last executing test programs: 12.188453426s ago: executing program 2 (id=1810): r0 = syz_io_uring_setup(0x74b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0xffffffff, 0x100002c1}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x4}) poll(&(0x7f0000000000)=[{r1, 0x80}], 0x1, 0x5) 11.8974591s ago: executing program 2 (id=1814): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(0x0, 0x1ff, 0x0, 0x0, 0x0) 10.512876346s ago: executing program 2 (id=1825): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) writev(r1, &(0x7f0000001280)=[{&(0x7f0000000000)="b9f420679ee3947d92", 0x9}], 0x1) 8.231239786s ago: executing program 2 (id=1847): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host}, @my=0x1, 0x3, 0x2000000, 0x2449, 0xfffffffffffffffd}) 7.971891618s ago: executing program 2 (id=1850): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 7.682619242s ago: executing program 2 (id=1854): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x4040080) 3.994929939s ago: executing program 3 (id=1885): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0x1}, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 3.851317535s ago: executing program 1 (id=1886): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f0000000dc0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local}}}}, 0x0) 3.683082424s ago: executing program 3 (id=1887): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8007ca, &(0x7f0000000680)={[{@delalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 3.464928534s ago: executing program 1 (id=1888): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee", 0xffffffffffffffff}) dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.973573657s ago: executing program 0 (id=1889): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x7d5, &(0x7f0000000500)) close_range(r0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 2.973455548s ago: executing program 1 (id=1890): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) 2.686919541s ago: executing program 1 (id=1892): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x25dfdbfe, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x3a200000}]}, 0x1c}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) 2.648562773s ago: executing program 3 (id=1893): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @empty, 0x3}, 0xd) 2.348975147s ago: executing program 1 (id=1894): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000040)={[{@filestreams}, {@sysvgroups}, {@noalign}, {@nolazytime}, {@inode32}, {@discard}, {@prjquota}, {@inode64}, {@gquota}, {@nolargeio}, {@nodiscard}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL") r0 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) fstat(r0, &(0x7f000001f8c0)) 2.29465305s ago: executing program 0 (id=1895): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.065651251s ago: executing program 0 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="050034006e000000080026008a09000008009f0006"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 1.841650472s ago: executing program 3 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x2}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.758998806s ago: executing program 0 (id=1898): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x0, 0x0, 0x0, 0x20000000, 0x0) 1.578305645s ago: executing program 3 (id=1899): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000d40)='m', 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x34, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.390170573s ago: executing program 4 (id=1900): r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.193235863s ago: executing program 3 (id=1901): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000480)=0x2) 1.105061737s ago: executing program 4 (id=1902): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$video4linux(&(0x7f0000000740), 0x4, 0x40401) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, @value=0x6}) 843.236149ms ago: executing program 4 (id=1903): r0 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x8006}]}, 0x10) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 626.46201ms ago: executing program 4 (id=1904): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xc1, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x1, 0x16, 0x3, 0x15, 0x0, 0x7, 0x4}], 0x2}) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) 573.216273ms ago: executing program 1 (id=1905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0x13, 0x30, "69cb0fd85417"}, @exp_fastopen={0xfe, 0x9, 0xf989, '{\x00\x00\x00\x00'}]}}}}}}}, 0x0) 348.078343ms ago: executing program 4 (id=1906): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b5, 0x1, 0x77fe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 294.622986ms ago: executing program 0 (id=1907): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADDIR(r1, 0x0, 0xeffd) vmsplice(r0, &(0x7f00000102c0)=[{&(0x7f0000010080)='v', 0x1}], 0x1, 0x1) write$P9_RWRITE(r1, &(0x7f0000010300)={0xb, 0x77, 0x4, 0x3}, 0xb) 146.408533ms ago: executing program 4 (id=1908): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="b6e2", 0x2}], 0x1) 0s ago: executing program 0 (id=1909): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000011c0), 0x3) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) kernel console output (not intermixed with test programs): 5561][ T22] Registered IR keymap rc-empty [ 204.872723][ T22] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 204.917167][ T22] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 205.160652][ T6924] loop1: detected capacity change from 0 to 2048 [ 205.186119][ T6920] rc rc0: two consecutive events of type space [ 205.201492][ T6924] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.225093][ T6928] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.388025][ T4311] usb 4-1: USB disconnect, device number 10 [ 205.626217][ T6936] program syz.4.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.928876][ T27] audit: type=1326 audit(1773697253.808:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99eb9c799 code=0x7ffc0000 [ 205.989561][ T6944] loop4: detected capacity change from 0 to 4096 [ 206.009320][ T27] audit: type=1326 audit(1773697253.828:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe99eb9c799 code=0x7ffc0000 [ 206.109699][ T27] audit: type=1326 audit(1773697253.828:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99eb9c799 code=0x7ffc0000 [ 206.164163][ T6951] loop3: detected capacity change from 0 to 1024 [ 206.207298][ T27] audit: type=1326 audit(1773697253.828:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe99eb9c799 code=0x7ffc0000 [ 206.238144][ T6951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.332832][ T27] audit: type=1326 audit(1773697253.828:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe99eb9c799 code=0x7ffc0000 [ 206.578325][ T6961] loop3: detected capacity change from 0 to 128 [ 206.728160][ T6961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 206.769771][ T6961] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.906716][ T6961] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 207.110591][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 207.232035][ T6981] loop0: detected capacity change from 0 to 128 [ 207.289105][ T6981] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 207.368987][ T6981] binder: 6980:6981 ioctl c0306201 2000000001c0 returned -14 [ 207.757902][ T6994] program syz.3.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.827037][ T6998] loop2: detected capacity change from 0 to 512 [ 207.860297][ T6998] EXT4-fs: Ignoring removed bh option [ 207.887952][ T6998] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 207.907922][ T6971] loop1: detected capacity change from 0 to 32768 [ 207.927794][ T6971] (syz.1.953,6971,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.981331][ T6971] (syz.1.953,6971,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 207.986063][ T6998] EXT4-fs (loop2): 1 truncate cleaned up [ 208.001140][ T6998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.067822][ T6971] JBD2: Ignoring recovery information on journal [ 208.082102][ T6283] EXT4-fs (loop2): unmounting filesystem. [ 208.141137][ T6971] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 208.321742][ T7010] loop2: detected capacity change from 0 to 1024 [ 208.362040][ T7010] EXT4-fs: Ignoring removed orlov option [ 208.433405][ T7010] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.540070][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 208.750570][ T6283] EXT4-fs (loop2): unmounting filesystem. [ 208.858257][ T7026] loop4: detected capacity change from 0 to 128 [ 208.924903][ T7028] loop2: detected capacity change from 0 to 16 [ 208.937376][ T7026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 208.976895][ T7028] erofs: (device loop2): mounted with root inode @ nid 36. [ 208.986994][ T7026] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.155868][ T7026] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 209.171449][ T4359] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.320816][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 209.448631][ T7039] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.582724][ T7024] loop3: detected capacity change from 0 to 32768 [ 209.664681][ T27] audit: type=1800 audit(1773697257.548:50): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.972" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 210.779585][ T7040] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 210.811487][ T7040] F2FS-fs (loop0): invalid crc value [ 210.841809][ T7040] F2FS-fs (loop0): Found nat_bits in checkpoint [ 211.008968][ T7040] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.078944][ T7047] set_capacity_and_notify: 1 callbacks suppressed [ 211.078962][ T7047] loop4: detected capacity change from 0 to 32768 [ 211.181460][ T7040] syz.0.979: attempt to access beyond end of device [ 211.181460][ T7040] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.213613][ T7047] XFS (loop4): Mounting V5 Filesystem [ 211.301696][ T7040] F2FS-fs (loop0): switch extent_cache option is not allowed [ 211.336867][ T7047] XFS (loop4): Ending clean mount [ 211.403348][ T7047] XFS (loop4): Quotacheck needed: Please wait. [ 211.476222][ T4277] syz-executor: attempt to access beyond end of device [ 211.476222][ T4277] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 211.538751][ T7047] XFS (loop4): Quotacheck: Done. [ 211.559983][ T4280] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 211.769013][ T4266] XFS (loop4): Unmounting Filesystem [ 211.959553][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 211.965642][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 211.972254][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 212.181055][ T7081] netlink: 60 bytes leftover after parsing attributes in process `syz.0.991'. [ 212.396447][ T7083] tun0: tun_chr_ioctl cmd 21731 [ 212.707030][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1001'. [ 212.993445][ T7105] netlink: 'syz.0.1005': attribute type 15 has an invalid length. [ 213.439627][ T7124] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 214.075645][ T4761] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.202754][ T7145] loop2: detected capacity change from 0 to 4096 [ 214.233931][ T7145] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 214.261239][ T4761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.292054][ T4761] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.318099][ T7147] loop0: detected capacity change from 0 to 4096 [ 214.324727][ T4761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.353543][ T4761] usb 5-1: config 0 descriptor?? [ 214.358911][ T7147] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 214.484720][ T27] audit: type=1800 audit(1773697262.368:51): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1022" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 214.597461][ T4761] usbhid 5-1:0.0: can't add hid device: -71 [ 214.615887][ T4761] usbhid: probe of 5-1:0.0 failed with error -71 [ 214.646296][ T4761] usb 5-1: USB disconnect, device number 4 [ 214.767431][ T7139] loop3: detected capacity change from 0 to 32768 [ 214.911662][ T7139] XFS (loop3): Mounting V5 Filesystem [ 215.123097][ T7163] loop1: detected capacity change from 0 to 128 [ 215.141236][ T7163] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 215.176373][ T7139] XFS (loop3): Ending clean mount [ 215.187096][ T7163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.209367][ T4761] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 215.298954][ T7164] loop0: detected capacity change from 0 to 8192 [ 215.333220][ T7163] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 215.344989][ T7164] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 215.409300][ T4761] usb 5-1: Using ep0 maxpacket: 16 [ 215.416701][ T4761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.419075][ T7164] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 215.431096][ T4761] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice= 0.40 [ 215.446309][ T4761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.456293][ T4761] usb 5-1: config 0 descriptor?? [ 215.473674][ T7164] REISERFS (device loop0): using ordered data mode [ 215.480961][ T7164] reiserfs: using flush barriers [ 215.487603][ T7164] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 215.506987][ T7164] REISERFS (device loop0): checking transaction log (loop0) [ 215.563923][ T4276] XFS (loop3): Unmounting Filesystem [ 215.663333][ C0] usb 5-1: OVERFLOW with data length 2, actual length is 2 [ 215.720654][ T4761] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 215.757011][ T4761] appledisplay: probe of 5-1:0.0 failed with error -110 [ 215.824321][ T4761] usbhid 5-1:0.0: can't add hid device: -32 [ 215.862190][ T7164] REISERFS (device loop0): Using tea hash to sort names [ 215.869764][ T4761] usbhid: probe of 5-1:0.0 failed with error -32 [ 215.879998][ T7164] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 215.916850][ T4761] usb 5-1: USB disconnect, device number 5 [ 215.956532][ T7164] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 216.068532][ T7164] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 216.234601][ T4311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 216.351144][ T7181] loop3: detected capacity change from 0 to 256 [ 216.419422][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 216.428352][ T4311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.449686][ T7181] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 