececfb1cdb9dd0d404ee35a981e1438ba29e0bd8b7356a7e567d71f21524f9fd3bc069f08efc1948a0da32c4ce51d773cfe75981565633bb2db669ae4d73b8fffd2e23fdbfc82714c6db7667fbe2c0674b9fc410b0ffdf19bac3c1ec291d42a59ea564f1358bfe6578e2676777eefd192749e41c5703e0330b74b06de768a661a6513a0f847c1815e851046e1fd07e0b68bd54c5b67a7dcf1d72958e1438212d97af2ad08cd12b71decb40f4e981c8a002213c4d98c68ac6eb35e473347e439da354f08524b83037f3e94694311a96560871e98e62ef0b45dde9195a83b9d30be1a67a40a585993331384f0bd6f198d1a87d5716d749b77746dd73ffa72d9e28b55802650d6de52ec61eeed06ec276ac46c336af287fe05bee41653abdc21468b7dce7bf567da3b8740c635adb6592c2fce52d48764b4f636780e5e20943a0263fa998811bf836811f72f0ea924650ed87aebcb1e667ef80d720d2e3ab73b5be362ba9a397245f949551a72649df113d44c8c04245e3fa55485cfdd00183d10f9426aa9a49539f5b02fa02acc3c82132f43f6ecf9623d8ac7dec757b11bf741042d54d1126e6e1914054bfb3315ecbf8b40973fc8b991bfd3f2a64657e9b9f8ae0f3271b0d376a438894a18152e94e8a1a3bf1f9bc24a3fa8e769f32af38a8ec16e5787a24846b18abeecb45bfdd41d1865bfb9472c0d386b5b4485853eac0753a82810e8fe47228382563d98801bc0dfd16db51d802758a4da4864aca22b75fdceccdff70501913c60fc11893fdd134d50123849ea09178314ea3cf3b9ad7773ca81d86e241d83389c02840afbad87a75de896552943e21befc490018f3da4dda72cb984fb73bf46f1cda64d4ff0f685c320460d901a2a6121743cc5b43cc5d0daeb94f4e5f3c9b2f8b21bc21e8f790e6eda800f07d1ebd117ca840107cc82e51183d2e87bd38af87f454715dd226cfb016e5fe0106009c551230d8c073f46a9e290aa9788a0e84df9691ec547ba4c6c4c50f7e1eed6a75c8490298fa095af4eb544b7675c44a9c4b92d4bf131d4411997bbb2ef49253788b317cdf7de10ad980b12c78759e32b25206b931da1c9ad29666d029d51abb6d5e1ca8a847cbaf5f62fdac001a083a79638438c7556088bfd1b66b20de8ba5e70cef5a54c276f9c2db4f41c91a37e3d2b0704a8ab0c46c7fe483bee4d099c91f010dcfdf6e4de38dd2783396c337b30430adccb7c28fa011111121f40830131a35c4478836f957c73533e15ade7cca16b275621f31ee16b9322af73f8a8db2941c156d2b0fd21f274a7f7ec3f9270e2e3002673a96715a4fdd1", 0x1000}], 0x2) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x1000, 0x44000000}) 1.605370281s ago: executing program 3 (id=1426): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.028319078s ago: executing program 4 (id=1429): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) 831.891511ms ago: executing program 4 (id=1430): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 670.646227ms ago: executing program 1 (id=1431): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x200000000008b92, 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x4}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x1, 0xbb7, 0x800}) 618.684886ms ago: executing program 4 (id=1432): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 474.518591ms ago: executing program 1 (id=1433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000700)=""/41, &(0x7f0000000080)=0x29) 461.450493ms ago: executing program 4 (id=1434): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file1\x00', 0x150, 0x0, 0x1}) unshare(0x22020600) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 271.114355ms ago: executing program 4 (id=1435): unshare(0x6020480) r0 = memfd_create(&(0x7f00000009c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x06\x14\x0e\xceA\xa3\xf3\xa4\x846\b\x84Ii\x83d\x9a\xaa\xcc\x05\xd5\xa5c\xb9\xe0E\xe2\x99\x12zEf\x84\x91', 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) fcntl$addseals(r0, 0x409, 0xf) 194.733237ms ago: executing program 1 (id=1436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1437): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000006c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x0, 0x0}], 0x1}) read(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): loop7: detected capacity change from 0 to 7 [ 169.262077][ T7459] Dev loop7: unable to read RDB block 7 [ 169.287331][ T12] loop: Write error at byte offset 7, length 3584. [ 169.289943][ T7459] loop7: unable to read partition table [ 169.306491][ T7429] F2FS-fs (loop0): Start checkpoint disabled! [ 169.328006][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 169.337984][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 169.347282][ T7459] loop7: partition table beyond EOD, truncated [ 169.373340][ T7429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 169.387073][ T7459] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 169.687438][ T7467] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 169.700650][ T7466] xt_hashlimit: size too large, truncated to 1048576 [ 169.777271][ T11] kworker/u4:0: attempt to access beyond end of device [ 169.777271][ T11] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 169.820642][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 169.853790][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 169.878809][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 169.988735][ T7472] loop1: detected capacity change from 0 to 16 [ 170.012955][ T7472] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 170.573495][ T7479] loop3: detected capacity change from 0 to 4096 [ 170.635517][ T7479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.895811][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.450388][ T7500] program syz.0.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.963174][ T7508] loop0: detected capacity change from 0 to 256 [ 172.012594][ T7508] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 173.226680][ T7512] loop3: detected capacity change from 0 to 32768 [ 173.281749][ T7512] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.467274][ T7526] loop0: detected capacity change from 0 to 8192 [ 173.496242][ T7512] XFS (loop3): Ending clean mount [ 173.525716][ T7526] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 173.535184][ T7512] XFS (loop3): Quotacheck needed: Please wait. [ 173.547940][ T7526] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 173.588955][ T7526] REISERFS (device loop0): using ordered data mode [ 173.643298][ T7526] reiserfs: using flush barriers [ 173.684489][ T7526] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.708576][ T7526] REISERFS (device loop0): checking transaction log (loop0) [ 173.737941][ T7526] REISERFS (device loop0): Using r5 hash to sort names [ 173.778105][ T7519] loop1: detected capacity change from 0 to 40427 [ 173.786093][ T7526] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 173.821280][ T7512] XFS (loop3): Quotacheck: Done. [ 173.841367][ T7519] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 173.849791][ T7519] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 173.945865][ T7519] F2FS-fs (loop1): Image doesn't support compression [ 173.958972][ T7519] F2FS-fs (loop1): invalid crc value [ 173.970537][ T7519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 174.119548][ T7519] F2FS-fs (loop1): Start checkpoint disabled! [ 174.150008][ T7519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 174.191717][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.506494][ T7542] loop2: detected capacity change from 0 to 2048 [ 174.626425][ T7542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.055776][ T7550] loop0: detected capacity change from 0 to 4096 [ 175.269202][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 175.297623][ T7556] netlink: 'syz.3.616': attribute type 21 has an invalid length. [ 175.688773][ T7566] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.621'. [ 175.698699][ T7564] loop3: detected capacity change from 0 to 128 [ 175.818369][ T7568] C: renamed from team_slave_0 (while UP) [ 175.830078][ T7568] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 175.853657][ T7568] netlink: 116 bytes leftover after parsing attributes in process `syz.0.622'. [ 175.880756][ T7568] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.214160][ T7582] loop2: detected capacity change from 0 to 64 [ 177.139502][ T7578] loop0: detected capacity change from 0 to 40427 [ 177.162227][ T7578] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 177.168787][ T7578] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 177.194224][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 177.213153][ T7578] F2FS-fs (loop0): invalid crc value [ 177.354837][ T7578] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 177.364545][ T7578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 177.401603][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 177.425052][ T23] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 177.454859][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.481472][ T23] usb 3-1: Product: syz [ 177.496240][ T23] usb 3-1: Manufacturer: syz [ 177.501036][ T23] usb 3-1: SerialNumber: syz [ 177.528098][ T23] usb 3-1: config 0 descriptor?? [ 177.548354][ T23] gspca_main: spca508-2.14.0 probing 041e:4018 [ 177.772582][ T23] gspca_spca508: reg_read err -32 [ 177.780029][ T7604] loop1: detected capacity change from 0 to 32768 [ 177.790711][ T23] gspca_spca508: reg_read err -32 [ 177.804731][ T5770] syz-executor: attempt to access beyond end of device [ 177.804731][ T5770] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 177.817188][ T7604] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.639 (7604) [ 177.847228][ T5770] syz-executor: attempt to access beyond end of device [ 177.847228][ T5770] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 177.896912][ T7604] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.920187][ T12] kworker/u4:1: attempt to access beyond end of device [ 177.920187][ T12] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 177.953035][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.968953][ T7604] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 177.978191][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.996154][ T7604] BTRFS info (device loop1): using free space tree [ 178.017434][ T23] gspca_spca508: reg_read err -71 [ 178.030633][ T23] gspca_spca508: reg_read err -71 [ 178.047137][ T23] gspca_spca508: reg write: error -71 [ 178.053240][ T23] spca508: probe of 3-1:0.0 failed with error -71 [ 178.062209][ T23] usb 3-1: USB disconnect, device number 4 [ 178.172905][ T7604] BTRFS info (device loop1): enabling ssd optimizations [ 178.180251][ T7604] BTRFS info (device loop1): auto enabling async discard [ 178.368988][ T5771] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.560944][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.810289][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.095855][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.224332][ T7618] loop3: detected capacity change from 0 to 40427 [ 179.263056][ T7618] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 179.271052][ T7618] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 179.343205][ T7618] F2FS-fs (loop3): invalid crc value [ 179.366829][ T7618] F2FS-fs (loop3): Found nat_bits in checkpoint [ 179.429374][ T7645] netlink: 124 bytes leftover after parsing attributes in process `syz.2.649'. [ 179.541893][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.562832][ T7618] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 179.577627][ T7618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 179.958182][ T56] tipc: Disabling bearer [ 179.989041][ T56] tipc: Left network mode [ 180.511742][ T7659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.655'. [ 180.542562][ T7659] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.550383][ T7659] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.631964][ T7659] bridge0: entered allmulticast mode [ 181.034334][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 181.181567][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 181.216064][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.249816][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.261209][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.292155][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.320245][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.328878][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.935245][ T7677] chnl_net:caif_netlink_parms(): no params data found [ 182.158015][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.174730][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.182748][ T7677] bridge_slave_0: entered allmulticast mode [ 182.190533][ T7677] bridge_slave_0: entered promiscuous mode [ 182.207165][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.227487][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.236989][ T7677] bridge_slave_1: entered allmulticast mode [ 182.245444][ T7677] bridge_slave_1: entered promiscuous mode [ 182.282822][ T56] hsr_slave_0: left promiscuous mode [ 182.291353][ T56] hsr_slave_1: left promiscuous mode [ 182.336981][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.348364][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.363575][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.391886][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.409704][ T56] bridge_slave_1: left allmulticast mode [ 182.419661][ T56] bridge_slave_1: left promiscuous mode [ 182.438841][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.467788][ T56] bridge_slave_0: left allmulticast mode [ 182.494464][ T56] bridge_slave_0: left promiscuous mode [ 182.500412][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.681208][ T56] veth1_macvtap: left promiscuous mode [ 182.701756][ T56] veth0_macvtap: left promiscuous mode [ 182.707504][ T56] veth1_vlan: left promiscuous mode [ 182.740183][ T56] veth0_vlan: left promiscuous mode [ 183.441344][ T5784] Bluetooth: hci2: command tx timeout [ 183.727959][ T56] team0 (unregistering): Port device team_slave_1 removed [ 183.789302][ T56] team0 (unregistering): Port device C removed [ 183.848450][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.908663][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.361537][ T56] bond0 (unregistering): Released all slaves [ 184.513829][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.645157][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.818878][ T7677] team0: Port device team_slave_0 added [ 184.896137][ T7677] team0: Port device team_slave_1 added [ 184.951812][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.959291][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.985563][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.038055][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.047547][ T7731] loop3: detected capacity change from 0 to 4096 [ 185.086113][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.086124][ T7731] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.129784][ T7731] EXT4-fs (loop3): Test dummy encryption mode enabled [ 185.138815][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.165000][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.213545][ T7731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.309516][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.494875][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 185.512075][ T5784] Bluetooth: hci2: command tx timeout [ 185.582420][ T7731] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 185.652215][ T7677] hsr_slave_0: entered promiscuous mode [ 185.717799][ T7677] hsr_slave_1: entered promiscuous mode [ 185.735922][ T7677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.754351][ T7677] Cannot create hsr debugfs directory [ 185.764081][ T7750] netlink: 'syz.2.675': attribute type 11 has an invalid length. [ 185.777038][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 185.815448][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.198360][ T7733] loop1: detected capacity change from 0 to 32768 [ 186.224266][ T7733] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.673 (7733) [ 186.256677][ T7733] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 186.276535][ T7733] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 186.328033][ T7733] BTRFS info (device loop1): enabling auto defrag [ 186.346273][ T7733] BTRFS info (device loop1): use no compression [ 186.373244][ T7733] BTRFS info (device loop1): max_inline at 4096 [ 186.379722][ T7733] BTRFS info (device loop1): using free space tree [ 186.466538][ T7677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.500411][ T7677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.527241][ T7677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.553980][ T7733] BTRFS info (device loop1): enabling ssd optimizations [ 186.567245][ T7733] BTRFS info (device loop1): auto enabling async discard [ 186.591660][ T7677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.049548][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.158635][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.224835][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.232488][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.323501][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.332009][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.385090][ T5771] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 187.592225][ T5784] Bluetooth: hci2: command tx timeout [ 187.781566][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 187.857093][ T7808] loop1: detected capacity change from 0 to 4096 [ 187.948810][ T7808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.982186][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 187.993903][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.011552][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.033148][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.061474][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.080716][ T23] usb 4-1: Product: syz [ 188.085308][ T23] usb 4-1: Manufacturer: syz [ 188.089973][ T23] usb 4-1: SerialNumber: syz [ 188.226455][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.348286][ T23] usb 4-1: 0:2 : does not exist [ 188.430534][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 188.618523][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.644553][ T23] usb 4-1: USB disconnect, device number 5 [ 188.739314][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.898333][ T7830] 9pnet_fd: p9_fd_create_unix (7830): problem connecting socket: ./file0: -111 [ 189.295945][ T7820] loop2: detected capacity change from 0 to 32768 [ 189.350871][ T7820] (syz.2.686,7820,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.407687][ T7820] (syz.2.686,7820,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 189.578187][ T7820] JBD2: Ignoring recovery information on journal [ 189.672990][ T5784] Bluetooth: hci2: command tx timeout [ 189.704076][ T7820] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 189.759328][ T7677] veth0_vlan: entered promiscuous mode [ 189.793575][ T7854] loop3: detected capacity change from 0 to 2048 [ 189.810511][ T7677] veth1_vlan: entered promiscuous mode [ 189.858315][ T7854] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.890512][ T7854] NILFS (loop3): mounting unchecked fs [ 189.958025][ T7677] veth0_macvtap: entered promiscuous mode [ 189.996115][ T7677] veth1_macvtap: entered promiscuous mode [ 190.015309][ T7854] NILFS (loop3): recovery complete [ 190.036667][ T7859] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.122142][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.191637][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.222900][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.249421][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.269428][ T7864] loop1: detected capacity change from 0 to 128 [ 190.281228][ T7820] (syz.2.686,7820,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 190.293144][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.305402][ T7864] EXT4-fs: Ignoring removed i_version option [ 190.332093][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.355209][ T7864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 190.370756][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.419507][ T7864] System zones: 1-3, 19-19, 35-36 [ 190.440876][ T7864] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.467152][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.480791][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.490943][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.504186][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.508302][ T7864] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.515601][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.611647][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.664204][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.680340][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 190.737416][ T7677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.775190][ T7677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.793248][ T7677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.836882][ T7677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.882053][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.011322][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.699'. [ 191.213723][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.255829][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.373244][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.410918][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.288968][ T7901] loop3: detected capacity change from 0 to 40427 [ 193.326027][ T7901] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 193.361058][ T7901] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 193.431945][ T7901] F2FS-fs (loop3): invalid crc value [ 193.479601][ T7905] loop1: detected capacity change from 0 to 32768 [ 193.530533][ T7901] F2FS-fs (loop3): Found nat_bits in checkpoint [ 193.549177][ T7905] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.781782][ T5836] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 193.862456][ T7905] XFS (loop1): Ending clean mount [ 193.894241][ T7901] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 193.917223][ T7905] XFS (loop1): Quotacheck needed: Please wait. [ 193.936583][ T7901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 194.031517][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 194.069342][ T5836] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 194.085907][ T5836] usb 5-1: config 0 has no interface number 0 [ 194.090702][ T7905] XFS (loop1): Quotacheck: Done. [ 194.118467][ T5836] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 194.147797][ T7905] XFS (loop1): User initiated shutdown received. [ 194.158458][ T7905] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 194.174983][ T7905] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 194.189515][ T5836] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 194.201774][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.209855][ T5836] usb 5-1: Product: syz [ 194.215062][ T5836] usb 5-1: Manufacturer: syz [ 194.219954][ T5836] usb 5-1: SerialNumber: syz [ 194.228684][ T5836] usb 5-1: config 0 descriptor?? [ 194.235101][ T7940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.251573][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 194.323520][ T5771] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.475046][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.486343][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.494948][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.535110][ T7940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.554013][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.593311][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.621502][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.683643][ T23] usb 3-1: config 0 descriptor?? [ 195.146977][ T23] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 195.190884][ T5836] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 195.220117][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input8 [ 195.242076][ T5836] asix: probe of 5-1:0.188 failed with error -71 [ 195.349089][ T5836] usb 5-1: USB disconnect, device number 2 [ 195.417175][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.575550][ T23] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 195.672549][ T23] usb 3-1: USB disconnect, device number 5 [ 195.774344][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.920548][ T7976] fido_id[7976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 196.165671][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.438670][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.826534][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.843007][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.851789][ T11] tipc: Disabling bearer [ 196.857381][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.872695][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.888642][ T11] tipc: Left network mode [ 196.894246][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.910923][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.021754][ T5846] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 198.244212][ T5846] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 198.255459][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.267660][ T5846] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 198.277369][ T5846] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 198.286420][ T5846] usb 4-1: Manufacturer: syz [ 198.306125][ T5846] usb 4-1: config 0 descriptor?? [ 198.433247][ T5846] rc_core: IR keymap rc-hauppauge not found [ 198.439435][ T5846] Registered IR keymap rc-empty [ 198.467285][ T5846] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 198.528895][ T5846] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 198.620543][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 198.951687][ T5783] Bluetooth: hci0: command tx timeout [ 199.092282][ T5846] usb 4-1: USB disconnect, device number 6 [ 199.294691][ T7994] chnl_net:caif_netlink_parms(): no params data found [ 199.371255][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 199.721740][ T11] hsr_slave_0: left promiscuous mode [ 199.745243][ T11] hsr_slave_1: left promiscuous mode [ 199.782129][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.789639][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.833620][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.841225][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.856510][ T11] bridge_slave_1: left allmulticast mode [ 199.870868][ T11] bridge_slave_1: left promiscuous mode [ 199.888271][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.909655][ T11] bridge_slave_0: left allmulticast mode [ 199.927850][ T11] bridge_slave_0: left promiscuous mode [ 199.949084][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.010512][ T11] veth1_macvtap: left promiscuous mode [ 200.023975][ T11] veth0_macvtap: left promiscuous mode [ 200.029899][ T11] veth1_vlan: left promiscuous mode [ 200.039139][ T11] veth0_vlan: left promiscuous mode [ 200.325064][ T8050] loop3: detected capacity change from 0 to 32768 [ 200.340565][ T8050] XFS: attr2 mount option is deprecated. [ 200.351560][ T5846] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.428324][ T8050] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 200.516646][ T8050] XFS (loop3): Ending clean mount [ 200.551753][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 200.574939][ T5846] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 200.613740][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.625107][ T8050] XFS (loop3): Quotacheck needed: Please wait. [ 200.668537][ T5846] pvrusb2: Hardware description: Terratec Grabster AV400 [ 200.689606][ T5846] pvrusb2: ********** [ 200.705144][ T5846] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 200.752747][ T5846] pvrusb2: Important functionality might not be entirely working. [ 200.771204][ T5846] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 200.801446][ T5846] pvrusb2: ********** [ 200.840609][ T8050] XFS (loop3): Quotacheck: Done. [ 200.904349][ T2320] pvrusb2: Invalid write control endpoint [ 201.031607][ T5783] Bluetooth: hci0: command tx timeout [ 201.106032][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.139802][ T5846] usb 3-1: USB disconnect, device number 6 [ 201.153386][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 201.239429][ T2320] pvrusb2: Invalid write control endpoint [ 201.270495][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 201.361785][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 201.374634][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 201.393668][ T2320] pvrusb2: Device being rendered inoperable [ 201.404065][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 201.415867][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 201.530145][ T2320] pvrusb2: Attached sub-driver cx25840 [ 201.537171][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 