216.479307][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.524382][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 216.574444][ T4311] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 216.624230][ T4311] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.680707][ T4311] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.700105][ T4311] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.716221][ T4311] usb 3-1: Manufacturer: syz [ 216.740064][ T4311] usb 3-1: config 0 descriptor?? [ 216.930329][ T7192] loop3: detected capacity change from 0 to 512 [ 217.145539][ T7192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.172772][ T4311] rc_core: IR keymap rc-hauppauge not found [ 217.181974][ T4311] Registered IR keymap rc-empty [ 217.187009][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.221955][ T7183] syz.1.1035 (7183): drop_caches: 2 [ 217.263843][ T7192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.269734][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.285485][ T7192] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.320340][ T4311] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 217.334479][ T4311] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 217.374575][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.429532][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.469535][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.539620][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.589350][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.607727][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 217.621281][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.661250][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.719505][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.729069][ T7206] netlink: 'syz.4.1043': attribute type 13 has an invalid length. [ 217.739419][ T7206] netlink: 'syz.4.1043': attribute type 4 has an invalid length. [ 217.747219][ T7206] netlink: 14232 bytes leftover after parsing attributes in process `syz.4.1043'. [ 217.775586][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.819403][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.859360][ T4311] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 217.900982][ T4311] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 217.919871][ T4311] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.967763][ T4311] usb 3-1: USB disconnect, device number 3 [ 218.433965][ T7219] loop1: detected capacity change from 0 to 4096 [ 218.453766][ T7222] vivid-004: ================= START STATUS ================= [ 218.472266][ T7222] vivid-004: Radio HW Seek Mode: Bounded [ 218.478016][ T7222] vivid-004: Radio Programmable HW Seek: false [ 218.515445][ T7219] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 218.546223][ T7219] ntfs3: loop1: Failed to load $UpCase. [ 218.552978][ T7222] vivid-004: RDS Rx I/O Mode: Block I/O [ 218.569416][ T7222] vivid-004: Generate RBDS Instead of RDS: false [ 218.581945][ T7222] vivid-004: RDS Reception: true [ 218.609489][ T7222] vivid-004: RDS Program Type: 0 inactive [ 218.639382][ T7222] vivid-004: RDS PS Name: inactive [ 218.649648][ T7222] vivid-004: RDS Radio Text: inactive [ 218.662951][ T7228] mmap: syz.4.1052 (7228) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 218.668337][ T7222] vivid-004: RDS Traffic Announcement: false inactive [ 218.701675][ T7222] vivid-004: RDS Traffic Program: false inactive [ 218.736548][ T7222] vivid-004: RDS Music: false inactive [ 218.760153][ T7222] vivid-004: ================== END STATUS ================== [ 218.769691][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 218.959424][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 218.966553][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 219.011933][ T22] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 219.023504][ T7237] loop4: detected capacity change from 0 to 256 [ 219.051804][ T22] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 219.073935][ T22] usb 1-1: Product: syz [ 219.088114][ T22] usb 1-1: Manufacturer: syz [ 219.112380][ T22] usb 1-1: SerialNumber: syz [ 219.152089][ T22] usb 1-1: config 0 descriptor?? [ 219.157887][ T7224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.186548][ T22] hub 1-1:0.0: bad descriptor, ignoring hub [ 219.234887][ T22] hub: probe of 1-1:0.0 failed with error -5 [ 219.292661][ T7241] loop3: detected capacity change from 0 to 64 [ 219.359042][ T7241] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 219.589722][ T4365] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 219.792289][ T4365] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.825492][ T4365] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.841028][ T4365] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.850826][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.862784][ T7243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 220.103503][ T4311] usb 3-1: USB disconnect, device number 4 [ 220.198305][ T7268] loop3: detected capacity change from 0 to 1024 [ 220.497104][ T4322] hfsplus: bad catalog file entry [ 220.515991][ T4322] hfsplus: b-tree write err: -5, ino 3 [ 220.610892][ T7272] loop4: detected capacity change from 0 to 4096 [ 220.643034][ T7272] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 220.661390][ T7272] ntfs3: loop4: Failed to load $UpCase. [ 221.106665][ T7291] netlink: 'syz.4.1076': attribute type 2 has an invalid length. [ 221.704448][ T7310] loop3: detected capacity change from 0 to 256 [ 221.719600][ T4365] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 221.923677][ T4365] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 221.953946][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.981735][ T4365] usb 3-1: config 0 descriptor?? [ 221.997126][ T4365] cp210x 3-1:0.0: cp210x converter detected [ 222.341065][ T7308] loop1: detected capacity change from 0 to 32768 [ 222.344722][ T7320] loop3: detected capacity change from 0 to 128 [ 222.413995][ T4365] usb 3-1: cp210x converter now attached to ttyUSB0 [ 222.461987][ T7308] XFS (loop1): Mounting V5 Filesystem [ 222.595364][ T7308] XFS (loop1): Ending clean mount [ 222.622275][ T4315] usb 3-1: USB disconnect, device number 5 [ 222.651821][ T4315] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.692566][ T4315] cp210x 3-1:0.0: device disconnected [ 222.894089][ T4270] XFS (loop1): Unmounting Filesystem [ 223.117366][ T7336] tipc: Started in network mode [ 223.124774][ T7336] tipc: Node identity ac14140f, cluster identity 4711 [ 223.169615][ T7336] tipc: New replicast peer: 255.255.255.255 [ 223.176146][ T7336] tipc: Enabled bearer , priority 10 [ 223.704958][ T4760] usb 1-1: USB disconnect, device number 8 [ 223.812361][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1109'. [ 223.992526][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 224.289399][ T22] tipc: Node number set to 2886997007 [ 224.598227][ T7372] loop0: detected capacity change from 0 to 4096 [ 224.657606][ T7372] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 224.689651][ T7372] ntfs3: loop0: Failed to load $UpCase. [ 224.737525][ T7377] loop4: detected capacity change from 0 to 1024 [ 224.804667][ T7377] EXT4-fs: inline encryption not supported [ 224.891030][ T7377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.014389][ T7377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.262903][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 225.826769][ T7405] loop2: detected capacity change from 0 to 256 [ 225.868965][ T7405] exfat: Deprecated parameter 'utf8' [ 225.922609][ T7405] exfat: Deprecated parameter 'utf8' [ 225.939450][ T7405] exfat: Deprecated parameter 'utf8' [ 225.991288][ T7405] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x66b62981, utbl_chksum : 0xe619d30d) [ 226.191341][ T7407] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 226.215468][ T7407] syzkaller0: linktype set to 825 [ 226.296498][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 226.488041][ T7400] loop0: detected capacity change from 0 to 32768 [ 226.560413][ T7400] (syz.0.1117,7400,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.591019][ T7400] (syz.0.1117,7400,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 226.651457][ T7400] JBD2: Ignoring recovery information on journal [ 226.811529][ T7400] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 227.178686][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 227.206776][ T7432] loop1: detected capacity change from 0 to 128 [ 227.323743][ T7432] syz.1.1132: attempt to access beyond end of device [ 227.323743][ T7432] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 227.383462][ T7413] loop2: detected capacity change from 0 to 40427 [ 227.430777][ T7413] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 227.437203][ T7413] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 227.477833][ T7413] F2FS-fs (loop2): invalid crc value [ 227.505378][ T7413] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 227.681766][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 227.765773][ T7413] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 227.803291][ T7413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 227.955883][ T27] audit: type=1800 audit(1773697275.838:52): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1122" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 228.027112][ T7413] syz.2.1122: attempt to access beyond end of device [ 228.027112][ T7413] loop2: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 228.189349][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 228.276586][ T6283] syz-executor: attempt to access beyond end of device [ 228.276586][ T6283] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 228.396270][ T22] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.413639][ T22] usb 5-1: config 0 has no interface number 0 [ 228.428993][ T22] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.456126][ T22] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.488332][ T22] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.550595][ T22] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 228.591449][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.627778][ T22] usb 5-1: config 0 descriptor?? [ 228.644048][ T7452] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 228.679705][ T7452] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 228.928585][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 229.072321][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1141'. [ 229.273487][ T22] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0009/input/input12 [ 229.395270][ T22] uclogic 0003:28BD:0042.0009: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 229.418593][ T7454] loop1: detected capacity change from 0 to 32768 [ 229.475763][ T22] usb 5-1: USB disconnect, device number 6 [ 229.523820][ T7454] XFS (loop1): Mounting V5 Filesystem [ 229.597828][ T7454] XFS (loop1): Ending clean mount [ 229.622368][ T7472] fido_id[7472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 229.761800][ T4270] XFS (loop1): Unmounting Filesystem [ 230.713054][ T7479] loop0: detected capacity change from 0 to 32768 [ 230.783031][ T7493] loop3: detected capacity change from 0 to 2048 [ 230.813004][ T27] audit: type=1800 audit(1773697278.698:53): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1156" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 230.903131][ T7493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 230.969564][ T7493] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.294890][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 231.529478][ T4315] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 231.723375][ T4315] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.739399][ T4315] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.759310][ T4315] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.783807][ T4315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 231.819382][ T4315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 231.865177][ T4315] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.907229][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.927478][ T4315] usb 1-1: Product: syz [ 231.932433][ T4315] usb 1-1: Manufacturer: syz [ 231.975443][ T4315] cdc_wdm 1-1:1.0: skipping garbage [ 231.982017][ T4315] cdc_wdm 1-1:1.0: skipping garbage [ 232.014827][ T4315] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 232.029348][ T4315] cdc_wdm 1-1:1.0: Unknown control protocol [ 232.076561][ T7505] loop4: detected capacity change from 0 to 32768 [ 232.112822][ T7505] XFS (loop4): Mounting V5 Filesystem [ 232.151374][ T7505] XFS (loop4): Ending clean mount [ 232.184870][ T4760] usb 1-1: USB disconnect, device number 9 [ 232.239322][ T4311] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 232.250633][ T4266] XFS (loop4): Unmounting Filesystem [ 232.461902][ T4311] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.479736][ T4311] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.497791][ T4311] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.509392][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.522806][ T7518] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 232.754258][ T4311] usb 2-1: USB disconnect, device number 11 [ 233.154010][ T4315] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 233.342733][ T4315] usb 5-1: Using ep0 maxpacket: 8 [ 233.363948][ T4315] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 233.400515][ T4315] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.411129][ T4315] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.422541][ T4315] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.433036][ T4315] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.447671][ T4315] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.470188][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.723381][ T4315] usb 5-1: GET_CAPABILITIES returned 0 [ 233.728973][ T4315] usbtmc 5-1:16.0: can't read capabilities [ 233.828274][ T7554] loop0: detected capacity change from 0 to 1024 [ 233.845887][ T7554] EXT4-fs: inline encryption not supported [ 233.900997][ T7554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.910164][ T4311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 233.938229][ T7554] EXT4-fs (loop0): Test dummy encryption mode enabled [ 233.962316][ T7554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.970695][ T7528] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 233.988232][ T4315] usb 5-1: USB disconnect, device number 7 [ 234.094850][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 234.100951][ T4311] usb 3-1: Using ep0 maxpacket: 16 [ 234.121398][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.155781][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.187259][ T4311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.203233][ T4311] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.213061][ T4311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.239073][ T4311] usb 3-1: config 0 descriptor?? [ 234.693119][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.714359][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.739385][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.773646][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.779902][ T7569] loop4: detected capacity change from 0 to 256 [ 234.795952][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.811139][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.828752][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.836417][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.866567][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.884982][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.908805][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.921244][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.948976][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.968477][ T7569] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 234.978673][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 234.989432][ T4311] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 235.054489][ T4311] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input13 [ 235.111930][ T4311] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 235.155815][ T4311] usb 3-1: USB disconnect, device number 6 [ 235.464557][ T7573] fido_id[7573]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 235.617116][ T7576] loop0: detected capacity change from 0 to 4096 [ 236.037539][ T7560] syz.3.1177 (7560): drop_caches: 2 [ 236.043541][ T7576] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 236.125768][ T7576] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 236.192335][ T7576] ntfs3: loop0: ino=1e, "file1" encrypted i/o not supported [ 236.269555][ T27] audit: type=1800 audit(1773697284.158:54): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1182" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 236.410596][ T75] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 236.419134][ T4277] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 236.433547][ T4277] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 236.449374][ T4277] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 236.471959][ T6440] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 236.480241][ T4277] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 236.675931][ T4311] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 236.770956][ T7602] loop0: detected capacity change from 0 to 64 [ 236.834322][ T7602] hfs: unable to locate alternate MDB [ 236.850609][ T7602] hfs: continuing without an alternate MDB [ 236.889414][ T4311] usb 4-1: Using ep0 maxpacket: 8 [ 236.902525][ T4311] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 236.930467][ T4311] usb 4-1: config 179 has no interface number 0 [ 236.961346][ T4311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 236.983880][ T7602] hfs: walked past end of dir [ 236.996409][ T4311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 237.034864][ T4311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.048173][ T4311] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 237.066491][ T4311] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.100479][ T4311] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 237.115982][ T4311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.138035][ T7594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.453295][ T4760] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14 [ 237.712054][ T4365] usb 4-1: USB disconnect, device number 11 [ 237.712218][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 237.726422][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 237.746212][ T4365] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 237.950725][ T7616] loop0: detected capacity change from 0 to 8192 [ 238.315209][ T7616] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.370990][ T7626] loop1: detected capacity change from 0 to 8192 [ 238.486447][ T7626] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 238.519567][ T7626] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 238.541704][ T7626] REISERFS (device loop1): using ordered data mode [ 238.555148][ T7621] syz.4.1201 (7621): drop_caches: 2 [ 238.595617][ T7626] reiserfs: using flush barriers [ 238.668298][ T7626] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.741011][ T7626] REISERFS (device loop1): checking transaction log (loop1) [ 239.053191][ T7626] REISERFS (device loop1): Using tea hash to sort names [ 239.089978][ T7626] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 239.148215][ T7641] loop3: detected capacity change from 0 to 256 [ 239.155005][ T7626] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 239.324305][ T7626] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 239.443507][ T7626] overlayfs: upper fs needs to support d_type. [ 239.489514][ T7626] overlayfs: upper fs does not support tmpfile. [ 239.530556][ T7626] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 239.756431][ T7652] tap0: tun_chr_ioctl cmd 2148553947 [ 239.943708][ T4270] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 240.304283][ T7664] program syz.3.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.986799][ T7683] loop0: detected capacity change from 0 to 512 [ 241.058493][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 241.647465][ T7695] loop3: detected capacity change from 0 to 4096 [ 241.740826][ T7695] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 241.899179][ T7705] overlayfs: upper fs does not support tmpfile. [ 241.940176][ T7705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 241.956559][ T7707] loop0: detected capacity change from 0 to 1024 [ 241.971405][ T7705] overlayfs: failed to resolve './cgroup': -2 [ 241.989156][ T7707] EXT4-fs: inline encryption not supported [ 242.005228][ T7707] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 242.088666][ T7707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 242.404645][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 242.530797][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 242.651456][ T7718] loop4: detected capacity change from 0 to 8192 [ 242.707871][ T7718] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.823609][ T7726] loop0: detected capacity change from 0 to 4096 [ 242.848455][ T7726] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 243.744558][ T4761] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 243.955478][ T7749] loop2: detected capacity change from 0 to 8192 [ 243.966376][ T4761] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 244.009324][ T4761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.012524][ T7729] loop1: detected capacity change from 0 to 40427 [ 244.036795][ T7729] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 244.043416][ T7729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 244.053023][ T7729] F2FS-fs (loop1): invalid crc value [ 244.053039][ T7749] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 244.081852][ T4761] usb 1-1: Product: syz [ 244.106512][ T4761] usb 1-1: Manufacturer: syz [ 244.143431][ T7749] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 244.149381][ T4761] usb 1-1: SerialNumber: syz [ 244.153389][ T7749] REISERFS (device loop2): using ordered data mode [ 244.164127][ T7749] reiserfs: using flush barriers [ 244.171570][ T7729] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 244.183540][ T7749] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 244.227489][ T7749] REISERFS (device loop2): checking transaction log (loop2) [ 244.240879][ T4761] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 244.383470][ T4311] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 244.443925][ T7729] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 244.472965][ T7729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 244.604997][ T7749] REISERFS (device loop2): Using tea hash to sort names [ 244.620114][ T27] audit: type=1800 audit(1773697292.508:55): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1246" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 244.669110][ T7749] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 244.713804][ T7749] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 244.820175][ T7729] syz.1.1246: attempt to access beyond end of device [ 244.820175][ T7729] loop1: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 244.985599][ T7749] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 245.068890][ T7749] overlayfs: upper fs needs to support d_type. [ 245.091834][ T4270] syz-executor: attempt to access beyond end of device [ 245.091834][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.135353][ T7749] overlayfs: upper fs does not support tmpfile. [ 245.167272][ T7749] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 245.239534][ T4761] usb 1-1: USB disconnect, device number 10 [ 245.268195][ T7767] program syz.4.1262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.455564][ T6283] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 245.598627][ T7774] loop3: detected capacity change from 0 to 1024 [ 246.039478][ T4311] usb 1-1: Service connection timeout for: 258 [ 246.049837][ T4311] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 246.121575][ T4311] ath9k_htc: Failed to initialize the device [ 246.130445][ T4761] usb 1-1: ath9k_htc: USB layer deinitialized [ 246.459338][ T4757] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 246.547945][ T7794] loop2: detected capacity change from 0 to 8192 [ 246.571335][ T7794] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.639399][ T4757] usb 5-1: Using ep0 maxpacket: 16 [ 246.648635][ T4757] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.701816][ T4757] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.749359][ T4757] usb 5-1: config 0 interface 0 has no altsetting 0 [ 246.778625][ T4757] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 246.824643][ T4757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.849761][ T4757] usb 5-1: config 0 descriptor?? [ 247.302511][ T4757] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 247.323134][ T4757] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 247.349895][ T4757] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 247.376581][ T4757] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 247.556515][ T4757] usb 5-1: USB disconnect, device number 8 [ 247.604372][ T7797] loop1: detected capacity change from 0 to 40427 [ 247.663909][ T7797] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(2560) blocks(0) [ 247.690420][ T7797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 247.745487][ T7824] syz.2.1285 (7824): drop_caches: 2 [ 247.769712][ T7797] F2FS-fs (loop1): invalid crc value [ 247.794028][ T7821] fido_id[7821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 247.824394][ T7797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 247.978381][ T7797] F2FS-fs (loop1): Start checkpoint disabled! [ 248.002315][ T7797] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 248.009711][ T7797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 248.403539][ T4331] kworker/u4:7: attempt to access beyond end of device [ 248.403539][ T4331] loop1: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 248.433103][ T7835] loop4: detected capacity change from 0 to 4096 [ 248.481468][ T4331] kworker/u4:7: attempt to access beyond end of device [ 248.481468][ T4331] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 248.497167][ T7839] input: syz1 as /devices/virtual/input/input15 [ 248.504389][ T4315] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.535943][ T7835] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 248.571211][ T7837] loop3: detected capacity change from 0 to 8192 [ 248.592154][ T27] audit: type=1800 audit(1773697296.478:56): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1290" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 248.616757][ T7835] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 248.671423][ T7837] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.689516][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 248.700744][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.738094][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.809515][ T4315] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.823259][ T41] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 248.839509][ T4266] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 248.845968][ T4266] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 248.867341][ T4315] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.878837][ T4266] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 248.907166][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.910653][ T9] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 248.943867][ T4266] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 248.963331][ T4315] usb 1-1: config 0 descriptor?? [ 249.381308][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.388619][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.435751][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.459011][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.490298][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.504299][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.526127][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.546878][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.572633][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.595546][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.627265][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.653590][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.697500][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.735507][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.774327][ T4315] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 249.868654][ T4315] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input16 [ 249.980046][ T4315] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 250.048629][ T4315] usb 1-1: USB disconnect, device number 11 [ 250.358577][ T7863] fido_id[7863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 251.111161][ T7867] loop3: detected capacity change from 0 to 