201.560708][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 202.265124][ T11] team0 (unregistering): Port device team_slave_1 removed [ 202.346113][ T11] team0 (unregistering): Port device team_slave_0 removed [ 202.432209][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.529981][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.057640][ T8094] loop2: detected capacity change from 0 to 256 [ 203.112658][ T5783] Bluetooth: hci0: command tx timeout [ 203.350156][ T11] bond0 (unregistering): Released all slaves [ 203.738701][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.776984][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.790661][ T7994] bridge_slave_0: entered allmulticast mode [ 203.799398][ T7994] bridge_slave_0: entered promiscuous mode [ 203.826469][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.836644][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.852148][ T7994] bridge_slave_1: entered allmulticast mode [ 203.859968][ T7994] bridge_slave_1: entered promiscuous mode [ 204.098813][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.114639][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.168420][ T7994] team0: Port device team_slave_0 added [ 204.171760][ T28] audit: type=1326 audit(1776360132.229:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.235702][ T7994] team0: Port device team_slave_1 added [ 204.238219][ T28] audit: type=1326 audit(1776360132.229:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.305221][ T28] audit: type=1326 audit(1776360132.239:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.425582][ T28] audit: type=1326 audit(1776360132.239:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.463690][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.470720][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.488495][ T28] audit: type=1326 audit(1776360132.239:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.496752][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.556808][ T8119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.766'. [ 204.576501][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.589338][ T28] audit: type=1326 audit(1776360132.239:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.669395][ T28] audit: type=1326 audit(1776360132.239:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.746904][ T28] audit: type=1326 audit(1776360132.239:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.768427][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.811472][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.851500][ T28] audit: type=1326 audit(1776360132.239:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 204.913463][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.932655][ T28] audit: type=1326 audit(1776360132.289:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8111 comm="syz.3.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fc625d9c819 code=0x7ffc0000 [ 205.126149][ T8127] loop4: detected capacity change from 0 to 4096 [ 205.134973][ T7994] hsr_slave_0: entered promiscuous mode [ 205.198428][ T5784] Bluetooth: hci0: command tx timeout [ 205.213427][ T7994] hsr_slave_1: entered promiscuous mode [ 205.249446][ T8138] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.301641][ T7994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.311503][ T7994] Cannot create hsr debugfs directory [ 205.803426][ T8147] program syz.4.773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.797264][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 207.272428][ T7994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.334483][ T7994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.371167][ T7994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.433178][ T7994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.749992][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.856435][ T7994] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.900532][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.907878][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.973915][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.981412][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.059419][ T8201] loop4: detected capacity change from 0 to 4096 [ 208.119982][ T7994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.132628][ T7994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.175170][ T8203] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.489211][ T8201] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 208.539599][ T8201] Remounting filesystem read-only [ 208.600718][ T7677] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 208.664669][ T7677] NILFS (loop4): discard dirty page: offset=8192, ino=6 [ 208.701600][ T7677] NILFS (loop4): discard dirty block: blocknr=25, size=4096 [ 208.710651][ T7677] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 208.743416][ T7677] NILFS (loop4): discard dirty block: blocknr=27, size=4096 [ 208.751354][ T7677] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 208.779509][ T7677] NILFS (loop4): discard dirty block: blocknr=28, size=4096 [ 208.832295][ T7677] NILFS (loop4): discard dirty page: offset=4096, ino=3 [ 208.839347][ T7677] NILFS (loop4): discard dirty block: blocknr=29, size=4096 [ 208.868785][ T7677] NILFS (loop4): discard dirty page: offset=925696, ino=3 [ 208.886437][ T7677] NILFS (loop4): discard dirty block: blocknr=36, size=4096 [ 208.929559][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.022111][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.086049][ T7994] veth0_vlan: entered promiscuous mode [ 209.133281][ T7994] veth1_vlan: entered promiscuous mode [ 209.202723][ T8228] sctp: [Deprecated]: syz.3.795 (pid 8228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.202723][ T8228] Use struct sctp_sack_info instead [ 209.228374][ T7994] veth0_macvtap: entered promiscuous mode [ 209.253105][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 209.260840][ T23] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 209.269505][ T23] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 209.288457][ T7994] veth1_macvtap: entered promiscuous mode [ 209.289622][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 209.338172][ T23] usb 3-1: config 1 has no interface number 0 [ 209.374470][ T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.406203][ T23] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 209.427645][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.467399][ T23] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 209.479616][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.511588][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.517658][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.551144][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 209.581453][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.611896][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.651673][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.675696][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.743746][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.771606][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 209.791255][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.821344][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.861545][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.908978][ T7994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.943613][ T7994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.973253][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.046267][ T7994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.070760][ T7994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.100508][ T7994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.161722][ T7994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.285597][ T5814] usb 3-1: USB disconnect, device number 7 [ 210.297287][ T5814] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 210.526440][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.551921][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.669850][ T8249] loop4: detected capacity change from 0 to 64 [ 210.693746][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.734551][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.940459][ T8230] loop3: detected capacity change from 0 to 32768 [ 211.079088][ T8230] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.333107][ T8230] XFS (loop3): Ending clean mount [ 211.440464][ T8230] XFS (loop3): Quotacheck needed: Please wait. [ 211.618329][ T8230] XFS (loop3): Quotacheck: Done. [ 211.781851][ T5846] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 211.864395][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.981636][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 211.990553][ T5846] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 212.030360][ T5846] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 212.042021][ T5814] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 212.082852][ T5846] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 212.115130][ T5846] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 212.149610][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.177356][ T5846] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 212.191865][ T5846] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 212.215936][ T5846] usb 3-1: Product: syz [ 212.238976][ T5846] usb 3-1: Manufacturer: syz [ 212.251072][ T5846] usb 3-1: SerialNumber: syz [ 212.259406][ T5846] usb 3-1: config 0 descriptor?? [ 212.275176][ T5846] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 212.292641][ T5814] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 212.308227][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.317338][ T5846] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 212.338110][ T5814] usb 2-1: Product: syz [ 212.357755][ T5814] usb 2-1: Manufacturer: syz [ 212.368909][ T5814] usb 2-1: SerialNumber: syz [ 212.589068][ T5846] usb 3-1: USB disconnect, device number 8 [ 212.589151][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 212.611911][ T8275] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 212.645469][ T5846] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 212.736011][ T5814] rtl8150 2-1:1.0: couldn't reset the device [ 212.753425][ T5814] rtl8150: probe of 2-1:1.0 failed with error -5 [ 212.796986][ T5814] usb 2-1: USB disconnect, device number 7 [ 212.954503][ T8310] loop4: detected capacity change from 0 to 1024 [ 213.223116][ T8310] hfsplus: xattr searching failed [ 214.090328][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 214.141838][ T8338] macvtap2: entered promiscuous mode [ 214.147223][ T8338] bridge0: entered promiscuous mode [ 214.181850][ T8338] macvtap2: entered allmulticast mode [ 214.197647][ T8338] bridge0: entered allmulticast mode [ 214.235184][ T8338] bridge0: port 3(macvtap2) entered blocking state [ 214.243696][ T8338] bridge0: port 3(macvtap2) entered disabled state [ 214.314678][ T8338] bridge0: left allmulticast mode [ 214.319852][ T8338] bridge0: left promiscuous mode [ 214.730126][ T8327] loop3: detected capacity change from 0 to 40427 [ 214.791734][ T8327] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 214.830759][ T8327] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 214.876198][ T8327] F2FS-fs (loop3): invalid crc value [ 214.904713][ T8327] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 215.004895][ T8327] F2FS-fs (loop3): Found nat_bits in checkpoint [ 215.205969][ T8327] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 215.230482][ T8327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 215.403796][ T8327] syz.3.809: attempt to access beyond end of device [ 215.403796][ T8327] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 215.433565][ T8327] syz.3.809: attempt to access beyond end of device [ 215.433565][ T8327] loop3: rw=2049, sector=53280, nr_sectors = 24 limit=40427 [ 215.466618][ T8327] syz.3.809: attempt to access beyond end of device [ 215.466618][ T8327] loop3: rw=2049, sector=53320, nr_sectors = 32 limit=40427 [ 215.528708][ T8327] syz.3.809: attempt to access beyond end of device [ 215.528708][ T8327] loop3: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 215.548039][ T8370] loop4: detected capacity change from 0 to 2048 [ 215.574879][ T8327] syz.3.809: attempt to access beyond end of device [ 215.574879][ T8327] loop3: rw=2049, sector=53400, nr_sectors = 24 limit=40427 [ 215.618527][ T8370] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 215.675265][ T8370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.760564][ T8350] loop1: detected capacity change from 0 to 32768 [ 215.821716][ T8350] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.825 (8350) [ 215.871737][ T5772] syz-executor: attempt to access beyond end of device [ 215.871737][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.906461][ T8350] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 215.955132][ T8350] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 215.967494][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 216.010554][ T8350] BTRFS info (device loop1): enabling disk space caching [ 216.031448][ T8350] BTRFS info (device loop1): force clearing of disk cache [ 216.038666][ T8350] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.103519][ T8350] BTRFS info (device loop1): use zstd compression, level 3 [ 216.132515][ T8350] BTRFS info (device loop1): disk space caching is enabled [ 216.277809][ T8350] BTRFS info (device loop1): enabling ssd optimizations [ 216.311584][ T8350] BTRFS info (device loop1): auto enabling async discard [ 216.371743][ T8350] BTRFS info (device loop1): rebuilding free space tree [ 216.456575][ T8350] BTRFS info (device loop1): disabling free space tree [ 216.486147][ T8350] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.517362][ T8350] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.630144][ T8363] loop2: detected capacity change from 0 to 40427 [ 216.710670][ T8363] F2FS-fs (loop2): invalid crc value [ 216.744710][ T8363] F2FS-fs (loop2): Found nat_bits in checkpoint [ 216.832535][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 216.848809][ T7994] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 216.935488][ T8363] F2FS-fs (loop2): Start checkpoint disabled! [ 217.000729][ T8363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 217.055877][ T23] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 217.100255][ T23] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 217.159356][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.224026][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.259806][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.275109][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.311512][ T23] usb 5-1: Product: syz [ 217.315769][ T23] usb 5-1: Manufacturer: syz [ 217.371482][ T23] usb 5-1: SerialNumber: syz [ 217.397848][ T23] usb 5-1: config 0 descriptor?? [ 217.424985][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 217.451804][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 217.466059][ T23] usb 5-1: selecting invalid altsetting 0 [ 217.624623][ T3003] kworker/u4:10: attempt to access beyond end of device [ 217.624623][ T3003] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.696241][ T3003] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 217.712646][ T23] usb 5-1: USB disconnect, device number 3 [ 218.382052][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 218.448520][ T8425] loop2: detected capacity change from 0 to 128 [ 218.603138][ T23] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 218.632090][ T23] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 218.647609][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.666608][ T23] usb 5-1: string descriptor 0 read error: -22 [ 218.679718][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 218.697793][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 218.737961][ T23] usb 5-1: config 0 descriptor?? [ 218.753955][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 218.771925][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 218.812635][ T5836] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 218.825447][ T23] usb 5-1: selecting invalid altsetting 0 [ 218.995757][ T8435] syz.2.849 uses obsolete (PF_INET,SOCK_PACKET) [ 219.006808][ T23] usb 5-1: USB disconnect, device number 4 [ 219.024068][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.049122][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.094549][ T5836] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 219.121235][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.148646][ T5836] usb 4-1: config 0 descriptor?? [ 219.447017][ T8442] Bluetooth: MGMT ver 1.22 [ 219.598063][ T5836] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 219.620562][ T5836] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 219.649556][ T5836] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 219.664037][ T8446] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.674002][ T8446] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.683047][ T8446] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.691933][ T8446] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.710592][ T5836] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 219.717830][ T5836] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 219.730009][ T5836] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 219.737391][ T5836] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 219.770418][ T5836] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 219.786881][ T8446] vxlan0: entered promiscuous mode [ 219.796811][ T8446] vxlan0: entered allmulticast mode [ 220.110373][ T5836] usb 4-1: USB disconnect, device number 7 [ 220.959229][ T8450] loop4: detected capacity change from 0 to 40427 [ 220.995377][ T8450] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 221.021495][ T8450] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 221.054365][ T8450] F2FS-fs (loop4): invalid crc value [ 221.059806][ T8450] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 221.117244][ T8450] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.352873][ T8450] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 221.360066][ T8450] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.547124][ T8450] syz.4.853: attempt to access beyond end of device [ 221.547124][ T8450] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 221.603570][ T8450] syz.4.853: attempt to access beyond end of device [ 221.603570][ T8450] loop4: rw=2049, sector=53280, nr_sectors = 16 limit=40427 [ 221.659466][ T8487] syz.4.853: attempt to access beyond end of device [ 221.659466][ T8487] loop4: rw=2049, sector=53304, nr_sectors = 8 limit=40427 [ 221.703216][ T8489] loop3: detected capacity change from 0 to 512 [ 221.714605][ T8450] syz.4.853: attempt to access beyond end of device [ 221.714605][ T8450] loop4: rw=2049, sector=53336, nr_sectors = 8 limit=40427 [ 221.776539][ T8450] syz.4.853: attempt to access beyond end of device [ 221.776539][ T8450] loop4: rw=2049, sector=53360, nr_sectors = 24 limit=40427 [ 221.829086][ T8450] syz.4.853: attempt to access beyond end of device [ 221.829086][ T8450] loop4: rw=2049, sector=53408, nr_sectors = 8 limit=40427 [ 221.876860][ T8450] syz.4.853: attempt to access beyond end of device [ 221.876860][ T8450] loop4: rw=2049, sector=53424, nr_sectors = 8 limit=40427 [ 221.951945][ T8450] syz.4.853: attempt to access beyond end of device [ 221.951945][ T8450] loop4: rw=2049, sector=53456, nr_sectors = 8 limit=40427 [ 222.011704][ T8450] syz.4.853: attempt to access beyond end of device [ 222.011704][ T8450] loop4: rw=2049, sector=53488, nr_sectors = 8 limit=40427 [ 222.161175][ T7677] syz-executor: attempt to access beyond end of device [ 222.161175][ T7677] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.200795][ T7677] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 223.093069][ T8494] loop3: detected capacity change from 0 to 32768 [ 223.165892][ T8494] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 223.265837][ T8514] netlink: 'syz.4.864': attribute type 11 has an invalid length. [ 223.277728][ T8514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.864'. [ 223.301855][ T8494] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 223.473595][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 223.473614][ T28] audit: type=1804 audit(1776360151.529:40): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.862" name="/newroot/227/file0/bus" dev="loop3" ino=17058 res=1 errno=0 [ 223.876946][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 224.087786][ T8527] loop2: detected capacity change from 0 to 2048 [ 224.176262][ T8527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.097266][ T8544] loop3: detected capacity change from 0 to 8192 [ 225.641336][ T8548] loop4: detected capacity change from 0 to 2048 [ 225.711964][ T8553] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.932759][ T28] audit: type=1800 audit(1776360153.989:41): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.875" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 226.156017][ T8541] loop2: detected capacity change from 0 to 40427 [ 226.165087][ T8541] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 226.177615][ T8541] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 226.204723][ T8541] F2FS-fs (loop2): invalid crc value [ 226.268476][ T8541] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.493099][ T8541] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 226.520905][ T8541] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.721625][ T5814] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 226.822769][ T5781] syz-executor: attempt to access beyond end of device [ 226.822769][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.845766][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 226.952551][ T8559] loop3: detected capacity change from 0 to 40427 [ 226.963879][ T5814] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.981497][ T5814] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 227.006391][ T5814] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.016658][ T8559] F2FS-fs (loop3): invalid crc value [ 227.033468][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 227.056085][ T8559] F2FS-fs (loop3): Found nat_bits in checkpoint [ 227.081991][ T5814] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 227.122183][ T5814] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.139465][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.172245][ T5814] usb 2-1: Product: syz [ 227.176568][ T5814] usb 2-1: Manufacturer: syz [ 227.212589][ T5814] cdc_wdm 2-1:1.0: skipping garbage [ 227.231467][ T5814] cdc_wdm 2-1:1.0: skipping garbage [ 227.281105][ T5814] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 227.304601][ T5814] cdc_wdm 2-1:1.0: Unknown control protocol [ 227.321683][ T8559] F2FS-fs (loop3): Start checkpoint disabled! [ 227.358505][ T8559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 227.583495][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 227.583507][ T968] usb 2-1: USB disconnect, device number 8 [ 227.584198][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 227.602228][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 227.611063][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.764556][ T8588] ALSA: mixer_oss: invalid OSS volume '' [ 227.864565][ T1106] kworker/u4:6: attempt to access beyond end of device [ 227.864565][ T1106] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 227.893010][ T1106] kworker/u4:6: attempt to access beyond end of device [ 227.893010][ T1106] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 227.913329][ T1106] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 227.924865][ T1106] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 227.941145][ T1106] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 228.041935][ T5814] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 228.253869][ T5814] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.263915][ T5814] usb 3-1: config 0 has no interface number 0 [ 228.270186][ T5814] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.323489][ T5814] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.344257][ T5814] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.371500][ T5814] usb 3-1: config 0 interface 1 has no altsetting 0 [ 228.388531][ T5814] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 228.416004][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.467574][ T5814] usb 3-1: config 0 descriptor?? [ 228.575331][ T8605] loop1: detected capacity change from 0 to 1024 [ 228.939715][ T8611] loop4: detected capacity change from 0 to 2048 [ 228.964444][ T8611] NILFS (loop4): invalid segment: Magic number mismatch [ 228.989087][ T8611] NILFS (loop4): trying rollback from an earlier position [ 229.037025][ T8611] NILFS (loop4): recovery complete [ 229.054952][ T8616] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.149316][ T5814] uclogic 0003:145F:0212.0007: pen parameters not found [ 229.175126][ T5814] uclogic 0003:145F:0212.0007: interface is invalid, ignoring [ 229.430955][ T968] usb 3-1: USB disconnect, device number 9 [ 231.082141][ T8] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 231.317311][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.331757][ T8] usb 2-1: config 0 has no interface number 0 [ 231.362112][ T8] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.404243][ T8] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.426681][ T8] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.461503][ T8] usb 2-1: config 0 interface 1 has no altsetting 0 [ 231.475467][ T8] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 231.506416][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.544348][ T8] usb 2-1: config 0 descriptor?? [ 232.257419][ T8] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0008/input/input10 [ 232.271670][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.917'. [ 232.388981][ T8] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0008/input/input11 [ 232.521186][ T8] uclogic 0003:145F:0212.0008: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.1-1/input1 [ 232.604744][ T8] usb 2-1: USB disconnect, device number 9 [ 232.796030][ T8712] netlink: 'syz.3.922': attribute type 10 has an invalid length. [ 232.847287][ T8707] fido_id[8707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 232.992917][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 233.053875][ T8712] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 233.140222][ T8710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.471484][ T5814] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 233.674463][ T5814] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 233.701553][ T5814] usb 5-1: config 150 has no interface number 0 [ 233.721521][ T5814] usb 5-1: config 150 interface 204 has no altsetting 0 [ 233.745096][ T5814] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 233.771449][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.779652][ T5814] usb 5-1: Product: syz [ 233.802630][ T5814] usb 5-1: Manufacturer: syz [ 233.807370][ T5814] usb 5-1: SerialNumber: syz [ 234.064579][ T5814] xr_serial 5-1:150.204: xr_serial converter detected [ 234.577983][ T8752] netlink: 'syz.2.936': attribute type 12 has an invalid length. [ 234.586892][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'. [ 234.665208][ T5814] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 234.673364][ T5814] xr_serial: probe of ttyUSB0 failed with error -71 [ 234.713511][ T5814] usb 5-1: USB disconnect, device number 5 [ 234.728144][ T5814] xr_serial 5-1:150.204: device disconnected [ 234.992286][ T8762] loop3: detected capacity change from 0 to 128 [ 235.026216][ T8762] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.067593][ T8762] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.217943][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.377595][ T8774] netlink: 'syz.4.944': attribute type 25 has an invalid length. [ 235.391480][ T8] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 235.603601][ T8] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 235.626754][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 235.641968][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 235.651184][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.693275][ T8] usb 2-1: config 0 descriptor?? [ 235.699165][ T8768] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.994275][ T8793] loop4: detected capacity change from 0 to 128 [ 