32768 [ 251.128074][ T7867] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1301 (7867) [ 251.239013][ T7867] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.266804][ T7867] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 251.300809][ T7867] BTRFS info (device loop3): enabling auto defrag [ 251.324967][ T7867] BTRFS info (device loop3): use no compression [ 251.339533][ T7867] BTRFS info (device loop3): max_inline at 4096 [ 251.357704][ T7867] BTRFS info (device loop3): using free space tree [ 251.422410][ T7874] loop1: detected capacity change from 0 to 32768 [ 251.502411][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.511713][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.586706][ T7867] BTRFS info (device loop3): enabling ssd optimizations [ 251.875479][ T4276] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.183414][ T4595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (4595) [ 252.845851][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.912708][ T7868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.974218][ T7906] loop3: detected capacity change from 0 to 40427 [ 252.998474][ T7906] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x3ffff [ 253.026863][ T7906] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 253.052286][ T7906] F2FS-fs (loop3): invalid crc value [ 253.081635][ T7906] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.190732][ T7906] F2FS-fs (loop3): Start checkpoint disabled! [ 253.220041][ T7906] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 253.275753][ T7906] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=72656c6c, run fsck to fix. [ 253.295144][ T7906] F2FS-fs (loop3): Found FS corruption, run fsck to fix. [ 253.592025][ T7910] loop3: detected capacity change from 0 to 2048 [ 253.637360][ T7910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.688588][ T27] audit: type=1800 audit(1773697301.568:57): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1310" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 253.749379][ T27] audit: type=1800 audit(1773697301.608:58): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1310" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 253.924061][ T7868] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.933205][ T7868] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.943761][ T7868] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.952968][ T7868] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.427142][ T7920] loop0: detected capacity change from 0 to 512 [ 254.569136][ T7920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 254.630375][ T7920] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.683317][ T4315] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 254.869368][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 254.879969][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.927599][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.964624][ T4315] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.008200][ T4315] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.046489][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.069627][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 255.076597][ T4315] usb 2-1: config 0 descriptor?? [ 255.188152][ T27] audit: type=1326 audit(1773697303.068:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.290168][ T27] audit: type=1326 audit(1773697303.098:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.359353][ T27] audit: type=1326 audit(1773697303.098:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.447836][ T27] audit: type=1326 audit(1773697303.098:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.522425][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.549963][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.559172][ T27] audit: type=1326 audit(1773697303.098:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.570134][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.629301][ T27] audit: type=1326 audit(1773697303.098:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.673622][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.693883][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.709545][ T7948] input: syz1 as /devices/virtual/input/input17 [ 255.734014][ T27] audit: type=1326 audit(1773697303.098:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.735396][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.829322][ T27] audit: type=1326 audit(1773697303.098:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7941 comm="syz.0.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b339c799 code=0x7ffc0000 [ 255.836913][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.914898][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.938011][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 255.976842][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 256.005407][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 256.028347][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 256.042328][ T7957] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1328'. [ 256.056254][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 256.075681][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 256.096902][ T4315] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 256.143968][ T4315] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input18 [ 256.174073][ T7938] loop3: detected capacity change from 0 to 32768 [ 256.206534][ T4315] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 256.256464][ T4315] usb 2-1: USB disconnect, device number 12 [ 256.319590][ T7938] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 256.395736][ T7938] JBD2: Ignoring recovery information on journal [ 256.501528][ T7938] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 256.533279][ T7959] loop2: detected capacity change from 0 to 8192 [ 256.607169][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 256.621855][ T7959] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 256.688386][ T7959] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 256.740702][ T7959] REISERFS (device loop2): using ordered data mode [ 256.747298][ T7959] reiserfs: using flush barriers [ 256.807100][ T7959] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 256.866745][ T4276] ocfs2: Unmounting device (7,3) on (node local) [ 256.939795][ T7959] REISERFS (device loop2): checking transaction log (loop2) [ 256.947821][ T7973] fido_id[7973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 256.998902][ T7959] REISERFS (device loop2): Using r5 hash to sort names [ 257.051530][ T7959] REISERFS (device loop2): using 3.5.x disk format [ 257.058550][ T7959] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 257.312626][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 257.523163][ T7993] loop4: detected capacity change from 0 to 128 [ 257.600011][ T7993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 257.623771][ T7993] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.770865][ T7993] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10) [ 257.911879][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 259.242488][ T8032] loop1: detected capacity change from 0 to 256 [ 259.271401][ T8032] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa05bf55d, utbl_chksum : 0xe619d30d) [ 259.412505][ T8008] loop4: detected capacity change from 0 to 40427 [ 259.437867][ T8024] loop2: detected capacity change from 0 to 32768 [ 259.480627][ T8008] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x3ffff [ 259.489094][ T8008] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 259.525035][ T8024] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 259.569822][ T8008] F2FS-fs (loop4): invalid crc value [ 259.591712][ T8008] F2FS-fs (loop4): Found nat_bits in checkpoint [ 259.793544][ T8008] F2FS-fs (loop4): Start checkpoint disabled! [ 259.846887][ T8008] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 259.936607][ T8008] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=72656c6c, run fsck to fix. [ 259.985389][ T7174] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 259.992404][ T8008] F2FS-fs (loop4): Found FS corruption, run fsck to fix. [ 260.099491][ T4761] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 260.309511][ T4761] usb 4-1: Using ep0 maxpacket: 8 [ 260.324100][ T4761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.376302][ T4761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.415934][ T4761] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.459286][ T4761] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 260.482748][ T4761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.527931][ T4761] usb 4-1: config 0 descriptor?? [ 260.655518][ T27] kauditd_printk_skb: 80 callbacks suppressed [ 260.655534][ T27] audit: type=1326 audit(1773697308.528:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 260.767742][ T27] audit: type=1326 audit(1773697308.578:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 260.790042][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.935748][ T27] audit: type=1326 audit(1773697308.578:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 260.959923][ T4761] kye 0003:0458:4018.000E: unknown main item tag 0x0 [ 260.979392][ T4761] kye 0003:0458:4018.000E: unknown main item tag 0x0 [ 261.015085][ T27] audit: type=1326 audit(1773697308.588:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 261.017914][ T4761] kye 0003:0458:4018.000E: item fetching failed at offset 3/5 [ 261.037498][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.082103][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.088678][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.123480][ T27] audit: type=1326 audit(1773697308.588:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 261.125026][ T8064] device macsec1 entered promiscuous mode [ 261.162531][ T27] audit: type=1326 audit(1773697308.588:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 261.184858][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.186994][ T4761] kye 0003:0458:4018.000E: parse failed [ 261.219785][ T4761] kye: probe of 0003:0458:4018.000E failed with error -22 [ 261.262051][ T4761] usb 4-1: USB disconnect, device number 12 [ 261.278257][ T8064] device wlan0 entered promiscuous mode [ 261.303641][ T27] audit: type=1326 audit(1773697308.588:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 261.407464][ T27] audit: type=1326 audit(1773697308.588:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 261.475683][ T27] audit: type=1326 audit(1773697308.588:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 261.566207][ T8069] tap0: tun_chr_ioctl cmd 1074025677 [ 261.577881][ T27] audit: type=1326 audit(1773697308.588:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.4.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777e99c799 code=0x7ffc0000 [ 261.610675][ T8069] tap0: linktype set to 513 [ 261.632302][ T8071] loop0: detected capacity change from 0 to 256 [ 261.647468][ T8071] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.700592][ T8071] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.320236][ T8088] loop0: detected capacity change from 0 to 4096 [ 262.479785][ T8091] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.917569][ T8101] Bluetooth: hci0: load_link_keys: too big key_count value 2816 [ 263.692424][ T8103] loop0: detected capacity change from 0 to 32768 [ 263.744644][ T8103] [ 263.744644][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 263.744644][ T8103] [ 263.821318][ T8120] loop2: detected capacity change from 0 to 256 [ 263.863161][ T8120] exfat: Deprecated parameter 'namecase' [ 263.880962][ T8103] ERROR: (device loop0): diWrite: ixpxd invalid [ 263.880962][ T8103] [ 263.896903][ T8120] exfat: Deprecated parameter 'namecase' [ 263.972836][ T8103] ERROR: (device loop0): txCommit: [ 263.972836][ T8103] [ 263.975388][ T8120] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 264.045879][ T8103] [ 264.045879][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.045879][ T8103] [ 264.108031][ T8103] [ 264.108031][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 264.108031][ T8103] [ 264.174693][ T8123] loop1: detected capacity change from 0 to 64 [ 264.358007][ T8114] loop4: detected capacity change from 0 to 32768 [ 264.446955][ T8114] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 264.942741][ T7174] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 265.009283][ T4761] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.209369][ T4761] usb 5-1: Using ep0 maxpacket: 32 [ 265.216798][ T4761] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 265.257564][ T4761] usb 5-1: config 0 has no interface number 0 [ 265.274948][ T4761] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 265.310320][ T4761] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 265.341877][ T4761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.366248][ T4761] usb 5-1: Product: syz [ 265.381753][ T4761] usb 5-1: Manufacturer: syz [ 265.396818][ T4761] usb 5-1: SerialNumber: syz [ 265.415401][ T4761] usb 5-1: config 0 descriptor?? [ 265.436968][ T8133] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.657812][ T8133] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.908411][ T8147] loop1: detected capacity change from 0 to 4096 [ 265.971706][ T8157] loop2: detected capacity change from 0 to 1024 [ 266.209846][ T8161] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.258914][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 266.258930][ T27] audit: type=1800 audit(1773697314.138:216): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1403" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 266.341078][ T4761] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 266.369378][ T4761] asix: probe of 5-1:0.188 failed with error -71 [ 266.397846][ T4761] usb 5-1: USB disconnect, device number 9 [ 266.647075][ T4311] kernel write not supported for file /sg0 (pid: 4311 comm: kworker/0:4) [ 267.155372][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'. [ 267.195176][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'. [ 267.221635][ T8189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'. [ 267.293835][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1423'. [ 267.303280][ T4740] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 267.511040][ T4740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 267.557164][ T4740] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 267.580794][ T4740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.609370][ T4740] usb 2-1: Product: syz [ 267.613618][ T4740] usb 2-1: Manufacturer: syz [ 267.618258][ T4740] usb 2-1: SerialNumber: syz [ 267.670271][ T4740] usb 2-1: config 0 descriptor?? [ 267.676421][ T8180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.696474][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.722858][ T4740] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 267.735915][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.750575][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.869684][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.903062][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.927545][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.988176][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 268.003616][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'. [ 268.022207][ T22] usb 2-1: USB disconnect, device number 13 [ 268.028212][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 268.048492][ T8204] netlink: 'syz.3.1431': attribute type 18 has an invalid length. [ 268.150557][ T8210] loop2: detected capacity change from 0 to 512 [ 268.219516][ T4740] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 268.260183][ T8210] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.288321][ T8210] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.367891][ T8210] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.1434: Attempting to read directory block (0) that is past i_size (3) [ 268.397266][ T8210] EXT4-fs (loop2): Remounting filesystem read-only [ 268.409486][ T4740] usb 5-1: Using ep0 maxpacket: 32 [ 268.417154][ T4740] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 268.435676][ T4740] usb 5-1: config 0 has no interface number 0 [ 268.457487][ T4740] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 268.477565][ T4740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.486648][ T4740] usb 5-1: Product: syz [ 268.491147][ T4740] usb 5-1: Manufacturer: syz [ 268.495792][ T4740] usb 5-1: SerialNumber: syz [ 268.513097][ T4740] usb 5-1: config 0 descriptor?? [ 268.525197][ T6283] EXT4-fs (loop2): unmounting filesystem. [ 268.532554][ T4740] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 268.559494][ T4315] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 268.651734][ T8222] loop2: detected capacity change from 0 to 128 [ 268.752223][ T4740] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 268.762238][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 268.780235][ T4315] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 268.796233][ T4740] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 268.815069][ T4315] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 268.828668][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 268.847473][ T4315] usb 4-1: Product: syz [ 268.879624][ T4315] usb 4-1: Manufacturer: syz [ 268.884338][ T4315] usb 4-1: SerialNumber: syz [ 268.933110][ T4315] usb 4-1: config 0 descriptor?? [ 268.961601][ T8217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 268.990616][ T4315] hub 4-1:0.0: bad descriptor, ignoring hub [ 268.996796][ T4315] hub: probe of 4-1:0.0 failed with error -5 [ 269.190524][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 269.209712][ T4315] usb 5-1: USB disconnect, device number 10 [ 269.269709][ T4315] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 269.326519][ T4315] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 269.345231][ T4315] quatech2 5-1:0.51: device disconnected [ 269.491263][ T8234] misc userio: Can't change port type on an already running userio instance [ 269.672156][ T8226] loop2: detected capacity change from 0 to 32768 [ 269.755747][ T27] audit: type=1800 audit(1773697317.638:217): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1439" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 269.766081][ T8226] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 269.766081][ T8226] [ 269.810189][ T8226] ERROR: (device loop2): remounting filesystem as read-only [ 269.914223][ T8241] loop0: detected capacity change from 0 to 128 [ 269.977553][ T8241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.994763][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.060297][ T8241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 270.096489][ T8241] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.190032][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.223770][ T8249] loop2: detected capacity change from 0 to 512 [ 270.239499][ T4756] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 270.258899][ T8249] EXT4-fs: Invalid gid value -1 [ 270.358334][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 270.459582][ T4756] usb 2-1: Using ep0 maxpacket: 8 [ 270.466897][ T4756] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 270.501395][ T8253] loop4: detected capacity change from 0 to 256 [ 270.501936][ T4756] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.544172][ T4756] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.566572][ T8253] exfat: Deprecated parameter 'utf8' [ 270.571382][ T4756] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.590918][ T4756] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.613155][ T4756] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.618820][ T8253] exfat: Deprecated parameter 'utf8' [ 270.632936][ T4756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.653512][ T8253] exfat: Deprecated parameter 'utf8' [ 270.715786][ T8253] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 270.858675][ T4756] usb 2-1: GET_CAPABILITIES returned 0 [ 270.870094][ T4756] usbtmc 2-1:16.0: can't read capabilities [ 271.130859][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1457'. [ 271.582300][ T8282] loop0: detected capacity change from 0 to 512 [ 271.629766][ T8282] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.694023][ T8282] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.809604][ T8282] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz.0.1464: iget: bad i_size value: 2533274857506816 [ 271.837164][ T8281] loop4: detected capacity change from 0 to 8192 [ 272.011843][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 272.799313][ T4756] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 272.827577][ T8293] loop4: detected capacity change from 0 to 32768 [ 272.875009][ T8293] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 272.968099][ T8293] (syz.4.1468,8293,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 273.009803][ T4756] usb 1-1: Using ep0 maxpacket: 32 [ 273.017189][ T4756] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.034289][ T4756] usb 1-1: config 0 has no interface number 0 [ 273.041881][ T4756] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.054015][ T4756] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.064533][ T4756] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 273.075454][ T4756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.098631][ T4756] usb 1-1: config 0 descriptor?? [ 273.117284][ T4266] ocfs2: Unmounting device (7,4) on (node local) [ 273.477498][ T4761] usb 4-1: USB disconnect, device number 13 [ 273.562779][ T128] usb 2-1: USB disconnect, device number 14 [ 273.713747][ T8316] loop1: detected capacity change from 0 to 1024 [ 273.723003][ T4756] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.000F/input/input21 [ 273.838657][ T8324] loop4: detected capacity change from 0 to 64 [ 273.854911][ T4756] uclogic 0003:28BD:0094.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 273.874162][ T4331] hfsplus: b-tree write err: -5, ino 25 [ 273.880918][ T4331] hfsplus: b-tree write err: -5, ino 4 [ 273.887030][ T4331] hfsplus: b-tree write err: -5, ino 2 [ 273.947640][ T4331] hfsplus: b-tree write err: -5, ino 26 [ 273.989781][ T8325] syz.4.1482: attempt to access beyond end of device [ 273.989781][ T8325] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 274.015826][ T4756] usb 1-1: USB disconnect, device number 12 [ 274.072698][ T8325] Buffer I/O error on dev loop4, logical block 512, async page read [ 274.082294][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 274.113248][ T8325] syz.4.1482: attempt to access beyond end of device [ 274.113248][ T8325] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 274.167863][ T8325] Buffer I/O error on dev loop4, logical block 56576, async page read [ 274.366136][ T8336] Cannot find add_set index 4 as target [ 274.760785][ T8338] fido_id[8338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 275.189437][ T4740] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 275.391296][ T4740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.409456][ T4740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.442047][ T4740] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 275.468894][ T4740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.498125][ T4740] usb 5-1: config 0 descriptor?? [ 275.767886][ T8368] loop1: detected capacity change from 0 to 128 [ 275.798542][ T8368] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 275.928818][ T4740] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x7 [ 275.968497][ T4740] logitech-djreceiver 0003:046D:C71F.0010: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 276.134762][ T4740] usb 5-1: USB disconnect, device number 11 [ 276.416753][ T8373] fido_id[8373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 276.661555][ T8384] netlink: 'syz.0.1508': attribute type 11 has an invalid length. [ 276.669652][ T8384] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1508'. [ 276.709283][ T8386] loop2: detected capacity change from 0 to 256 [ 276.709373][ T4740] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 276.729142][ T8386] exfat: Deprecated parameter 'utf8' [ 276.747239][ T8386] exfat: Deprecated parameter 'namecase' [ 276.789421][ T8386] exfat: Deprecated parameter 'namecase' [ 276.795189][ T8386] exfat: Deprecated parameter 'utf8' [ 276.844563][ T8386] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 276.929479][ T4740] usb 4-1: Using ep0 maxpacket: 16 [ 276.949473][ T4740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.974627][ T4740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.987134][ T4740] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.007973][ T4740] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.032110][ T4740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.067866][ T4740] usb 4-1: config 0 descriptor?? [ 277.213702][ T8397] loop0: detected capacity change from 0 to 64 [ 277.236966][ T8399] loop2: detected capacity change from 0 to 256 [ 277.258933][ T8399] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.413999][ T8399] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.500679][ T4740] HID 045e:07da: Invalid code 65791 type 1 [ 277.524689][ T4740] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input22 [ 277.543481][ T4740] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 277.752924][ T4756] usb 4-1: USB disconnect, device number 14 [ 277.868307][ T8407] fido_id[8407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 277.894675][ T8413] tipc: Started in network mode [ 277.922457][ T8413] tipc: Node identity ac14140f, cluster identity 4711 [ 277.971086][ T8413] tipc: New replicast peer: 255.255.255.255 [ 277.981104][ T8413] tipc: Enabled bearer , priority 10 [ 278.004728][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 278.679900][ T4740] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 278.716685][ T8442] loop1: detected capacity change from 0 to 128 [ 278.757589][ T8442] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 278.776746][ T8442] hpfs: filesystem error: improperly stopped [ 278.783327][ T8442] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 278.791530][ T8442] hpfs: You really don't want any checks? You are crazy... [ 278.800808][ T8442] hpfs: hpfs_map_sector(): read error [ 278.813335][ T8444] loop4: detected capacity change from 0 to 128 [ 278.820677][ T8442] hpfs: code page support is disabled [ 278.827808][ T8442] hpfs: hpfs_map_4sectors(): unaligned read [ 278.865797][ T8444] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 278.875189][ T8442] hpfs: hpfs_map_4sectors(): unaligned read [ 278.887963][ T4740] usb 4-1: Using ep0 maxpacket: 8 [ 278.893706][ T8442] hpfs: filesystem error: unable to find root dir [ 278.913136][ T4740] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 278.943256][ T4740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.995403][ T4740] usb 4-1: Product: syz [ 279.019587][ T4740] usb 4-1: Manufacturer: syz [ 279.024309][ T4740] usb 4-1: SerialNumber: syz [ 279.079518][ T4740] usb 4-1: config 0 descriptor?? [ 279.092470][ T4740] gspca_main: se401-2.14.0 probing 047d:5003 [ 279.112140][ T4315] tipc: Node number set to 2886997007 [ 279.245257][ T27] audit: type=1326 audit(1773697327.128:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.1536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe6b339c799 code=0x0 [ 279.420566][ T4266] sysv_free_block: flc_count > flc_size [ 279.427159][ T4266] sysv_free_block: flc_count > flc_size [ 279.444249][ T8451] loop2: detected capacity change from 0 to 8192 [ 279.451602][ T4266] sysv_free_block: flc_count > flc_size [ 279.457210][ T4266] sysv_free_block: flc_count > flc_size [ 279.483768][ T4266] sysv_free_block: flc_count > flc_size [ 279.498969][ T4740] gspca_se401: Too many frame sizes [ 279.504327][ T4266] sysv_free_block: flc_count > flc_size [ 279.514285][ T4266] sysv_free_block: flc_count > flc_size [ 279.543569][ T4266] sysv_free_block: flc_count > flc_size [ 279.566386][ T4266] sysv_free_block: flc_count > flc_size [ 279.581660][ T4266] sysv_free_block: flc_count > flc_size [ 279.602319][ T4266] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 279.720034][ T4740] usb 4-1: USB disconnect, device number 15 [ 280.416798][ T8478] loop3: detected capacity change from 0 to 256 [ 280.492807][ T8478] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.728427][ T8485] loop1: detected capacity change from 0 to 512 [ 280.854211][ T8485] EXT4-fs: Ignoring removed orlov option [ 280.987126][ T8493] loop3: detected capacity change from 0 to 256 [ 281.015455][ T8493] exfat: Deprecated parameter 'utf8' [ 281.033495][ T8493] exfat: Deprecated parameter 'utf8' [ 281.052553][ T8493] exfat: Deprecated parameter 'utf8' [ 281.077493][ T8485] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1551: invalid block [ 281.100377][ T8493] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 281.175781][ T8485] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1551: invalid indirect mapped block 4294967295 (level 1) [ 281.264376][ T8485] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1551: invalid indirect mapped block 4294967295 (level 1) [ 281.334500][ T8485] EXT4-fs (loop1): 2 truncates cleaned up [ 281.364071][ T8485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 281.509390][ T8492] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 281.660153][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 282.058458][ T8502] ipt_CLUSTERIP: Please specify destination IP [ 282.291645][ T8510] input: syz0 as /devices/virtual/input/input23 [ 283.114750][ T8534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1573'. [ 283.608016][ T8542] loop0: detected capacity change from 0 to 4096 [ 283.725219][ T8542] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 283.861730][ T8542] ntfs3: loop0: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 284.004639][ T4277] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 284.021709][ T4277] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 284.958732][ T8557] loop0: detected capacity change from 0 to 32768 [ 284.979856][ T8557] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 284.988641][ T8557] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 285.068133][ T8557] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 285.085526][ T4761] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 285.095504][ T4761] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 285.151538][ T4761] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 285.166712][ T4761] gfs2: fsid=syz:syz.0: jid=0: Done [ 285.174852][ T8557] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 285.295692][ T8557] gfs2: fsid=syz:syz.0: found 1 quota changes [ 285.302016][ T8562] loop4: detected capacity change from 0 to 512 [ 285.572084][ T8562] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.629345][ T4277] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 285.629345][ T4277] inode = 11 2339 [ 285.629345][ T4277] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 285.632647][ T8562] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.686394][ T4277] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 285.716435][ T4277] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4277 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 285.750521][ T4277] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 285.767358][ T4277] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 285.813948][ T4277] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 285.853128][ T4277] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 285.878312][ T8562] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.1583: Attempting to read directory block (0) that is past i_size (3) [ 285.909675][ T4277] gfs2: fsid=syz:syz.0: File system withdrawn [ 285.929308][ T4277] CPU: 0 PID: 4277 Comm: syz-executor Not tainted syzkaller #0 [ 285.936948][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 285.947046][ T4277] Call Trace: [ 285.950366][ T4277] [ 285.953325][ T4277] dump_stack_lvl+0x188/0x24e [ 285.958040][ T4277] ? kobject_uevent_env+0x35f/0x8a0 [ 285.963267][ T4277] ? show_regs_print_info+0x12/0x12 [ 285.968623][ T4277] ? load_image+0x400/0x400 [ 285.973166][ T4277] ? kobject_uevent_env+0x35f/0x8a0 [ 285.978420][ T4277] gfs2_withdraw+0x1398/0x16c0 [ 285.983253][ T4277] ? gfs2_lm+0x240/0x240 [ 285.987539][ T4277] ? asm_sysvec_call_function_single+0x16/0x20 [ 285.993766][ T4277] ? gfs2_consist_inode_i+0xf1/0x110 [ 285.999087][ T4277] gfs2_inode_refresh+0xb64/0xfd0 [ 286.004161][ T4277] ? gfs2_inode_metasync+0xf0/0xf0 [ 286.009311][ T4277] ? gfs2_glock_nq+0xcf0/0x14e0 [ 286.014406][ T4277] gfs2_instantiate+0x15e/0x210 [ 286.019297][ T4277] gfs2_glock_wait+0x1d0/0x2a0 [ 286.024106][ T4277] do_sync+0x4bf/0xc40 [ 286.028217][ T4277] ? gfs2_quota_sync+0x32c/0x700 [ 286.033192][ T4277] ? slot_put+0x1e0/0x1e0 [ 286.037579][ T4277] ? gfs2_quota_sync+0x32c/0x700 [ 286.042573][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 286.047813][ T4277] gfs2_quota_sync+0x32c/0x700 [ 286.052622][ T4277] gfs2_sync_fs+0x48/0xb0 [ 286.056999][ T4277] sync_filesystem+0xe6/0x220 [ 286.061729][ T4277] generic_shutdown_super+0x6b/0x340 [ 286.067046][ T4277] kill_block_super+0x7c/0xe0 [ 286.071846][ T4277] deactivate_locked_super+0x93/0xf0 [ 286.077157][ T4277] cleanup_mnt+0x42c/0x4b0 [ 286.081601][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 286.086829][ T4277] task_work_run+0x1d0/0x260 [ 286.091455][ T4277] ? task_work_cancel+0x220/0x220 [ 286.096512][ T4277] ? exit_to_user_mode_loop+0x3b/0x110 [ 286.102011][ T4277] exit_to_user_mode_loop+0xe6/0x110 [ 286.107330][ T4277] exit_to_user_mode_prepare+0xee/0x180 [ 286.112915][ T4277] syscall_exit_to_user_mode+0x16/0x40 [ 286.118407][ T4277] do_syscall_64+0x58/0xa0 [ 286.122859][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 286.127566][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 286.132277][ T4277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.138202][ T4277] RIP: 0033:0x7fe6b339d9d7 [ 286.142661][ T4277] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 286.162332][ T4277] RSP: 002b:00007ffe87dd8ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 286.170776][ T4277] RAX: 0000000000000000 RBX: 00007fe6b3432050 RCX: 00007fe6b339d9d7 [ 286.178771][ T4277] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe87dd90b0 [ 286.186773][ T4277] RBP: 00007ffe87dd90b0 R08: 00007ffe87dda0b0 R09: 00000000ffffffff [ 286.194775][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe87dda140 [ 286.202862][ T4277] R13: 00007fe6b3432050 R14: 0000000000045af0 R15: 00007ffe87dda180 [ 286.210869][ T4277] [ 286.213961][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.271994][ T8562] EXT4-fs (loop4): Remounting filesystem read-only [ 286.355527][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 286.522215][ T4277] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 286.589320][ T4277] CPU: 1 PID: 4277 Comm: syz-executor Not tainted syzkaller #0 [ 286.596946][ T4277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.607051][ T4277] Call Trace: [ 286.610374][ T4277] [ 286.613337][ T4277] dump_stack_lvl+0x188/0x24e [ 286.618068][ T4277] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 286.623225][ T4277] ? show_regs_print_info+0x12/0x12 [ 286.628500][ T4277] ? load_image+0x400/0x400 [ 286.633060][ T4277] ? do_raw_spin_unlock+0x11d/0x230 [ 286.638305][ T4277] gfs2_assert_warn_i+0x18f/0x2c0 [ 286.643391][ T4277] gfs2_quota_cleanup+0x4b4/0x6a0 [ 286.648480][ T4277] gfs2_put_super+0x22f/0x8c0 [ 286.653227][ T4277] ? gfs2_evict_inode+0x11d0/0x11d0 [ 286.658483][ T4277] generic_shutdown_super+0x130/0x340 [ 286.663908][ T4277] kill_block_super+0x7c/0xe0 [ 286.668645][ T4277] deactivate_locked_super+0x93/0xf0 [ 286.673984][ T4277] cleanup_mnt+0x42c/0x4b0 [ 286.678449][ T4277] ? lockdep_hardirqs_on+0x94/0x140 [ 286.683700][ T4277] task_work_run+0x1d0/0x260 [ 286.688350][ T4277] ? task_work_cancel+0x220/0x220 [ 286.693435][ T4277] ? exit_to_user_mode_loop+0x3b/0x110 [ 286.698957][ T4277] exit_to_user_mode_loop+0xe6/0x110 [ 286.704312][ T4277] exit_to_user_mode_prepare+0xee/0x180 [ 286.709923][ T4277] syscall_exit_to_user_mode+0x16/0x40 [ 286.715428][ T4277] do_syscall_64+0x58/0xa0 [ 286.719898][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 286.724631][ T4277] ? clear_bhb_loop+0x60/0xb0 [ 286.729353][ T4277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.735307][ T4277] RIP: 0033:0x7fe6b339d9d7 [ 286.739770][ T4277] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 286.759437][ T4277] RSP: 002b:00007ffe87dd8ff8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 286.767935][ T4277] RAX: 0000000000000000 RBX: 00007fe6b3432050 RCX: 00007fe6b339d9d7 [ 286.775961][ T4277] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe87dd90b0 [ 286.783991][ T4277] RBP: 00007ffe87dd90b0 R08: 00007ffe87dda0b0 R09: 00000000ffffffff [ 286.792189][ T4277] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe87dda140 [ 286.800342][ T4277] R13: 00007fe6b3432050 R14: 0000000000045af0 R15: 00007ffe87dda180 [ 286.808385][ T4277] [ 287.424674][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1586'. [ 288.153698][ T8614] program syz.0.1606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.237519][ T8617] loop4: detected capacity change from 0 to 256 [ 288.274334][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.372372][ T8617] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.435080][ T8619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.839476][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 288.987515][ T8629] program syz.3.1613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.155497][ T8611] loop2: detected capacity change from 0 to 32768 [ 289.319127][ T8611] XFS (loop2): Mounting V5 Filesystem [ 289.347128][ T8639] loop4: detected capacity change from 0 to 2048 [ 289.432335][ T8611] XFS (loop2): Ending clean mount [ 289.526633][ T8623] loop0: detected capacity change from 0 to 32768 [ 289.563129][ T8623] (syz.0.1610,8623,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 289.658408][ T8623] (syz.0.1610,8623,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 289.679688][ T8649] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.718777][ T8647] device erspan0 entered promiscuous mode [ 289.806911][ T8623] JBD2: Ignoring recovery information on journal [ 289.956667][ T6283] XFS (loop2): Unmounting Filesystem [ 290.042240][ T8623] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 290.246335][ T8657] loop3: detected capacity change from 0 to 4096 [ 290.396895][ T8660] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.450516][ T27] audit: type=1800 audit(1773697338.338:219): pid=8623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1610" name="file1" dev="loop0" ino=16978 res=0 errno=0 [ 290.549480][ T27] audit: type=1800 audit(1773697338.368:220): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1620" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 290.711973][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 291.426344][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 291.731214][ T8699] loop4: detected capacity change from 0 to 8 [ 291.908458][ T8705] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1641'. [ 291.994103][ T8699] SQUASHFS error: lzo decompression failed, data probably corrupt [ 292.063546][ T8699] SQUASHFS error: Failed to read block 0x91: -5 [ 292.129312][ T8699] SQUASHFS error: Unable to read metadata cache entry [8f] [ 292.153043][ T8713] loop3: detected capacity change from 0 to 64 [ 292.167341][ T8699] SQUASHFS error: Unable to read inode 0x11f [ 292.698143][ T8722] Bluetooth: MGMT ver 1.22 [ 292.819458][ T4315] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 292.960777][ T8715] loop0: detected capacity change from 0 to 32768 [ 293.016065][ T4315] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.039685][ T4315] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 293.065954][ T8715] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 293.104074][ T4315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.107939][ T8715] (syz.0.1645,8715,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 293.147973][ T4315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 293.189140][ T4315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 293.244556][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 293.270934][ T4315] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.297554][ T8734] loop4: detected capacity change from 0 to 512 [ 293.302889][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.328942][ T4315] usb 4-1: Product: syz [ 293.343891][ T4315] usb 4-1: Manufacturer: syz [ 293.363451][ T8734] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.368029][ T4315] cdc_wdm 4-1:1.0: skipping garbage [ 293.425266][ T4315] cdc_wdm 4-1:1.0: skipping garbage [ 293.445498][ T4315] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 293.459477][ T4315] cdc_wdm 4-1:1.0: Unknown control protocol [ 293.492196][ T8734] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 293.503500][ T8734] EXT4-fs (loop4): 1 truncate cleaned up [ 293.509339][ T8734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 293.558183][ T8734] EXT4-fs (loop4): shut down requested (1) [ 293.792854][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 293.830503][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 293.838982][ T4315] usb 4-1: USB disconnect, device number 16 [ 294.718489][ T8777] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1670'. [ 294.759401][ T4280] Bluetooth: hci2: command 0x0401 tx timeout [ 294.765674][ T4282] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 294.875502][ T8773] loop3: detected capacity change from 0 to 32768 [ 294.893931][ T8773] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 294.902298][ T8773] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 294.912888][ T8773] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 294.921913][ T4761] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 294.929306][ T4761] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 295.020028][ T4761] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 90ms [ 295.041575][ T4761] gfs2: fsid=syz:syz.0: jid=0: Done [ 295.046955][ T8773] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 295.273671][ T8773] gfs2: fsid=syz:syz.0: found 1 quota changes [ 295.550492][ T4276] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 295.550492][ T4276] inode = 11 2339 [ 295.550492][ T4276] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 295.648032][ T4276] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 295.675613][ T4276] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4276 [syz-executor] gfs2_quota_sync+0x32c/0x700 [ 295.746665][ T4276] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000200 s:0 p:0 [ 295.775784][ T4276] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 295.816323][ T4276] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 295.869597][ T4276] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 295.876597][ T4276] gfs2: fsid=syz:syz.0: File system withdrawn [ 295.899668][ T4276] CPU: 0 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 295.907302][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.917400][ T4276] Call Trace: [ 295.920708][ T4276] [ 295.923667][ T4276] dump_stack_lvl+0x188/0x24e [ 295.928378][ T4276] ? kobject_uevent_env+0x35f/0x8a0 [ 295.933601][ T4276] ? show_regs_print_info+0x12/0x12 [ 295.938827][ T4276] ? load_image+0x400/0x400 [ 295.943357][ T4276] ? kobject_uevent_env+0x35f/0x8a0 [ 295.948592][ T4276] gfs2_withdraw+0x1398/0x16c0 [ 295.953391][ T4276] ? gfs2_lm+0x240/0x240 [ 295.957668][ T4276] ? gfs2_consist_inode_i+0xf1/0x110 [ 295.963003][ T4276] gfs2_inode_refresh+0xb64/0xfd0 [ 295.968093][ T4276] ? gfs2_inode_metasync+0xf0/0xf0 [ 295.973255][ T4276] ? gfs2_glock_nq+0xcf0/0x14e0 [ 295.978152][ T4276] gfs2_instantiate+0x15e/0x210 [ 295.983034][ T4276] gfs2_glock_wait+0x1d0/0x2a0 [ 295.987829][ T4276] do_sync+0x4bf/0xc40 [ 295.991927][ T4276] ? gfs2_quota_sync+0x32c/0x700 [ 295.996903][ T4276] ? slot_put+0x1e0/0x1e0 [ 296.001273][ T4276] ? gfs2_quota_sync+0x32c/0x700 [ 296.006249][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 296.011495][ T4276] gfs2_quota_sync+0x32c/0x700 [ 296.016297][ T4276] gfs2_sync_fs+0x48/0xb0 [ 296.020669][ T4276] sync_filesystem+0xe6/0x220 [ 296.025382][ T4276] generic_shutdown_super+0x6b/0x340 [ 296.030865][ T4276] kill_block_super+0x7c/0xe0 [ 296.035592][ T4276] deactivate_locked_super+0x93/0xf0 [ 296.040943][ T4276] cleanup_mnt+0x42c/0x4b0 [ 296.045402][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 296.050725][ T4276] task_work_run+0x1d0/0x260 [ 296.055367][ T4276] ? task_work_cancel+0x220/0x220 [ 296.060428][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 296.065931][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 296.071254][ T4276] exit_to_user_mode_prepare+0xee/0x180 [ 296.076833][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 296.082350][ T4276] do_syscall_64+0x58/0xa0 [ 296.086797][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 296.091504][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 296.096215][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.102142][ T4276] RIP: 0033:0x7f0f11d9d9d7 [ 296.106581][ T4276] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 296.126299][ T4276] RSP: 002b:00007ffeb62878d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 296.134739][ T4276] RAX: 0000000000000000 RBX: 00007f0f11e32050 RCX: 00007f0f11d9d9d7 [ 296.142738][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb6287990 [ 296.150736][ T4276] RBP: 00007ffeb6287990 R08: 00007ffeb6288990 R09: 00000000ffffffff [ 296.158733][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb6288a20 [ 296.166754][ T4276] R13: 00007f0f11e32050 R14: 00000000000481d3 R15: 00007ffeb6288a60 [ 296.174764][ T4276] [ 296.269943][ T4276] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 296.309913][ T4276] CPU: 0 PID: 4276 Comm: syz-executor Not tainted syzkaller #0 [ 296.317556][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.319909][ T4315] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 296.327641][ T4276] Call Trace: [ 296.327705][ T4276] [ 296.327716][ T4276] dump_stack_lvl+0x188/0x24e [ 296.346180][ T4276] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 296.351344][ T4276] ? show_regs_print_info+0x12/0x12 [ 296.356594][ T4276] ? load_image+0x400/0x400 [ 296.361158][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 296.366407][ T4276] gfs2_assert_warn_i+0x18f/0x2c0 [ 296.371486][ T4276] gfs2_quota_cleanup+0x4b4/0x6a0 [ 296.376577][ T4276] gfs2_put_super+0x22f/0x8c0 [ 296.381325][ T4276] ? gfs2_evict_inode+0x11d0/0x11d0 [ 296.386582][ T4276] generic_shutdown_super+0x130/0x340 [ 296.392013][ T4276] kill_block_super+0x7c/0xe0 [ 296.396748][ T4276] deactivate_locked_super+0x93/0xf0 [ 296.402094][ T4276] cleanup_mnt+0x42c/0x4b0 [ 296.406569][ T4276] ? lockdep_hardirqs_on+0x94/0x140 [ 296.411833][ T4276] task_work_run+0x1d0/0x260 [ 296.416480][ T4276] ? task_work_cancel+0x220/0x220 [ 296.421565][ T4276] ? exit_to_user_mode_loop+0x3b/0x110 [ 296.427088][ T4276] exit_to_user_mode_loop+0xe6/0x110 [ 296.432433][ T4276] exit_to_user_mode_prepare+0xee/0x180 [ 296.438034][ T4276] syscall_exit_to_user_mode+0x16/0x40 [ 296.443538][ T4276] do_syscall_64+0x58/0xa0 [ 296.448006][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 296.452739][ T4276] ? clear_bhb_loop+0x60/0xb0 [ 296.457464][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.463407][ T4276] RIP: 0033:0x7f0f11d9d9d7 [ 296.467871][ T4276] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 296.487528][ T4276] RSP: 002b:00007ffeb62878d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 296.495991][ T4276] RAX: 0000000000000000 RBX: 00007f0f11e32050 RCX: 00007f0f11d9d9d7 [ 296.504016][ T4276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb6287990 [ 296.512033][ T4276] RBP: 00007ffeb6287990 R08: 00007ffeb6288990 R09: 00000000ffffffff [ 296.520053][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb6288a20 [ 296.528071][ T4276] R13: 00007f0f11e32050 R14: 00000000000481d3 R15: 00007ffeb6288a60 [ 296.536110][ T4276] [ 296.554203][ T4315] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 296.570063][ T8802] loop0: detected capacity change from 0 to 256 [ 296.579319][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.616932][ T4315] usb 3-1: Product: syz [ 296.643979][ T4315] usb 3-1: Manufacturer: syz [ 296.648877][ T4315] usb 3-1: SerialNumber: syz [ 296.695531][ T4315] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 296.767980][ T4315] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 296.859868][ T8786] loop1: detected capacity change from 0 to 32768 [ 297.083566][ T8786] XFS (loop1): Mounting V5 Filesystem [ 297.351198][ T8786] XFS (loop1): Ending clean mount [ 297.390566][ T8786] XFS (loop1): Quotacheck needed: Please wait. [ 297.471904][ T4761] usb 3-1: USB disconnect, device number 7 [ 297.589723][ T8786] XFS (loop1): Quotacheck: Done. [ 297.871737][ T4270] XFS (loop1): Unmounting Filesystem [ 298.119497][ T4315] usb 3-1: Service connection timeout for: 256 [ 298.129982][ T4315] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 298.163028][ T4315] ath9k_htc: Failed to initialize the device [ 298.198908][ T4761] usb 3-1: ath9k_htc: USB layer deinitialized [ 298.323962][ T8839] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.804400][ T8858] syz.2.1704 uses obsolete (PF_INET,SOCK_PACKET) [ 298.813919][ T8859] loop0: detected capacity change from 0 to 512 [ 298.862610][ T8859] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1703: inode has both inline data and extents flags [ 298.887649][ T8859] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1703: couldn't read orphan inode 15 (err -117) [ 298.914067][ T8859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 299.059459][ T4761] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 299.100054][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 299.120392][ T8868] program syz.1.1707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.249288][ T4761] usb 5-1: Using ep0 maxpacket: 8 [ 299.256479][ T4761] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.301019][ T4761] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.324991][ T4761] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.355424][ T4761] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.374835][ T4761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.393356][ T4761] usb 5-1: Product: syz [ 299.403212][ T4761] usb 5-1: Manufacturer: syz [ 299.413527][ T4761] usb 5-1: SerialNumber: syz [ 299.645562][ T4761] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 299.657244][ T4761] cdc_ncm 5-1:1.0: bind() failure [ 299.669972][ T8855] loop3: detected capacity change from 0 to 40427 [ 299.683029][ T4761] usb 5-1: USB disconnect, device number 12 [ 299.707029][ T8855] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 299.719627][ T8855] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 299.728704][ T8855] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 299.790254][ T8855] F2FS-fs (loop3): invalid crc value [ 299.829736][ T8855] F2FS-fs (loop3): Found nat_bits in checkpoint [ 299.964403][ T8855] F2FS-fs (loop3): Start checkpoint disabled! [ 299.996856][ T8855] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 300.006520][ T8855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 300.195684][ T8889] loop1: detected capacity change from 0 to 4096 [ 300.264225][ T8891] loop0: detected capacity change from 0 to 128 [ 300.292628][ T75] kworker/u4:4: attempt to access beyond end of device [ 300.292628][ T75] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 300.319592][ T8889] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 300.348606][ T8891] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 300.373282][ T8891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.446371][ T8894] option changes via remount are deprecated (pid=8892 comm=syz.2.1717) [ 300.676250][ T4270] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 301.003135][ T8904] loop4: detected capacity change from 0 to 128 [ 301.446497][ T8917] xt_hashlimit: Unknown mode mask 883EBBD7, kernel too old? [ 301.891823][ T8931] loop3: detected capacity change from 0 to 4096 [ 301.975348][ T8931] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 302.010639][ T8931] ntfs3: loop3: Failed to load $Extend. [ 302.201811][ T8945] loop4: detected capacity change from 0 to 1024 [ 302.767903][ T8963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.038591][ T8969] loop4: detected capacity change from 0 to 512 [ 303.128300][ T8969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 303.139490][ T8969] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.260527][ T8969] EXT4-fs (loop4): shut down requested (1) [ 303.395832][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 303.434093][ T4740] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 303.576622][ T8985] netem: incorrect gi model size [ 303.613561][ T8985] netem: change failed [ 303.621349][ T4740] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 303.648035][ T4740] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 303.667824][ T4740] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 303.693595][ T4740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.937400][ T4740] usb 4-1: USB disconnect, device number 17 [ 304.389137][ T9009] loop0: detected capacity change from 0 to 128 [ 304.424105][ T9009] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 304.510779][ T27] audit: type=1800 audit(1773697608.399:221): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1767" name="bus" dev="loop0" ino=1048655 res=0 errno=0 [ 304.647198][ T4322] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.242541][ T9028] loop1: detected capacity change from 0 to 4096 [ 305.509889][ T9042] loop2: detected capacity change from 0 to 256 [ 306.247956][ T9061] loop2: detected capacity change from 0 to 1024 [ 306.747550][ T9067] loop1: detected capacity change from 0 to 8192 [ 306.790052][ T9067] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 306.819377][ T9067] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 306.843146][ T9067] REISERFS (device loop1): using journaled data mode [ 306.878430][ T9067] reiserfs: using flush barriers [ 306.952770][ T9067] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 307.021921][ T9082] loop0: detected capacity change from 0 to 512 [ 307.036266][ T9067] REISERFS (device loop1): checking transaction log (loop1) [ 307.069532][ T9067] REISERFS (device loop1): Using r5 hash to sort names [ 307.078610][ T9082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 307.099850][ T9067] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 307.140588][ T9067] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 307.186561][ T9082] EXT4-fs (loop0): 1 truncate cleaned up [ 307.209465][ T9082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.420977][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 307.569294][ T4315] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 307.779493][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 307.789126][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.812617][ T4315] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.822311][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.834637][ T4315] usb 4-1: config 0 descriptor?? [ 307.919620][ T9109] tun0: tun_chr_ioctl cmd 1074025677 [ 307.947004][ T9109] tun0: linktype set to 6 [ 308.058513][ T4315] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 308.155167][ T9114] loop1: detected capacity change from 0 to 256 [ 308.226072][ T9114] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 308.238545][ T4761] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 308.302920][ T128] usb 4-1: USB disconnect, device number 18 [ 308.420906][ T4761] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 308.439933][ T4761] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 308.465727][ T4761] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 308.499962][ T4761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 308.522250][ T4761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 308.545919][ T4761] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 308.565647][ T4761] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 308.584010][ T4761] usb 5-1: Product: syz [ 308.593451][ T4761] usb 5-1: Manufacturer: syz [ 308.627408][ T4761] cdc_wdm 5-1:1.0: skipping garbage [ 308.639283][ T4761] cdc_wdm 5-1:1.0: skipping garbage [ 308.655946][ T4761] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 308.665924][ T4761] cdc_wdm 5-1:1.0: Unknown control protocol [ 308.848291][ T9125] loop1: detected capacity change from 0 to 4096 [ 308.882233][ T9125] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 308.892864][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 308.899814][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 308.906270][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 308.913062][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 308.923289][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 308.929974][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 308.936606][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 308.943263][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 308.950519][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 308.957187][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 308.974346][ T4315] usb 5-1: USB disconnect, device number 13 [ 308.990216][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 308.996885][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 309.003008][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 309.742819][ T9135] loop3: detected capacity change from 0 to 32768 [ 309.769472][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 309.940382][ T9135] XFS (loop3): Mounting V5 Filesystem [ 309.990084][ T22] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 310.009791][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.022389][ T9135] XFS (loop3): Ending clean mount [ 