236.186688][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.205553][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.231610][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.238415][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.272034][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.282090][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.310166][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.325464][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.342843][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.349812][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.371663][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.378605][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.413949][ T8] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 236.443219][ T8] lua 0003:1E7D:2C2E.0009: hidraw0: USB HID vff.ff Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 236.488847][ T8] usb 2-1: USB disconnect, device number 10 [ 236.677946][ T8802] fido_id[8802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 236.720179][ T8784] loop2: detected capacity change from 0 to 40427 [ 236.756721][ T8784] F2FS-fs (loop2): invalid crc value [ 236.780254][ T8784] F2FS-fs (loop2): Found nat_bits in checkpoint [ 236.936247][ T8784] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 237.378024][ T5781] syz-executor: attempt to access beyond end of device [ 237.378024][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.430186][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 237.653054][ T8816] team_slave_0: entered promiscuous mode [ 237.659438][ T8816] team_slave_1: entered promiscuous mode [ 238.049752][ T8820] loop4: detected capacity change from 0 to 4096 [ 239.035033][ T8836] loop2: detected capacity change from 0 to 32768 [ 239.106302][ T8836] [ 239.106302][ T8836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.106302][ T8836] [ 239.216744][ T8836] read_mapping_page failed! [ 239.255229][ T8836] ERROR: (device loop2): txCommit: [ 239.255229][ T8836] [ 239.312554][ T8836] ERROR: (device loop2): remounting filesystem as read-only [ 239.324595][ T8848] ERROR: (device loop2): diWrite: ixpxd invalid [ 239.324595][ T8848] [ 239.379262][ T8848] ERROR: (device loop2): txCommit: [ 239.379262][ T8848] [ 239.943691][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 240.672595][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.984'. [ 240.834459][ T8876] loop1: detected capacity change from 0 to 22 [ 240.872163][ T8876] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 240.912070][ T8876] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 241.370281][ T8892] loop1: detected capacity change from 0 to 64 [ 241.401147][ T8894] netlink: 43 bytes leftover after parsing attributes in process `syz.4.994'. [ 241.966622][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'. [ 242.131529][ T5846] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 242.321719][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 242.343672][ T5846] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 242.356335][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.365614][ T5846] usb 5-1: Product: syz [ 242.370250][ T5846] usb 5-1: Manufacturer: syz [ 242.396059][ T5846] usb 5-1: SerialNumber: syz [ 242.422811][ T5846] usb 5-1: config 0 descriptor?? [ 242.435101][ T5846] gspca_main: se401-2.14.0 probing 047d:5003 [ 242.867010][ T5846] gspca_se401: ExtraFeatures: 100 [ 242.887241][ T5846] gspca_se401: Too many frame sizes [ 243.080575][ T5846] usb 5-1: USB disconnect, device number 6 [ 243.270845][ T8934] loop2: detected capacity change from 0 to 1024 [ 243.380446][ T8937] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 243.439728][ T8937] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 243.510968][ T8935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.640165][ T8944] loop2: detected capacity change from 0 to 512 [ 243.744789][ T8944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.808816][ T8944] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.052514][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.261754][ T8952] mmap: syz.4.1018 (8952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 244.381951][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 244.508044][ T8964] loop1: detected capacity change from 0 to 2048 [ 244.531514][ T5814] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 244.543907][ T8964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.725283][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.747038][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.758446][ T5814] usb 3-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 244.769694][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.812231][ T5814] usb 3-1: config 0 descriptor?? [ 244.905182][ T8969] loop3: detected capacity change from 0 to 512 [ 244.992725][ T8969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.038208][ T8969] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.193596][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.246119][ T5814] hid-generic 0003:0925:8066.000A: unbalanced collection at end of report description [ 245.314323][ T5814] hid-generic: probe of 0003:0925:8066.000A failed with error -22 [ 245.330683][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.351756][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.381190][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.400827][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.410029][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.433172][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.459166][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.469007][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.488424][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.499123][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 245.508138][ T5814] usb 3-1: USB disconnect, device number 10 [ 245.774547][ T8985] loop3: detected capacity change from 0 to 4096 [ 245.786945][ T8985] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 245.959630][ T8989] loop1: detected capacity change from 0 to 8192 [ 246.011006][ T8989] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 246.037273][ T8989] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 246.057043][ T8989] REISERFS (device loop1): using ordered data mode [ 246.064691][ T8989] reiserfs: using flush barriers [ 246.076094][ T8989] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.093851][ T8989] REISERFS (device loop1): checking transaction log (loop1) [ 246.376950][ T8989] REISERFS (device loop1): Using tea hash to sort names [ 246.407178][ T8989] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 246.615460][ T9005] loop4: detected capacity change from 0 to 128 [ 246.635166][ T9005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.657061][ T9005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.704982][ T9005] EXT4-fs (loop4): Test dummy encryption mode enabled [ 246.753744][ T9005] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.810924][ T9005] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.986304][ T9011] loop1: detected capacity change from 0 to 4096 [ 246.986402][ T7677] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.026822][ T9011] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 247.156876][ T9011] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 247.309177][ T9011] ntfs3: loop1: ino=1b, "file0" failed to parse mft record [ 247.361490][ T9011] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 247.498017][ T7994] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 248.034686][ T9039] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 248.067687][ T9040] ipvlan2: entered allmulticast mode [ 248.078198][ T9040] syz_tun: entered allmulticast mode [ 249.307927][ T9063] loop3: detected capacity change from 0 to 32768 [ 249.334538][ T9063] [ 249.334538][ T9063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.334538][ T9063] [ 249.381763][ T28] audit: type=1800 audit(1776360177.429:42): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1066" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 249.443778][ T9063] [ 249.443778][ T9063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.443778][ T9063] [ 249.481780][ T9063] [ 249.481780][ T9063] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.481780][ T9063] [ 249.528358][ T112] [ 249.528358][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.528358][ T112] [ 249.687311][ T5772] [ 249.687311][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.687311][ T5772] [ 249.718645][ T5772] [ 249.718645][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.718645][ T5772] [ 249.860710][ T9085] vcan0: tx address claim with different name [ 250.231257][ T9072] loop2: detected capacity change from 0 to 40427 [ 250.280889][ T9072] F2FS-fs (loop2): invalid crc value [ 250.324688][ T9072] F2FS-fs (loop2): Found nat_bits in checkpoint [ 250.715082][ T9099] __nla_validate_parse: 46 callbacks suppressed [ 250.715103][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1081'. [ 250.756033][ T9072] F2FS-fs (loop2): Start checkpoint disabled! [ 250.793801][ T9072] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 251.056121][ T9108] Failed to get privilege flags for destination (handle=0x2:0x0) [ 251.210534][ T56] kworker/u4:4: attempt to access beyond end of device [ 251.210534][ T56] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 251.230827][ T56] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 251.246615][ T56] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 251.380422][ T9113] loop3: detected capacity change from 0 to 512 [ 252.230921][ T9132] input: syz0 as /devices/virtual/input/input14 [ 252.824370][ T9137] loop4: detected capacity change from 0 to 32768 [ 252.840275][ T9137] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1096 (9137) [ 252.890392][ T9137] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.907543][ T9137] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 252.927256][ T9137] BTRFS info (device loop4): force clearing of disk cache [ 252.950241][ T9137] BTRFS info (device loop4): metadata ratio 0 [ 252.979244][ T9137] BTRFS info (device loop4): enabling ssd optimizations [ 252.993329][ T9137] BTRFS info (device loop4): using spread ssd allocation scheme [ 253.001062][ T9137] BTRFS info (device loop4): using free space tree [ 253.163200][ T9137] BTRFS info (device loop4): auto enabling async discard [ 253.186995][ T9137] BTRFS info (device loop4): rebuilding free space tree [ 253.501770][ T7677] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.073914][ T9162] loop3: detected capacity change from 0 to 32768 [ 254.361169][ T9162] ea_get: invalid extended attribute [ 254.396620][ T9162] ffff88805de47230: 04 00 00 00 .... [ 254.519131][ T9182] ea_get: invalid extended attribute [ 254.528610][ T9182] ffff88805de47230: 04 00 00 00 .... [ 254.553561][ T9183] ea_get: invalid extended attribute [ 254.571241][ T9183] ffff88805de47230: 04 00 00 00 .... [ 254.601414][ T5846] IPVS: starting estimator thread 0... [ 254.731871][ T9188] IPVS: using max 18 ests per chain, 43200 per kthread [ 254.857756][ T3003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.988688][ T3003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.170151][ T3003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.335435][ T3003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.526012][ T9198] loop2: detected capacity change from 0 to 64 [ 255.919156][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925861][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.212432][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.244838][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.272002][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.286927][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.295371][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.303831][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.994780][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 258.192995][ T9213] chnl_net:caif_netlink_parms(): no params data found [ 258.391866][ T5783] Bluetooth: hci2: command tx timeout [ 258.425189][ T9241] loop3: detected capacity change from 0 to 40427 [ 258.454275][ T9241] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 258.463174][ T9241] F2FS-fs (loop3): Image doesn't support compression [ 258.470052][ T9241] F2FS-fs (loop3): Image doesn't support compression [ 258.493173][ T9241] F2FS-fs (loop3): invalid crc value [ 258.543090][ T9241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 258.772105][ T9241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 258.827616][ T3003] hsr_slave_0: left promiscuous mode [ 258.847984][ T3003] hsr_slave_1: left promiscuous mode [ 258.875530][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.900437][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.928278][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.946522][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.949060][ T9241] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910 [ 258.967193][ T3003] bridge_slave_1: left allmulticast mode [ 258.983368][ T3003] bridge_slave_1: left promiscuous mode [ 258.990700][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.019448][ T3003] bridge_slave_0: left allmulticast mode [ 259.050072][ T3003] bridge_slave_0: left promiscuous mode [ 259.079996][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.153229][ T5772] syz-executor: attempt to access beyond end of device [ 259.153229][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 259.239224][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 259.253638][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 259.258161][ T3003] veth1_macvtap: left promiscuous mode [ 259.260968][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 259.306821][ T3003] veth0_macvtap: left promiscuous mode [ 259.351857][ T3003] veth1_vlan: left promiscuous mode [ 259.357313][ T3003] veth0_vlan: left promiscuous mode [ 260.472011][ T5783] Bluetooth: hci2: command tx timeout [ 261.659200][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 261.745267][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 261.848247][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.867430][ T5783] block nbd1: Receive control failed (result -32) [ 261.877935][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 261.969975][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.111597][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 262.155871][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 262.165377][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.177418][ T28] audit: type=1326 audit(1776360190.229:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.2.1151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5ef59c819 code=0x0 [ 262.200337][ T23] usb 2-1: Product: syz [ 262.210249][ T23] usb 2-1: Manufacturer: syz [ 262.215328][ T23] usb 2-1: SerialNumber: syz [ 262.221567][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.229231][ T23] usb 2-1: config 0 descriptor?? [ 262.244161][ T23] dw2102: su3000_identify_state [ 262.249113][ T23] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 262.260835][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.274092][ T23] dw2102: su3000_power_ctrl: 1, initialized 0 [ 262.280838][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 262.322177][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.333636][ T23] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 262.347895][ T23] usb 2-1: media controller created [ 262.355084][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 262.370784][ T23] dw2102: i2c transfer failed. [ 262.396223][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 262.403882][ T23] dw2102: i2c transfer failed. [ 262.408828][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 262.419021][ T23] dw2102: i2c transfer failed. [ 262.424070][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 262.429867][ T23] dw2102: i2c transfer failed. [ 262.449440][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 262.477507][ T23] dw2102: i2c transfer failed. [ 262.501404][ T9307] dvb-usb: bulk message failed: -22 (5/0) [ 262.509285][ T9307] dw2102: i2c transfer failed. [ 262.515752][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 262.524139][ T23] dw2102: i2c transfer failed. [ 262.529098][ T23] dvb-usb: MAC address: 02:02:02:02:02:02 [ 262.553265][ T5783] Bluetooth: hci2: command tx timeout [ 262.572272][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.597987][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 262.605115][ T23] dw2102: command 0x0e transfer failed. [ 262.624012][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 262.629844][ T23] dw2102: command 0x0e transfer failed. [ 262.847125][ T3003] bond0 (unregistering): Released all slaves [ 262.952609][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 262.958523][ T23] dw2102: command 0x0e transfer failed. [ 262.979894][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 262.986181][ T23] dw2102: command 0x0e transfer failed. [ 262.997465][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 263.005948][ T23] dw2102: command 0x51 transfer failed. [ 263.006332][ T9213] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.021448][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.033837][ T9213] bridge_slave_0: entered allmulticast mode [ 263.059983][ T9213] bridge_slave_0: entered promiscuous mode [ 263.128416][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.155747][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.169818][ T9213] bridge_slave_1: entered allmulticast mode [ 263.209430][ T9213] bridge_slave_1: entered promiscuous mode [ 263.212212][ T23] DVB: Unable to find symbol ds3000_attach() [ 263.238701][ T23] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 263.356611][ T9213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.386355][ T9213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.532624][ T9213] team0: Port device team_slave_0 added [ 263.551701][ T23] rc_core: IR keymap rc-su3000 not found [ 263.557428][ T23] Registered IR keymap rc-empty [ 263.608391][ T23] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 263.625530][ T9213] team0: Port device team_slave_1 added [ 263.654234][ T23] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input15 [ 263.744553][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 263.791638][ T23] dw2102: su3000_power_ctrl: 0, initialized 1 [ 263.803218][ T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 263.828320][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.862102][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.922471][ T23] usb 2-1: USB disconnect, device number 11 [ 264.013243][ T9213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.167415][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.182371][ T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 264.228614][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.254808][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.372924][ T9213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.631566][ T5783] Bluetooth: hci2: command tx timeout [ 264.655260][ T9213] hsr_slave_0: entered promiscuous mode [ 264.722491][ T9213] hsr_slave_1: entered promiscuous mode [ 264.767386][ T9213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.786534][ T9213] Cannot create hsr debugfs directory [ 264.913295][ T9350] loop1: detected capacity change from 0 to 4096 [ 264.991507][ T9350] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 265.216820][ T9350] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 265.242640][ T9350] ntfs3: loop1: Failed to load $Extend (-22). [ 265.248830][ T9350] ntfs3: loop1: Failed to initialize $Extend. [ 265.358713][ T9350] ntfs3: loop1: ino=0, attr_set_size [ 265.390025][ T9350] ntfs3: loop1: ino=0, attr_set_size [ 265.414451][ T9350] ntfs3: loop1: ino=0, attr_set_size [ 266.448822][ T9381] loop2: detected capacity change from 0 to 256 [ 266.537618][ T9381] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.267839][ T9399] loop3: detected capacity change from 0 to 2048 [ 267.295012][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1174'. [ 267.307400][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.345779][ T9399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.599443][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 267.676096][ T9213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.701238][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 267.712822][ T9213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.735479][ T9408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 267.817911][ T9213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.891896][ T9213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.458087][ T9213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.533761][ T9213] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.542514][ T5814] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 268.610705][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.618090][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.653561][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.661012][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.679584][ T9429] loop3: detected capacity change from 0 to 256 [ 268.768322][ T9429] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 268.791879][ T5814] usb 3-1: Using ep0 maxpacket: 16 [ 268.834926][ T5814] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.873391][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.905137][ T5814] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.938816][ T5814] usb 3-1: config 1 interface 0 has no altsetting 0 [ 268.959037][ T5814] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 268.978529][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.007898][ T5814] usb 3-1: Product: syz [ 269.032394][ T5814] usb 3-1: Manufacturer: syz [ 269.057979][ T5814] usb 3-1: SerialNumber: syz [ 269.108863][ T5814] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input16 [ 269.292387][ T5123] bcm5974 3-1:1.0: could not read from device [ 269.334254][ T5123] bcm5974 3-1:1.0: could not read from device [ 269.375711][ T5814] bcm5974 3-1:1.0: could not read from device [ 269.428444][ T5814] input: failed to attach handler mousedev to device input16, error: -5 [ 269.470149][ T5123] bcm5974 3-1:1.0: could not read from device [ 269.480166][ T5814] usb 3-1: USB disconnect, device number 11 [ 269.482612][ T5844] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 269.506468][ T5123] bcm5974 3-1:1.0: could not read from device [ 269.521651][ T9443] autofs4:pid:9443:autofs_fill_super: called with bogus options [ 269.685670][ T9213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.721641][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 269.735629][ T5844] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 269.752311][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.788518][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.809496][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 269.830602][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.856698][ T5844] usb 4-1: config 0 descriptor?? [ 270.293261][ T5844] logitech 0003:046D:C29C.000B: unknown main item tag 0x0 [ 270.319432][ T5844] logitech 0003:046D:C29C.000B: unknown main item tag 0x0 [ 270.339690][ T5844] logitech 0003:046D:C29C.000B: unknown main item tag 0x0 [ 270.360265][ T5844] logitech 0003:046D:C29C.000B: unknown main item tag 0x0 [ 270.390453][ T5844] logitech 0003:046D:C29C.000B: unknown main item tag 0x0 [ 270.417580][ T5844] logitech 0003:046D:C29C.000B: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 270.666843][ T9213] veth0_vlan: entered promiscuous mode [ 270.692219][ T5844] logitech 0003:046D:C29C.000B: no inputs found [ 270.726342][ T9213] veth1_vlan: entered promiscuous mode [ 270.733454][ T5844] usb 4-1: USB disconnect, device number 8 [ 270.774473][ T9449] loop1: detected capacity change from 0 to 32768 [ 270.894240][ T9213] veth0_macvtap: entered promiscuous mode [ 270.920649][ T9213] veth1_macvtap: entered promiscuous mode [ 270.975413][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.003592][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.027372][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.061534][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.076865][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.121426][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.143430][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.163867][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.201762][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.232006][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.251434][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.286283][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.341448][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.383104][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.464643][ T9213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.481153][ T9213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.496379][ T9213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.512183][ T9213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.845811][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.872472][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.983017][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.016710][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.027983][ T9482] ip6tnl1: entered allmulticast mode [ 272.727160][ T9497] loop3: detected capacity change from 0 to 4096 [ 272.956327][ T9497] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 273.400650][ T9516] openvswitch: netlink: Actions may not be safe on all matching packets [ 274.637850][ T9546] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1213'. [ 274.955264][ T9524] loop3: detected capacity change from 0 to 40427 [ 274.993040][ T9524] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 275.000869][ T9524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 275.069593][ T9524] F2FS-fs (loop3): invalid crc value [ 275.123600][ T9524] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 275.449074][ T9524] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 275.461507][ T9524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 276.419065][ T9567] loop2: detected capacity change from 0 to 32768 [ 276.468355][ T9578] loop4: detected capacity change from 0 to 32768 [ 276.488230][ T9567] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 276.567831][ T9578] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 276.634464][ T9578] (syz.4.1222,9578,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 276.644638][ T9578] (syz.4.1222,9578,0):ocfs2_rename:1299 ERROR: status = -2 [ 276.652418][ T9578] (syz.4.1222,9578,0):ocfs2_rename:1690 ERROR: status = -2 [ 276.753611][ T9567] XFS (loop2): Ending clean mount [ 277.033852][ T9213] ocfs2: Unmounting device (7,4) on (node local) [ 277.121911][ T5781] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 277.371743][ T5846] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 277.448364][ T9617] loop4: detected capacity change from 0 to 512 [ 277.486612][ T9617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.505969][ T9617] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.637703][ T5846] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 277.652950][ T9617] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 277.671494][ T5846] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 277.689363][ T9617] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 277.722973][ T5846] usb 2-1: config 0 has no interface number 0 [ 277.747474][ T9617] EXT4-fs (loop4): 1 truncate cleaned up [ 277.757519][ T5846] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 277.777830][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.785780][ T9617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.788631][ T5846] usb 2-1: Product: syz [ 277.808677][ T5846] usb 2-1: Manufacturer: syz [ 277.821406][ T5846] usb 2-1: SerialNumber: syz [ 277.844602][ T5846] usb 2-1: config 0 descriptor?? [ 277.931197][ T9617] EXT4-fs (loop4): shut down requested (2) [ 277.983688][ T9627] loop2: detected capacity change from 0 to 64 [ 278.048105][ T9213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.333216][ T5846] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 278.339892][ T5846] usb 2-1: No valid video chain found. [ 278.452262][ T9634] loop2: detected