310.028037][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.041078][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.050460][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.059543][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.070834][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.079625][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.088839][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.100087][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.108525][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.117745][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.129000][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.137393][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.166112][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.197598][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.217180][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.245901][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.267580][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.276846][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.302612][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.358566][ T4276] XFS (loop3): Unmounting Filesystem [ 310.367534][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.376700][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.392897][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 310.407137][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.438029][ T22] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 310.469413][ T22] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 310.521906][ T22] usb 3-1: Product: syz [ 310.526163][ T22] usb 3-1: Manufacturer: syz [ 310.566451][ T22] usb 3-1: SerialNumber: syz [ 310.587395][ T22] usb 3-1: config 0 descriptor?? [ 310.636246][ T22] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 310.846292][ T22] usb 3-1: USB disconnect, device number 8 [ 310.867370][ T22] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 311.728391][ T9191] loop1: detected capacity change from 0 to 2048 [ 311.745830][ T9191] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 311.778063][ T9191] NILFS (loop1): mounting unchecked fs [ 311.849440][ T9191] NILFS (loop1): recovery complete [ 311.863347][ T9196] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.188275][ T9207] loop0: detected capacity change from 0 to 256 [ 312.264766][ T9207] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.335806][ T9207] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 312.399102][ T9207] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 312.868542][ T9218] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 313.578641][ T9233] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.588702][ T9233] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.597524][ T9233] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.606321][ T9233] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.690437][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1866'. [ 313.844589][ T9223] loop0: detected capacity change from 0 to 32768 [ 313.893847][ T9223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1861 (9223) [ 313.969279][ T9223] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.014261][ T9223] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 314.049848][ T9223] BTRFS info (device loop0): using free space tree [ 314.409381][ T9223] BTRFS info (device loop0): enabling ssd optimizations [ 314.689088][ T4277] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.929771][ T9286] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 314.956899][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1877'. [ 315.109756][ T9286] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.215232][ T9293] loop4: detected capacity change from 0 to 512 [ 315.478957][ T9293] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 315.499548][ T9293] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.836009][ T4266] EXT4-fs (loop4): unmounting filesystem. [ 315.885971][ T9307] program syz.1.1883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.187034][ T9321] bridge0: port 3(syz_tun) entered blocking state [ 316.207026][ T9321] bridge0: port 3(syz_tun) entered disabled state [ 316.277895][ T9321] device syz_tun entered promiscuous mode [ 316.297138][ T9321] bridge0: port 3(syz_tun) entered blocking state [ 316.305132][ T9321] bridge0: port 3(syz_tun) entered forwarding state [ 316.349960][ T9324] loop3: detected capacity change from 0 to 512 [ 316.481455][ T9324] EXT4-fs warning (device loop3): ext4_xattr_inode_get:506: inode #11: comm syz.3.1887: EA inode hash validation failed [ 316.587718][ T9324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #15: comm syz.3.1887: corrupted inode contents [ 316.657264][ T9324] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #15: comm syz.3.1887: mark_inode_dirty error [ 316.718648][ T9324] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #15: comm syz.3.1887: corrupted inode contents [ 316.756834][ T9324] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2945: inode #15: comm syz.3.1887: mark_inode_dirty error [ 316.849537][ T9324] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2948: inode #15: comm syz.3.1887: mark inode dirty (error -117) [ 316.887195][ T9324] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 316.918404][ T9324] EXT4-fs (loop3): 1 orphan inode deleted [ 316.958504][ T9324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 317.248081][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 317.968530][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 318.656888][ T9353] loop1: detected capacity change from 0 to 32768 [ 318.855575][ T9353] XFS (loop1): Mounting V5 Filesystem [ 318.926891][ T9353] XFS (loop1): Ending clean mount [ 318.961983][ T9353] XFS (loop1): Quotacheck needed: Please wait. [ 319.079555][ T4315] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 319.129936][ T9353] XFS (loop1): Quotacheck: Done. [ 319.170612][ T9385] netlink: 'syz.4.1903': attribute type 4 has an invalid length. [ 319.178429][ T9385] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1903'. [ 319.269398][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 319.287785][ T4315] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 319.328085][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.346259][ T4315] usb 4-1: Product: syz [ 319.369330][ T4315] usb 4-1: Manufacturer: syz [ 319.379543][ T4315] usb 4-1: SerialNumber: syz [ 319.401532][ T4270] XFS (loop1): Unmounting Filesystem [ 319.606649][ T4315] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 319.638150][ T4315] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 319.660136][ T4315] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 319.679612][ T4315] usb 4-1: media controller created [ 319.728791][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.842328][ T4315] zl10353_read_register: readreg error (reg=127, ret==-71) [ 319.933221][ T4315] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 319.958785][ T4315] usb 4-1: USB disconnect, device number 19 [ 320.120846][ T4328] wlan1: Trigger new scan to find an IBSS to join [ 320.183707][ T6440] ------------[ cut here ]------------ [ 320.189976][ T6440] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x20 [ 320.201566][ T6440] WARNING: CPU: 1 PID: 6440 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 320.212033][ T6440] Modules linked in: [ 320.215989][ T6440] CPU: 1 PID: 6440 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 320.223630][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.233785][ T6440] Workqueue: events_unbound cfg80211_wiphy_work [ 320.240172][ T6440] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 320.246508][ T6440] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 a3 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb 9d a5 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 320.266241][ T6440] RSP: 0018:ffffc900041e7400 EFLAGS: 00010246 [ 320.272423][ T6440] RAX: b15d24af5c5d4e00 RBX: 000000000000000c RCX: ffff88801aa9d940 [ 320.280577][ T6440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 320.288603][ T6440] RBP: 0000000000000084 R08: ffffc900041e7087 R09: 1ffff9200083ce10 [ 320.296677][ T6440] R10: dffffc0000000000 R11: fffff5200083ce11 R12: 0000000000000020 [ 320.304784][ T6440] R13: dffffc0000000000 R14: ffff888054d0b378 R15: ffff8880552c7b68 [ 320.312856][ T6440] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 320.321882][ T6440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.328519][ T6440] CR2: 00007fd34f3e5e9c CR3: 000000000c88e000 CR4: 00000000003506e0 [ 320.336607][ T6440] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.344689][ T6440] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.352751][ T6440] Call Trace: [ 320.356075][ T6440] [ 320.359082][ T6440] rate_control_send_low+0x194/0x790 [ 320.364509][ T6440] rate_control_get_rate+0x207/0x5c0 [ 320.369903][ T6440] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 320.375609][ T6440] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 320.381714][ T6440] ? ieee80211_queue_skb+0xc2/0x21c0 [ 320.387068][ T6440] invoke_tx_handlers_late+0xb6/0x1810 [ 320.392657][ T6440] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 320.398777][ T6440] ? sta_info_get+0x289/0x2a0 [ 320.403593][ T6440] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 320.409548][ T6440] ieee80211_tx+0x2d4/0x460 [ 320.414158][ T6440] ? ieee80211_skb_resize+0x630/0x630 [ 320.419657][ T6440] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 320.425178][ T6440] ? __bpf_trace_tasklet+0x10/0x10 [ 320.430400][ T6440] ? ieee80211_xmit+0x30c/0x3f0 [ 320.435310][ T6440] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 320.441414][ T6440] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 320.447371][ T6440] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 320.453810][ T6440] ieee80211_scan_state_send_probe+0x560/0x930 [ 320.460090][ T6440] ieee80211_scan_work+0x4d3/0x1bc0 [ 320.465370][ T6440] ? _raw_spin_lock_irq+0xb7/0xf0 [ 320.470492][ T6440] ? _raw_spin_lock_irqsave+0x100/0x100 [ 320.476104][ T6440] cfg80211_wiphy_work+0x221/0x260 [ 320.481331][ T6440] ? process_one_work+0x7b0/0x1160 [ 320.486500][ T6440] process_one_work+0x8a2/0x1160 [ 320.491557][ T6440] ? worker_detach_from_pool+0x240/0x240 [ 320.497254][ T6440] ? _raw_spin_lock_irq+0xb7/0xf0 [ 320.502380][ T6440] ? _raw_spin_lock_irqsave+0x100/0x100 [ 320.507983][ T6440] ? kthread_data+0x4b/0xc0 [ 320.512597][ T6440] worker_thread+0xaa2/0x1270 [ 320.517405][ T6440] ? __kthread_parkme+0x162/0x1c0 [ 320.522554][ T6440] kthread+0x29d/0x330 [ 320.526679][ T6440] ? worker_clr_flags+0x1a0/0x1a0 [ 320.531800][ T6440] ? kthread_blkcg+0xd0/0xd0 [ 320.536440][ T6440] ret_from_fork+0x1f/0x30 [ 320.540974][ T6440] [ 320.544037][ T6440] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 320.551352][ T6440] CPU: 1 PID: 6440 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 320.558935][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.569035][ T6440] Workqueue: events_unbound cfg80211_wiphy_work [ 320.575343][ T6440] Call Trace: [ 320.578667][ T6440] [ 320.581636][ T6440] dump_stack_lvl+0x188/0x24e [ 320.586368][ T6440] ? memcpy+0x3c/0x60 [ 320.590402][ T6440] ? show_regs_print_info+0x12/0x12 [ 320.595654][ T6440] ? load_image+0x400/0x400 [ 320.600222][ T6440] panic+0x2e5/0x730 [ 320.604178][ T6440] ? bpf_jit_dump+0xd0/0xd0 [ 320.608737][ T6440] ? ret_from_fork+0x1f/0x30 [ 320.613394][ T6440] __warn+0x2f8/0x4f0 [ 320.617423][ T6440] ? __rate_control_send_low+0x635/0x880 [ 320.623103][ T6440] ? __rate_control_send_low+0x635/0x880 [ 320.628792][ T6440] report_bug+0x2ba/0x4f0 [ 320.633174][ T6440] ? __rate_control_send_low+0x635/0x880 [ 320.638857][ T6440] handle_bug+0x3a/0x70 [ 320.643104][ T6440] exc_invalid_op+0x16/0x40 [ 320.647672][ T6440] asm_exc_invalid_op+0x16/0x20 [ 320.652569][ T6440] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 320.658856][ T6440] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 a3 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 fb 9d a5 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 320.678600][ T6440] RSP: 0018:ffffc900041e7400 EFLAGS: 00010246 [ 320.684724][ T6440] RAX: b15d24af5c5d4e00 RBX: 000000000000000c RCX: ffff88801aa9d940 [ 320.692839][ T6440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 320.700862][ T6440] RBP: 0000000000000084 R08: ffffc900041e7087 R09: 1ffff9200083ce10 [ 320.708923][ T6440] R10: dffffc0000000000 R11: fffff5200083ce11 R12: 0000000000000020 [ 320.716941][ T6440] R13: dffffc0000000000 R14: ffff888054d0b378 R15: ffff8880552c7b68 [ 320.725000][ T6440] rate_control_send_low+0x194/0x790 [ 320.730350][ T6440] rate_control_get_rate+0x207/0x5c0 [ 320.735699][ T6440] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 320.741399][ T6440] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 320.747447][ T6440] ? ieee80211_queue_skb+0xc2/0x21c0 [ 320.752786][ T6440] invoke_tx_handlers_late+0xb6/0x1810 [ 320.758296][ T6440] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 320.764328][ T6440] ? sta_info_get+0x289/0x2a0 [ 320.769082][ T6440] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 320.774960][ T6440] ieee80211_tx+0x2d4/0x460 [ 320.779516][ T6440] ? ieee80211_skb_resize+0x630/0x630 [ 320.784952][ T6440] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 320.790472][ T6440] ? __bpf_trace_tasklet+0x10/0x10 [ 320.795640][ T6440] ? ieee80211_xmit+0x30c/0x3f0 [ 320.800546][ T6440] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 320.806572][ T6440] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 320.812436][ T6440] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 320.818853][ T6440] ieee80211_scan_state_send_probe+0x560/0x930 [ 320.825090][ T6440] ieee80211_scan_work+0x4d3/0x1bc0 [ 320.830354][ T6440] ? _raw_spin_lock_irq+0xb7/0xf0 [ 320.835432][ T6440] ? _raw_spin_lock_irqsave+0x100/0x100 [ 320.841043][ T6440] cfg80211_wiphy_work+0x221/0x260 [ 320.846236][ T6440] ? process_one_work+0x7b0/0x1160 [ 320.851402][ T6440] process_one_work+0x8a2/0x1160 [ 320.856415][ T6440] ? worker_detach_from_pool+0x240/0x240 [ 320.862108][ T6440] ? _raw_spin_lock_irq+0xb7/0xf0 [ 320.867196][ T6440] ? _raw_spin_lock_irqsave+0x100/0x100 [ 320.872792][ T6440] ? kthread_data+0x4b/0xc0 [ 320.877363][ T6440] worker_thread+0xaa2/0x1270 [ 320.882114][ T6440] ? __kthread_parkme+0x162/0x1c0 [ 320.887218][ T6440] kthread+0x29d/0x330 [ 320.891327][ T6440] ? worker_clr_flags+0x1a0/0x1a0 [ 320.896404][ T6440] ? kthread_blkcg+0xd0/0xd0 [ 320.901040][ T6440] ret_from_fork+0x1f/0x30 [ 320.905538][ T6440] [ 320.909189][ T6440] Kernel Offset: disabled [ 320.913622][ T6440] Rebooting in 86400 seconds..