capacity change from 0 to 64 [ 278.538341][ T9634] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 278.623597][ T9] usb 2-1: USB disconnect, device number 12 [ 278.706372][ T9609] loop3: detected capacity change from 0 to 32768 [ 278.816957][ T9609] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 279.009839][ T9609] XFS (loop3): Ending clean mount [ 279.091075][ T9609] XFS (loop3): Quotacheck needed: Please wait. [ 279.208990][ T9609] XFS (loop3): Quotacheck: Done. [ 279.670646][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.797829][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 281.035464][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 281.056367][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.075983][ T9697] loop4: detected capacity change from 0 to 512 [ 281.084710][ T8] usb 2-1: Product: syz [ 281.089198][ T8] usb 2-1: Manufacturer: syz [ 281.111829][ T8] usb 2-1: SerialNumber: syz [ 281.127430][ T8] usb 2-1: config 0 descriptor?? [ 281.146214][ T9697] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.1255: iget: bad i_size value: 38620345925642 [ 281.176561][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 281.212082][ T9697] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1255: couldn't read orphan inode 15 (err -117) [ 281.232823][ T9697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.369070][ T9213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.710748][ T9716] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1262'. [ 281.979069][ T8] usb 2-1: Firmware version (0.0) predates our first public release. [ 281.999688][ T8] usb 2-1: Please update to version 0.2 or newer [ 282.034689][ T9722] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 282.124534][ T8] usb 2-1: USB disconnect, device number 13 [ 282.469631][ T9735] loop3: detected capacity change from 0 to 1024 [ 282.981606][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 283.211471][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 283.229115][ T8] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 283.250067][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.288087][ T8] usb 3-1: config 0 descriptor?? [ 283.318226][ T8] as10x_usb: device has been detected [ 283.330489][ T8] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 283.415087][ T8] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 283.536113][ T8] as10x_usb: error during firmware upload part1 [ 283.549602][ T8] Registered device nBox DVB-T Dongle [ 283.553298][ T8] usb 3-1: USB disconnect, device number 12 [ 283.616231][ T8] Unregistered device nBox DVB-T Dongle [ 283.639823][ T8] as10x_usb: device has been disconnected [ 284.405879][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'. [ 284.445147][ T9777] ipvlan2: entered allmulticast mode [ 284.450756][ T9777] syz_tun: entered allmulticast mode [ 285.386209][ T9801] loop1: detected capacity change from 0 to 4096 [ 285.398926][ T9801] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 285.456233][ T9801] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 285.478659][ T9801] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 285.503861][ T9801] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 285.527316][ T9801] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 285.544284][ T9801] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 285.567750][ T9801] ntfs: volume version 3.1. [ 285.591914][ T9801] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 285.612116][ T9801] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 285.625704][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 285.641165][ T9801] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 285.691475][ T9801] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 285.814444][ T23] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 285.823759][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.852778][ T23] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 285.862231][ T23] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 285.875144][ T23] usb 3-1: Manufacturer: syz [ 285.896876][ T23] usb 3-1: config 0 descriptor?? [ 286.071755][ T23] rc_core: IR keymap rc-hauppauge not found [ 286.087018][ T23] Registered IR keymap rc-empty [ 286.110903][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 286.143050][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 286.177832][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 286.225746][ T5844] usb 3-1: USB disconnect, device number 13 [ 286.601773][ T9825] program syz.4.1311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.392084][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 287.581637][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 287.598826][ T8] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.620163][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 287.640454][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 287.669258][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.700420][ T8] usb 5-1: config 0 descriptor?? [ 288.174520][ T8] mcp2221 0003:04D8:00DD.000C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 288.588611][ T9878] loop2: detected capacity change from 0 to 256 [ 288.603599][ T9878] exfat: Deprecated parameter 'namecase' [ 288.710701][ T9878] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 288.733097][ T5844] usb 5-1: USB disconnect, device number 7 [ 289.464811][ T9881] loop3: detected capacity change from 0 to 32768 [ 289.612142][ T9881] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.732044][ T9881] XFS (loop3): Ending clean mount [ 289.831265][ T9883] loop2: detected capacity change from 0 to 32768 [ 289.898852][ T9883] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1336 (9883) [ 290.005807][ T9883] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 290.028946][ T9883] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 290.060456][ T9883] BTRFS info (device loop2): using free space tree [ 290.095275][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 290.295292][ T9887] loop1: detected capacity change from 0 to 32768 [ 290.311813][ T9883] BTRFS info (device loop2): enabling ssd optimizations [ 290.371504][ T9883] BTRFS info (device loop2): auto enabling async discard [ 290.400397][ T9887] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 290.628384][ T9887] XFS (loop1): Ending clean mount [ 290.746425][ T8] XFS (loop1): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 290.830214][ T8] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 290.919241][ T8] XFS (loop1): Unmount and run xfs_repair [ 290.956995][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 290.998378][ T8] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 291.041893][ T8] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 291.086192][ T8] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 291.128280][ T8] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 291.177032][ T8] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 291.199850][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.242088][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.262904][ T5781] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 291.284170][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 291.306343][ T9887] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74 [ 291.328146][ T9887] XFS (loop1): Failed to initialize disk quotas. [ 291.513913][ T5783] Bluetooth: hci2: command tx timeout [ 291.665511][ T7994] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 292.514975][ T9951] loop4: detected capacity change from 0 to 32768 [ 292.588129][ T9951] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 292.649918][ T9970] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1357'. [ 292.717198][ T9973] loop1: detected capacity change from 0 to 1024 [ 292.737070][ T9973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.818909][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 292.818925][ T28] audit: type=1800 audit(1776360220.879:44): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1366" name="file1" dev="loop1" ino=839 res=0 errno=0 [ 293.149147][ T9213] ocfs2: Unmounting device (7,4) on (node local) [ 293.403151][ T9981] loop2: detected capacity change from 0 to 2048 [ 293.461761][ T9981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.482165][ T9985] loop3: detected capacity change from 0 to 1024 [ 293.489675][ T9985] EXT4-fs: inline encryption not supported [ 293.583376][ T9985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 293.636171][ T9985] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.711294][ T9993] loop4: detected capacity change from 0 to 512 [ 293.764379][ T9993] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 293.801716][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 293.913758][ T9993] EXT4-fs (loop4): 1 truncate cleaned up [ 293.957196][ T9993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.071151][ T28] audit: type=1800 audit(1776360222.129:45): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1361" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 294.248250][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.316963][T10002] loop3: detected capacity change from 0 to 256 [ 294.324610][T10002] exfat: Deprecated parameter 'namecase' [ 294.365887][T10002] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 294.548394][ T9213] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.822040][T10010] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1370'. [ 294.947671][T10015] loop4: detected capacity change from 0 to 256 [ 294.958210][T10015] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.983750][T10015] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.131503][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 295.343552][ T23] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 295.361440][ T23] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 295.381891][ T23] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 295.401693][ T23] usb 4-1: config 220 has no interface number 2 [ 295.408085][ T23] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 295.432436][ T23] usb 4-1: config 220 interface 0 has no altsetting 0 [ 295.439390][ T23] usb 4-1: config 220 interface 76 has no altsetting 0 [ 295.446794][ T23] usb 4-1: config 220 interface 1 has no altsetting 0 [ 295.453750][ T5836] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 295.464945][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 295.476493][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.491663][ T23] usb 4-1: Product: syz [ 295.495918][ T23] usb 4-1: Manufacturer: syz [ 295.500596][ T23] usb 4-1: SerialNumber: syz [ 295.514759][T10019] loop4: detected capacity change from 0 to 32768 [ 295.549297][T10019] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1375 (10019) [ 295.577519][T10019] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 295.602414][T10019] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 295.623380][T10019] BTRFS info (device loop4): using free space tree [ 295.664510][ T5836] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.674775][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.695993][ T5836] usb 2-1: config 0 descriptor?? [ 295.767282][ T23] usb 4-1: selecting invalid altsetting 0 [ 295.792770][ T23] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 295.799925][ T23] usb 4-1: No valid video chain found. [ 295.819582][ T23] usb 4-1: selecting invalid altsetting 0 [ 295.825521][ T23] usbtest: probe of 4-1:220.1 failed with error -22 [ 295.837207][ T23] usb 4-1: USB disconnect, device number 9 [ 295.875301][T10019] BTRFS info (device loop4): enabling ssd optimizations [ 295.918837][T10019] BTRFS info (device loop4): auto enabling async discard [ 296.162185][ T5836] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 296.183747][ T5836] [drm] Initialized udl on minor 2 [ 296.286908][ T9213] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 296.523080][ T5836] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 296.568504][ T5836] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 296.658472][ T5836] usb 2-1: USB disconnect, device number 14 [ 296.687405][ T5844] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.696359][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 296.722160][ T5844] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 296.776333][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 296.900288][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 296.926665][ T27] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 296.951732][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.959986][ T27] usb 3-1: Product: syz [ 296.981497][ T27] usb 3-1: Manufacturer: syz [ 296.986193][ T27] usb 3-1: SerialNumber: syz [ 296.991756][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 297.021532][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 297.040605][ T27] usb 3-1: config 0 descriptor?? [ 297.045800][ T23] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 297.057161][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 297.067562][ T27] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 297.079243][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 297.090385][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.099420][ T23] usb 4-1: Product: syz [ 297.105133][ T23] usb 4-1: Manufacturer: syz [ 297.111033][ T23] usb 4-1: SerialNumber: syz [ 297.128679][ T23] usb 4-1: config 0 descriptor?? [ 297.341532][ T5836] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 297.482427][ T27] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 297.494956][ T27] visor: probe of 3-1:0.0 failed with error -5 [ 297.531805][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 297.546212][ T5836] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 297.556513][ T23] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 297.562990][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.571973][ T5836] usb 5-1: Product: syz [ 297.576277][ T5836] usb 5-1: Manufacturer: syz [ 297.581130][ T5836] usb 5-1: SerialNumber: syz [ 297.590949][ T5836] usb 5-1: config 0 descriptor?? [ 297.718923][ T5844] usb 3-1: USB disconnect, device number 14 [ 297.761613][T10059] loop1: detected capacity change from 0 to 32768 [ 297.797008][T10059] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.836727][ T5836] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 297.914736][T10059] XFS (loop1): Ending clean mount [ 297.925732][T10059] XFS (loop1): Quotacheck needed: Please wait. [ 297.964041][ T23] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 298.009084][T10059] XFS (loop1): Quotacheck: Done. [ 298.040748][ T23] usb 4-1: USB disconnect, device number 10 [ 298.204619][ T7994] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.576115][ T5836] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 298.914651][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 299.021583][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 299.038986][ T5836] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 299.068934][ T5836] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 299.302395][ T5836] usb 5-1: USB disconnect, device number 8 [ 299.319972][T10101] GUP no longer grows the stack in syz.1.1396 (10101): 200000004000-200000b36000 (200000000000) [ 299.336600][T10101] CPU: 1 PID: 10101 Comm: syz.1.1396 Not tainted syzkaller #0 [ 299.344246][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 299.354391][T10101] Call Trace: [ 299.357741][T10101] [ 299.360718][T10101] dump_stack_lvl+0x18c/0x250 [ 299.365478][T10101] ? show_regs_print_info+0x20/0x20 [ 299.370757][T10101] ? load_image+0x420/0x420 [ 299.375341][T10101] ? find_vma+0x134/0x1b0 [ 299.379755][T10101] __get_user_pages+0xf0e/0x1380 [ 299.384794][T10101] ? populate_vma_page_range+0x380/0x380 [ 299.390514][T10101] ? __gup_longterm_locked+0x20f6/0x2b80 [ 299.396222][T10101] ? down_read_killable+0x1d0/0x340 [ 299.401495][T10101] __gup_longterm_locked+0x2251/0x2b80 [ 299.407056][T10101] ? pin_user_pages_remote+0x220/0x220 [ 299.412691][T10101] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 299.418918][T10101] ? lock_chain_count+0x20/0x20 [ 299.424027][T10101] ? internal_get_user_pages_fast+0x1fc6/0x2760 [ 299.430391][T10101] internal_get_user_pages_fast+0x21bf/0x2760 [ 299.436557][T10101] ? asan.module_dtor+0x20/0x20 [ 299.441488][T10101] ? get_user_pages_fast_only+0xa0/0xa0 [ 299.447121][T10101] ? plist_add+0x3d8/0x490 [ 299.451618][T10101] get_futex_key+0x1aa/0x1010 [ 299.456355][T10101] ? futex_unqueue+0xcb/0xf0 [ 299.461014][T10101] ? futex_wait+0x4cc/0x5e0 [ 299.465577][T10101] ? futex_setup_timer+0xc0/0xc0 [ 299.470593][T10101] futex_wake+0x127/0x4f0 [ 299.474994][T10101] ? futex_wake_mark+0x150/0x150 [ 299.480042][T10101] ? __se_sys_mremap+0x898/0x11f0 [ 299.485141][T10101] do_futex+0x35d/0x3e0 [ 299.489369][T10101] ? __ia32_sys_get_robust_list+0x110/0x110 [ 299.495335][T10101] __se_sys_futex+0x3a9/0x440 [ 299.500090][T10101] ? __x64_sys_futex+0xf0/0xf0 [ 299.504924][T10101] ? __x64_sys_futex+0x21/0xf0 [ 299.509759][T10101] do_syscall_64+0x55/0xa0 [ 299.514232][T10101] ? clear_bhb_loop+0x40/0x90 [ 299.518973][T10101] ? clear_bhb_loop+0x40/0x90 [ 299.523737][T10101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.529698][T10101] RIP: 0033:0x7f1d4a19c819 [ 299.534182][T10101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.553938][T10101] RSP: 002b:00007f1d4b0f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 299.562448][T10101] RAX: ffffffffffffffda RBX: 00007f1d4a415fa0 RCX: 00007f1d4a19c819 [ 299.570489][T10101] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000200000000240 [ 299.578614][T10101] RBP: 00007f1d4a232c91 R08: 0000000000000000 R09: 0000000000000002 [ 299.586755][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.594877][T10101] R13: 00007f1d4a416038 R14: 00007f1d4a415fa0 R15: 00007ffc4817cfc8 [ 299.602930][T10101] [ 300.260492][T10099] loop3: detected capacity change from 0 to 32768 [ 300.326101][T10099] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 300.408530][T10099] XFS (loop3): Ending clean mount [ 300.430405][T10099] XFS (loop3): Quotacheck needed: Please wait. [ 300.539743][T10099] XFS (loop3): Quotacheck: Done. [ 300.819583][T10138] loop1: detected capacity change from 0 to 4096 [ 300.834793][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 300.871862][T10138] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 302.432830][T10169] loop2: detected capacity change from 0 to 32768 [ 302.459123][T10169] JBD2: Ignoring recovery information on journal [ 302.507101][T10150] loop3: detected capacity change from 0 to 32768 [ 302.529196][T10169] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 302.566279][T10150] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 302.743843][T10169] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 302.761659][T10169] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 302.772423][T10169] OCFS2: File system is now read-only. [ 302.777960][T10169] (syz.2.1417,10169,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 302.791753][T10169] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 302.808341][T10169] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 302.818352][T10169] (syz.2.1417,10169,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 302.826574][T10169] (syz.2.1417,10169,1):ocfs2_mknod:502 ERROR: status = -30 [ 302.832116][T10150] XFS (loop3): Ending clean mount [ 302.834098][T10169] (syz.2.1417,10169,1):ocfs2_create:676 ERROR: status = -30 [ 302.878930][T10150] XFS (loop3): Quotacheck needed: Please wait. [ 303.051279][T10150] XFS (loop3): Quotacheck: Done. [ 303.181804][ T5781] ocfs2: Unmounting device (7,2) on (node local) [ 303.255595][ T28] audit: type=1800 audit(1776360231.309:46): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1405" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 303.342072][T10192] loop4: detected capacity change from 0 to 2048 [ 303.442317][T10192] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.561765][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 303.950992][T10203] loop4: detected capacity change from 0 to 2048 [ 304.008755][T10204] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.397434][T10209] ptrace attach of "./syz-executor exec"[9213] was attempted by ""[10209] [ 304.543976][T10212] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 304.553340][T10199] loop2: detected capacity change from 0 to 40427 [ 304.562136][T10212] netlink: 'syz.4.1432': attribute type 2 has an invalid length. [ 304.571280][T10212] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1432'. [ 304.584849][T10199] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 304.592850][T10199] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 304.621710][T10199] F2FS-fs (loop2): invalid crc value [ 304.642618][T10199] F2FS-fs (loop2): Found nat_bits in checkpoint [ 304.939729][T10199] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 304.960296][T10199] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 305.092617][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1436'. [ 305.114447][ T137] wlan1: Trigger new scan to find an IBSS to join [ 305.182681][T10199] syz.2.1425: attempt to access beyond end of device [ 305.182681][T10199] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 305.223290][ T137] ------------[ cut here ]------------ [ 305.229400][ T137] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 305.241071][ T137] WARNING: CPU: 1 PID: 137 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 305.251143][ T137] Modules linked in: [ 305.255165][ T137] CPU: 1 PID: 137 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 305.262906][ T137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.273165][ T137] Workqueue: events_unbound cfg80211_wiphy_work [ 305.279499][ T137] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 305.285854][ T137] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 00 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb bd 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 305.305929][ T137] RSP: 0018:ffffc90002db7380 EFLAGS: 00010246 [ 305.312112][ T137] RAX: 1822fefd7604f800 RBX: 000000000000000c RCX: ffff88801b329e00 [ 305.320249][ T137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 305.328345][ T137] RBP: 0000000000000084 R08: ffffc90002db6f87 R09: 1ffff920005b6df0 [ 305.336458][ T137] R10: dffffc0000000000 R11: fffff520005b6df1 R12: 0000000000000040 [ 305.344649][ T137] R13: dffffc0000000000 R14: ffff8880270bb358 R15: ffff88802ec282a8 [ 305.352845][ T137] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 305.361956][ T137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.368725][ T137] CR2: 00007fd209a17dac CR3: 00000000581f7000 CR4: 00000000003506e0 [ 305.376809][ T137] Call Trace: [ 305.380138][ T137] [ 305.383169][ T137] rate_control_send_low+0x194/0x790 [ 305.388545][ T137] rate_control_get_rate+0x20b/0x5d0 [ 305.393946][ T137] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 305.399669][ T137] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 305.405762][ T137] ? __lock_acquire+0x1273/0x7d40 [ 305.410855][ T137] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 305.417035][ T137] invoke_tx_handlers_late+0xb6/0x1810 [ 305.422605][ T137] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 305.428750][ T137] ieee80211_tx+0x2d8/0x460 [ 305.433362][ T137] ? ieee80211_skb_resize+0x630/0x630 [ 305.438808][ T137] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 305.444362][ T137] ? __bpf_trace_tasklet+0x160/0x160 [ 305.449711][ T137] ? ieee80211_xmit+0x310/0x3f0 [ 305.454758][ T137] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 305.460807][ T137] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 305.466722][ T137] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 305.473147][ T137] ieee80211_scan_state_send_probe+0x560/0x930 [ 305.479392][ T137] ieee80211_scan_work+0x4e9/0x1c40 [ 305.484718][ T137] cfg80211_wiphy_work+0x225/0x260 [ 305.489912][ T137] ? process_scheduled_works+0x96f/0x15d0 [ 305.495754][ T137] process_scheduled_works+0xa5d/0x15d0 [ 305.501440][ T137] ? worker_attach_to_pool+0x380/0x380 [ 305.507064][ T137] ? assign_work+0x3d2/0x5d0 [ 305.511786][ T137] worker_thread+0xa55/0xfc0 [ 305.516614][ T137] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 305.522614][ T137] ? _raw_spin_unlock+0x40/0x40 [ 305.527521][ T137] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 305.533806][ T137] kthread+0x2fa/0x390 [ 305.537929][ T137] ? pr_cont_work+0x560/0x560 [ 305.542707][ T137] ? kthread_blkcg+0xd0/0xd0 [ 305.547433][ T137] ret_from_fork+0x48/0x80 [ 305.551972][ T137] ? kthread_blkcg+0xd0/0xd0 [ 305.556619][ T137] ret_from_fork_asm+0x11/0x20 [ 305.561492][ T137] [ 305.564563][ T137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 305.571892][ T137] CPU: 1 PID: 137 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 305.579576][ T137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.589683][ T137] Workqueue: events_unbound cfg80211_wiphy_work [ 305.596005][ T137] Call Trace: [ 305.599335][ T137] [ 305.602307][ T137] dump_stack_lvl+0x18c/0x250 [ 305.607057][ T137] ? show_regs_print_info+0x20/0x20 [ 305.612313][ T137] ? load_image+0x420/0x420 [ 305.616886][ T137] panic+0x2dc/0x730 [ 305.620842][ T137] ? bpf_jit_dump+0xd0/0xd0 [ 305.625417][ T137] ? ret_from_fork_asm+0x11/0x20 [ 305.630443][ T137] __warn+0x2e0/0x470 [ 305.634473][ T137] ? __rate_control_send_low+0x635/0x880 [ 305.640165][ T137] ? __rate_control_send_low+0x635/0x880 [ 305.645853][ T137] report_bug+0x2be/0x4f0 [ 305.650217][ T137] ? __rate_control_send_low+0x635/0x880 [ 305.655897][ T137] ? __rate_control_send_low+0x635/0x880 [ 305.661566][ T137] ? __rate_control_send_low+0x637/0x880 [ 305.667234][ T137] handle_bug+0xcf/0x120 [ 305.671507][ T137] exc_invalid_op+0x1a/0x50 [ 305.676050][ T137] asm_exc_invalid_op+0x1a/0x20 [ 305.680933][ T137] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 305.687296][ T137] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 20 00 df 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb bd 54 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 305.706932][ T137] RSP: 0018:ffffc90002db7380 EFLAGS: 00010246 [ 305.713238][ T137] RAX: 1822fefd7604f800 RBX: 000000000000000c RCX: ffff88801b329e00 [ 305.721337][ T137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 305.729347][ T137] RBP: 0000000000000084 R08: ffffc90002db6f87 R09: 1ffff920005b6df0 [ 305.737349][ T137] R10: dffffc0000000000 R11: fffff520005b6df1 R12: 0000000000000040 [ 305.745347][ T137] R13: dffffc0000000000 R14: ffff8880270bb358 R15: ffff88802ec282a8 [ 305.753381][ T137] rate_control_send_low+0x194/0x790 [ 305.758709][ T137] rate_control_get_rate+0x20b/0x5d0 [ 305.764034][ T137] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 305.769722][ T137] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 305.775732][ T137] ? __lock_acquire+0x1273/0x7d40 [ 305.780793][ T137] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 305.786906][ T137] invoke_tx_handlers_late+0xb6/0x1810 [ 305.792411][ T137] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 305.798280][ T137] ieee80211_tx+0x2d8/0x460 [ 305.803042][ T137] ? ieee80211_skb_resize+0x630/0x630 [ 305.808508][ T137] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 305.814008][ T137] ? __bpf_trace_tasklet+0x160/0x160 [ 305.819332][ T137] ? ieee80211_xmit+0x310/0x3f0 [ 305.824219][ T137] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 305.830232][ T137] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 305.836256][ T137] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 305.842645][ T137] ieee80211_scan_state_send_probe+0x560/0x930 [ 305.848879][ T137] ieee80211_scan_work+0x4e9/0x1c40 [ 305.854153][ T137] cfg80211_wiphy_work+0x225/0x260 [ 305.859311][ T137] ? process_scheduled_works+0x96f/0x15d0 [ 305.865107][ T137] process_scheduled_works+0xa5d/0x15d0 [ 305.870738][ T137] ? worker_attach_to_pool+0x380/0x380 [ 305.876268][ T137] ? assign_work+0x3d2/0x5d0 [ 305.881004][ T137] worker_thread+0xa55/0xfc0 [ 305.885638][ T137] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 305.891570][ T137] ? _raw_spin_unlock+0x40/0x40 [ 305.896550][ T137] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 305.902496][ T137] kthread+0x2fa/0x390 [ 305.906606][ T137] ? pr_cont_work+0x560/0x560 [ 305.911340][ T137] ? kthread_blkcg+0xd0/0xd0 [ 305.916049][ T137] ret_from_fork+0x48/0x80 [ 305.920496][ T137] ? kthread_blkcg+0xd0/0xd0 [ 305.925206][ T137] ret_from_fork_asm+0x11/0x20 [ 305.930026][ T137] [ 305.933760][ T137] Kernel Offset: disabled [ 305.938233][ T137] Rebooting in 86400 seconds..